We will process any personal information we obtain in the course of providing our services to you in accordance with all relevant data protection legislation and in line with our own Data Protection Policy. We are committed to ensuring that your privacy is protected and that you know how your data is used and what your rights are.
Direct Insurance Group Plc is the controller of your data for the purpose of the sale and administration of your contract of insurance and for the broking of any related finance arrangement. This means that we are the business that decides what your data is used for. If you have any questions about how we handle your data, you can contact our data protection representative at our registered address:
Data Protection Representative
Direct Insurance Group Plc
129 High Street
Alternatively, you can talk to the Compliance Director or Compliance Officer, or email firstname.lastname@example.org.
Aside from data collected pursuant to the activities outlined under the sub-heading ‘Credit checks’, any personal data we collect will come directly from you or your chosen representative. This may include your name, your address, your contact details, information relevant to your policy, and demographic information. At times and dependent upon the nature of your policy, this may include data that the law classifies as being part of a special category, such as data relating to your health. It also includes all details you provide to us via telephone calls, all of which are recorded for quality, training and crime prevention purposes.
We only use your data for the purpose of providing you with an insurance policy and the services associated therewith, and potentially to provide you with marketing material in relation to products, services, and information that we believe you may find interesting.
Certain items of data we collect from you may form part of a statutory or contractual requirement that we need to meet in order to provide you with an insurance policy.
Data protection legislation requires us to have a lawful basis for processing your personal data. We rely on the following when arranging your contract of insurance and, where applicable, premium finance:
Where your data is part of a special category, we will only process it on the basis that it is in the public interest to do so, under the legal exemption for insurance.
We will only hold your data for as long as we require it to fulfil the purpose for which it was collected. On this basis, we may hold your data for up 40 years post-expiry of your cover – for example, where a product you have chosen includes any type of insurance where a claim could be made by you or a third party even after your contract with us has ended, such as liability insurance. After this period, your data is deleted.
In administering your insurance and, where applicable, arranging premium finance, it will be necessary for us to pass such information to insurers and other relevant product or service providers which may also provide us with business and compliance support. We may also disclose details to relevant parties, as necessary, to comply with regulatory or legal requirements. We may contact you or pass your details to other companies associated with us in order to promote products or services which may be of interest to you. We will not otherwise use or disclose the personal information we hold without your consent.
Your data will not be transferred outside of the United Kingdom except in the following circumstances:
It is important to us that you are aware of the rights you have in relation to the personal data we hold about you. You can:
You can exercise any of these rights by contacting our data protection representative as per the details above.
As well as contacting us, you have the right to lodge a complaint with our supervisory authority, the Information Commissioner’s Office. You can do so by using their live chat facility at https://ico.org.uk/concerns/ or by calling them on 0303 123 1113.