Brightside Insurance Services Limited - Privacy Notice

In this privacy notice “we”, “us” and “our” refers to Brightside Insurance Services Limited (“Brightside”). Our registered address is: Markerstudy House, 45 Westerham Road, Bessels Green, Sevenoaks, Kent. TN13 2QB.

We are registered with the ICO, registration number Z5268008

We are part of the Markerstudy Group of companies. If you want to know more about the Markerstudy Group please go to

www.markerstudygroup.com/about-us.

We are an insurance broker and offer different types of insurance products. This privacy notice relates to our Car, Van, Motorcycle, Home and Commercial insurance. We offer our products under the following brands: Brightside car, Brightside Bike, Brightside van, Commercial Vehicle Direct Insurance Services, Logical Choice Insurance, One Insurance Solution, Prosport Insurance and RAC Business Insurance.

We take the privacy and security of your personal information very seriously and want you to be confident that information held by us is well managed and protected. We have set out in this notice how we and/or our carefully chosen third parties collect, store, use and share your personal information.

We are a controller of your data. This means we determine the purpose for which we use your personal information and the way in which it is used. When you take out an insurance policy then a third party insurer or ‘underwriter’ will also be a data controller. Depending on exactly how you started your relationship with us other companies (such as insurers) may also be considered controllers of your data. Where a third party is involved in the use of your data we strongly recommend you review their privacy notice so you can understand how they will collect store, use and share your information.

We have appointed a Data Protection Officer to oversee our handling of personal information. If you wish to know more or want to get in touch about your data, you can contact our Data Protection Officer at: 45 Westerham Road, Bessels Green, Sevenoaks, Kent TN13 2QB or emailing: dataprotection@markerstudy.com

The information we collect about you will be different depending on the service involved and your personal circumstances, this includes information such as:

• your general personal information such as name, address, date of birth
• what you are seeking to insure
• financial information such as payment card details
• photographic images, video footage and audio recordings
• the personal information of other individuals relevant to the insurance (e.g. another individual who wishes to be named on the policy)
• your insurance claims history
• criminal offence information relevant to the insurance
• special categories of personal information such as health or medical information relevant to the insurance
• your credit history
• your use of our websites

If you provide personal information to us about other individuals you should:

1. make sure you only share an individual’s personal information with us if you have their permission to do so
2. share this privacy notice with all individuals whose information is provided to us

We collect information about the following types of individuals:

• Previous, current and prospective customers/policyholders
• Previous, current and prospective parties covered under an insurance policy we administer, place or underwrite
• Persons authorised to speak to us on behalf of a customer or policyholder
• Third party claimants
• Witnesses to incidents
• Experts instructed in relation to claims
• Users of the Markerstudy Group websites
• Business partners

  We may obtain personal information in a number of different ways:

• from you or someone connected to you (quote, renewal, policy amendment, complaint, claim etc)
• from insurance brokers and/or price comparison sites (also known as “aggregators”) on which you have submitted your information
• from third party databases used by the insurance industry (e.g. DVLA, Motor Insurers Bureau, Claims Underwriting Exchange)
• from our suppliers (e.g. to assess damage following a claim)
• from publicly available sources (e.g. the electoral register)
• from other insurers with whom you have held insurance (e.g. to verify no claims eligibility)
• from credit reference agencies
• from other companies within the Markerstudy Group

If you have any questions about the personal information we collect and use you can Get in touch

We only collect personal information which is necessary and will only use that information when it is appropriate to do so. When an activity does not require personal information we will seek to anonymise (remove personal identifiers from) the information involved wherever possible.

When you purchase a policy or renew with us, we may use the Trustpilot platform to send you an invitation to leave a review and rate our service and products. You can unsubscribe at any time using the link in your invitation email.

