Kingfisher Insurance Services Limited (Kingfisher/We/Us) is registered with the Information Commissioners Office (ICO) for data protection purposes under reference Z5425687. We trade under the brand name of Club Care Insurance
For the purposes of this notice personal data or data may include both personal data, such as your name, address, date of birth and claims history and “special” categories of data such as information about offences, criminal or motoring convictions and medical conditions.
We are committed to ensuring that your privacy is protected. Should We hold or use your personal data, you can be assured that it will only be used in accordance with this privacy notice. You must have received the consent of any third party named on your insurance policy to provide their personal data to Us and you should show this notice to them. This policy should be read in conjunction with the Terms of Business that relates to your insurance policy with Us. Kingfisher may change this policy from time to time, however We are not obliged to give notice of the changes so you should check our websites or contact Us to ensure you are referring to the latest version.
How do Kingfisher obtain your personal data?
Kingfisher may obtain your personal data from a variety of sources. We may obtain it from you directly, your family members, representatives acting on your behalf or other parties named on the insurance policy. We may also receive data from introducers you have authorised to act on your behalf, other insurers or insurance brokers you have dealt with in the past, for example if We request them to provide Us with proof of your no claims bonus entitlement.
We may also obtain information available within the public domain for example news articles, court proceedings and public posts on social media.
If you are a member of the Camping and Caravan Club, they may provide your personal data to Us in order for Us to contact you and potentially arrange and administer your insurance policy/ies.
Information about you may also be obtained from credit reference and fraud prevention agencies; debt tracing agencies; insurance industry databases and registers such as the Claims Underwriting Exchange (CUE), the Motor Insurance Bureau (MIB), Motor Insurers Anti-Fraud and Theft Register (MIAFTR) and from governmental agencies such as the Driver and Vehicle Licencing Agency (DVLA).
We may request Driving Licence Numbers from all drivers as part of your application for motor insurance, if you add an additional driver to the policy mid-term or when you renew your policy.
What will We use your personal data for?
Kingfisher will use your data for providing an insurance quotation, managing and administering your insurance policy, assisting with and in some cases administering claims, responding to complaints, policy enquiries, preventing fraud and financial crime, arranging premium finance or managing outstanding balances.
If you are insuring a vehicle or vehicles details of this/these and the insurer have to be passed to the Motor Insurance Database (MID) run by the MIB. This is to demonstrate that you have insurance cover on the vehicle(s) as required under the Road Traffic Act 1988 (RTA). This is normally done by the insurer but on occasion We may also do this on their behalf.
We may also use your personal data for analytical purposes, sometimes referred to as ‘Big Data’. For example, We may analyse how many claims happen in a particular postcode or if some types of people are more likely to be involved in accidents than others. Using your data in this way assists Us in providing our customers with the lowest premiums possible.
We may ask you to participate in surveys that assist Us in developing and improving the service We offer. We may use your personal data to keep you informed about other products and services that We have available from Kingfisher. Where We have your consent to do so We may share your data with other carefully selected financial services companies to allow them to contact you about products and services that may be of interest to you. You can withdraw consent at any time by contacting Us using the information in the contact details section or using the ‘unsubscribe’ option in any marketing emails We send to you.
Before We provide our services, We may undertake checks against you. These checks may require Us to process personal data about you to –
• verify your identity using credit reference agencies,
• establish your insurance claims history, using the Claims Underwriting Exchange (CUE),
• confirm that you or anyone named on the policy does not appear on financial sanctions lists.
• prevent fraud and money laundering by searching various fraud prevention databases.
If We, or a fraud prevention agency determine that you pose a fraud or money laundering risk, We may refuse to provide the service you have requested or We may stop providing existing services to you.
Your personal data may also be used to allow Us to fulfil our legal or regulatory responsibilities, this may involve sharing your personal data with authorities such as the Financial Conduct Authority (FCA), The Information Commissioner’s Office (ICO), police or other law enforcement agencies and governmental agencies if requested and required to do so.
If you are unable or unwilling to allow Us to use your data in line with this privacy notice, We will be unable to enter into a contractual relationship with you.
Who will We share your personal data with?
Kingfisher takes the security of your personal data very seriously and have a ‘data protection by design’ philosophy to the protection of your privacy. In order to provide our range of products and services to you, it is necessary to share your personal data with third parties. We always ensure that the required safeguards are in place before sharing your data outside of Kingfisher, or any related company. On occasion, it may be necessary to transfer some of your data outside of the EU, but We will only do so if We have a contractual agreement with that company to protect the data to the same levels as We would and the country in which they are domiciled allows them to offer such protection. We may utilise companies in the United States that are members of the Privacy Shield scheme which affords you the same protection to you data as you would get within the EU. More information on Privacy Shield can be found here.
The following outlines who We may share your data with and the circumstances in which We would do this:
If you request a quotation
If you take a policy through Us
What legal basis do We use for processing your personal data?
Kingfisher will only use and store your personal data if We have a legal basis for doing so. It is your right as the subject of this data to be informed what the legal basis is for each type of processing that We undertake.
How long will We retain your personal data?
If you decide to take a policy with Us, We will normally retain your personal data for up to ten years from when your policy expires. We may also retain telephone call recordings for up to seven years.
Where We have obtained your personal data directly or via a third party – for example another insurance broker, introducer or a marketing firm and We have your agreement to contact you at your next renewal, We will retain data for up to two years from your next renewal date.
