The privacy and security of your personal information is very important to us. We assure you that your information will be properly managed and protected whilst in our hands.

St Benedicts Ltd (“UPI”, “St Benedicts”, “we”, “us” and “our” in this Privacy Policy) is an insurance intermediary that operates in the United Kingdom and internationally where authorised to do so.

St Benedicts Limited knows that we must always ensure that personal information is kept safe. We are committed to protecting you, your family and/or you and your clients’ personal information.

This Privacy Policy relates to our use of any personal information we collect from you via the following online services:

• Our UPI website (“Website”);
• Social media including Twitter and LinkedIn as well as any St Benedicts content that we may include on any other website;

It also relates to our use of any personal information we collect through other means, such as email, in person or other third-party sources.

The information we collect and how we collect it:

We may receive personal information about you, when you contact St Benedicts for example by doing any of the following:

• Requesting or obtaining a quote or an indication of premium
• Purchasing a St Benedicts product through us
• Using our Websites
• Registering as an Intermediary or Introducer
• Submitting an insurance enquiry
• Telephoning, texting, writing by post or email, or communicating via any online channels to St Benedicts

This information may include:

• Basic personal details such as your name, address, e-mail address, telephone number, date of birth or age, gender, marital status
• Additional information about your lifestyle and insurance requirements, such as details of your employment, your health or your travel arrangements
• Information about your other policies, such as claims history, quotes history, claims data
• Sensitive personal information such as health information (for example existing medical conditions, current state of health, family or personal history in relation to some conditions). We will always be clear to explain when and why we need this information and the purposes for which we will use it and will obtain your explicit consent to use sensitive personal information
• Information about your employment, including salary and other financial information where relevant to your insurance request
• National Insurance Number and
• Your marketing preferences
• We may collect information about other members of your household or family, for example, family members who may be included on an insurance policy.
  • you have told the individual who St Benedicts is and how we use personal information, as set out in this Privacy Policy; and
  • you have permission from the individual to provide that personal information (including any sensitive personal data) to us and for us to process it, as set out in this Privacy Policy.

Information collected from your use of our Website

Information we collect through Cookies and similar technologies

We collect information through “Cookies” and other similar technologies to remember you when you visit the Website; this helps us improve your online experience to suit your needs and understand how you and others use our Website, view our products and respond to our advertising, so we can tailor direct marketing and enhance our overall product and service offering. This also saves you from re-inputting information when you return to the Website. We collect and use technical data and related information, including but not limited to technical information about device, system and application software used to better facilitate your use of our website.

Online channels

We may use and share information from or with online sources, such as website, social media and information sharing platforms. This information may be used to help tailor and improve our services and communicate with you effectively, as we know many of our customers use a range of media channels.

Where we use or share information from or with these sources, we will respect any permissions you have set about how you would like your information to be used.

We recommend you routinely review the privacy notices and preference settings that are available to you through your web browsers and on any social media.

Information collected from third parties

We use information about you from other third party sources such as:

• We may obtain information about you from medical professionals, or your employer. We will always seek your permission to contact these people for your information.
• We may obtain information about you from our third-party suppliers and other third-party databases, such as government sites for marketing insights, pricing research, product development, business strategy and to detect and prevent fraudulent activity or to obtain background information relating to a particular event or activity.
• We may obtain information about you from our Introducer or your Insurance Broker if they are requesting a quotation on your behalf. Entities acting on your behalf will also have to abide by the GDPR and Data Protection rules and will request your consent, where required, prior to sharing any sensitive data with us.

How we use information to help you

We may use information to:

Administer quotes and policies, including to:

• Assess your application for a cover,
• Understand your risk
• Verify your identity and carry out anti-fraud checks,
• Administer your policy including updating you on and delivering our services.
• Support you if you need to claim
• Deal with complaints
• Reconnect with you if you move to a new house or change employer.

How we use your information

We may share and aggregate information about you within St Benedicts, including personal information held within multiple policies held with us, quotes or claims details and depending on your preferences, we may use this information:

• To determine pricing;
• If you request a quote, or purchase a product or service from us, your personal information will be used and shared with Insurers and Underwriters, as well as their third-party administrators, for the purposes of administration (including underwriting, determining premiums, managing claims and offering renewals).
• We will use your information to communicate with you about your quote, product or service, including improvements we make to the ways you can access your information.

We may, as a matter of law, and without requiring notice or consent, use your information for crime and fraud prevention, systems administration and to monitor and/or enforce St Benedicts’ compliance with any regulatory rules and codes.

How we share your information outside of St Benedicts

If you request a quote, or purchase a product or service, your personal information may be shared with and processed by our associated insurers, introducers, intermediaries, reinsurers and agents, as well as the policy holder (for a corporate policy) and your broker or agent for the purposes of administration, including third parties providing services to them, (as detailed above).

