Your privacy
matters to us
This policy explains how British and Overseas Insurance Company Limited and its group companies collect, use and protect your personal data.
Who we are
This privacy policy applies to British and Overseas Insurance Company Limited (B&O Insurance), registered in England and Wales under company number AC000657, and its group companies operating in the UK, Ireland and Canada.
We act as a data controller for the personal data we collect. Where we process data for third parties we act as a data processor under their instructions.
Information we collect
We collect information you provide to us, such as your name, contact details, date of birth, policy details and payment information, as well as information we collect from your use of our websites and apps, including device and browsing data.
For insurance products we may also collect special category data, such as health information or criminal conviction data, where necessary to provide cover or handle a claim.
How we use your information
We use your information to provide products and services, underwrite and price policies, handle claims, detect and prevent fraud, meet legal and regulatory obligations, and communicate with you about your policies.
Where we have your consent, we may use your information for marketing. You can withdraw your consent at any time.
Legal bases for processing
We process personal data on the basis of contract performance, our legitimate interests, compliance with legal obligations, and consent where required.
Our legitimate interests include running and improving our business, preventing financial crime and developing new products and services.
International transfers
Where we transfer personal data outside the UK or EU, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information.
Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory and tax requirements.
Retention periods are set out in our records retention schedule and vary by product and purpose.
Your rights
You have the right to access, correct, delete or restrict the use of your personal data, and to object to processing, including for marketing purposes.
To exercise any of these rights, contact our Data Protection team at dataprotection@bandoinsurance.com or write to us at the registered office.
Contacting us
If you have questions about this policy or wish to raise a concern, contact our Data Protection Officer at dataprotection@bandoinsurance.com or by post to 1 B&O Tower, London EC2Y 9HN.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.