Data Protection Policy

What is the purpose of this document?

Clarion Specialty Ltd is committed to protecting our customer’s privacy and ensuring that any personal information you choose or are requested to provide to us, is collected and used in full compliance of the UK General Data Protection Regulation (UK GDPR).  In some instances, we are a data controller which means we are responsible for deciding how we process the data we hold on you. In other instances we are a data processor.

Our contact details:

Clarion Specialty Ltd,
St Clare House,
30-33 Minories,
London,
EC3N 1PE

Telephone 0207 977 5700

Email dataprotection@cspinsurance.com

If you have any questions related to this privacy notice or how we handle your personal information, please contact the Compliance Officer at the contact details above.

Data protection principles:

The UK GDPR sets our requirements for the way that personal information is held and processed.  These are set out in the below principles:

  • Used lawfully, fairly and in a transparent way.

  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.

  • Relevant to the purposes we have told you about and limited only to those purposes.

  • Accurate and kept up to date.

  • Kept only as long as necessary for the purposes we have told you about.

  • Kept securely.

What information we collect and how we collect it:

We collect personal information about our customers and in some instances their employees and family members directly when arranging a contract of insurance. We may also receive personal data via third parties who introduce you to us. The data provided allows us to provide an insurance quotation, and should you elect to proceed with the quotation, it will allow us to administer your contract of insurance.

We will collect and use certain types of information such as:

  • Name

  • Address

  • Email address

  • Date of Birth

Processing sensitive information:

We may also collect “special categories of data” as defined under the GDPR, about you in relation to your medical history/health. 

We may request your consent to process particularly sensitive data.  If this is the case, you will be provided with information on what information we would like and the reason we need it.  You can then carefully consider whether you wish to give your consent. You are able to remove your consent at any time. You can do this by contacting us. If you remove your consent, we may not be able to administer your contract of insurance and therefore may need to cancel your policy.

The legal lawful basis for processing your data:

The lawful basis for processing your data is one or more of the following:

  • Necessary for the performance of a contract whereby you have elected to take up a quotation.

  • Necessary for the legitimate interest of the company whereby we need to process your data to fulfil the administration of the contract of insurance.

  • Necessary for the compliance with a legal obligation.

‍ ‍

Information shared with third parties:

We may need to share your information with third parties, such as Underwriters and Claims Handling Agents to further manage the contract of insurance.  We also may be required to pass on personal data to regulators, fraud detection and law enforcement agencies.

We will not transfer your data outside the EU unless we are satisfied it will be processed in accordance with the UK GDPR.  However, your insurers and/or their third party agents may pass your data outside the EU and if so, we will seek their confirmation that this is adequately protected.

Data retention:

We will retain your information for a period of time which is necessary to ensure no further liability, such as any insurance claims, exists.  The period will normally be 7 years from expiry of the policy but may be extended for certain types of business or instances e.g. a claim is pending.

Your duty to inform us of changes:

It is important that you inform us of any changes to your personal information.  We need to ensure that all personal information is accurate and  up to date.

Your rights:

Under certain circumstances, the law grants you specific rights in relation to your personal data. 

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erase

  • The right to restrict processing

  • The right to data portability

  • The right to object

  • Rights in relation to automated decision making and profiling.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us if you wish to make a request.

‍

If you provide data to us about other people:

You must provide this notice to those individuals covered under and insurance contract we arrange before you provide their data to us.  You must obtain their consent before you provide health or criminal record data to us and advise us promptly if they withdraw consent. 

You must promptly notify us if they contact you about our use of their personal data.

You should only provide us with the personal data we need to administer the insurance.

‍

Complaints:

If you have any concerns about our use of your personal information, you can make a complaint to us at dataprotection@cspinsurance.com.

You can also complain to the Information Commissioners Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk