We are Percayso Inform Limited (“Percayso”). Where the Privacy Policy states “we” “our” or “us” in this document, this means Percayso Inform Limited on behalf of the Percayso Group of companies. Wherever the name “Percayso” is used within these pages, it refers to one or more of the trading companies of Percayso Limited that operate in the United Kingdom. We might also mean anyone that might take over our business or we transfer our business to in the future. References to “you” and “your” means each natural or legal person who uses our website or the associated services.

It is important that you read this privacy policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them

Company Details – A bit more about us.

Percayso Inform Limited is a limited company registered in England and Wales under company number 11377058. Our registered office is at 25 Hine House, Regent Street, Nottingham, Nottinghamshire, England, NG1 5BS.

Our data controller registration number is ZA462608 and you can check our registration on the Data Protection Public Register by visiting

https://www.ico.org.uk/esdwebpages/search.

We have appointed a data protection officer (DPO), who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below:

privacy@percayso-inform.com

This privacy notice aims to give you information on how we collect and process your personal data through delivery of our services and your use of this website including any data you may provide through this website when you register an enquiry with us. The services Percayso provides to business customers (such as insurers, brokers and other insurance intermediaries) (our “Customers”) is used to help in their validation of the identities of people applying for private motor, commercial vehicle or home insurance, to assist in their assessment and pricing of insurance risk, and for the purposes of fraud prevention.

Further detail on the services we provide to customers can be found under the “What services does Percayso Inform provide” section of this Privacy Notice. This Privacy Notice will be updated if new services are introduced by us for our Customers

Percayso provides services to other businesses as a data processor. As such, while you might see our name on your credit record for example, this will be because we have performed a search for and on behalf of another organisation such as an insurance company. In those circumstances you should contact the relevant third party who you authorised to carry out the search for information about the basis on which they have processed your personal data and on which they have asked us to process that data on their behalf; please read their privacy notices and terms and conditions carefully to ensure you are happy to provide your information to them.

We will do our best to answer any questions that you might have in this regard but we may invariably direct you to the relevant third party data controller for further information.

If you follow a link to or from our website to a third party website, please be aware that these websites have their own privacy policies.

We provide personal data to help insurers to make more informed decisions about different types of insurance policies including but not limited to home, motor and commercial.

There are several options available to you for requesting a quote for insurance, this could be through a price comparison site, broker or insurer website or even through a call centre or branch. During the quotation process, whichever option you have used you will usually be asked to provide information about you and to answer certain questions. Our products and services allow our Customers to check the information you have given alongside additional data we retrieve from third party data sources.

• Informed Quotation – Providing enhanced information for tailor made Insurance quotes and renewals
  • Only triggered by your engagement with an Insurance Provider who use this Percayso service
  • ID and address verification with one or more credit reference agencies
  • Additional data sources – see “who do we share your data with” below
  • This may include the linking together of previous quotes created by any one individual over a period of time to determine if there has been any changes to the data entered
• Claims Information – Providing additional information for our Customers to support claims investigations
• Vehicle Intelligence – Where a Vehicle Registration Number (VRN) is presented we will return all associated information on that vehicle to our Customers.
• View my Data – (Subject Access Request)
  • Providing you a copy of the data we hold about you

Informed Quotation – a bit more detail

If you have requested a quote or a renewal of an existing policy for insurance recently, the insurance provider will usually ask you to provide information about your identity and to answer certain questions. Percayso Inform products and services allow our clients to check this information and to obtain further information about you from one or more Credit reference agencies and additional data sources, such as public credit data and identifier information, such as name, address and date of birth. A summary view of this information will be returned to our clients, which allows them to assess risk and prevent fraudulent applications.
As part of this service, we are required to process or store the personal data (which may contain criminal convictions or driving offences data) presented to us by our Customers. All this information is processed strictly in accordance with the instructions of our customers, whom are data controllers, and is stored securely on servers located within the United Kingdom.

We ask all of our Customers to let individuals applying for insurance know before they share policy or quote information with us for example, by telling you the individual about this in their application form or in the Customer’s privacy notice.

Claims Information – a bit more detail

If you are involved in an Insurance Claims process your Insurer or the Insurer of  another party may wish to obtain further information about you to assist in the processing of that Claim. Some of our Customers request us to obtain additional data, such as public credit data and identifier information, such as name, address and date of birth, to verify who you are and to prevent fraudulent Claims activity.

We ask all of our Customers to let individuals know before they share any personal information with us for example, by telling you how their Claims process works in the Customer’s privacy notice.

Vehicle Intelligence – a bit more detail

Where a Vehicle Registration Number (VRN) is presented to Percayso we will search all of our vehicle specific databases and combine historic vehicle data with information from the DVLA, DVSA and MOT history to give insurance companies and other organisations all the information that we have available on any one vehicle including vehicle mileage and valuation through to modifications and MOT advisories.

Our Vehicle Intelligence data helps our customers validate the information they already have and fill in any detail that may be missing on any vehicle. Our Customers will use the returned data to determine among other things the likelihood of a vehicle being involved in a claim in the next 12 months. Our Vehicle Intelligence data presents a vehicle’s full history and some of our customers will introduce this type of reporting as an additional tool in identifying potential fraud.

View My Data – ID Verification Checks – a bit more detail

View My Data provides you with the ability to view the data Percayso Inform may hold about you. To find out if we process any of your personal data and to access a copy of such personal data we may hold about you, please contact us by clicking on the below link:

View my data

Start a Request

Remember it’s your personal data, and outside of client obligations under the Informed Quotation service Percayso will not share this with anyone unless you ask us to. We don’t want your personal data falling into the wrong hands and that’s why if you do request a copy of or the ability to view your data, we will need to make sure you are who you say you are.