If you want to understand more about why and how we use your information please use the How to Contact Us section to get in touch. We may collect and use your personal information for the following purposes:

We may share your information with:

• Other brands or companies within the Markerstudy Group of companies (see About Us section for more information)
• Other insurers, reinsurers, partners, agents or carefully selected third parties – This is usually when a third party either provides services to us (e.g. our postal supplier) or we use a third party to fulfil a service to you on our behalf (e.g. assessing damage following a claim)
• Third parties that we use to help us identify and maintain accurate information (e.g. payment card providers)
• Third parties who provide finance facilities in relation to an insurance premium (e.g. when you choose to pay for your insurance premium on a monthly payment basis)
• Other companies we partner with to provide you with insurance (e.g. insurance underwriters). If your policy is underwritten by another insurer you will be notified of this in your policy documents. We strongly recommend you also review the privacy notice of your underwriter so you understand how they will collect, store and use your information
• Statutory, regulatory, supervisory or otherwise authorised public bodies (examples include the Financial Conduct Authority, the Prudential Regulatory Authority and the Information Commissioner’s Office) to provide required information.
• Organisations where we have a duty to disclose your personal information under applicable law (e.g. a UK police force or court)
• Financial crime detection agencies, providers who update on sanctions and third parties who maintain fraud detection databases or provide assistance with investigation in cases of suspected fraud (e.g. Synectics)
• Insurance industry bodies such as the Motor Insurers’ Bureau (MIB) and the Association of British Insurers (ABI)
• We share information with credit reference agencies to check your credit history. You can find more information on this in our use of credit reference agencies section.
• Third parties with whom you have given us permission to share your information or when you have agreed to benefit from an offer of service fulfilled by them (e.g. promotional vouchers)
• Third parties in association with recovery of monies owed in relation to your insurance policy, including the sale of debt to a third party
• We may pass information to third parties for the fulfilment of promotions. This will only be completed where we have appropriate permission to do so. More information on this is available in our section on Communications Promoting Products and Services (Marketing)
• Another company, where some or all of our business is being sold to them. To ensure cover continues uninterrupted and, as part of any prospective sale, we may share personal information with the purchaser. Any prospective purchaser would be under a duty of confidentiality which covers all personal information that is shared with them.
• Transfer of your information following sale of your policy to another insurer (if this happens we would specifically notify you of this and you will be able to exercise your right to object (see the your information rights section for more detail on this right)
• Piloting improved systems and services. This may be facilitated wholly or in part by third parties.
• Third parties where you have given permission for us to do so and it is reasonable for us to believe they are acting on your behalf

We take your security and privacy very seriously and will only share your personal information in a way that is consistent with UK data protection law.

The UK has implemented rigorous standards of data protection designed to keep your personal information safe. Whenever possible we will seek to keep your personal information within the UK. If we do need to transfer, store or use the personal information we hold about you outside of the UK, we will either verify that the location your information is being processed in is one the UK Government has determined to match the UK’s own safeguards (known as “adequacy”), or we will put in place such additional protections as are required to make sure it remains suitably secure. This means your information should keep a similar level of protection at all times.

Transfers outside of the UK may be completed by us or by our third party partners and suppliers. We include requirements necessary to protect personal data in the contracts we agree with third parties and periodically assess and review the arrangements that those third parties have in place, to make sure their information security measures are maintained in line with the requirements of data protection law and industry best practice.

We may contact you in relation to products or services which are similar to the products or services you hold (or have applied for). When we engage with you (by phone, email or website) we will give you the opportinuity to choose to not receive such communications. You will be given the choice over the method of communication (e.g. email, telephone, SMS). Depending on the options available at the time and the choices you make you may receive promotional offers in relation to:

• Similar products and services for other companies within the Markerstudy Group
• Similar products and services from selected third parties

We may send this information to you directly or via third parties such as search engine operators and marketing companies on our or the Markerstudy Group’s behalf.

How do I stop promotions from being sent to me?

You can stop us contacting you about products and services at any time by:

• Clicking on an ‘unsubscribe’ option in an email
• Getting in touch using the contact details provided in your product documentation
• Using the Contact Us details provided in this notice

Although requesting this will mean we stop all communications promoting products or services, we will of course continue to send you service related communications where necessary.

Please note that there is no personal information used in our online ad campaigns so you will need to check your browser or social media settings to avoid seeing these.

We will only keep your personal information for as long as reasonably necessary, as set out in this Privacy Notice and in order to comply with our contractual, legal and regulatory obligations.

We have in place a Document Retention Policy which controls how long various types of information should be retained. The Policy is reviewed on a regular basis to ensure that it aligns to current legal and regulatory requirements.

