WHO ARE WE
ABACUS is a trading style of Alan Blunden & Company Limited.
Alan Blunden & Company Limited are authorised and regulated by the Financial Conduct Authority. We are a registered company in England and Wales No. 3476249.
Our head office address is:
Baxter Building,
80 Baxter Avenue,
Southend on Sea,
Essex,
SS2 6HZ.
The contact details for offices are as follows:
Telephone:
01702 606 300
Email:
agency@sabacus.co.uk
Website:
www.sabacus.co.uk
THIS POLICY SETS OUT THE BASIS ON WHICH WE, IN OUR CAPACITY AS A DATA CONTROLLER, MAY COLLECT AND PROCESS YOUR PERSONAL DATA. PLEASE REFER TO YOUR INSURANCE BROKER’S PRIVACY NOTICE FOR INFORMATION ON HOW YOUR PERSONAL DATA IS PROCESSED BY THEM.
THE PURPOSE OF PROCESSING YOUR DATA
When you or your Insurance Broker visit our website or contact us you will be expecting us to provide you with a quotation for an insurance product that you have selected.
We do not require your consent in order to process the information you provide to obtain quotations on your behalf, as the processing of the information is necessary for the performance of the contract with you, or in order to enable us to take steps to enter into a contract with you.
Therefore, by completing our online forms or requesting a quotation over the telephone, we have a legal basis for processing your personal data to fulfil your needs.
We collect, use and store your personal information in order to fulfil requests for quotes, products and services as part of our insurance broking, claims handling and risk management business. It may also be used to verify your identity and to enable us to carry out anti-money laundering and other financial crime checks where required. If you pay by instalments your information may also be used to arrange credit.
We may monitor calls, emails, text messages and other communications with you.
We use live chat software on our website, this is provided by Click4Assistance, a 3rd party UK based Software Company. Information regarding how the data is processed and stored can be viewed at https://www.click4assistance.co.uk/click4assistance-web-chat-software-cookie-policy.
We may process your data for certain legitimate interests including to help us assess your ongoing needs, to inform you about products and services that meet those needs, to communicate with you, to administer your account with us and to carry out internal data analysis.
If you no longer wish to receive information from us other than in relation to the insurance product you have purchased or enquired about then you can contact us and make this request. All electronic communications we send to you will give you the option to opt out.
Please show this notice to anyone else whose personal information you will be providing to us.
TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES
It is not our companies’ policy to sell or pass on your information to third parties for marketing purposes.
If you do take out an insurance policy through us, in order to ensure the performance of the contract you have entered into, it will be necessary to pass your personal data on to the relevant insurance company, its representatives and business partners such as loss adjusters or legal firms involved in the claims handling process.
TYPES OF DATA
Data will only be used in connection with the insurance product you have purchased from us or for certain legitimate interests as advised earlier in this Privacy Notice. If this is not the case then we will ask for your specific permission for the information to be used differently, for which you must consent in order for us to do so.
We collect personal data such as name, contact details, date of birth, gender, marital status, financial details, employment details and other personal details depending on the nature of the insurance and other services we offer.
You understand that we may also collect, use and store sensitive personal information such as criminal convictions and medical conditions as necessary in relation to insurances such as motor, home, travel and health insurance. Where this is required, you consent to this processing to enable us to provide you with the relevant services. You may withdraw your consent at any time. However, we will not request or store certain sensitive personal data such as your ethnicity, sexual orientation etc.
If you provide personal data about other individuals (such as employees, named drivers, family members etc.), you must obtain their consent prior to disclosing it to us.
You understand and give your explicit consent that we may disclose your information to relevant other parties for the purposes described in this Notice.
DATA TRANSFER TO COUNTRIES OUTSIDE THE UK
We do not transfer your data outside of the United Kingdom other than when it is stored on a cloud server. If this is the case, your data will only be stored in an approved EEA member country, as it is against the Financial Conduct Authority’s (FCA) rules for personal data to be stored outside of this jurisdiction.
We undertake appropriate due diligence when dealing with cloud providers as required by the FCA.
RETENTION PERIODS
It is our policy to only keep records of your personal data for as long as required by the Financial Conduct Authority, The Companies Act or other legislation, whichever requirement is longer. Our retention records are currently as follows:
Customer, Claims & Complaints files & records – 7 years after expiry of annual or short period contract, claim settlement or complaint.
Prospective customer data – 2 years
YOUR RIGHTS
The General Data Protection Regulation provides the following rights for you as individuals.
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to portability
- The right to object
- Rights in relation to automated decision making and profiling
THE RIGHT TO BE INFORMED (IN BRIEF)
The right to be informed encompasses our obligation to provide fair processing, typically through a Privacy Notice such as this. It emphasises the need for transparency over how we use your personal data.
THE RIGHT OF ACCESS (IN BRIEF)
Under the General Data Protection Regulations you have the right as an individual to obtain:
- Confirmation that your data is being processed
- Access to your personal data
- Other supplementary information – this largely corresponds to the information that is provided in a Privacy Notice such as this
THE RIGHT TO RECTIFICATION (IN BRIEF)
You as an individual are entitled to have personal data rectified if it is inaccurate or incomplete.
If we have disclosed your personal data which has to be rectified to third parties we must inform them of the rectification where possible.
THE RIGHT TO ERASURE (IN BRIEF)
The right to erasure is also known as the right to be forgotten. The broad principle underpinning this right is to enable you as an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
THE RIGHT TO RESTRICT PROCESSING (IN BRIEF)
Under the previous Data Protection Act individuals have the right to block or suppress the processing of personal data. The restriction of processing under the GDPR is similar.
When processing is restricted we are permitted to store your personal data but we cannot further process it. We can and will retain just enough information about you as an individual to ensure the restriction is respected in the future.
THE RIGHT TO DATA PORTABILITY (IN BRIEF)
The right to data portability allows you as an individual to obtain and re-use your personal data for your own purposes across different services. It allows you to move, copy or transfer your data easily from one IT environment to another, in a safe and secure way without hindrance to user ability.
However, we can only offer data portability where we are able to – at the moment this would include providing you with proof of your claims history, policy history etc. and this would be provided to you to pass onto a third party. We may be unable to exchange other data we hold due to system restrictions.
THE RIGHT TO OBJECT (IN BRIEF)
You as an individual have the right to object to:
- Processing based on legitimate interests or the performance of a task in the public interest / exercise of official authority (including profiling)
- Direct marketing (including profiling)
- Processing for the purposes of scientific/historical research and statistics
RIGHTS IN RELATION TO AUTOMATED DECISION MAKING AND PROFILING (IN BRIEF)
The GDPR provides safeguards for you as an individual against the risks that can potentially damage a decision taken without any human intervention. These rights work in a similar way to your existing rights under the previous Data Protection Act.
You have a right not to have decisions made about you solely through automated processing.
I NO LONGER WISH TO RECEIVE INFORMATION FROM YOU OTHER THAN IN RELATION TO THE INSURANCE PRODUCT I HAVE PURCHASED
Where you have opted in to receive information about the other products we offer or other such information where we have previously received your consent, you may withdraw this at anytime by contacting us by telephone or by email using the contact details below:
Telephone:
01702 606 300
Email:
agency@sabacus.co.uk
I WISH TO BE FORGOTTEN
You have a right under the General Data Protection Act to be removed from our records. However, we can only remove your information from our systems once our regulatory requirements have been fulfilled.
You may request deletion of your data by contacting us using the details and methods below.
If we are unable to remove your records due to data retention periods, this will be disclosed to you at the time of your request, or you can refer to the information provided above.
Telephone:
01702 606 300
Email:
agency@sabacus.co.uk
I WISH TO MAKE A COMPLAINT
If you wish to make a complaint about the way we hold your personal data, in the first instance please write to Mr Richard Burgess, Director, Alan Blunden & Co Ltd, Baxter Building, 80 Baxter Avenue, Southend on Sea, Essex, SS2 6HZ.
In the event that we are unable to satisfy your complaint, you are able to complain to the Information Commissioners Office:
Telephone:
0303 123 1113
Address:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
COOKIES
We use Cookies to store session information so that we can identify you for quotation purposes and for retrieval by you of your previous quotation data. This information is also used for payment purposes using the HSBC secure e-payments.
EXTERNAL SITE LINKS
Our website may link to other websites on the internet. The content and Privacy Notices of other websites are the responsibility of their respective owners and it will be made clear to you when you are leaving our website and when you are being redirected to another.
ADVERTISERS
We do not have any third party advertising on any of our websites.
IP ADDRESSES & LOGIN
We log information about visitors including your IP address, date and time visited, referring website, length of stay etc. This information is purely used for visitor analytics only and we do not store personal data along side this information.
CREDIT CARD TRANSACTIONS
It is our policy not to store any details of your credit card. We use HSBC, one of the world’s leading banks and their offering secure e-payments that process your payment on our behalf. We send them very limited information including the amount of the transaction to be created, your session key and name. All other information is undertaken by HSBC’s own website and is not stored or sent back to us and therefore remains fully secure.
QUESTIONS AND CONCERNS
If you have any questions or concerns about our Privacy Notice or the General Data Protection Regulation, please do not hesitate to contact us.
Address:
Baxter Building,
80 Baxter Avenue,
Southend on Sea,
Essex,
SS2 6HZ
Telephone:
01702 606 300
Email:
agency@sabacus.co.uk