​

Context

We are committed to protecting your privacy and complying with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR), as amended from time to time. This Customer Privacy notice describes how we collect and use personal information relating to our customers and information about a data subject received from our customers. It informs you about the personal information that is collected, why it is needed, how it is used and what protections are in place to keep it secure.

​

​

​

What personal information is collected about you?

​

We may collect different types of personal information about you, depending upon your specific circumstances, which include (without limitation):

• Identifier information (e.g. name, date of birth)

• Contact information (e.g. telephone number, home address, email address)

• Driver eligibility information (e.g. drivers licence details, driving history, endorsements, occupation and details of any additional drivers)

• Requirements with respect to hiring/loaning specific vehicles (e.g. health and disability information)

 

​

How do we collect your personal data?

​

We collect your personal data in a number of ways, for example:

• directly from yourself, when you speak to us in person or via email or contact form

• when we receive your personal data from third parties, for example a rental company or as part of an insurance claim, a new policy application, a policy renewal or a premium credit application.

 

 

​

Why do we need to collect and use personal information?

​

We collect your personal information to administer and arrange insurance policies and other broker services for our customers, which include (without limitation):

• Establishing your identity

• Suitability to apply for an insurance policy (e.g. A Self Drive Hire Fleet Policy)

• Arrange funding for a motor policy (e.g. Finance House application to fund a policy)

• Validating your eligibility to drive (e.g. drivers licence details, driving history, endorsements, occupation details of any additional drivers

• Arranging vehicle insurance

• Arranging the capture of a motor claim on behalf of our insurers

In order to fulfil our service obligations, we may share your personal data with:

• our employees

• the DVLA

• our service provision agents, including, Allianz Insurance Plc Liverpool Victoria, ERS and Octane London Markets. We will not pass your information to any organisation outside this company other than to our insurers, their co-insurers, re-insurers, advisors, loss adjusters, uninsured loss recovery agents, any governmental or regulatory body, agency or authority and other third parties as required for the proper maintenance and administration of our Terms of Business Agreement and any policies issued hereunder. Subject at all times to the Data Protection Legislation. The insurers may transfer your Personal Data outside the EEA.

• other authorities, where we are under a legal obligation to do so, for example where we are required to share information under statute, to prevent fraud and other criminal offences or because of a Court Order

 

 

​

How is your personal information protected?

​

We take the protection of personal data very seriously.  There are systems in place to guard against unauthorised access, improper use, destruction or accidental loss of personal data.  We take appropriate technical and organisational measures to prevent unauthorised or unlawful processing of personal data. In addition, we have rules and procedures in place to ensure that any personal information which we hold on computer systems cannot be accessed by persons who do not have the permissions to do so. Any authorised third-party service providers with whom your data is shared are requested to sign a formal Data Processing Agreement which ensures that your personal data is treated with the same rigour and respect as directly applied by our controls  and in accordance with current Data Protection Act and General Data Protection Regulation laws. Different categories of data are retained for various periods of time in line with our legal obligations and in accordance with our Data Retention Policy.

​

​

How can you request access to the personal information that is held about you?

​

Under Data Protection law, you have the right to request a copy of the personal information that is held about you.  The method of requesting this information is called a “subject access request”. You may make a subject access request at any time by emailing us directly at datasubjectrequest@rivalinsurance.co.uk  and a response will be provided within 30 days. If you are not satisfied with the response, in the first instance you should contact us via telephone or email.  If this still does not bring a satisfactory outcome, you have the right to lodge a complaint with a supervisory authority, which in the United Kingdom is via the Information Commissioner’s Office (www.ico.org.uk/concerns)