This will involve providing us with a form of Photo ID such as a valid UK Driving Licence or Passport.

For further information please see the “Your Rights” section

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes first name, last name, username or similar identifier, title.
• Contact Data includes employer contact details, postal address, email address and telephone numbers.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. This also includes:
  • the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time)
  • areas of the website you viewed or searched for
  • page response times
  • download errors
  • length of visits to certain pages
  • page interaction information (such as scrolling, clicks, and mouse-overs)
  • methods used to browse away from the page
• Profile Data includes your username and password, your preferences, feedback and survey responses.
• Usage Data includes information about how you use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
• Data in your Public Credit Bureau report from a Credit Reference Agency (CRA) as explained in the “Who do we share your data with?” section below.
• Data specific to any Vehicle Registration Number presented by you via the quotation process.

Aggregated Data

• We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

If you fail to provide personal data

• Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Remember, if we are processing your personal data on behalf of a third party who was engaged by you, short of fulfilling our services to that third party we do nothing with your data unless you tell us to.

Where we are the data controller, we will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into
• Where it is necessary for our legitimate interests (or those of a third party), as set out in the below lawful basis table, and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• We may also use your personal information, typically in an emergency, where this is necessary to protect your vital interests, or someone else’s vital interests.

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data on separate occasions in reliance on separate lawful processing grounds, depending on the specific purpose for which we are using your data. Please contact us at privacy@percayso-inform.com if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.

Other third parties we may share your information with:

• Analytics and search engine providers that assist us in the improvement and optimisation of our service
• If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets (or the buyer or seller’s advisers)
• If we or part or all of our assets are acquired by a third party, in which case personal data held by us about our clients will be one of the transferred assets
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and other agreements; or to protect the rights, property, or safety of Percayso Inform Limited, our clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions

The information which we provide to the CRA may be supplied by them to other organisations such as Fraud Prevention Agencies and used by those organisations for the purposes of checking identity, preventing fraud, tracing and collection of debt. The CRA may also use the data to undertake statistical analysis.

More information about each CRA and what it does with personal data. See below for links to a brief overview of CRA’s and your data:

• https://experian.com/crain
• https://www.transunion.com/crain
• https://www.equifax.com/crain

See table below for more detail on third parties who we may interact with

The above list will be subject to change when any new third party is introduced to further enhance the Percayso Inform services

We offer you the opportunity to receive marketing information from us. You can opt out easily of receiving marketing from us at any time.

We will normally send direct marketing by email if we have your email address, but may choose to contact you via other methods, such as website notifications.

If you would like us to stop sending direct marketing to you, we offer simple ways to do this. Whenever you receive direct marketing you will be given an option to unsubscribe.

You can also tell us that you do not wish to receive any more marketing communications at any time by the following email address: privacy@percayso-inform.com

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In accordance with UK and European law under the General Data Protection Regulation (GDPR), you have numerous rights in regards to the personal data we hold about you, We will provide you with the necessary tools and contact details to be able to exercise your statutory rights regarding the information that we hold about you. Access to your data – under GDPR this is known as a Subject Access Requests (SAR)
 

• Subject Access Requests can be made through the Percayso-Inform.com website by clicking here. Please note that if we are acting as a data processor in respect of your personal data, we may refer your request to the relevant data controller for a response.

Object to Processing

• You have the right to object to the use of your personal data, where that use is based on legitimate interest. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Data Correction

• We want to make sure that your personal data is accurate and up to date. You are entitled to rectify any inaccurate personal data held by us as data controller.
• If the data requiring correction is information supplied to Percayso Inform from a third party such as a Credit Reference Agency then be aware that Percayso Inform does not have the ability to change this data. In these circumstances we will provide you details of where the data came from and a link to the third parties website to allow you to request a change.

Data Deletion – under GDPR this is also known as Data Erasure or Right to be Forgotten

• you can ask us to fully or partially delete your personal data where there is no compelling reason for us to keep using it, although we may not be able to continue to provide our services. Not all data that we have collected will be eligible for deletion. We may, for example, keep your email address to make sure the restriction is respected in future and also retain the unique Percayso reference that was allocated to your information.

Data Portability

• From Percayso – This right allows you to obtain the information previously provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from us.
• To Percayso – this right also applies to information previously provided to another organisation. You can if you want to request that the organisation in question transfers this information to Percayso in a structured, commonly used and machine-readable format.

Restrict the use of your data

• You have the right to ‘block’ or suppress further use of your information in certain circumstances (for example, where you think the information we are using about you is inaccurate, whilst we verify its accuracy). When usage is restricted, we can still store your information, but may not use it further.

Right to withdraw consent

• If you have given your consent for us to use your information, you have the right to withdraw your consent at any time. This can be done via the Percayso-Inform.com website or by contacting our Data Protection Officer at privacy@percayso-inform.com. privacy@percayso-inform.com

Should you wish to exercise any of these rights, please contact Percayso Inform using the contact page on this website. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. Application of a fee or refusal will always only be exercised in accordance with applicable data protection legislation. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated in accordance with applicable data protection legislation.

You can find out more about your rights under the GDPR here:

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to our employees who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We use (AWS) cloud based servers to store personal data. These servers are based in the EU and we will not transfer your personal data outside of this jurisdiction. If this changes in the future, we will update our T’s & C’s and Privacy Policy accordingly and any safeguards we have in place (as required by applicable data protection laws to ensure a similar degree of protection to your data)

Any changes we may make to our Privacy Notice in the future will be posted on this page and, where we decide it is appropriate, notified to you by email or through your Percayso Community account. Please check back frequently to see any updates or changes to our Privacy Notice.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.