Privacy Policy

So we can provide our services to you and to manage these services, we’ll ask you to share your personal information with us. The circumstances in which we use your information, the reasons why we ask for it and details of how we’ll use it are explained in section three of this notice. The information we collect about you varies, depending on your particular circumstances and requirements and may include, for example:

• General information about you, such as your name, address, contact details and date of birth
• Information about what and/or who you want to insure, such as your home, travel details and companions
• Your claims and credit history
• Financial details, such as your bank account and card details
• Sensitive personal information, such as your health and criminal convictions
• Information about your use of our website such as your IP address, which is a unique number identifying your computer.

We may collect personal information from the following sources:

• You or someone connected to you as part of a quotation or claim
• Publically available sources of information, such as social media and networking sites
• Third party databases made available to the insurance industry, as well as databases where you’ve given your permission to share information with a third party like us. For more information about these sources, please contact the Data Protection Officer using the details set out in section 1 of this notice
• Price comparison websites, if you’ve had a quote for a policy with us. The information you provided is shared with us and used for the purposes set out in section three of this notice. The information in this notice will apply in addition to any information given to you by that price comparison website about the use of your personal information.
• If you’ve given us information about someone else, you would have confirmed that you have the consent of these individuals to share their personal information with us. You should share this privacy notice with all individuals whose personal information you’ve shared with us, as it may also apply to them.

We and/or our carefully selected third parties may collect and use your personal information under the following circumstances or for the following reasons:

1. a) To provide you services relating to an insurance quotation and/or insurance policy such as:

assessing your insurance application and arranging your insurance policy, such as;

managing your insurance policy including claims handling and issuing policy documentation to you

providing you with the services described in your policy documents

The collection and use of information such as your name, address, date of birth, claims history, what/who you would like to insure, medical conditions for travel insurance and conviction details where necessary to provide you with a quotation and/or policy. Without this information, we’ll be unable to assess your application and/or provide claims services. Our assessment of your insurance application may involve an automated decision to determine whether we’re able to provide a quotation and/or the price. The decisions involve the use of systems, such as our price rating and acceptability tools, and are dependent on the information you provide us – for example: post code, conviction details, health details for travel insurance and/or type of property for home insurance – to produce a result as to whether we’re able to provide a quotation and/or what the relevant price for your policy should be. If you object to an automated decision that is required to determine your insurance premium, then we’ll be unable to provide you with an insurance quotation or renewal.

1. b) Where we have a justifiable reason, such as:

keeping records about you and our correspondence with you as well as your current and past insurance policies and history of insurance claims. This is so that we can appropriately and effectively manage our relationship with you as well as satisfy any legal and regulatory obligations we may have to keep such records.

preventing and detecting fraud, financial crime and anti-money laundering. We may use your personal information to prevent fraud and in doing so may:

collect personal information about you from databases as described in this notice and from publically available sources, such as social media and networking sites

share your personal information with fraud prevention agencies. Your personal information will be checked with and recorded by a fraud prevention agency. If false or inaccurate information is provided and fraud is identified, details will be passed to the fraud prevention agency. This information will be accessed and used by us, law enforcement agencies and other organisations to prevent fraud and money laundering, for example: when checking details on applications for credit and credit related or other facilities; managing credit and credit related accounts or facilities; recording debt; checking details on proposals and claims for all types of insurance; and checking details of job applicants and employees. Other organisations may search the databases held by these fraud prevention agencies when you make an application to them for financial products. If such companies suspect fraud, we will share your personal information with them. The information we share may be used by those companies when making decisions about you. We and other organisations may access and use, from other countries, the information recorded by fraud prevention agencies.

share your personal information with operators or registers available to the insurance industry to check information you provide. These include the Claims and Underwriting Exchange Register and Theft Register. We may pass information relating to your insurance policy and any incident to the operators of these registers, their agents and suppliers.

use any personal information obtained about you, or anyone you have provided us information about, to carry out the above profiling activity as part of our investigations into fraudulent behaviour. Should fraud be identified as a result of such profiling activity, this could result in the rejection of an application for insurance, a claim and/or voidance of your policy.

provide sales information to third parties, such as a price comparison website which you may have used to purchase a policy with us, so that we can fulfil our contractual responsibilities to them.

carrying out processes, such as statistical and trend research and analysis, which may include computerised processes which profile you. This is to better understand, predict and forecast our customer’s or prospective customer’s preferences and to improve the products and services we offer.

using information collected from databases we use together with the personal information you give us, to help us to improve and develop our internal databases and systems, such as those used for assessing the risks we insure and communicating with you, in order to improve the products and services we offer. For more information about how we communicate our products and services, please refer to section 4 of this notice.

we may anonymise and combine the information you have given us to understand more about you, create new products and services as well as helping us with our marketing.

recording and monitoring calls for training purposes, to improve the quality of our service, to help us deal with queries or complaints from you and to prevent and detect fraud and financial crime. We may also use CCTV recording equipment in and around our premises for monitoring and security purposes.

