Privacy Notice

DATA PRIVACY NOTICE

Introduction

This notice provides you with information concerning our collection and use of personal data. If you have any queries regarding this statement, please do not hesitate to contact us.

What data we collect & what do we do with it

In order to provide insurance advisory, arranging & administration services we will obtain personal information from you including contact, personal & on occasion medical information. We will collect, store and process this information.

Legal basis

We collect, control and process your personal information because this is necessary to provide you with information, answer any queries you may have and for the provision of our services to you. Contractual necessity is therefore the lawful basis for collecting, controlling and processing your personal details. We are also exempted from the requirement to obtain specific consent for the collection of sensitive personal data that is pertinent to the underwriting of insurance contracts. Where you are an employer we require that you disclose any information sharing to your employees as appropriate.

Definition: sensitive personal data:

  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Trade union membership
  • Genetic data
  • Biometric data
  • Data concerning health
  • Data concerning sex life or sexual orientation

Sharing your data

In the course of our work with you we will share your personal data with product and service providers; we may also share you date with compliance monitoring & support organisations and regulatory bodies who are also ‘Data Controllers’ and registered with a supervisory authority in the EU unless otherwise indicated before we share any of your data.

We also use external data processors that will hold information for the following purposes:

  • Secure file sharing
  • Data backup
  • Dissemination of information

Otherwise we will not share your personal information with other companies without your express authority except if the firm is sold or where we are required to do so by law.

Cross border transfer

Should any processor hold any data on our behalf outside of the EU we will take steps to ensure that it is held in a satisfactory jurisdiction. In the case of the US we will ensure that the EU-US Privacy Shield applies.

Marketing

Your contact details may be used by us on the basis of our legitimate interests in order to keep you informed about products and services that we provide where we are confident that these communications will not significantly affect your rights and freedoms in relation to use of your personal data. We will never share your data with third parties for marketing purposes.

Retention

We will keep your personal data throughout our business relationship. At the end of any contractual relationship we are required to continue to hold personal data under current legislation for varying periods. We may also consider it necessary to keep data beyond these timescales in order to defend any future legal action. Where we no longer need regular access to your data we will transfer your data to a secure archive in order to avoid any unnecessary processing.

Your rights

Under data protection law you have the right to ask us for a copy of the information we hold about you, and to have any inaccuracies corrected or removed. You may also ask us to delete or cease processing all personal data held by us or any processor with whom we have shared your data. We may not always be able to comply with a request for deletion, but you can ask us to cease processing your data.

In addition you have the right to be informed about the data we collect, where is located, with whom it is shared and the processing we undertake and to question any automated decision making processes.

To do this, or if you require more information please contact us, our contact details are below.

Complaints

The UK Information Commissioner’s Office is our supervising authority where you can refer any complaints about data protection. For more information: www.ico.org.uk.

Contact

For any queries about data protection please contact:

Contact nameGarry Anderson

AddressNidd Lodge, 9 Stockwell Crescent, Knaresborough HG5 0LD

Telephone01423 798999