Privacy Policy

Privacy

Percayso Inform – who are we?

We are Percayso Inform Limited (“Percayso”). Where the Privacy Policy states “we” “our” or “us” in this document, this means Percayso Inform Limited on behalf of the Percayso Group of companies. Wherever the name “Percayso” is used within these pages, it refers to one or more of the trading companies of Percayso Limited that operate in the United Kingdom. We might also mean anyone that might take over our business or we transfer our business to in the future. References to “you” and “your” means each natural or legal person who uses our website or the associated services.

It is important that you read this privacy policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them

Company Details – A bit more about us.

Percayso Inform Limited is a limited company registered in England and Wales under company number 11377058. Our registered office is at 25 Hine House, Regent Street, Nottingham, Nottinghamshire, England, NG1 5BS.

Our data controller registration number is ZA462608 and you can check our registration on the Data Protection Public Register by visiting

https://www.ico.org.uk/esdwebpages/search.

We have appointed a data protection officer (DPO), who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below:

privacy@percayso-inform.com

Purpose of this privacy notice

This privacy notice aims to give you information on how we collect and process your personal data through delivery of our services and your use of this website including any data you may provide through this website when you register an enquiry with us.

Percayso Services and Third Party Data Controllers

Percayso provides services to other businesses as a data processor. As such, while you might see our name on your credit record for example, this will be because we have performed a search for and on behalf of another organisation such as an insurance company. In those circumstances you should contact the relevant third party who you authorised to carry out the search for information about the basis on which they have processed your personal data and on which they have asked us to process that data on their behalf; please read their privacy notices and terms and conditions carefully to ensure you are happy to provide your information to them.

We will do our best to answer any questions that you might have in this regard but we may invariably direct you to the relevant third party data controller for further information.

If you follow a link to or from our website to a third party website, please be aware that these websites have their own privacy policies.

What services does Percayso Inform provide?

 

  • Informed Quotation – Providing enhanced information for tailor made Insurance quotes and renewals
    • Only triggered by your engagement with an Insurance Provider who use this Percayso service
    • ID and address verification with one or more credit reference agencies
    • Additional data sources – see “who do we share your data with” below
  • View my Data (Subject Access Request)
    • Providing you a copy of the data we hold about you

Informed Quotation – a bit more detail

If you have requested a quote or a renewal of an existing policy for insurance recently, the insurance provider will usually ask you to provide information about your identity and to answer certain questions. Percayso Inform products and services allow our clients to check this information and to obtain further information about you from one or more Credit reference agencies and additional data sources, such as public credit data and identifier information, such as name, address and date of birth. A summary view of this information will be returned to our clients, which allows them to assess risk and prevent fraudulent applications.

We ask all of our clients to let individuals applying for insurance know before they share policy or quote information with us for example, by telling you the individual about this in their application form or in the client’s privacy notice.

View My Data – ID Verification Checks – a bit more detail

View My Data provides you with the ability to view the data Percayso Inform may hold about you. To find out if we process any of your personal data and to access a copy of such personal data we may hold about you, please contact us by clicking on the below link:

Start a Request

Remember it’s your personal data, and outside of client obligations under the Informed Quotation service Percayso will not share this with anyone unless you ask us to. We don’t want your personal data falling into the wrong hands and that’s why if you do request a copy of or the ability to view your data, we will need to make sure you are who you say you are.

This will involve providing us with a form of Photo ID such as a valid UK Driving Licence or Passport.

For further information please see the “Your Rights” section

What data do we collect and how do we use it?

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data includes first name, last name, username or similar identifier, title.
  • Contact Data includes employer contact details, postal address, email address and telephone numbers.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. This also includes:
    • the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time)
    • areas of the website you viewed or searched for
    • page response times
    • download errors
    • length of visits to certain pages
    • page interaction information (such as scrolling, clicks, and mouse-overs)
    • methods used to browse away from the page
  • Profile Data includes your username and password, your preferences, feedback and survey responses.
  • Usage Data includes information about how you use our website, products and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
  • Data in your Public Credit Bureau report from a Credit Reference Agency (CRA) as explained in the “Who do we share your data with?” section below.

Aggregated Data

  • We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

If you fail to provide personal data

  • Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
How we use your data

Remember, if we are processing your personal data on behalf of a third party who was engaged by you, short of fulfilling our services to that third party we do nothing with your data unless you tell us to.

Where we are the data controller, we will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into
  • Where it is necessary for our legitimate interests (or those of a third party), as set out in the below lawful basis table, and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.
  • We may also use your personal information, typically in an emergency, where this is necessary to protect your vital interests, or someone else’s vital interests.

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data on separate occasions in reliance on separate lawful processing grounds, depending on the specific purpose for which we are using your data. Please contact us at privacy@percayso-inform.com if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

 

Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
To register your general enquiry or the business that you are enquiring on behalf of as a customer ● Identity

● Contact

Consent
To process and deliver our services ● Identity

● Contact

● Transaction

● Marketing and Communications

Performance of a contract with you

 

Necessary for our legitimate interests (to run Percayso’s business in an effective and efficient manner, including to market related products and services to those original sought from us)

To manage our relationship with you which will include:

Access to our services

Provide support and to help keep the Service working, safely and securely

Responding to your requests, inquiries, comments and concerns

Notifying you of any changes, updates and other announcements related to our Service

Providing you with promotional messages and other information about our products

 

● Identity

● Contact

● Profile

● Marketing and Communications

Performance of a contract with you

Necessary to comply with a legal obligation

Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To enable you to partake in a prize draw, competition or complete a survey ● Identity

● Contact

● Profile

● Marketing and Communications

Performance of a contract with you

Necessary for our legitimate interests (to enable us to promote our business by running competitions)

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) ● Identity

● Contact

● Technical

Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

Necessary to comply with a legal obligation

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you ● Identity

● Contact

● Profile

● Marketing and Communications

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences ● Technical

● Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services that may be of interest to you ● Identity

● Contact

● Technical

● Usage

● Profile

Necessary for our legitimate interests (to develop our products/services and grow our business)
Who do we share your data with?

