InsureCorrectStart

DRAFT — must be reviewed before you go live

Privacy notice

This is a working draft, not legal advice. Every square-bracketed field needs filling in, and the whole thing should be checked by someone qualified before the site takes a single submission.

Who we are

[COMPANY LEGAL NAME] (“we”), company number [CO NUMBER], registered at [ADDRESS], is the data controller for the information you give us on this website. We are registered with the Information Commissioner’s Office under reference [ICO REF]. Contact us at [YOUR EMAIL].

What we collect

  • Your name, business name, trade, email address, phone number and business postcode.
  • Your renewal date, and any free-text notes you choose to add.
  • The date and time you submitted the form, your IP address, and your browser string. We keep these solely as evidence that you consented.

We do not ask for, and you should not send us, details of claims, convictions, health, or anything else sensitive. Those questions belong with the broker.

Why we hold it, and on what basis

  • To introduce you to a broker. Lawful basis: your consent (UK GDPR Article 6(1)(a)), given by the tick box on the form.
  • To remind you about your renewal and send trade guidance, if and only if you ticked the second box. Lawful basis: consent, and this is the basis on which we comply with PECR for electronic marketing.
  • To evidence that consent. Lawful basis: legal obligation, and our legitimate interest in being able to answer a regulator.

Who we share it with

We pass the details above to [BROKER LEGAL NAME] (FRN [FRN]), an insurance broker authorised and regulated by the Financial Conduct Authority. Once they have it, they are a controller in their own right and their privacy notice governs what they do next: [BROKER PRIVACY URL].

We also use [HOSTING PROVIDER] to host this site and [EMAIL PROVIDER] to send email. We do not sell your data, and we do not pass it to anyone else.

How long we keep it

Introduction records: [12 / 24] months from submission, then deleted. Marketing consent records: until you withdraw consent, plus [24] months so we can prove the consent existed. Consent evidence is kept for the same period as the record it relates to.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, ask us to restrict it, or ask for it in a portable format. You can withdraw consent at any time — that does not undo anything done before you withdrew it. Email [YOUR EMAIL] and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

[Complete this once you add analytics or an advertising pixel. A Meta or TikTok pixel is not strictly necessary, so it requires a consent banner with a genuine reject option before it fires. If you ship the site with no pixels and no analytics, say so here and skip the banner.]

Last updated: [DATE]