1. c) You have given us your permission:

to use your sensitive personal information in order to provide you with a quotation, price and/or the services set out in your policy documents, for example handling claims or for making reasonable adjustments as a result of a disability you have told us about or your religious beliefs. Where you have provided sensitive personal information about someone connected to you, for example 2^nd applicants, you would have confirmed that you have their permission to share this information with us

to use personal or sensitive information about a child in order to provide you with a quote related to travel insurance or fulfil the services outlined in your policy documents, such as handling a claim.

1. d) For details about how we use your information to communicate our similar products and/or services, your use of our websites and email communications, please refer to section four of this notice.

We may share your information with third parties in order to carry out the above activities. For further details about who we might share your information with, please refer to section five of this notice.

We’ll contact you, in order to communicate our products and/or services to you, which we believe may be of interest to you and which relate to your general insurance needs.

There may be times when we’ll need your permission to provide information about products and services to you, such as:

where the product or service is not similar to those that we currently provide to you but we believe you may be interested in it

when you have opted out of us sending details of or contacting you in relation to the products and services we offer

We may communicate with you by post, email, SMS, telephone and/or digital methods, such as social media and online advertising – unless you’ve told us you don’t want us to. Where you no longer hold a policy with us or we’ve provided you with a quote in the past, we’ll keep you informed about our products and services for a period of up to three years if contacting you by telephone or for up to five years if contacting you by other means.

Our carefully selected business partners may use your personal information to only make our promotional offers available to you and manage those offers on our behalf.

We may look to develop and enhance the information we hold about you with the aim of improving our product and service offerings and how we communicate these to you, where you’ve given us permission, or where we believe our products and service may be of interest to you. We may collect personal information about you or share your information with carefully selected third party databases which, when combined with the personal information you’ve given us, helps us to target and tailor communications, which we believe may be more relevant to you. For more information about the third party databases we use, please contact the Data Protection Officer using the details set out in section one of this notice.

We may also contact you if you fail to complete an online quotation to see if we can offer you any help with this. You can ask us to stop contacting you about our products and services by:

Email – dpo@coverbaloo.co.uk

Post – 2 Horizon Court, Audax Close, York YO30 4RB

Use of your personal information when using our websites and email communications:

When you visit one of our websites we may collect information from you, such as your email address, IP address and other online identifiers. This helps us to track unique visits and monitor patterns of customer website traffic, such as who visits and why they visit. We use third parties to collate IP addresses to help us understand our Internet traffic data and data regarding your browser type and computer.

We may use cookies and/or pixel tags on some pages of our website. A cookie is a small text file sent to your computer. A pixel tag is an invisible tag placed on certain pages of our website, but not on your computer. Pixel tags usually work together with cookies to help us to give you a more tailored service. We also use cookies and pixel tags in our email communication to personalise the email and track whether the email has been opened and whether the recipient has used any website links contained in the email communication. This allows us to monitor and improve our email communications and website. Useful information about cookies, including how to remove them, can be found at http://allaboutcookies.org.

Internet browsers normally accept cookies by default, although it’s possible to set a browser to reject cookies. We’ll ask your permission before using any cookie that’s not essential to the email or the use of the website. However, refusing to accept cookies may restrict your use of our website and/or delay or affect the way in which our website operates. See our cookie policy for more information

The open nature of the internet is such that data may flow over networks without security measures, and may be accessed and used by people other than those for whom the data is intended. While this is outside of our control, we do take the protection of your information very seriously and aim to apply appropriate levels of security at all times.

We may share your personal information with:

