We use a layered approach to delivering information about data protection through:
We may collect and process the following personal data about you:
We are required by data protection laws to have a legitimate reason to process and use your personal data. The main purpose for processing your personal data is for the provision and performance of an insurance contract e.g. reviewing your application, setting you up as a policyholder, administration and maintenance of your insurance policy or in order to process a valid claim.
With regards to ‘Special Category’ data i.e. sensitive information, we must obtain your consent at the point of collecting your personal data (i.e. when you input your details online or when completing a form) in order to process the data unless an exemption for insurance purposes is applicable. In some circumstances, if we do not have your consent to process your data, it may impact our ability to issue you with insurance cover or to handle any claims.
We may also gather personal data for the following purposes:
Your personal data should not be held for longer than is required. However, we retain information about you and the products you purchase to meet a number of legal and regulatory requirements, as well as our own legitimate business interests. For the period we retain your information, it is held securely by us or by third-party service suppliers contracted to store it on our behalf.
We also reserve the right to retain data indefinitely in case we need to refer to this information, even after you are no longer a client.
All personal data supplied to us is stored on secure servers and only accessed and used in line with our data protection policies and procedures. Your personal data will only be accessed by our employees or authorised third parties who require the information for their business purposes. In circumstances where it is necessary to share your personal data with a third party, there are contractual agreements in place to ensure the security and confidentiality of your personal data and the information will only be used for the specific purpose for which it has been provided to them.
We may also be required to allow authorised third parties, including service providers and suppliers, access to your personal data, for the purposes stated in section 2 of this notice. Any data sharing with third parties will be in compliance with applicable data protection laws.
It may be necessary for us to share your personal data with financial and regulatory organisations (e.g. the Financial Ombudsman Service, the Financial Conduct Authority, the Information Commissioner’s Office) or law enforcement agencies (including courts) in order to assist them with enquiries, investigations or proceedings and ensure our compliance with our regulatory and legal requirements. As a financial services company, we are required to have certain processes in place with regards to anti-bribery and corruption, money laundering and fraud. If any criminal offence is detected or suspected, we may share data with third parties (e.g. law enforcement agencies, fraud prevention agencies, anti-money laundering agencies) in order to prevent crime or aid investigations if crime is identified. We may also access this data as part of our ‘Know Your Client’ procedures to establish the parties we are dealing with and when assessing a claim payment in order to prevent criminal offences.
5.1 Data protection law does not allow the transfer of personal data outside of the European Economic Area (EEA). The EEA consists of the member countries of the European Union (EU), along with Iceland, Liechtenstein, Norway and Switzerland, and who are all considered to have appropriate data protection laws to safeguard your privacy and protect your rights.
5.2 We may need to transfer information to our service suppliers in countries outside the EEA. If we do, we will ensure that your information is properly protected. If the laws of the country where our supplier is based are not considered equivalent to those in the EU, we will ensure that the service supplier enters into a formal legal agreement that reflects the standards required.
We would like to send you information about our products and services We would also like to send you information about the products and services of other companies in our group which may be of interest to you.
If you have consented to receive marketing, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other members of the Group.
If you no longer wish to be contacted for marketing purposes, please click here.
Our policy complies with the EU General Data Protection Regulation. The law requires us to tell you about your rights and our obligations with regards to the processing and control of your personal data, however not all of the following may be applicable in our business dealings:
There are some circumstances where we may be required to restrict your rights in order to safeguard the public or our own interests.
For further information regarding your rights, please visit the Information Commissioner’s Office’s website or click on the links provided above.
If you have any questions regarding privacy or how we use personal data, you may contact our Data Protection Officer:
Best Risk Management and Financial Service Ltd
Gemini Business Centre
136-140 Old Shoreham Road
Should you have any concerns regarding how we process your personal data, then you have the right to report your concern to the Information Commissioner’s Office. For more information, please visit their website.
Posted on: 2020-03-27 | 11:44:59
Posted on: 2019-08-14 | 13:18:00
Posted on: 2019-08-05 | 14:45:45
Posted on: 2019-03-22 | 17:46:40
Request a callback and one of our trained Insurance specialists will get back to you.