Our Privacy Policy
Data Controller
We are a Data Controller of personal data associated with the sale of insurance and guarantee products to automotive dealers and end customers. We deliver our services via a network of third parties, including vehicle repairers (and their subcontractors), insurance underwriters, insurance/warranty resellers, agents and partners, and technology solution providers.
We have taken steps to ensure that we adopt best practice under General Data Protection Regulation (GDPR) to protect the privacy of individuals. We aim to maintain and whenever possible improve on the minimum standards for the assurance of individuals’ rights to data privacy and protection.
We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the processing of Personal Data (ZA528842).
Our Privacy Principles
When we collect and use your personal information, we ensure we look after it properly and use it in accordance with our privacy principles set out below.
- Personal information you provide is processed fairly, lawfully and in a transparent manner
- Personal information you provide is collected for a specific purpose and is not processed in a way which is incompatible with the purpose for which we collected it
- Your personal information is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed
- Your personal information is kept accurate and, where necessary kept up to date
- Your personal information is kept no longer than is necessary for the purposes for which the personal information is processed
- We will take appropriate steps to keep your personal information secure
- Your personal information is processed in accordance with your rights
- We will only transfer your personal information to another country or an international organisation outside the United Kingdom or those countries considered “adequate” by the UK regulator (such as those within the European Economic Area or EEA) where we have taken the required steps to ensure that your personal information is protected. Such steps may include placing the party we are transferring information to under contractual obligations to protect it to adequate standards and performing appropriate risk assessments of those transfers.
How We Protect Your Personal Data
To protect your privacy, we train our staff to understand their responsibilities in helping us maintain GDPR compliance. We specifically focus on the following areas:
- Notifying end users of their Rights through Privacy Statements
- Handling end users’ Data Subject Access Requests
- Working with our Data Processors
- And, what to do in the event of a personal data breach.
We review annually our staff awareness of data privacy and protection. We also apply appropriate technical measures to protect personal data.
Your Rights
We recognise our responsibility in responding to individuals’ Rights. We manage this process by executing procedures in line with GDPR requirements for Data Subject Access Requests and prevention of data breaches in discharging our obligations during this process.
- To be informed
We will inform individuals of their right to object “at the point of first communication” and clearly lay this out in our privacy notices (see links below.) - To access
Should you wish to receive a record of the personal data that we hold about you, please complete the relevant form in the ‘Forms’ section of our website. - To rectification
We have implemented processes that ensure your personal data remains accurate and up to date. In the event data is deemed not accurate and you wish this data to be amended, you must contact us. You must specify which records you wish to be updated. - To erasure
At any time, you may request that your personal data is erased from our records. We will erase all records in accordance with our storage and retention policy. You must provide details of the record you wish to be erased. - To restrict processing
You have the right to block or restrict the processing of your personal data. This means that we will store your personal data but will not process it for further use in our marketing services. - To data portability
You have the right to obtain and reuse your personal data for your own purpose. - To object
You have the right to object to any processing undertaken for the purposes of direct marketing (including profiling). We will stop processing for direct marketing as soon as we receive your objection. We will stop processing from the date of receipt of your objection. - To not to be subject to automated decision-making including profiling.
We do not perform automated decision-making using your personal data to profile, nor do we supply the information we hold to third parties for use in analysis or prediction.
Data Protection Officer
As a Data Controller we recognise our responsibility in responding to individuals’ Rights. We manage this process by executing procedures in line with GDPR requirements.
We coordinate Data Subject Access Requests through our Data Protection Officer. Should you wish to make such a request, please complete the relevant SAR form in the ‘Forms’ section of our website. Alternatively, you can contact us by:
- Post: Data Protection Officer, Spectrum Insurance Services. Westthorpe Business Innovation Centre Westthorpe Business Park Killamarsh Sheffield S21 1TZ
- Email: dataprotectionofficer@spectrumcover.co.uk
- Phone: 0114 321 9876
Complaints
Should you wish to raise a complaint with us regarding the use of your personal data, please complete the relevant complaints form, which can be found in the ‘Forms’ section of our website.
You can also raise a complaint with the ICO. Their contact details are – Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow Cheshire, SK9 5AF. You can also contact them by telephone on 0303 123 1113 or via their website at www.ico.org.uk.