Data Privacy Notice

Summary

We take your privacy seriously and it is important that you know why we gather personal data that you provide to us and what we do with it. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (“the GDPR’) which came into force on 25^th May 2018. From that date the GDPR amended existing data protection law, placing greater accountability and transparency obligations on organisations and giving you greater control over your personal information. This notice applies to all users of our products and services, including customers, prospective customers, users of our online facilities and third parties.

1. Who are we?

G & C Insurance Services Ltd, (“G&CISL”) trading as We’resure Insurance Services, is authorised and regulated by the UK Financial Conduct Authority (FRN 788597) and is the data controller. This means that we decide how your personal data is processed, and for what purposes. Our registered offices are located at Unit C Carrowreagh Business Park, Dundonald, Belfast BT16 1QQ. G&CISL is registered in Northern Ireland, No. NI646943.

2. What personal data do we collect and how do we process it?

We will collect and hold as much of your personal data as is necessary for the following purposes:

• To quote, arrange and administer your insurance policy and insurance premium credit facilities;
• To monitor our compliance with internal policies and all regulatory and legal obligations
• To offer you other relevant products and services from us.

Personal data comprises information such as your name, address, date of birth, occupation, driving history, and property details. We may also collect sufficient sensitive personal data such as criminal convictions, motoring offences and health information to enable us to provide you with an insurance contract. We may record and monitor telephone calls for the purposes of staff training, regulatory compliance, and information verification. G&CISL complies with its obligations under the GDPR by keeping personal data up to date, by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

3. What is the legal basis for processing your personal data?

Under Article 6 (1b) of the GDPR, the legal basis under which G&CISL processes your personal data is that processing of this data is necessary for the performance of a contract of insurance to which you, the ‘data subject’ is party, or in order to collect data at your request prior to entering into a contract of insurance. Data is also processed in order to assist us to provide the best service to you.

4. Who do we share your personal data with?

Your personal data will be treated as being strictly confidential and will be shared only with parties necessary for the performance of a contract of insurance or premium financing contract, our external service providers, fraud and credit agencies and as required by statutory and regulatory bodies. Please also be aware that your data may be stored on a cloud-based system whose servers are located within the European Union.

5. How long do we keep your personal data for?

We will hold personal data relating to your insurance policy securely for a maximum of 7 years to satisfy industry, regulatory and contractual requirements. We will hold telephone recordings for no longer than 3 years. With your permission, we may hold sufficient of your personal data to enable us to market other products and services to you by email, text, post, telephone or other means until such time as you notify us that you no longer wish to receive marketing information from us. To notify us of this please email or write to us at the addresses provided in the ‘Contact Details’ section of this Data Privacy Notice. We will not pass your data to any other organisation for marketing purposes. 

6. Your rights and your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

• to request a copy of your personal data which G&CISL holds about you;
• to request that G&CISL corrects or removes any of your personal data if it is found to be inaccurate or out of date;
• to request your personal data be erased where it is no longer necessary for G&CISL to retain such data;
• to withdraw your consent to the processing of your personal data at any time;
• to request that G&CISL provides you with your personal data, and where possible, to transmit the data directly to another data controller (known as the right to data portability);
• where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• to object to the processing of your personal data in relation to direct marketing;
• to lodge a complaint with the Information Commissioner’s Office (ICO).

If you would like a copy of all or some of your personal information, please email or write to us at the addresses provided in the “Contact Details” section of this Data Privacy Notice.

7. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. When required to do so by law we will advise you of the changes we have made.

8. Contact Details

To exercise all relevant rights, including opting out of receiving marketing information, or to raise queries or complaints, please in the first instance contact the Data Protection Officer

By email:
dataprotection@weresure.com

By post:The Data Protection Officer
We’resure Insurance ServicesUnit C, Carrowreagh Business ParkDundonaldBT16 1QQ

You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or by post at The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF