Privacy Policy
Great Lakes Insurance UK Limited (“the Insurer”) and Taurus Insurance Services (“the administrator”) (hereafter referred to as “We”), as the Data Controllers, are committed to protecting and respecting your privacy in accordance with the current General Data Protection Regulation ("Regulation").
Call Assist LTD (“Call Assist”) trading as starttavel.co.uk is the data controller in respect of marketing data. Refer to section 11 of this Privacy Notice.
Below is a summary of the main ways in which we process your personal data.
1. How we use your personal data
We use the personal data we hold about you for the purposes of providing a contract of insurance, handling claims and any other related purposes (this may include underwriting decisions made via automated means), for offering renewal, research or statistical purposes and to provide you with information, products or services that you request from us or which we feel may interest you.
We will also use Your data to safeguard against fraud and money laundering and to meet our general legal obligation or regulatory obligation.
2. Special categories of personal data
Some of the personal information, such as information relating to health or criminal convictions, may be required by us for the specific purposes of underwriting or as part of the claims handling process. The provision of such data is conditional for us to be able to provide insurance or manage a claim. Such data will only be used for the specific purposes set out in the administrator Privacy Notice.
3. What is the Legal Basis for processing your Data?
We process Personal and Special Category data in the following circumstances:
- Where We need to perform the contract We are about to enter into or have entered into with You
- Where it is necessary for our legitimate interests (or those of a third party) and Your interests and fundamental rights do not override those interests
- Where We need to comply with a legal or regulatory obligation
- We process information about medical conditions, lifestyle or health on the basis of ‘substantial public interest’
If you are providing us with another person’s personal information in connection with a quote for insurance, you must ask them to also read this Privacy Notice. By providing information about another person, you are confirming that they have given you consent to provide the information to us and they have been/will be provided with access to this Privacy Notice.
4. Disclosure of your personal data
We disclose your personal data to third parties involved in providing products or services to us, or to service providers who perform services on our behalf. These include our group companies, affinity partners, brokers, agents, third party administrators, reinsurers, other insurance intermediaries, insurance reference bureaus, credit agencies, medical service providers, fraud detection agencies, loss adjusters, external law firms, external accountants and auditors, regulatory authorities, and as may be required by law.
5. International transfers of data
We may transfer your personal data to destinations outside the United Kingdom (“UK”) or European Economic Area (“EEA”). Where we transfer your personal data outside of the UK or EEA, we will ensure that it is treated securely and in accordance with the current Regulation.
6. Your rights
You have the right to ask Call Assist not to process your data for marketing purposes (see section 11 below), to see a copy of the personal information we hold about you, to have your data deleted (subject to certain exemptions), to have any inaccurate or misleading data corrected or deleted, to restrict the processing of your data, to ask us to provide a copy of your data to any controller and to lodge a complaint with the local data protection authority.
The administrator has appointed a UK Data Representative who is responsible for overseeing questions in relation to this policy. If You have any questions, including any requests to exercise Your legal rights, please contact them using the details below:
E-Mail Address: uk.dp.representative@taurussupport.com
Postal Address: Taurus Support Services Ltd, 29a Crown Street, Brentwood, Essex, England, CM14 4BA
7. Retention
Your data will not be retained for longer than is necessary and will be managed in accordance with our data retention policy. In most cases the retention period will be for a period of seven (7) years following the expiry of the insurance contract, or our business relationship with you, unless we are required to retain the data for a longer period due to business, legal or regulatory requirements.
8. Sharing of personal data
In addition to the third parties mentioned above, we may disclose your information to third parties for our legitimate business interests or as follows to supply certain services. In some cases, those third parties may require access to some or all of your personal data that we hold. Details of our third party supplier Privacy and GDPR policies can be found under the section Third Party Policies.
Whenever fraud prevention agencies transfer your personal data outside of the UK or EEA, they too will impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the EEA. They also require the recipient to subscribe to ‘international frameworks’ intended to allow secure data sharing.
