Eggar Forrester Insurance

Introduction

Eggar Forrester Insurance Limited respects your privacy and is committed to protecting your personal data. This data will be provided by you, or any other person you may appoint to provide us with information. This privacy policy will inform you as to how we look after your personal data when you engage with our business, including when you visit our website, and will tell you about your privacy rights and how the law protects you.

This privacy policy is provided in a layered format so you can click through to the specific areas set out below.

  • Important information and who we are
  • The data we collect about you
  • How is your personal data collected
  • How we use your personal data
  • Disclosures of your personal data
  • International transfers
  • Data security
  • Data retention
  • Your legal rights

1. Important information and who we are

Controller: Eggar Forrester Insurance Limited ("Eggar Forrester Insurance", "EFI", "we", "us", "our"). Data Privacy Manager: Rakesh Zaveri. Contact: insurance@eggarforrester.com, 51 Moorgate, London, EC2R 6BH, 0207 382 7710.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

This version was last updated 11th May 2023.

2. The data we collect about you

We collect and process the following categories of personal data: Identity Data, Contact Data, Financial Data, Transaction Data, Marketing and Communications Data, and Aggregated Data. We also collect Special Categories of Personal Data where relevant to your insurance needs (such as health data, or data on criminal convictions and offences, as required by insurers), and children's data (under 16, for travel insurance only, with verified parental or guardian consent).

3. How your personal data is collected

We collect data through direct interactions (forms, correspondence, applications) and from third parties or public sources, including named introducers and network contacts, plus analytics tools such as Google Analytics.

4. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to perform the contract we are about to enter into or have entered into with you, where it is necessary for our legitimate interests, or where we need to comply with a legal or regulatory obligation. This includes providing quotes, arranging and servicing policies, handling renewals and alterations, and managing our relationship with you.

5. Disclosures of your personal data

We may share your personal data with the parties set out below for the purposes set out in this policy: insurers and insurance providers, loss adjusters and assessors, the Insurance Fraud Bureau, regulators (including the FCA, FSCS and Financial Ombudsman Service), premium finance companies, relevant suppliers involved in handling claims, credit reference agencies, industry databases (such as the Motor Insurers' Database and the Employers' Liability Tracing Office), and professional advisers such as solicitors, where relevant to your policy or a claim.

6. International transfers

We aim to hold your data within the UK/EEA wherever possible. Where it is necessary to transfer your data outside the UK or EEA, we ensure a similar degree of protection is afforded to it by using appropriate safeguards, such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or transfers to territories covered by an applicable UK or EU adequacy decision (including the UK–US Data Bridge, which succeeded the invalidated EU–US Privacy Shield framework).

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a genuine business need to know it, and they will only process it on our instructions.

8. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may anonymise your data for research or statistical purposes, in which case we may use this information indefinitely.

9. Your legal rights

Under UK GDPR, you have rights including the right to access, correct, erase, object to, or restrict the processing of your personal data, the right to data portability, and the right to withdraw consent at any time where we are relying on it. You will not usually have to pay a fee to exercise these rights, and we try to respond within one month.