This Privacy Notice is issued by ECH Facilities Ltd which operates in the United Kingdom. For any questions or concerns relating to this Privacy Notice or our data protection practices, or to make a subject access request, please contact us at: The Managing Director, ECH Facilities Ltd. Wallingbrook Lodge, Leigh Road Chulmleigh EX18 7BL.

Information we collect and from whom

We will receive personal information about you when you contact us, for example by requesting or obtaining a quote, purchasing a product from us or from one of our partners or using one of our websites. The information could include:

Individual details:

Name, address (including proof of address), other contact details (e.g. email and telephone numbers), date of birth, family details, including their relationship to you.

Financial information:

Bank account details.

Risk details:

Information about you (and others insured under the policy) which we need to collect in order to assess the risk to be insured and provide a quote. This may include data relating to criminal convictions, or other special categories of personal data (see below).

Policy information:

Information about the quotes you receive and policies you take out.

Anti-fraud data:

Sanctions and criminal offences and information received from various anti-fraud databases relating to you.

Previous and current claims:

Information about previous and current claims (including other unrelated insurances), which may include data relating to your health, criminal convictions or other special categories of personal data (see below) and, in some cases, surveillance reports.

We will collect personal information about you from you directly but also potentially from your family members, other insurance market participants, anti-fraud databases, sanctions lists, court judgements and other judicial databases, government agencies such as the DVLA and HMRC, open electoral register and any other publicly available data sources. In addition, in the event of a claim, we will get information from third parties including the other party to the claim (claimant/defendant), witnesses, experts (including medical experts), loss adjustors, solicitors and claims handlers.

How and why we use this information

We will process any personal data lawfully under one or more of the following bases:

  • Performance of a Contract: the processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
  • Compliance with a Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
  • Legitimate interests: the processing is necessary for our legitimate interests pursued by us. In such cases our legitimate interests are as follows:
    • to add value to your product offering by offering you other general insurance products;
    • to provide excellent service to our customers by ensuring they are fully informed about all of our products;
    • to engage in activities to improve and adapt the range of products and services we offer and to help our business grow; and
    • to investigate and prevent potential fraudulent and other illegal activity.
  • Consent: where you have given clear consent for us to process your personal data for a specific purpose. In circumstances where we need your consent to process data we will make this clear, unambiguous and you will have to pro-actively agree to the processing. We can seek your consent within a written or electronic document or verbally. Where processing is based on consent, you can withdraw your consent to processing at any time so that we stop that particular processing.
  • Necessary for reasons of substantial public interest: it is proposed under the UK Data Protection Bill that processing for an insurance purpose is included within this basis when processing special category and conviction data. This would remove the need for explicit consent in some cases.

We will use personal information about you primarily in connection with the provision of insurance, namely:

  • Establishing and maintaining communications with you;
  • Arranging insurance cover (issuing quotations, renewals, policy administration);
  • Handling claims;
  • Undertaking anti-fraud, sanction, anti-money laundering and other checks to protect against fraud, suspicious or other illegal activities;
  • Collecting, forwarding and refunding premiums;
  • Facilitating premium finance arrangements;
  • Processing transactions through service providers;
  • Credit assessments and other background checks;
  • Where we believe it is necessary to meet legal, security, processing and regulatory requirements;
  • Business transfers where we sell the whole or part of our business and/or assets to a third party purchaser to allow the purchaser to administer your insurances;
  • Marketing and client profiling;
  • Allowing our associated companies to notify you of certain products or services offered by them;
  • Research and statistical analysis; and
  • Building databases for use by us and others we may share information with.

We may monitor calls, emails, text messages and other communications with you. When you contact us we may keep a record of that correspondence and any information provided to us during that or any subsequent communication.

Please make sure that anyone else who is insured under your policy has provided you with consent to provide their personal information to us. It is important that you show this Privacy Notice to anyone else who is insured under your policy, including, for example, any named drivers under a motor policy or anyone living at the property insured under a household policy.

How we share this information

In using personal data for the above purposes, we will disclose personal data to third parties including insurers, reinsurers, intermediaries or other brokers; outsourcers, sub-contractors, agents and service providers; claim handlers; premium finance providers; professional advisers and auditors. Third parties to whom we disclose personal data are required by law and contractual undertakings to keep personal data confidential and secure, and to use and disclose it for purposes that a reasonable person would consider appropriate in the circumstances, in compliance with all applicable legislation.

We may share and aggregate information about you with our associated companies, including personal information relating to other policies held with us, quotes or claims details and we may use this information to:

  • help us identify products and services that could be of interest to you; to tailor and package our products and services; to determine pricing and/or offer available discounts; and
  • conduct customer research and develop marketing campaigns.

We, and/or other parties to whom we disclose personal data, may use your information for purposes such as statistical and trend research and analysis which might include computerised processes which profile you. Automatic profiling helps firms to understand, predict and forecast customer preferences and to improve the products and services they offer and to assess which products might be most suitable for you.

Retention of your personal data

We will keep your personal data only for so long as is necessary and for the purpose for which it was originally collected. In particular, for so long as there is any possibility that either you or we may wish to bring a legal claim under this insurance or where we are required to keep your personal data due to legal or regulatory reasons.

We will endeavour to keep your information accurate and whenever you inform us about any changes, we will update this information at the earliest opportunity. Please help us to do this by letting us know whenever there are changes to your personal data. If you are providing information about someone else, you confirm that they have appointed you to act for them, to consent to the processing of their personal data including special categories of personal data and that you have informed them of our identity and the purposes (as set out in this Privacy Notice) for which their personal data will be processed.

Data Transfers

We may need to transfer your data to other organisations which are located outside of the European Economic Area (EEA). These countries' data protection laws may not offer the same level of protection for personal data as offered in the EEA. Those transfers would always be made in compliance with relevant data protection legislation and we would ensure that appropriate safeguards to protect your personal data were put in place.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. For example, cookies are used to remember users' preferences and to help navigate between pages efficiently. Our websites may use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For more information about Cookies visit www.allaboutcookies.org. For further information on how we use cookies please refer to our website Terms & Conditions.

Cookies used on this website

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. For more information on Google Analytics cookies, see the official Google Analytics page.

Your rights and contact details of the ICO

If you have any questions or complaints in relation to our use of your personal data or you wish to withdraw your consent to processing, please contact The Managing Director at the address shown at the beginning of this Notice. Alternatively, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or 0303 1231113 (local rate)/01625 545745 (national rate).

Under certain conditions, you have the right to require us to:

  • provide you with further details on the use we make of your personal data/special category of data;
  • provide you with a copy of the personal data that you have provided to us;
  • update any inaccuracies in the personal data we hold;
  • provide you with your personal data in a structured format;
  • delete any special category of data/personal data that we no longer have a lawful ground to use;
  • where processing is based on consent, to withdraw your consent so that we stop that particular processing;
  • object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and
  • restrict how we use your personal data whilst a complaint is being investigated.

In certain circumstances, we can need to restrict the above rights in order to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).

Changes to our Privacy Notice

Any changes we may make to our Privacy Notice in the future will be posted on this page. Please check back frequently to see any updates or changes to our Privacy Notice.