Our Privacy Notice sets out what personal data we may collect and how we may collect it, how and why we may use it, how we keep it secure and data subject rights in respect of personal data.
The types of personal data we use, its purposes and its sources.
In order to operate our business we need to obtain and use a limited amount of personal data.
The categories of personal data include:
• contact details (including email addresses) of brokers and assureds
• personal data about directors of businesses such as name and D.O.B.
• names of employees of businesses
The personal data is provided to us directly by the insurance brokers and/or directly by applicants that apply for an insurance policy from us.
The legal reason for collecting the data is to allow us to contact the broker and applicant, to review the underwriting information which is needed for entering in to an insurance contract with the applicants and for policy administration and servicing.
Who we share data with
Personal data is not processed outside PPS Specialty Underwriters Inc, other than:
• with the Lloyd’s syndicates and insurers that we represent
• with third party auditors that audit the underwriting process on behalf of these Lloyd’s syndicates (access during their audit)
• when we are required by law to do so
• to transfer the data in case of a merger or sale
• in case of legal proceedings
• for audit purposes
• to prevent or detect fraud
Security
We are committed to ensuring that the data collected is secure. While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur, we use our best efforts to prevent this. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data.
How Long We Keep Data
We retain the data on the following terms:
• When we underwrite the insurance, data is retained for up to 10 years after expiry of the policy or after final settlement of the claim under the policy;
• When we do not underwrite the policy, data is retained for 2 years after our termination.
Sending Personal Data outside the EU
Personal data is stored on our underwriting processing system which is administered by PPS-SU systems and approved third party vendors. We ensure any data is processed securely and in accordance with this Privacy Notice.
Data Subject Rights
Data subjects have the right of access to confirm if we process their data and get a copy of the data we process. Data subjects also have the right to rectification if any data is incorrect and the right to delete if there are no legitimate grounds for retaining the data.
Due to the limited categories of personal data we collect, it could be difficult to verify the identity of data subjects however, please contact us at compliance-pps-su@pps-su.com to exercise these rights.
Complaints
Data subjects have the right to complain to the Information Commissioner’s Office if they are concerned about we how use personal data. Please refer to www.ico.org.uk/concerns for instructions on how to report a concern.