Privacy Policy

This Privacy Notice explains when and why we collect personal information about you when you visit our website and app, how it is used, who we share it with and your rights as the data subject. We are the data controller for the purposes of the personal data we will collect. We do use other people to process some of your data and in some cases, the insurance partners we have will be considered the joint controller of your information.

About us

INSHUR is a trading name of Inshur UK Limited, which is Authorised and Regulated by the Financial Conduct Authority under firm reference number 916800 to carry on insurance distribution activities. Inshur UK Limited is registered in England and Wales company number 10830222. Registered office at 2nd Floor, 1 Jubilee Street, Brighton, England, BN1 1GE.

In this Privacy Notice, references to “we” or “us” or “INSHUR” are to Inshur UK Limited. We are the Controllers of your personal data.

We reserve the right to amend this Privacy Notice at any time and without notice in response to changes in data protection laws and privacy legislation.

Who we collect personal information about

We collect and hold personal information about:

Individuals who currently have or are covered by a motor insurance policy with INSHUR;
Individuals who have held or were covered by a motor insurance policy with INSHUR, but which is now expired or terminated;
Individuals who have signed-up or obtained a quote from INSHUR but have not taken up a policy;
Individuals to whom any benefit is payable under a live policy or would have been payable to under an expired or terminated policy;
Users of the INSHUR app and websites;
Third party claimants, witnesses to incidents and experts instructed in relation to claims; and;
Representatives of policyholders, individuals covered by a policy or a third party.

When we collect personal data

We collect personal information:

When individuals apply for or to renew a policy;
When individuals are insured on a policy;
On a claim under a policy or involving a policy;
When we are contacted in writing by telephone or social media channels;
When INSHUR websites or our app is used;
When individuals respond to a customer survey, complete a feedback form, or vote in a poll on any of the INSHUR websites or app;
When individuals agree to support INSHUR brand, promotional or marketing activities.
If we are contacted in relation to a complaint; and
When we are alerted to suspected fraud.

Uses for your data

The personal information that we collect will depend on your relationship with us. We will collect different information depending on whether you are a policyholder, named driver or other covered party or beneficiary under a policy, website/app user, claimant, witness, expert, representative or other third party.

Please note, in certain circumstances we may request and/or receive sensitive personal data about you. For example, we may need access to health records for the purposes of providing you with a policy or processing claims, or details of any unspent criminal convictions for the purposes of preventing, detecting and investigating fraud.

If you provide personal information to us about other individuals you agree: (a) to inform the individual about the content of this Privacy Notice; and (b) to obtain any consent where we indicate that it is required for the processing of that individual’s personal information in accordance with this Privacy Notice.

Please view the relevant section below for detailed information regarding the types of personal information we are likely to collect and use about you.

Personal information

Information such as your name, address, email address, contact details, date of birth, gender, relationship to the policyholder (where are you not the policyholder);
Identification information such as driving licence number, taxi licence details and national insurance number;
Information relating to your driving history, such as the number of years your licence has been held and any driving convictions.
Information about your job including job title, employment history.
Your bank account details, which are required to set up a premium finance agreement when you have chosen this as your payment method;
Information relevant to your insurance policy. This will depend on the nature of the policy but could include details about your property and business activities, for example where your vehicle is stored or what local authority you work for;
Information relevant to your claim or your involvement in an incident giving rise to a claim or a potential claim;
Information relating to previous policies or claims which you may have been involved in;
Financial information such as your bank details, payment details and information obtained as a result of our credit checks;
Information obtained through our use of cookies or similar technologies;
Information captured during our telephone calls, including the recording of calls;
Video or photographic images;
Your marketing preferences; and
IP addresses.

Sensitive personal data

Details of your current or former physical or mental health;
Driving convictions;
Information relating to your criminal history (including offences, alleged offences and any caution, court sentence or criminal convictions); and
Details of your race and/or ethnicity.