It is important that you are aware that retention periods vary depending upon the circumstances of an individual matter, but in general our retention periods for customer facing documentation can be set out as follows:

• quote information – usually 13 months from quote inception
• policy information  - usually 7 years from cancellation of policy (some policies have a longer retention period as required by regulation)
• claims information – usually 7 years from date of last settlement / order (this period may be extended if the claim involves a minor or the accident resulted in particularly severe injury)
• complaints information – maximum of 7 years in accordance with the policy retention period

If you would like further information regarding the periods for which your personal information will be stored, please get in touch using the Contact Us details provided in this notice.

Some of our decisions are made automatically by a system or computer reviewing your personal information. This means the decision is calculated using certain automatic processes rather than being made by one of our employees and is known as ‘automated decision-making’.

Our assessment of your insurance application will involve an automated decision to determine whether we are able to provide a quotation (and if so at what price). The decision involves the use of systems which apply our pricing and business acceptance rules. These systems rely on the information you provide to us about yourself and about other relevant individuals. They use this information to automatically determine whether we are able to provide a quotation and, if so, the price we are willing to offer you.

This assessment involves the use of information obtained from third party companies known as credit reference agencies. The assessment includes the use of information such as verification of residence at the address provided, historic payment behaviour on financial products, prior insolvency and any relevant past county court judgements. The outcome of the assessment may result in us varying our offered payment method or we may decline to offer you a quote. For more information please see the section in this notice on Our Use of Credit Reference Agencies.

You have a right to not be subjected to automated decision-making, however you should be aware that if you object to us making an automated decision that is necessary for us to offer you cover or determine your insurance premium, then we will be unable to provide you with an insurance quotation or renewal. For more information on how to exercise your rights in relation to automated decision-making see our Your Information Rights section.

We will also ask you when you purchase your policy if you would like to opt in to automatic renewal. Even if you select “yes”, it is important that you know that you have the right to opt out of this automatic renewal at a later date.

Credit reference agencies are companies that collect, record and monitor an individual’s credit history. We share information with credit reference agencies to check your credit history.

To assess applications we send your personal information to a credit reference agency and they provide us with information about you which is relevant to that application. We do this for a number of reasons including affordability, product suitability, and creditworthiness. We also use this to verify your identity and, where applicable, as part of the recovery of debt. This is what is commonly referred to as a “credit check”. This check is recorded on your credit reference file but does not affect your ability to apply for credit or other financial products.

You should be aware that if you take out a product using credit, failing to make agreed payments may affect your credit history and can affect future applications you make for credit.

We will continue to exchange relevant information with credit reference agencies on an ongoing basis. Credit reference agencies will share your information with other organisations for similar purposes. TransUnion are the main credit reference agency we partner with and are a controller of your data in their own right. For more information on how TransUnion use your information please refer TransUnion’s own privacy notice.

For information on how credit reference agencies handle information you can refer to the Credit Reference Agency Information Notice at:

• www.transunion.co.uk/crain
• www.equifax.co.uk/crain
• www.experian.co.uk/crain

Data protection law gives you legal rights in relation to your data. We have detailed these below and provide a short summary of our approach to each.

In some cases exercising one or more of these rights may result in us no longer being able to provide a product or service to you. Where this is the case we will inform you and give you the choice of exercising the right or continuing the product or service.

You should also be aware that we may not be able to agree to a request to exercise a right (for example when your request would negatively impact another individual, or the law requires that we do not). If this is the case we will always inform you of our decision and the reason why we have not been able to agree to it.

We will aim to respond to all valid requests within one month. We may take longer to respond if your request is particularly complex or it relates to a particularly large volume of information. If we believe your request is likely to take over one month we will engage with you to make you aware of this.

We may ask you for proof of identity so that we can satisfy ourselves that your information is only ever released to the right person. We may also ask for clarification on your request to better understand what information you wish to receive or clarify any concerns you have.

 

If you wish to exercise a right in relation to your information or have a complaint about how we collect, use or store your information, you can get in touch with our data protection team using:

dataprotection@markerstudy.com

Or by post at:

Data Protection Officer, 45 Westerham Road, Bessels Green, Sevenoaks, Kent. TN13 2QB.

When you make your request by electronic means, the information will be provided to you by electronic means whenever possible.

We keep our Privacy Notice under review and will update it to reflect important changes which affect how we use your personal information or how we are required to communicate its use to you.

Those changes may be due to government regulation, new technologies, or other developments in data protection laws or privacy generally.

You should check our website periodically to view the most up-to-date Privacy Notice.

This Privacy Notice was last updated on: 22/06/2023