9. More information
For more details and the administrator Privacy and Cookie Policy in full please download our complete Taurus Website Privacy Policy document.
You can review the great Lakes Privacy Policy in full HERE.
10. Thirty party policies
Worldpay (UK) Limited, Merchant Card Payment services provider: https://online.worldpay.com/terms/privacy
Pay360 by Capita, Merchant Card Payment services provider: https://www.pay360.com/privacy
Liberty Mutual Insurance Europe SE, Financial Failure insurer: https://www.libertyspecialtymarkets.com/gb-en/privacy-and-cookies
ERGO Travel Insurance Services Ltd, claims management: https://www.ergotravelinsurance.co.uk/privacy-statement/
DAS, Legal Expenses insurer: https://www.das.co.uk/legal/privacy-statement
11. Marketing
11.1 Purpose
Call Assist will use your information for marketing purposes, including keeping you informed of products and services, including but not limited to Travel insurance cover (e.g. other travel, automotive or financial products, or other carefully selected offers which we believe may interest you).
11.2 Legal Basis
Call Assist process marketing data based on consent given by individuals who opt-in. Call Assist may also process the marketing data where there is a legitimate interest to do so but only where your interests or rights are not overridden by doing so.
11.3 What personal data do Call Assist collect?
Marketing data includes your contact details such as name, physical address, email and telephone number.
11.4 Where your data is stored and who it is shared with
Call Assist share marketing data with carefully selected suppliers that carry out certain functions, including technology and data management partners who help us to administer the Services and companies that help with IT services, storing and combining data, marketing, advertising campaign, and market research.
11.5 Transfers
Call Assist may transfer personal data to, and process personal data in a country outside of the UK or EEA. If your data is transferred outside of the UK or EEA, it will be protected in the same way as if it was being used in the UK or EEA. In most cases, this will be by using an approved UK and EU approved contractual clauses. Your data may also be processed in countries which have reached Adequacy Decisions with the European Commission or are part of the Privacy Shield in the US.
11.6 Retention
If you’ve made an enquiry, or agreed to receive marketing communications, your personal data will be retained inline with their Retention Policy and/or their legal and regulatory requirements. Their Retention Policy is available upon request by contacting DPO@call-assist.co.uk. After the agreed period, your data will be securely erased. If your personal data is needed after this period for analytical, historical or other legitimate business purposes, appropriate measures will be taken to anonymise this personal data.
In all cases, you are given the right to opt-out of receiving further marketing communications. In that case, only the amount of information needed to be sure we do not contact you again for direct marketing purpose will be retained. You may tailor further communications by clicking on the unsubscribe button at the bottom of any material you receive, or by contacting the address below.
11.7 Contact details:
Full name of legal entity: Call Assist LTD
Title: Data Protection Officer
Email address: DPO@call-assist.co.uk
Postal address: Call Assist Ltd, Axis Court, North Station Road, Colchester, Essex, CO1 1UX.
Call Assist encourage you to make contact if you have a complaint so any issues or concerns you may have can be resolved. You have the right to lodge a complaint with the data protection regulator where you believe your legal rights have been infringed, or where you have reason to believe your personal data is being or has been used in a way that doesn’t comply with the law. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website (ico.org.uk/).
11.8 Data Subject Requests
You have the right to make a Data Subject Access Request in many circumstances. That is a request for access to the personal data that is held about you, there is no charge for this unless the request is manifestly unfounded or excessive.
Call Assist may ask for proof of identity and sufficient information about your interactions to assist in locating your personal data. If someone is acting on your behalf they will need to provide written and signed confirmation from you that you have given your authority to that person/company for them to make the request. Evidence of this will need to be provided before any data is provided to you (or another person acting on your behalf). Data will not be provided if it includes the personal data of other individuals or there is any other lawful reason to withhold that information.
Please see the section above titled ‘Contact details’ if you need to make a Data Subject Access Request.
11.9 More information
For more details on how Call Assist protect your data please review their complete Privacy Policy.
Click here to read the starttravel.co.uk cookie policy