• other companies or brands within the Cavere group, for example, where we’re unable to provide you with an insurance product we’ll check whether they have an insurance product, which may suit your needs
• other insurers, business partners, agents or carefully selected third parties providing a service to us or on our behalf, such as processing our mail, communicating with customers on our behalf via social media, providing IT systems and administrative services, claims handling services and the development and improvement of our internal databases
• organisations that have a specific role laid out in law, such as statutory bodies, regulatory authorities and other authorised bodies
• other organisations where we have a duty to or are permitted to disclose your personal information by law, for example if we received a valid request from the police or other third party organisation in the interest of preventing and detecting crime
• fraud prevention agencies and operators of registers available to the insurance industry to check information and prevent fraud. This is outlined in more detail under section three of this privacy notice
• credit reference agencies to check your credit history. This check will be recorded on your credit reference file without affecting your ability to apply for credit or other financial products
• third parties we use to recover money you may owe us or to whom we may sell your debt
• other insurers, insurance brokers or intermediaries to whom we may decide to sell any specific insurance policies. Should we want to do this, we will advise you in good time, so that you can object
• another company, if our business or part of it is bought or taken over by that company to make sure your insurance policy can continue to be serviced or as part of preliminary discussions with that company about a possible sale or take over
• other companies when we are trailing their products and services which we consider may improve our services to you or our business processes
• other third parties if you’ve given us your permission to do so, or there’s sufficient reason to believe they’re acting on your behalf

Unless required by law, we’d never share your personal data without the appropriate and necessary care and safeguards being in place.

We’ll only keep your information for as long as is reasonably necessary for the purposes set out in this privacy notice and to fulfill our legal and regulatory obligations. For further information about how long we’ll keep your information, please contact the Data Protection Officer using the contact details outlined in section one of this notice.

The personal information we and our carefully selected third parties collect from you may be transferred to, stored and processed outside the European Economic Area (EEA). We or our service providers may use cloud based computer systems, for example network of remote servers hosted on the internet which process and store your information, to which foreign law enforcement agencies may have the power to require access. We won’t transfer your information outside the EEA unless it was to a country our information regulator has assessed as having adequate data protection laws, or we had taken all reasonable steps to ensure the firm has the necessary privacy and security controls in place to protect your information as if it were in the EEA. Our contracts with these firms will detail the necessary requirements to ensure your information is protected. We’ll assess these firm’s security arrangements from time to time, ensuring they’re only using your information as agreed. If you’d like more information about the safeguards we have in place, please contact the Data Protection Officer whose contact details are outlined in section one of this notice.

To help manage your insurance policy, we’ll deal with individuals you nominate, including third parties we reasonably believe to be acting on your behalf, provided they’re able to answer our security questions. However, for your protection, if you need to change your contact address, policy coverage or to cancel your policy, we’ll need to speak to you directly, your legal representative, someone you’ve nominated and given us permission to discuss your personal details, or power of attorney.

Data protection laws require us to meet certain conditions before we are allowed to use your personal information in the manner described in this Privacy Notice.

To use your personal information, we will rely on one or more of the following grounds:

• Performance of contract: We need to use your personal information in order to provide you with a policy (which is a contract of insurance between you and an insurer), and perform our obligations under it (such as collecting payments from you in respect of the premium paid for the policy).
• Consent: In certain circumstances, we may need your consent unless authorised by law in order to use personal information about you which is classed as “special categories of personal data”.

For marketing, you will always be given a choice over the use of your data.

We will only contact you for marketing purposes if we collected your information directly, except when authorised, instructed or given consent by a third-party acting on your behalf.

• Necessity to establish, exercise or defend legal claim: If you, or we, bring a legal claim (e.g. a court action) against the other, we may use your information in either establishing our position, or defending ourselves in relation to that legal claim.
• Compliance with a legal obligation: Where laws or regulations may require us to use your personal information in certain ways.
• Legitimate Interests: We will also process your personal information where this processing is in our “legitimate interests”. When relying on this condition, we are required to carry out a balancing test of our interests in using your personal information (for example, carrying out market research), against the interests you have as a citizen and the rights you have under data protection laws. The outcome of this balancing test will determine whether we can use your personal information in the ways described in this Privacy Notice. We will always act reasonably and give full and proper consideration to your interests in carrying out this balancing test.

You have a number of rights concerning the personal information we use, these include the right to:

ask for access to and a copy of your personal information

ask us to correct or delete your personal information

ask us to restrict or object to the use of your personal information at any time

where you’ve previously given us your permission to use your personal information, withdraw that permission. Where your permission is withdrawn, your previous consent will remain valid in respect of our use of your information prior to the date you withdrew it, or if any marketing material has been sent prior to you advising that you don’t want us to contact you again

complain to the Information Commissioner’s Office at any time if you object to the way we use your personal information. For more information please go to www.ico.org.uk

object to an automated decision, including profiling. For details about the profiling activity we undertake, please refer to section three of this notice.

To discuss your rights or make a request, please contact the Data Protection Officer using the details outlined in section one of this notice.

Please note, in some cases even when you make a request concerning your personal information, we may not be required, or may not be able, to honor it, as this may result in us not being able to fulfill our legal and regulatory obligations, or there’s a minimum statutory period of time for which we have to keep you information. If this is the case, we’ll let you know our reasons.