This statement applies to the Service only and does not necessarily reflect practices with respect to information gathered through other services We offer or websites We operate or the collection of information through off-line means. To review the privacy practices of those other services, please refer to the policies provided in association with each.

We collect and use the following personal information from you as part of providing your Policy to you:

You can choose whether you provide this information to us, but if you decide not to do so, we will be unable to provide services under this Policy to you.

This information is intended to be used by Specialty Risks Limited for the following purposes:

We also collect and use personal information about you from third parties. We will receive your name, contact information (including postal address and telephone number), customer number and policy information (e.g., level of cover), and bank account information (such as sort code and account number) from your bank or financial institution (through whom you have procured this insurance product) to enable us to administer and perform your contract of insurance with us.

We also receive information about you (relating to your identity and previous claims made) from fraud prevention agencies, financial institutions and similar organisations to help us to make decisions on insurance policies and claims for you; trace debtors, recover debt, prevent fraud and to manage your insurance policy and any claims; check your identity to prevent money laundering; and undertake additional fraud searches, where necessary in pursuit of our legitimate interests in protecting our business from fraudulent activity and recovering sums due.

When you request a quote

We collect Personal Information from you when you request a quote for our products or services through the Service. We ask you to provide information about yourself and your device (such as manufacturer, model, purchase date, and serial number).

When you Make a Purchase

We collect Personal Information from you when you make a purchase on the Service. To make a purchase through the Service, We ask individuals to provide Us with their full name, contact details (for example – postal address, telephone number, email address), banking information (for example – bank name, sort code, account number), date of birth and communication preferences.

When you Create an Account

We collect Personal Information from you when you create an account on the Service. To create an account on the Service, We ask users to provide Us with their full name, contact details (for example – email address), date of birth, security questions (for example – mother’s maiden name), password and communication preferences. We will also collect your Internet Protocol (“IP”) address.

When you Submit a Payment

We collect Personal Information from you when you make a payment (for example – pay a premium or make an excess payment). We ask you to provide Us with payment details: cardholder name, payment or debit card number, CVC and expiry date, bank account number, sort code. When you communicate with Us or contact Us for Customer Support When you contact Our customer support team through the chat function on Our Website or when you call Us or email Us (for example, when you enquire about the status of your account or claim), We will collect information that you provide to Us in your communications (such as the query or issue that you have raised, information relating to your device, information relating to your existing policy if you are communicating with Us about a claim, or payment information if you are communicating with Us about premium payment). We will also collect your responses to surveys about Our products and services and the Service.

When you access the Service

We collect information about devices used to access Our Service and functionalities of the Service (such as the chat function). This includes IP address, operating system and version, browser used and version, language preferences, time zone, screen settings and site visited before arriving on Our Website. Additionally, We use cookies and similar technologies such as web beacons to collect information about how you use and navigate Our Service (for example, the pages that you view and links that you click). We use cookies to help Us recognize you, improve your experience, increase security, and measure use and effectiveness of Our services.

When you submit a claim

We collect information from you when you submit a claim. We may ask you to provide Us with information (for example – name, telephone number, address, delivery information) as well as details about the covered equipment (for example – manufacturer, make, model, colour, unique serial number). If you submit a claim in respect of equipment which has the same serial number as a previous claim, this will be flagged by Our fraud prevention database, which contains information (for example – name, contact information, address and serial number) entered by Us, other insurers and fraud prevention agencies.

For more information about the cookies We utilize on the Service, please view Our Cookie Notice.

We process your Personal Information for the following purposes:

To fulfil a contract, or take steps linked to a contract: this is relevant where you have entered into, or are taking steps to enter into, an insurance contract with Us, or where you submit a claim. This includes:

As required by Us to conduct Our business and pursue Our legitimate interests, in particular:

Where you give Us consent:

For purposes which are required by law:

Relying on Our legitimate interests

Withdrawing consent

Wherever We rely on your consent, you will always be able to withdraw that consent, although We may have other legal grounds for processing your data for other purposes, such as those set out above. Where you have given Us your consent, you can withdraw it by using the mechanism described to you at the time that your consent was obtained, or by contacting Us.

In certain circumstances, decisions about you will be taken by solely automated means:

Providing you with a quote:

Our Affiliates

Our Service Providers and Partners

Disclosure to Public Authorities

Other Categories of Recipients

In providing the Service, Personal Information may be transferred to, and processed in United Kingdom (UK), European Economic Area (“EEA”) and United States of America.

Sharing Personal Information with Our Service Providers and Partners may also involve transfers outside the UK and the EEA, to the US.