If your insurance is an employer’s liability policy, We will retain the details of this policy for at least 60 years. This is ensure that the details are available to you should an employee lodge a claim against you far into the future, such as may be the case for an industrial disease where symptoms may not present themselves for many decades.
What rights do you have in relation to your personal data?
You have the following rights in relation to the data We hold about you, however some of these rights may not apply in certain circumstances – details are noted below. Kingfisher have strict internal processes in place that ensure your rights are upheld and that any requests you make in relation to these rights are responded to within 30 days of you making it.
The right to be informed
You have the right as a data subject to be informed in a clear and precise manner about the data We hold about you. Within this privacy notice We detail the nature of this data We hold, the reasons We hold it, how this data is used, who We will share this data with, how long We will retain your data and the rights you have in relation to your data. If you require any further information, you can contact Us using the details below.
The right of access
In order to demonstrate the legitimacy of the personal data We hold on you, its accuracy and the lawfulness of the processing We undertake, you have the right to request a copy of all data We hold about you. You can request this information free of charge using the details below. We will provide a copy of all personal data We hold about you within 30 days of you making this request.
The right to rectification
You have the right to ensure that all data We hold on you is both accurate and complete. If you are concerned that the data We hold about you is inaccurate or incomplete when considering the purposes for which your data is being used, you can ask Us to rectify this. To do so, you should contact Us using the details below.
The right to erasure (the right to be forgotten)
You have the right to request that all of the data We hold on you be erased from our systems. We may only be able to comply with this request in specific circumstances. This request would also apply to any third party whom We had shared your data with, and We would notify them accordingly if your request was valid. We will not be able to erase your data in all circumstances. For example, We would not be able to erase data that is being processed for the purposes of administering a live or lapsed insurance policy unless policy has been lapsed for seven years or more (or longer in some circumstances). This is because We have a legal obligation to retain this data for the defence of legal claims should a third party make a claim against your policy. If you require any further information, or you wish to exercise your right of erasure, you should contact Us using the details below.
The right to restrict processing
You have the right to restrict our processing of your data under the following circumstances:
If you wish to exercise your right to restrict processing, you should contact Us using the details below.
The right to data portability
Where We are processing data under the basis of contractual performance or consent you have the right to request that We provide your data in a machine readable format that you can then share with other businesses or in any other way you see fit. You have the right to request that We transfer your data to third parties directly for them to use as you see fit. You are able to utilise your data in this way by contacting Us using the details below.
The right to object
You have the right to object to your data being processed. The right to object for direct marketing purposes or profiling of your data for the purpose of direct marketing is absolute and We must cease the processing of your data for these purposes. However for other processing the right to object is not absolute and there may be some compelling reason why We need to continue processing your data. Please contact Us using the details below if you want to exercise this right.
The rights regarding automated decision making and profiling
You have the right to request human intervention into any process involving automated decision making where this results in a legal implication to you. This right would not apply to underwriting decisions or to applications for credit made on our website or internal system as this automated decision making is required for entering into a contract with Us. Currently, We do not use automated decision making for any other functions, but if you have concerns regarding this, please contact Us using the details below.
The right to complain
You have the right to complain about the use of your personal data – in the first instance please contact Us using the details below. Our complaint handling procedure is available upon request or can be accessed from the Kingfisher websites. You are also entitled to complain to the Information Commissioner by writing to –
Information Commissioner’s Office
Alternatively, you can access their website here.
What responsibilities do you have?
Kingfisher will always endeavour to ensure that your personal data is accurate and up to date. If you notice that any information on your policy documentation is incorrect or if any of your personal data changes, for example you move house, change your vehicle or occupation or you bank details, please contact Us to make Us aware of these changes.
We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure We have put in place suitable physical, electronic contractual and managerial procedures to safeguard and secure the data We hold and use.
Use of the Kingfisher Website
By running a quotation on any of the Kingfisher websites, you agree that We may call you to discuss the quotation, regardless of whether you chose to proceed with it.
A cookie consists of information sent by a web server to a web browser, and stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser. We use session cookies on our websites. We will use the session cookies to keep track of you whilst you navigate the websites.
We use Google Analytics to analyse the use of our websites. Google Analytics is a web analytics tool that helps website owners understand how visitors use with their website; this is also the only cookie We use on our sites. Google Analytics uses first-party cookies to track visitor interactions. User data gathered in Google Analytics can be analysed to help Us to improve our sites.
Quantum Metric Collects and aggregates data about how users interact with our websites and apps; what content is viewed, for how long and if any issues were encountered. We use this information to improve our user experience. You can find more detail on Quantum Metric here.
For our reporting needs as well as system administration We may gather data about your computer which can include your IP address, operating system and browser type. This is statistical data about our users’ browsing actions and patterns.
Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third party cookies. For example, in Internet Explorer you can refuse all cookies by clicking, Tools>Internet Options>Privacy and then selecting “Block all cookies” using the sliding selector. Blocking all cookies will, however, have a negative impact upon the usability of many websites, including ours.
Links to other websites
We provide links to third party websites as part of our service to you. We accept no responsibility for any statements, information, content and products associated with these third party websites. We accept no liability for these third parties for any viruses or anything else that could be infectious or destructive.
Postal address: The Data Protection Officer, Kingfisher Insurance Services Limited, Burnt Meadow Rd, Moons Moat North Industrial Estate, Redditch B98 9PA