Your information may be disclosed when we believe in good faith that the disclosure is:

• Required by law;
• To protect the safety of our employees, the public or St Benedicts property;
• Required to comply with a judicial proceeding, court order or legal process; or
• In the event of a merger, asset sale, or other related transaction; or
• For the prevention or detection of crime (including fraud).
• We may share your information with regulatory bodies in the UK or if applicable, overseas.

We may disclose your information to third party suppliers or service providers to conduct our business, for example, to help administer your policy, to help us manage and store data, provide data analytics, conduct market research and to communicate with you effectively. This may include any online or digital partners we work with, so we, or our online or digital partners on our behalf, can communicate with you through their platforms.

Data transfer and consent

Your information may be transferred by to any country, including countries outside of the European Economic Area (EEA), for processing, storage, administration or any other use stated in this policy. The purposes and processing associated with any such transfer will comply with all applicable data protection regulations, including the UK Data Protection Act and the General Data Protection Regulations (GDPR), and with our obligation to adequately protect and secure your personal information. Where required under applicable laws we will take measures to ensure that personal information handled in other countries will receive at least the same level of protection as it is given in the EEA.

By providing your personal information to St Benedicts you consent to the transfer of your information as described above.

Security

We are committed to protecting the confidentiality and security of the information that you provide to us and we put in place appropriate technical, physical and organisational security measures to protect against any unauthorised access or damage to, or disclosure or loss of, your information.

You should also be aware that communications over the internet, such as e-mails, are not secure unless they have been encrypted. The Website may contain links to third party websites. These other websites will be subject to their own privacy policies which may differ from this Privacy Policy. You should carefully read the privacy policies of those websites before submitting any personal information.

Our legal bases for processing your data:

We will only process your personal data where we have a lawful reason for doing so. In particular where:

• The processing is necessary for the performance of a contract you are party to or in order to take steps at your request prior to you entering into a contract;
• The processing is necessary in order for us to comply with our legal obligations (such as compliance with anti-money laundering legislation);
• The processing is necessary for the pursuit of our legitimate business interests (including that of the delivery and the promotion of our services); and
• Processing is necessary for the establishment, exercise or defence of legal claims.
• We have obtained your explicit consent to process sensitive data about you in relation to obtaining a quotation for and administering an insurance policy.

Update your information

Please let us know if your information changes as it is important that the information we hold about you is accurate and up to date. You can ask us to update or correct your personal information by contacting us using any of the following methods:

Call us on 01603 626904 or

Email us info@stbensinurance.co.uk

We are here to help Monday – Friday9 a.m. &ndash 5.00 p.m. or if you prefer, you are welcome to write to us at the address below:

Data Controller
St Benedicts Ltd
Jonathan Scott Hall
Thorpe Road
Norwich NR1 1UH

Your Rights in Relation to Personal Information and how to exercise them

Under the GDPR you have certain rights in respect of personal and sensitive data relating to you.

Right to Data Portability/Right of Access

You have the right to ask us to provide you, or a third party, with copies of the personal information we hold about you and to be informed of the contents and origin of the information.

Right of Rectification or Erasure

If you have requested a copy of the information we hold about you and it is out of date or otherwise incorrect, you have the right to request that we update the information and cease processing the data until it is rectified. You can also request that we erase all data that we hold relating to you. There are certain circumstances where we can refuse to erase the data and erasure may result in any cover you have in place ceasing and non-payment of claims.

Withdrawal of Consent

You may, at any time, withdraw your consent for us to process sensitive data. This only covers data where specific consent is required, and other legal bases of processing such as our Legitimate Interests, Performance of a Contract or a legal/regulatory requirement. Withdrawal of consent may also result in any cover you have in place ceasing and non-payment of claims.

For more information or to exercise one of your rights as outlined above, please contact our Data Controller.

Changes to this Privacy Policy

We may amend this Privacy Policy from time to time for example, to keep it up to date or to comply with legal requirements. You should regularly check this Privacy Policy for updates. If there will be any significant changes made to the use of your personal information in a manner different from that stated at the time of collection, we will notify you by posting a notice on our Website.

How to contact us

For any questions, concerns or complaints relating to this Privacy Policy or our data protection practices, or to make a subject access request, please contact us at:

Data Controller
St Benedicts Ltd
Jonathan Scott Hall
Thorpe Road
Norwich NR1 1UH

Or Email info@stbensinurance.co.uk

You also have the right to lodge a complaint with the UK Information Commissioners Office if you feel we have not abided by this policy or the regulations:

Information Commissioner’s Office Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AFwww.ico.org.uk Tel: 0303 123 1113 Tel: 029 2067 8400 (calls in Welsh) Email: casework@ico.org.uk

Links to other websites

The St Benedicts website, www.stbinsurance.co.uk, may link to other, unaffiliated third party websites. Please note that St Benedicts is not, and cannot, control or be responsible for the content or privacy and confidentiality practices of any third party websites. You must always carefully review the privacy and confidentiality policy of any third party website that you may visit in order to understand how the operators of that website may collect, store and use your Personal Information.