How we collect your personal data

We collect personal information from a number of different sources including:

Directly from you or from someone else on your behalf by telephone, email, or via our website and app;
From other third parties involved in your insurance policy or claim such as another insurer, claimants, defendants or witnesses;
From other third parties who provide a service in relation to your insurance policy or claim such as loss adjusters, claims handlers, experts (including medical experts), healthcare providers and other service providers;
From medical reports and counsel’s opinions;
From emergency assistance and medical services providers;
From claims service providers;
Via publicly available sources such as internet search engines and social media sites;
From data contributors such as software houses and intermediaries;
From credit reference agencies and fraud prevention agencies;
From risk analysis, fraud prevention, identity verification companies which we may receive data from;
Via insurance industry fraud prevention and detection databases and sanctions screening tools;
From providers of demographic and vehicle data;
Via call recordings;
From third parties who we buy marketing lists from;
Via our website and app (including through the use of cookies and web analytics tags);
From government agencies such as the Driver and Vehicle Licencing Authority (DVLA) or Her Majesty’s Revenue and Customs (HMRC) and from professional regulators;
From local authorities;
From brokers and insurance intermediaries;
From other insurers; and
From CCTV providers.

Purposes for which your personal data is used

We may process your information for a number of different purposes and under data protection laws we need a reason for doing so. We have set out below the reasons why we process your information and the applicable circumstances when we will process your personal information.

Our provision and administering of your insurance contract.

We may use your personal information for this purpose when:

Providing a quote;
Administering and providing your motor insurance policy;
Setting you up as a policyholder;
Providing all related services such as assessing your application and no-claims discount entitlement;
Managing your insurance policy;
Setting up a premium finance agreement when you have chosen this as your payment method;
Handling, paying or repudiating claims;
Undertaking market research and customer satisfaction or feedback surveys;
Communicating with you and resolving any complaints that you may have; and
Prevention and detection of fraud.

The normal legal basis for processing customer information is for our own legitimate business purposes

In specific situations, we require your information to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests, This includes (but is not limited to):

Developing, improving, and personalising our products, pricing and services;
Enhancing our customer service, experience, and relationship (e.g. customer and market research, business analysis, providing relevant product and service information/communications);
Monitoring usage of our app and websites;
Managing insurance claims by customers;
Maintaining our business, infrastructure, records and operations including internal reporting, maintaining accounting records, analysing financial results, internal or external audits;
Helping to detect and prevent fraud, financial crime and anti-social behaviour, including working with law enforcement agencies;
Updating our partners, whose platforms you are signed up to, when they require proof of your insurance cover.
Investigating, Detecting, Developing or ensuring the effective operation of our administration, security systems and insurance systems
Improving the relevance of our advertising and marketing campaigns and identifying advertisement audiences;
Displaying personalised online advertisements on third-party websites and social media platforms;
Using your purchase or quote history to provide direct marketing including*:
sending you direct marketing emails/SMS/electronic messages;
making available personalised offers (including administering any loyalty scheme);
contacting you via telephone regarding new products or offers that may be of interest;
identifying trends and ensure we can keep up with demand, or develop new products/services;
use your address details to send you direct marketing information by post, telling you about products and services that we think might interest you.
Sharing necessary information with other Group companies, insurers and reinsurers.
Receiving professional advice; and
Sharing data with third parties in the event of organisational change (including selling or transferring any parts of our business to third parties, acquiring new businesses, entering into mergers or undertaking corporate restructuring activity).
Tracing or recovering debt.

*when you provide your details to us and subsequently do not choose to opt out from receiving our communications we will use your personal information, preferences and details of your transactions to keep you informed by email, web, text, telephone and through our contact centre about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on. This is only applicable in the UK.

Note: In specific situations, we may also collect and process your data with your consent. For example, when you tick a box or sign up to receive email newsletters.

Sometimes we have a legal or regulatory obligation to use your personal information

We may use your personal information for this purpose when:

The Prudential Regulation Authority (PRA) or the Financial Conduct Authority (FCA), wish us to maintain certain records of any dealings with you.
To enable us to assist you with the renewals process, including sending you a reminder and renewal invitation [by email or SMS] before your renewal date, which will explain how you can renew your insurance policy with us.

Occasionally we need to use your information to establish, exercise or defend our legal rights

We may use your personal information for this purpose when we are faced with any legal claims and/or We want to pursue any legal claims ourselves.

