Privacy Policy

XS Assure is committed to protecting your personal information.  For any questions or concerns relating to this Privacy Notice or our data protection practices, or to make a subject access request, please contact us at:

Marco Del Carlo, XS Assure Limited, 49 Rodwell Road, London SE22 9LE

Information we collect and from whom

We will receive personal information about you, when you or your broker or an agent of ours contacts us for example by requesting or obtaining a quote, purchasing a product from us or from one of our partners or using our website. The information could include:

Identification details – Identification numbers issued by government bodies or agencies, including your national insurance number, passport number, tax identification number and driving licence number.

Risk Details- Information about you (and others insured under the policy) which we need to collect in order to assess the risk to be insured and provide a quote. This may include data relating to health, criminal convictions, or other special categories of personal data (see below). For certain types of policy, this could also include telematics data.

Policy information- Information about the quotes you receive and policies you take out.

Individual details – Name, address (including proof of address. Other contact details (e.g. email and telephone numbers) gender, marital status, date and place of birth, nationality, employer, job title, employment history and family details, including their relationship to you.

Credit and anti-fraud data- credit history, credit score, sanctions and criminal offences, and information received from various anti-fraud databases relating to you.

Financial Information- Bank account or payment details, income or other financial information.

Previous and current claims- Information about previous and current claims, (including other unrelated insurances), which may include data relating to your health, criminal convictions, or other special categories of personal data (see below) and in some cases, surveillance reports.

In certain circumstances we collect special categories of data including health, criminal conviction, racial or ethnic origin, political opinions, trade union membership, genetic data, biometric, or data concerning sex life or sexual orientation.

We will collect personal information about you from you directly but also potentially from your family members, employer or representative, other insurance market participants, credit reference agencies, anti-fraud databases, sanctions list, court judgements and other judicial databases, government agencies such as the DVLA and HMRC, open electoral register and any other publicly available data sources. In addition, in the event of a claim, we will get the information from third parties including the other party to the claim (claimant/defendant) witness, loss adjustors, solicitors and claims handlers.

How and why we use this information

We will process and personal data lawfully under one or more of the following bases:

  • Performance of a Contract: the processing is necessary for the contract we have with you, or because you have asked us to take specific steps before entering into a contract.
  • Compliance with a legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations)
  • Consent: where you have given clear consent for us to process your personal data for a specific purpose. We can seek your consent within a written or electronic documents or verbally.
  • Legitimate interests: the processing is necessary for our legitimate interests pursued by us. In such cases our legitimate interests are as follows:
    • To add value to your product offering by offering you other general insurance products
    • To provide excellent service to our customers by ensuring they are fully informed about our products
    • To engage in activities to improve and adapt the range of products and services we offer and to help our business grow
    • To investigate and prevent potential fraud and other illegal activity

We will use personal information about you primarily in connection with the provision of insurance, namely:

  • Establishing and maintaining communications with you;
  • Processing transactions through service providers;
  • Arranging insurance cover (issuing quotations, renewal, policy administration);
  • Undertaking anti-fraud, sanctions, anti-money laundering and other checks to protect against fraud, suspicious or other illegal activities;
  • Facilitating premium finance arrangements;
  • Credit assessments and other background checks;
  • Business transfers where we sell whole or part of our business and/or assets to a third party purchaser;
  • Collecting, forwarding and refunding premiums;
  • Marketing and client profiling;
  • Research and statistical analysis; and
  • Building databases for use by us, our clients and insurers.
  • Handling claims;
  • Where we believe it is necessary to meet legal, security, processing and regulatory requirements;

We may monitor calls, emails, text messages and other communications with you. When you contact us we may keep a record of that correspondence and any information provided to us during that or any subsequent communication.

In order to provide insurance cover and deal with insurance claims in certain circumstances we may need to seek your consent before processing such data. You can withdraw your consent to such processing at any time.

Please make sure that anyone else who is insured under your policy has provided you with consent to provide their personal information to us. It is important that you show this Privacy Notice to anyone else who is insured under your policy, including, for example, any named drivers under a motor policy or anyone living at the property insured under a household policy.

Retention of your personal data

We will keep your personal data only for so long as is necessary and for the purpose for which it was originally collected. In particular, for so long as there is a possibility that either you or we may wish to bring a legal claim under the insurance , or where we are required to keep your personal data due to legal or regulatory reasons.

We will endeavour to keep your information accurate and whenever you inform us about any changes we will update this information at the earliest opportunity. Please help us to do this by letting us know whenever there are changes to your personal data. If you are providing information about someone else you confirm that they have appointed you to act for the, to consent to the processing of their personal data including special categorise of personal data and that you have informed them of our identity and the purpose (as set out in this privacy policy) for which their personal data will be processed.

Data transfers

We do not currently transfer your data to other organisations which are located outside of the European Economic Area (EEA)

How we share this information

In using personal data for the above purposes, we will disclose personal data to third parties including insurers, re insurers, intermediaries or other brokers; outsourcers, sub contractors, agents and service providers; claims handlers; premium finance providers; professional adviser and auditors. Third parties to whom we disclose personal data are required by law and contractual undertakings to keep personal data confidential and secure, and to use and disclose it for purposes that a reasonable person would consider appropriate in the circumstances, in compliance with all applicable legislation.

Your rights and contact details of the ICO

If you have any questions or complaints in relation to our use of your personal data, please contact Marco Del Carlo ([email protected]). Alternatively, you have the right to lodge a complaint with the Information Commissioners Office (ICO) at www.ico.org.uk or 03031231113 (local rate)/ 016255457145 (national rate).

Under certain conditions, you have the right to require us to:

  • provide you with further details on the use we make of your personal data/special category of data;
  • restrict how we use your personal data whilst a complaint is being investigated
  • update any inaccuracies in the personal data we hold;
  • provide you with your personal data in a structured format
  • delete any special category of data/personal data that we no longer have a lawful ground to use;
  • where processing is based on consent, to withdraw your consent so that we stop that particular processing;
  • provide you with a copy of the personal data that you have provide to us;
  • object to any processing based on the legitimate interest ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights; and

In certain circumstances, we can need to restrict the above rights in order to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).