At sagic we recognise our responsibility to treat your personal information with care and to comply with all relevant legislation, in particular the Data Protection Act 2018 (UK) and any other applicable data protection and privacy legislation in fore from time to time in the UK, such as the Privacy and Electronic Communication Regulations 2003. This notice covers our requirement to provide you with information on how and why we use your personal data and of your rights under these legislation.
We have provided you with a quotation and/or administer your insurance policy and are classed as the “data controller” which means we process your data. Your data may be passed to other parties to assist in the fulfilment of your insurance policy, including Reinsurers, Regulators & Loss Adjusters for the administration of claims. These parties could also be a data controller and where necessary will issue their own Data Protection & Privacy Policies.
We are required to have a lawful basis (as defined in the Data Protection Act 2018) in order to process your personal data, the reasons we collect personal data and the relevant bases which we use are shown in the table below:
| Why we collect your data | Lawful basis | Information collected |
|---|---|---|
| To provide you with a quotation for Insurance | Necessary for the performance of an insurance contract |
|
| To arrange and administer your policy if you buy one through us | Necessary for the performance of an insurance contract | |
| To notify you of changes in our service | Our legitimate interests | |
| For marketing purposes | Your explicit consent – in accordance with preference you have expressed | |
| For statistical analysis | Our legitimate interests – to refine and enhance the products and pricing which we can offer | |
| To provide improved quality and training for sagic staff | Our legal and regulatory obligations | |
| To prevent, detect and investigate crime, including fraud and money laundering, and analyse and manage other commercial risks | Our legal and regulatory obligations | |
| To resolve complaints, and handle requests for data access or correction | Our legal and regulatory obligations | |
| To comply with applicable laws and regulatory obligations, such as those relating to anti-money laundering and anti-terrorism | Our legal and regulatory obligations | |
| For recruitment purposes | Your explicit consent – in applying for employment |
Some of the personal information we ask you to provide may be more personal to you and UK data protection law recognises these as special category data, e.g. you may have to give us information about your medical history, criminal convictions or biometric data used to identify you. We are allowed under data protection legislation to collect such information for specified “insurance purposes” without your specific consent, but it will only be used for the purposes set out above. If you give us information about another person, in doing so you confirm that they have given you permission to provide it to us and that we may use their personal data in the same way as your own as set out in this notice.
Where the lawful basis of processing your data is ‘Your explicit consent’ then this consent can be withdrawn at any time by contacting us.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
We use the following cookies:
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. Except for essential cookies, all cookies will expire after 5 years.
Sagic is committed to protecting the security of your personal information. We use a variety of security technologies, policies and procedures to help protect your personal information from unauthorised access, use, or disclosure.
As a necessary part of providing you with the services described above we may need to disclose your personal data to other third parties. These include: Computer bureaux/Software Houses, Insurers, other Insurance Intermediaries, Loss Adjusters, Insurance Industry databases, Government databases, Regulatory authorities and the Police/other law enforcement bodies and this will be to assist with fraud prevention and detection.
Your data will not be retained for longer than is necessary and will be managed in accordance with our data retention policy. In most cases the period will be for a maximum of 7 years following the expiry of an insurance contract unless we are required to retain the data for a longer period due to business, legal or regulatory requirements.
Sagic processes personal data in the United Kingdom. When working with suppliers, contractors and third party agencies, we will always opt to process personal data in the United Kingdom or another geographical region that meets the standards laid out in the UK data protection law, such as the European Economic Area (EEA). Where it is necessary to transfer your information outside of the UK or EEA, we will only allow the transfer to take place if the appropriate measures are in place to ensure the data is always managed in accordance with the UK data protection law. This will include the completion of necessary risk assessments and signing of applicable contractual safeguards.
The UK data protection law gives you specific rights over your personal data. These are as follows:
You also have rights around data portability and automated decision making.
If you want to ask us about any of these rights, please contact the Data Protection Officer using the details listed below
We may contact you via email to invite you to review any services and/or products you received from us in order to collect your feedback and improve our services and products (the “Purpose”).
We use two external companies, Trustpilot A/S (“Trustpilot”) and Google to collect your feedback which means that we will share your name, email address and reference number with Trustpilot for the Purpose. If you want to read more about how Trustpilot process your data, you can find their Privacy Policy here.
We may also use such reviews in other promotional material and media for our advertising and promotional purposes. Where you leave a review you are consenting to sharing your data as noted above with Trustpilot and for us to use your review in any promotional material or advertisement we produce.
For further information on this Privacy Notice, to access your personal information or to exercise any of your other rights, please contact
The Data Protection Officer,
The Salvation Army General Insurance Corporation Limited,
Floor 3, Saxon House, 27 Dukes Street,
Chelmsford, CM1 1HT
Email:- dpo@sagic.co.uk
Telephone:- 0300 030 1865
If you have a complaint about how we use your personal information, please contact us at the address above. You also have the right to lodge a complaint with the Information Commissioner’s office at any time.
The Salvation Army General Insurance Corporation Limited (Sagic) are authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority (Reg. No: 202327).
Sagic is a member of the Association of British Insurers.
Registered Office: Saxon House, 27 Duke Street, Chelmsford, CM1 1HT. Registered in England & Wales. Company Number: 101071.
Sagic is a wholly owned subsidiary of The Salvation Army. The Salvation Army is a Church and registered Charity in England (214779), Wales (214779), Scotland (SC009359).
Version: Sagic Data Protection & Privacy Policy (0426)