Where Personal Information is transferred outside the UK and the EEA We will make sure it is protected to the same extent as in the UK and EEA. We will transfer Personal Information to a country with privacy laws that give the same protection as the UK and EEA, the adequate countries by decision of the EU Commission. We will ensure that appropriate Standard Contractual Clauses are in place for those countries with privacy laws that do not have adequate protection. We may also rely on our supplier’s Binding Corporate Rules.

To obtain a copy of the relevant transfer mechanism or additional information on the transfers, please address these requests to Us.

You have the right to request access to, correction of, and deletion of your Personal Information, and to restrict the processing of your Personal Information, under Applicable Law. You also have the right to request a structured commonly-used and machine-readable copy of Personal Information that you have provided to Us for a contract or with your consent to another controller.

You may also object to Our processing of Personal Information in certain circumstances (in particular, where We don’t need to process the information to meet a contractual or other legal requirement, or where We are using the data for customer experience surveying purposes (see section 2).

You can exercise any of your rights, or obtain other information, such as a copy of a legitimate interests balancing test, by contacting Us. In order to safeguard your Personal Information from unauthorised access, We may ask that you provide sufficient information to identify yourself prior to providing access to your Personal Information.

In certain situations, and subject to Applicable Law, We may not be able or obliged to comply with part or all of your individual requests. For example, We may not comply with an access request if doing so would reveal Personal Information about another person, or comply with a deletion request relating to information which We are required by law to keep or have compelling legitimate interests in keeping. Please note that We have the right to refuse requests which are manifestly unfounded or excessive (for example, due to their repetitive character).

If you have unresolved concerns, you have the right to complain to the Information Commissioner’s Office.

To provide certain parts of the Service (for example – Purchasing a Product, Creating an Account and Making Payment), the provision of Personal Information is mandatory: If relevant data is not provided, then We will not be able to provide certain parts of the Service. All other provision of your information is optional. If you do not wish to provide optional information, then your experience on Our website may be less personalised.

We communicate with you through email, SMS and the Service. We will send you service related communications (such as updates on how your claim is progressing), marketing and promotional messages (with your consent if required) customer satisfaction and market research surveys.

You can change your email, SMS and contact preferences by contacting Us.

Opt out: You may opt out of receiving marketing and promotional messages from Us by using the opt out link in emails sent by Us or by replying “Stop” to text messages sent by Us to you or contacting customer support. We will request your consent prior to sending you marketing and promotional messages, where required.

Please be aware that you cannot opt-out of receiving service-related messages from Us.

We retain Personal Information you provide as needed to provide the Service. We may retain your Personal Information if retention is reasonably necessary to comply with Our legal obligations, meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce this Notice and Our Site Terms & Conditions. We may retain Personal Information for a limited period of time if requested by law enforcement. Our customer support may retain information for as long as is necessary to provide support-related reporting and trend analysis only, but We generally delete or de-personalise transaction-related data consistent with this Notice. Once Personal Information is anonymised, We may retain and use such information. Additionally, We maintain logs and backups for security, debugging, and site stability purposes for up to 30 days after your transaction has been completed.

We typically delete logs and other backup information through the deletion process within 30 days of your last activity, except as noted in Section 5. Where We process registration data, We do this for as long as you are an active user of Our Website and for 6 years after this. Where We process Personal Information in connection with performing a contract, We keep the data for 6 years from your last interaction with Us. We also retain communications that you send to Us (for example, via email and the chat functionality) for 6 years.

We have implemented safeguards designed to protect your Personal Information in accordance with industry standards.

We have measures in place to restrict access to Personal Information to those individuals whom We know have a valid business purpose to have access to such data. We maintain physical, electronic and procedural safeguards. We follow generally accepted standards designed to protect the Personal Information submitted to Us, both during transmission and once We receive it. We require those who provide services for Us and to whom We provide Personal Information collected through the Service to keep such information secure and confidential. However, no method of transmission over the Internet or method of electronic storage is totally secure. Therefore, We cannot guarantee its absolute security.

We do not knowingly collect Personal Information from anyone under the age of 18. You must be at least 18 years of age to use the Service.

We may update this Notice from time to time. If We make any material changes to Our Notice, We will notify you by email or by means of a notice through the Service, or by other means prior to the change becoming effective, so that you may review the changes before you continue to use the Service. Please review changes carefully.

For customer enquiries, please contact Us at: Specialty Risks Limited, Aissela, 46 High Street, Esher, KT10 9QY or admin@specialty-risks.com.

Version Number: 1.0

Valid from: 28th February 2023

Find out more about how we can help you or if you are an existing customer and need to contact us