Spring Insure Limited, Spring Insure Guernsey Limited and Spring Insure Europe Limited are committed to protecting the privacy and security of your personal information, providing clear information about how your personal information is processed and complying with data protection laws. This Privacy Notice tells you what we do with information we collect about you.
This Privacy Notice applies to any individual whose personal information we process in the course of providing insurance or related services or operating our business, including website users; individuals enquiring about career and employment opportunities; employees of intermediaries, coverholders and third party suppliers; policyholders; prospective policyholders and beneficiaries and claimants under our insurance policies.
Insurance involves the use and disclosure of your personal information by various insurance market participants.
The London Insurance Market Core Uses Information Notice describes how the insurance market participants process your personal information during the insurance lifecycle. We recommend you review this Core Uses Notice as well as this Privacy Notice.
Who we are
We are Spring Insure, a brand that encompasses Spring Insure Limited (‘Spring Insure’), Spring Insure Guernsey Limited (‘Spring Guernsey’) and Spring Insure Europe Limited (‘Spring Europe’). We are specialist underwriting businesses based in London, Guernsey and Dublin underwriting on behalf of certain Underwriters at Lloyd’s and licensed by the Financial Conduct Authority (FCA), Guernsey Financial Services Commission (GFSC), and the Central Bank of Ireland (CBI).
What personal information do we collect about you?
- Individual details ‑ name, address (including proof of address), other contact details (for example e‑mail address and telephone numbers), gender, marital status, date and place of birth, nationality, employer, leisure activities and interests, family details including the relationship of family members to you.
- Identification details ‑ identification numbers issued by government bodies or agencies, including your national insurance number, passport number, tax identification number and driving licence number.
- Financial information ‑ bank account or payment card details, income or other financial information.
- Data from fraud prevention, law enforcement or government agencies and other publicly available databases and data sources used to prevent or detect fraud or provide details to us about criminal convictions or offences.
- Data in relation to regulatory issues from HM Treasury and other authorities, for example when someone is subject to a financial sanction they will appear on HM Treasury’s asset freezing list.
- Information relating to underwriting insurance policies and managing and processing insurance claims, such as previous insurance records and claims histories, and in some cases, surveillance reports.
- Employment and career information ‑ your employment history, job title, salary, employment benefit options, educational background and any professional qualifications and licences.
The type of information we may collect and process about you will depend, in some circumstances, upon the type of insurance that we are offering or underwriting.
Sensitive personal information
We may collect certain categories of personal information that are more sensitive. This information, known as special category personal data, has additional protection and includes:
- your health information (such as your medical records and history, test results, information and treatment, and reports on medical diagnoses).
- information about your personal characteristics and circumstances of a sensitive nature such as your racial or ethnic origin, religious beliefs, sexual orientation, sex life and genetic information, your membership of a trade union.
We may also collect information about criminal convictions or offences where authorised by law.
Where do we collect your personal information from?
Information collected from you and our Cookie and Analytics Policy
Where we have collected the information directly from you it will usually be obvious what this is as you will have contacted us or given it to us. This might not be the case where we have used cookies to collect information from your computer or portable electronic devices. Please see our Cookie and Analytics Policy for more information.
Information collected from others
We can collect information about you from others and from various sources.
This includes information from:
- Other insurance market participants which may include intermediaries who are involved in the arranging of insurance cover between us and policyholders (such as insurance brokers and coverholders); other insurers who are providing the insurance cover together with us; other insurers who we are providing reinsurance cover to in our capacity as a reinsurer.
- In the event of a claim, third parties who are involved including claims handlers who assist us in investigating or processing claims, solicitors, loss adjustors, experts (including medical experts), witnesses, evidence providers, the other party to the claim (who may be either a claimant or a defendant).
- Individuals or companies that you may be associated with (for example representatives acting on your behalf, your employer or your family members).
- Anti‑fraud databases, sanctions lists, court judgments and other publicly available sources and databases.
- Credit reference agencies and other financial institutions.
Which of the above sources apply will depend on your particular circumstances.
How do we use your personal information and why may we do this?
We use your personal information in order to meet our obligations in our contracts of insurance and to operate our business. We must have a legal basis to process your personal information. We and our other group companies use your personal information in the following ways and for the following reasons:
- To provide insurance services: We may use your personal information to issue quotes for, and administer, policies of insurance. We can use your information in this way to fulfil our contractual obligations or to take steps before entering into a contract.
- To do what we are required to do by law: We may use your personal information to comply with legal obligations and to cooperate with regulatory bodies to which we are subject. This includes the prevention and detection of fraud, money laundering, terrorism and other crimes; the carrying out of background checks where these are required and lawful; fulfilling due diligence and reporting obligations; and responding to binding requests from regulators. We can use your information in this way because we are obliged to comply with legal and regulatory requirements.
- To review, process and manage insurance claims: We may use your personal information to manage the investigation and payment of claims made under our insurance policies, including conducting fraud, anti‑money laundering and sanctions checks and bringing or defending legal claims that relate to the policy of insurance. We can use your information in this way to fulfil our contractual obligations, to comply with legal and regulatory requirements and because it is in our legitimate interests to exercise our rights and bring or defend claims made against us.
- To operate and audit our business: We may use your personal information to fulfil our contractual obligations to third parties; to perform administrative activities in connection with our services; to conduct data analysis that helps us assess risks, price our insurance appropriately and improve our services; to research and develop new insurance products. We can use your information in this way because it is in our legitimate interests to improve our services and manage our business efficiently, to ensure we manage risk and price our insurance appropriately, and to maintain accurate records and perform audits. When we process your personal information on the basis that it is in our legitimate interests to do so we balance our interests with your rights and freedoms and keep the information used and the processing to the minimum required to meet those legitimate interests.