Sometimes we need to use your personal information for reasons of substantial public interest

We may use your personal information including sensitive personal data such as that relate to criminal convictions for this purpose when investigating fraudulent claims, carrying out fraud, credit and anti-money laundering checks.

Criminal conviction sensitive personal data

Data Protection Legislation allows for the processing of criminal conviction sensitive personal data for an insurance purpose, this includes the processing of such data for advising on, arranging, underwriting or administering of an insurance contract and administering a claim under an insurance contract.

Who we share personal information with

From time to time, we may share your personal information with the other companies in our group and with third parties. We will keep your personal information confidential and only share it with the third parties listed below for the purposes explained previously.

We have trusted relationships with these carefully selected third parties and all third parties are bound by contract to maintain the security of your personal information and to use it only as permitted by us. If you would like further information regarding the disclosures of your personal information, please see below for our contact details.

Disclosures within our group

In order to provide our services your personal information is shared with other companies in the INSHUR Group. Your personal information might be shared for our general business administration purposes or for the prevention and detection of fraud.

Disclosures to third parties

We also disclose your information to the third parties listed below for the purposes described in this Privacy Notice. This might include:

Our insurance partners such as insurers and reinsurers;
Other third parties who assist in the administration of insurance policies or such as loss adjusters, first notification of loss providers, claims handlers, accountants, auditors, lawyers and other experts;
Premium Credit Limited, our premium finance partner, who will use your information to carry out anti-money laundering checks and credit assessments when you have chosen premium finance as your payment method. This may include a search of your records at a credit reference agency. This type of search does leave a footprint that other lenders will be able to see, but they won’t be able to see the outcome of the search.
Fraud detection agencies and other third parties who operate and maintain fraud detection registers including but not limited to the Claims and Underwriting Exchange, Insurance Fraud Register, Motor Insurance Anti-Fraud and Theft Register and other centralised insurance industry applications/databases investigative firms we ask to look into claims on our behalf in relation to suspected fraud;
Motor Insurance Database managed by MDS on behalf of the Motor Insurance Bureau;
Regulators who include Prudential Regulation Authority (PRA) and Financial Conduct Authority (FCA);
The police and other third parties or law enforcement agencies where reasonably necessary for the prevention or detection of crime;
Government agencies such as the Driver and Vehicle Licensing Agency (DVLA) and the Motor Insurers’ Bureau (MIB);
Other insurers who provide us with our own insurance;
Industry bodies;
Selected third parties on whose behalf we sell optional additional products;
Our partners, whose platforms you are signed up to, when they require proof of your insurance cover.
Debt collection agencies or any organisations we instruct to commence legal proceedings against you;
Credit reference agencies and fraud prevention agencies;
Our third party services providers such as IT suppliers, actuaries, auditors, lawyers, marketing agencies and referral administrators, document management providers and tax advisers;
Product and service providers, such as engineers, salvage agents, rehabilitation providers, foreign claims handling agents, uninsured loss provider and providers of add-on products; and
Selected third parties in connection with the sale, transfer or disposal of our business.

We may also disclose your personal information to other third parties where the disclosure is required by law or by a regulator with authority over us or you, such as where there is a court order, statutory obligation or FCA request; and we believe that such disclosure is necessary in order to assist in the prevention or detection of any criminal action (including fraud) or is otherwise in the overriding public interest

Our approach to sending data outside of the UK and European Economic Area (EEA)

Personal information that we collect may be shared with an organisation located outside of the UK and EEA. It may also be processed by us or by one of our suppliers outside of the UK and EEA. When these circumstances apply, we will always take measures to ensure your data is protected.

Any requests from organisations such as law enforcement or regulators will be reviewed and validated prior to disclosing data with the exception of a legal or regulatory requirement, your data will only be transferred outside of the UK and EEA when we are satisfied the country is recognised as having an adequate level of data protection or there is another arrangement in place to offer protection of your data.

Automated decision making

We may use Automated Decision Making (ADM) based on the personal information you provide to assess whether you meet the underwriting criteria for the insurance product you have selected.

