We, Emmiera Group Limited (also referred to as "we", "us", or "our"), are a registered company in England (Company No. 05042667). Our registered address is Unit 8, Waterfront Business Park, Brierley Hill, West Midlands, DY5 1LX.
This Notice is designed to help you understand what kind of information we collect in connection with our products and services and how we process and use this information. In the course of providing you with products and services, we will collect and process information that is commonly known as personal data.
This Notice describes how we collect, use, share, retain and safeguard personal data. It also sets out your individual rights. In summary, these rights include your right to know what data is held about you, how this data is processed and how you can place restrictions on the use of your data.
We process your personal data in line with:
For the purposes of Data Protection Act 2018 territorial scope requirements, the United Kingdom is the named territory where the control and processing of personal data referred to under this Privacy Notice takes place. We may also transfer data into the European Economic Area (EEA) under adequacy arrangements between the EEA and the UK that ensure equivalent standards of data protection.
Personal data is information relating to an identified or identifiable natural person. Examples include an individual's name, age, address, date of birth, gender and contact details.
Personal data may include special category personal data, such as information about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, or data relating to sex life or sexual orientation.
Personal data may also include data relating to criminal convictions and offences. For safeguarding and responsible processing purposes, this is treated in the same manner as special category personal data where specific legal requirements apply.
In order for us to arrange and administer insurance for you, we will collect and process personal data about you. We will also collect your personal data where you request information about our services, customer events, promotions and campaigns.
We may need to collect personal data relating to others in order to arrange and administer insurance. In most circumstances, you will provide this information. Where you disclose the personal data of others, you must ensure you are entitled to do so.
You may provide personal data by:
As a provider of insurance services, we process the following categories of data:
We may record communications with us when contacting customer care, complaints and other customer-focused functions.
When you visit our website, we collect your unique online identifier (IP address). We also use cookies and similar technologies to identify visitors, improve accessibility, and monitor website behaviour and usage. For more information, please see our Cookie Policy.
Where we collect data directly from you, we are the data controller of that data. Where we use third parties to process your data on our behalf, they act as data processors. Other parties involved in underwriting or administering your insurance (such as insurers, premium finance providers and other intermediaries) may also process your data as controllers.
We share personal data within our firm and with business partners where necessary to place, quantify and underwrite risks, assess risk exposure, process claims, determine premium and administer our business.
We may also share personal data with authorised third parties, including:
If you require more information about how we collect and share personal data, contact our data privacy representative, Dav Pattar, by emailing IT@Emmieragroup.com.
We use your personal data for the performance of our contract with you, including to quote for and provide insurance products and services, process claims and renewals, administer your policy and our business, respond to your service requests, and process complaints and manage your account.
We use special category data where necessary for reasons of substantial public interest and for the performance of our contract with you. We may also use aggregated data for statistical analysis, financial planning, business forecasting and product development.
We may need your consent in certain circumstances, including where additional information is required to provide specialist support, or where data transfers outside the UK/EEA require it. Where consent is required, we will explain what you are consenting to and how to withdraw consent.
We generally retain personal data, special category data and criminal conviction data for 6 years. Where you submit a claim, we retain data for 6 years. Where you make a complaint, we retain data for 6 years. Where active investigations or potential prosecutions apply, we retain data in line with legal requirements.
Data retention is necessary for contractual, legal, regulatory and legitimate business purposes, including statistical analysis and product development. In some circumstances, we may retain data for longer, such as legal disputes or where law requires longer retention.
We sometimes use artificial intelligence (AI) technologies to enhance services and decision-making, supporting fast, consistent and cost-effective service delivery. These systems are regularly tested for fairness, accuracy and bias and are operated in compliance with relevant regulations.
Personal data collected during insurance applications may be processed by systems that make automated decisions without human involvement. These decisions may affect insurance acceptance, policy management and claims outcomes.
You have the right to object to solely automated decisions (including profiling) that produce legal or similarly significant effects, subject to legal exceptions. If you object, or believe a decision was affected by inaccurate data or error, we will arrange a human review.
We may transfer data to third parties outside the UK and EEA where necessary for business administration, underwriting and claims processing. Where recipient countries do not provide adequate protections, we implement additional safeguards, including contractual protections.
When transferring personal data outside the UK, we impose contractual obligations requiring recipients to protect data to UK standards, use it only for agreed purposes, and apply appropriate technical and organisational security measures.
Under the Data Protection Act 2018, you have rights over your personal data, including rights to access, correction, restriction, deletion, portability and certain objections.
You can exercise these rights at any time. We do not usually charge a fee, but may charge a reasonable administration fee for repetitive, unfounded or excessive requests. In some situations, legal or public interest obligations may limit how far we can comply with a request.
To exercise your rights, contact our data privacy representative Dav Pattar by emailing IT@Emmieragroup.com or writing to Unit 8, Waterfront Business Park, Brierley Hill, West Midlands, DY5 1LX.
We take appropriate technical and organisational measures to protect the confidentiality, integrity, availability and authenticity of your personal data, including when sharing with authorised third parties.
Our Data Protection Officer is Dav Pattar. You can contact them at IT@Emmieragroup.com.
If you are dissatisfied with how we process your personal data, please contact our data privacy representative. You also have the right to complain to the Information Commissioner's Office (ICO): https://ico.org.uk/concerns/. You can also use ICO live chat or call 0303 123 1113.
For questions about this notice, use or retention of your data, your individual rights, or to object to or contest automated decisions, contact us at Unit 8, Waterfront Business Park, Brierley Hill, West Midlands, DY5 1LX, email IT@Emmieragroup.com, or telephone 01384 473017.