At SPB UK & Ireland we collect and use personal information for insurance policy, claims and card loss administration services. We are aware of our responsibilities to handle your personal data with care, to keep it secure and comply with applicable privacy and data protection laws.
The purpose of this policy is to provide a clear explanation of when, why and how we collect and use information which may relate to your "personal data" and explains your statutory rights.
We will collect data from you when you contact us directly for a policy quotation or visit one of our websites. * If you purchase a policy from one of our business partners your personal data will be provided to enable us to provide policy, claims and card loss administration services.
We may also collect information about you from other sources to help fraud detection and financial crime prevention. These other sources include registers held by reputable organisations.
The data collected may include:
*Please note that some elements of our websites are managed and operated by our Group Head office at 71 Quai Colbert 76095 Le Havre Cedex France, and therefore will be subject to the following:
In accordance with French data protection legislation of January 6, 1978 as amended by the Act of August 6, 2004 (articles 38-43 of Act no. 78-17 of January 6, 1978 concerning "Information Technology, Files and Freedom of Information") you have the right to access, change, correct or delete information that refers to you by name. To exercise this right, you should write to the Group Communication Department, SPB, 40-44, Rue Washington 75008 Paris - FRANCE.
For information on France's data protection legislation, please visit the website of the French Commission Nationale de l’Informatique et des Libertés at www.cnil.fr.
Any personal data we collect from any website or by other means will be used in accordance with the Data Protection Act 1998 and General Data Protection Regulation. The details we collect will be used as follows:
Your personal data will only be used for the purposes detailed under section 2: Where you have
provided your consent to the data being used in that way or the use of your personal data is to
provide a service or provide a quotation in relation to an insurance policy or the use of your personal
data is necessary to comply with any relevant legal or regulatory obligation.
Our use of your personal data is necessary to support 'legitimate interests' that we have as a business (for example, to improve our products, or to carry out analytics across our datasets), provided it is conducted always in a way that is proportionate, and that respects your privacy rights.
We work with third parties to help manage our business and deliver services. These third parties may, from time to time, need to have access to your personal data. In addition, access may also be required as follows:
Where prior consent has been obtained from you we may use your personal data to send you direct marketing communications about insurance products or related services. This may be in the form of email, post, SMS, telephone or targeted online advertisements. Any marketing will be reasonable and proportionate. You have a right to prevent direct marketing of any form at any time. This right can be exercised by following the opt-out links in electronic communications, or by contacting us directly.
Your personal information will not be retained for longer than is necessary and will be managed in accordance with our data retention policy. In most cases the retention period will be for a period of seven years following the policy record expiry date or the date of claim notification.
You can ask us to amend or remove your personal data held by us. However, please note that we may need to keep some personal data for legal and regulatory purposes. You also have the right to request a copy of any personal information we hold about you. Please contact our Data Protection Officer below for any of these requests.
Data Protection Officer
SPB UK & Ireland
3000 Lakeside, North Harbour
Telephone: 02392 836839
Where we have received your request for a copy of your personal information, we will respond within thirty days of receipt. We will not ask for a fee unless your request for access to information is excessive. In this instance the fee will be reasonable, and we will advise you of the fee due before completing your request. You can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it 'ported' directly to another Data processor but in each case only where you have provided consent.
You can object to any processing of your personal data which has our 'legitimate interests' as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.
Once you have objected, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
You have the right to lodge a complaint with the Information Commissioner’s Office about our processing of your personal data. We ask that you please attempt to resolve any issues with us first, by contacting the Data Protection Officer at email@example.com