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.

Other third parties we may share your information with:

  • Analytics and search engine providers that assist us in the improvement and optimisation of our service
  • If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets (or the buyer or seller’s advisers)
  • If we or part or all of our assets are acquired by a third party, in which case personal data held by us about our clients will be one of the transferred assets
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and other agreements; or to protect the rights, property, or safety of Percayso Inform Limited, our clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions

The information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis.

More information about each CRA and what it does with personal data. See below for links to a brief overview of CRA’s and your data:

See table below for more detail on third parties who we may interact with

Organisation Activities Percayso Service
Amazon Web Services, Inc Cloud Service Provider General – data storage & data processing
Google Analytics General – Website visits & interaction
Cazana Vehicle information Informed Quotation
Equifax Credit Reference Agency Informed Quotation
Synectics Fraud Solutions Informed Quotation & Registration Process
Comply Advantage Sanctions List Checking Informed Quotation
Motor Insurer’s Bureau (MIB) – NCD No Claims Discount verfication Informed Quotation
CRIF Insurance Bureau Services (Claims History) Informed Quotation

The above list will be subject to change when any new third party is introduced to further enhance the Percayso Inform services

Direct marketing and how you can change your preferences

We offer you the opportunity to receive marketing information from us. You can opt out easily of receiving marketing from us at any time.

We will normally send direct marketing by email if we have your email address, but may choose to contact you via other methods, such as website notifications.

If you would like us to stop sending direct marketing to you, we offer simple ways to do this. Whenever you receive direct marketing you will be given an option to unsubscribe.

You can also tell us that you do not wish to receive any more marketing communications at any time by the following email address: privacy@percayso-inform.com

How long do we retain your data for?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Your rights in relation to your data

In accordance with UK and European law under the General Data Protection Regulation (GDPR), you have numerous rights in regards to the personal data we hold about you, We will provide you with the necessary tools and contact details to be able to exercise your statutory rights regarding the information that we hold about you. Access to your data – under GDPR this is known as a Subject Access Requests (SAR)
 

  • Subject Access Requests can be made through the Percayso-Inform.com website by clicking here. Please note that if we are acting as a data processor in respect of your personal data, we may refer your request to the relevant data controller for a response.

Object to Processing

  • You have the right to object to the use of your personal data, where that use is based on legitimate interest. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Data Correction

  • We want to make sure that your personal data is accurate and up to date. You are entitled to rectify any inaccurate personal data held by us as data controller.
  • If the data requiring correction is information supplied to Percayso Inform from a third party such as a Credit Reference Agency then be aware that Percayso Inform does not have the ability to change this data. In these circumstances we will provide you details of where the data came from and a link to the third parties website to allow you to request a change.

Data Deletion – under GDPR this is also known as Data Erasure or Right to be Forgotten

  • you can ask us to fully or partially delete your personal data where there is no compelling reason for us to keep using it, although we may not be able to continue to provide our services. Not all data that we have collected will be eligible for deletion. We may, for example, keep your email address to make sure the restriction is respected in future and also retain the unique Percayso reference that was allocated to your information.

Data Portability

  • From Percayso – This right allows you to obtain the information previously provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from us.
  • To Percayso – this right also applies to information previously provided to another organisation. You can if you want to request that the organisation in question transfers this information to Percayso in a structured, commonly used and machine-readable format.

Restrict the use of your data

  • You have the right to ‘block’ or suppress further use of your information in certain circumstances (for example, where you think the information we are using about you is inaccurate, whilst we verify its accuracy). When usage is restricted, we can still store your information, but may not use it further.

Right to withdraw consent

  • If you have given your consent for us to use your information, you have the right to withdraw your consent at any time. This can be done via the Percayso-Inform.com website or by contacting our Data Protection Officer at privacy@percayso-inform.com. privacy@percayso-inform.com

Should you wish to exercise any of these rights, please contact Percayso Inform using the contact page on this website. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. Application of a fee or refusal will always only be exercised in accordance with applicable data protection legislation. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated in accordance with applicable data protection legislation.

You can find out more about your rights under the GDPR here:

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

Web server logs and security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to our employees who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We use (AWS) cloud based servers to store personal data. These servers are based in the EU and we will not transfer your personal data outside of this jurisdiction. If this changes in the future, we will update our T’s & C’s and Privacy Policy accordingly and any safeguards we have in place (as required by applicable data protection laws to ensure a similar degree of protection to your data)

Changes to this Privacy Notice

Any changes we may make to our Privacy Notice in the future will be posted on this page and, where we decide it is appropriate, notified to you by email or through your Percayso Community account. Please check back frequently to see any updates or changes to our Privacy Notice.

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

This Privacy Policy was last updated on 25th June 2021.