Updated 5th September 2018
Who is this privacy notice from?
This privacy notice is from indemnis Limited. We must, under Data Protection law give you a privacy notice.
What is this privacy notice about?
On May the 25th 2018 data protection law in the UK is changing. The new rules will replace the Data Protection Act 1998. The rules seek to give people more control over how organisations use their data. This notice explains how indemnis Ltd will use and protect the personal data we collect and store from you.
What we promise to do
indemnis Limited promise to look after your data. We will not sell your data on and will keep it secure and private. We want to make sure you know how we use your data and allow you to be in control of your marketing preferences.
What information about you do we hold?
We rely on the lawful basis that is necessary for your insurance policy to collect and store your data. This is so we can administer and manage your claim. Once your policy has ended, we may need to keep your data securely for a number of years in line with our data retention policy. This is for regulatory and compliance reasons.
How will we use data you provide or we obtain?
We will only use your information on the basis that it is necessary to administer and help you make a claim.
Where we need to give information to other organisations, it will only be for that purpose.
The organisations will be:
Insurers; claims handlers; claims agents, finance providers; firms that process or administer our records; credit reference
agencies; debt collection agencies; fraud prevention agencies; solicitors; The Motor Insurers Bureau; the police.
When we contact you, it will be for the above reasons.
If we must transfer information to a country outside of the EEA, we will only do so if a similar level of data protection applies.
If we need to obtain sensitive information, we will only do so on the basis that it is in the public interest. For example, to fight crime or to prevent fraud. We will only collect what is necessary and will only keep it for as long as we need.
How you can help us keep your data up to date:
To help us to ensure your data is correct and up to date please tell us if the information we hold for you changes. You also have the right under data protection law to ask us to correct mistakes or add to incomplete data.
Under GDPR you have the following rights:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and processing
There are some conditions attached to these rights.
You have the right to complain to the Information Commissioner at www.ico.org.uk or Tel 0303 123 11132
The right to be informed – Individuals have the right to be informed about the collection and use of their personal data.
The right of access – GDPR rules mean that you can request a copy of your data free of charge.
The right to rectification – Individuals have the right to have inaccurate personal data rectified. This means if you feel the data we hold about you is incorrect you can ask us to put it right.
The right to erasure – The GDPR introduces a right for individuals to have personal data erased. The right to erasure is also known as ‘the right to be forgotten’. We will do this unless we have to keep it for legal or regulatory reasons
The right to restrict processing – Individuals have the right to request the restriction or suppression of their personal data. If you restrict us processing your data we can still store your personal data, but not use it.
The right to data portability – The right to data portability allows individuals to obtain their data from us in a machine-readable format for their own purposes. This means if you need us to provide another organisation with the data we hold, we must do this promptly and securely.
The right to object – You have the right to object to our processing your information. We have to comply unless we can prove there are compelling legitimate grounds that override your request.
Automated Decision Making and Processing – Automated individual decision-making is a decision made by automated means without any human involvement. You can object to an automated decision and ask that a person reviews it.
We need to collect personal information, so we can administer and manage your claim, under the terms of a contract with you, and to satisfy our regulators.
If you refuse to give answers to questions and allow us to process your data, then we may be unable to meet our obligations in case of a claim.
We will not offer you any products or services
Contact: For any further information or requests in relation to this notice:
Indemnis Limited, 1st Floor Allan House, 25 Bothwell Street, Glasgow G2 6NL United Kingdom
Tel: 03300 535 694 | Email: firstname.lastname@example.org