We may also use automated decision making:

To assess a potential policyholder’s ability to meet the cost of insurance premiums or credit;
To validate or information;
To assess the risk of fraud being committed;
Profiling of information we collect and hold; and
To establish and utilise pricing models and risk acceptance criteria, when calculating premium and accepting or declining a request for insurance.

You have the right to contest any decision produced by a solely automated means and request for human intervention. If you do this we must allow you to express your point of view, to obtain an explanation of how we reached the decision, and allow you to challenge the decision. To do this, please contact our Data Protection team at [email protected] or using the address in the ‘Our Contact details’ section.

Marketing activities

We may use your personal information to provide you with information about our products or services which may be of interest to you. We rely on our legitimate interests (to develop our products and grow our business) to send you marketing communications in line with the GDPR and Privacy and Electronic Communications Regulations (PECR).

You can always update your marketing preferences at any time by contacting our customer services team on [email protected] or by telephone. In such circumstances, we will continue to send you service related (non-marketing) communications where necessary.

How long we keep personal information

We will only keep your personal information for as long as reasonably necessary to fulfil the relevant purposes set out in this Privacy Notice and in order to comply with our legal and regulatory obligations.

In most cases your personal data will be retained for six years.

However, it may sometimes be necessary to retain data for longer, for example where there are legal grounds for doing so, or in the event of a claim or a potential claim under a policy. Even if we delete your personal information it may persist on backup or archival media for legal, tax or regulatory purposes.

Your rights

You have a number of rights which are outlined below. If you wish to exercise these rights, please contact our Data Protection team at [email protected] or using the address in the ‘Our Contact details’ section. In most cases, we will complete your request within 30 days.

The right to access your personal information – You are entitled to a copy of the personal information we hold about you and an explanation of how we use it.

The right to rectification – If you believe that any information we hold about you is incorrect or incomplete you can contact us to ask us to update or amend it.

The right to erasure – In certain circumstances, you can ask us to delete your personal data. This right is not absolute – we may be required to keep it for legal or regulatory reasons.

The right to restriction of processing – In certain circumstances, you can ask us to stop using your personal information, for example if you believe the personal information we hold about you is wrong.

The right to data portability – In certain circumstances, you can ask us to transfer your personal information to another organisation.

The right to object to processing – You have the right to object to us processing your personal information where we rely on a genuine business need to process that personal information. In some circumstances we won’t be able to stop processing your information, but we will let you know if this is the case.

Rights relating to automated decisions – If you have been subjected to an automated decision and do not agree with the outcome, you can ask us to review it.

The right to lodge a complaint with the ICO – You have a right to submit a complaint to the Information Commissioner if you believe we have not complied with our obligations under relevant data protection laws and/or regulation:

https://ico.org.uk/make-a-complaint/your-personal-information-concerns/

How we protect your information

We use a range of organisational and technical security measures to protect your information.

Where we have given you (or where you have chosen) a password, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

We restrict access to your information as appropriate within INSHUR to those who need to know that information for the purposes set out above.

Firewalls are used to block unauthorised traffic to the servers and the actual servers are located in a secure location which can only be accessed by authorised personnel. Our internal procedures cover the storage, access and disclosure of your information.

Third-party websites

We cannot be held responsible for the privacy policies and practices of other websites potentially linked to our website.

We do take great care in ensuring only links to companies, organisations and individuals following the same standards and policies as us remain on our website, but we cannot guarantee this. In such instances, you are advised to check the privacy policies on external websites that are not a part of INSHUR.

Our contact details

If you have any questions about how we collect, store or use your personal information, you may contact our data protection team at:

Data Protection Team

INSHUR,

2nd Floor, 1 Jubilee Street,

Brighton, BN1 1GE

Email: [email protected]

Changes to our Privacy Notice

We keep our Privacy Notice under review and reserve the right to make changes to our Privacy Notice in accordance with UK legislation.

We recommend that you make regular checks on our Privacy Notice to ensure that you are aware of any changes that may have been made.

This Privacy Notice was last updated on 1st October 2022.

Privacy Policy / Version 1.8

United Kingdom

Company