- To exercise our legal rights: We may use your personal information to exercise, defend and protect our legal rights or the rights of third parties where it is necessary to do so. For example, we may bring or defend claims or recover debts which are due to us. We can use your information in this way because it is in our legitimate interests to exercise our rights to collect money owed to us and to bring or defend claims made against us.
- For recruitment: We may use your personal information to assess your suitability for employment and make recruitment decisions. We can use your information in this way because it is in our legitimate interests to recruit suitably qualified employees and carry out our responsibilities in relation to recruitment.
- Sensitive personal information: If it is necessary that we process your sensitive personal information (or special category personal data) for one or more of the purposes above we will only do so where one of the following lawful reasons applies: we have obtained your explicit consent; we need to process your sensitive personal information to establish, exercise or defend a legal claim; we need to process your sensitive personal information for reasons of substantial public interest, for example an insurance purpose; we are otherwise authorised by local law to process your sensitive personal information.
Who we do we share your personal information with?
We may share your personal information with third parties and other companies within our group in the following circumstances:
- Group companies ‑ we operate as an international business so we may share your personal information with group companies who may use this information for the purposes described in this Privacy Notice.
- Insurance market participants ‑ including other insurance and reinsurance companies, coverholders, intermediaries, retrocessionaires and business partners. We may share your personal information with these third parties should they need to use your personal information in connection with the provision of insurance and processing of claims. For example, we may share your personal information with other reinsurers for the purposes of settling claims.
- Service providers ‑ we may share your personal information with service providers that perform services and other business operations for us, for example, software and analytics providers, professional advisors and auditors.
- Potential purchasers ‑ we may share your personal information with any third party that purchases, or to which we transfer, all or substantially all of our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Notice.
- Companies who are our customers ‑ we may share your personal information with your company or employer in certain circumstances, for example, if your company or employer has a corporate insurance policy with us and you make a claim under that policy.
- Any law enforcement agency, court, regulator or government authority. We may share your personal information with these parties where this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.
Will we send your personal information overseas?
We may need to transfer your personal information to other insurance market participants, our group companies, and service providers, contractors and agents who perform services on our behalf and are located outside of the United Kingdom (UK), Channel Islands (CI) and European Union (EU).
We will put agreements in place with the people we send information to so that these transfers will be made in compliance with data protection legislation and they will be required to treat your personal information with the same degree of protection that would apply within the UK, CI and EU. For more information on the appropriate safeguards in place, please contact us at the details below.
In some cases, we might need to share information to carry out the services we have promised to carry out, for example if you require urgent assistance abroad. In such an urgent situation, we may not always have the time to put in place the type of agreement we would normally want to.
In certain circumstances, in order to provide insurance cover and deal with claims, we may need to process your special category personal data, such as medical records and information relating to criminal convictions, for the purposes outlined above. We may need your consent to do this and, if we do need your consent, we will ask you for it separately.
You do not have to give your consent and you may withdraw your consent at any time. However, if you do not give your consent, or you withdraw your consent, this may affect our ability to provide the insurance cover from which you benefit or prevent us from providing cover or handling claims.
Profiling and automatic decision making
When we analyse personal information for the purposes of risk assessment or risk modelling this may involve profiling, which means that we may process your personal information using software that is able to evaluate behaviours and predict risks or outcomes.
It helps us to understand any risks associated with the insurance policy and to make decisions about how we can improve and develop our products and services, or our pricing and underwriting. It is in our legitimate interests to manage risk and ensure we are charging appropriate premiums.
How long will we keep your personal information for?
We will keep your personal information only for so long as is necessary and for the purpose for which it was collected originally. In particular, for so long as there is any possibility that either you or we may wish to bring a legal claim under an insurance policy, or where we are required to keep your personal information for legal or regulatory reasons.
Spring Insure Limited is registered with the Information Commissioner’s Office under reference ZB204096 in respect of Data Protection.
Spring Insure Guernsey Limited is registered with the Guernsey Data Protection Commissioner under reference 53939 in respect of the Data Protection.
Spring Insure Europe Limited is registered with the Data Protection Commission.
You may contact us for one or more of the following reasons:
- To ask us to correct information about you that is wrong or incomplete, or to delete personal information about you.
- To tell us you no longer agree to, that you object to, or that you wish to restrict us using information about you and ask us to stop.
- To exercise your right of access, which means you may ask us to provide you with a copy of all of the personal information that we have about you.
- To exercise your right to data portability, which means you may obtain and reuse the information that you have provided to us for your own purposes across different services. You may ask for this information to be provided directly to you or directly to another organisation. We will provide the information in a machine‑readable format so that another organisation’s software can understand that information.
Sometimes we will not be able to stop using your personal information when you ask us to (e.g. where we need to use it because the law requires us to do so or we need to retain the information for regulatory purposes).
In other cases, if we stop using your personal information, we will not be able to provide services to you, such as administering an insurance policy or servicing a claim.
We will tell you if we are unable to comply with your request, or how your request might impact you or others, when you contact us.
How to contact us
Our Data Coordinator is responsible for responding to questions about this Privacy Notice or to your requests to exercise your rights which are set out above.
You can contact our Data Coordinator for:
Spring Insure Limited at Mitre House, 12-14 Mitre Street, London EC3A 5BU, email firstname.lastname@example.org;
Spring Insure Guernsey Limited at Suite 1, Albert House, South Esplanade, St Peter Port, Guernsey, GY1 1AJ, email: email@example.com;
Spring Insure Europe Limited at Suite 202, 56 Fitzwilliam Square North, Dublin 2, D02 X224, email: firstname.lastname@example.org.