NPA Insurance – Privacy Policy

The following policy discloses the consumer privacy practices of NPA Insurance. By using this site, you are deemed to consent to our privacy practices. If you do not consent to these privacy practices, do not use this Site or download any materials from it. This policy explains what personal information we have, how we use it and how you can check and update any of your personal information. You should also show this notice to anyone else who may be insured with us. You acknowledge that by providing your personal data to us, you consent to its processing in the manner outlined below. When providing personal data about others, you confirm that you have the consent of these individuals to supply their personal data. We are unable to provide you any product or service unless you provide explicit consent for the collection of sensitive personal data as defined under the General Data Protection Regulation.

Who are we?

NPA Insurance Limited (registered number 64269) and wholly owned (100%) by the National Pharmacy Association (the NPA), (registered number 1281757).

Additional Data Controllers

The following are companies who are joint data controllers along with NPAI, in processing your personal data for the following products:

• Zurich Insurance Group: Property, motor, retail insurance, breakdown cover.
• Arc Legal Assistance underwritten by AmTrust Europe Limited for legal cover and Inter Partner Assistance SA for home emergency assistance
• ARAG PLC underwritten by Brit Syndicate 2987 at Lloyds: – Essential Business Legal Solutions.
• Sunworld administered by David Oliver Associates and underwritten by AXA: Travel Insurance.
• Axa Insurance UK PLC: Property, motor, retail insurance.
• Ageas Insurance Ltd: Property, motor, retail insurance.
• Aviva Insurance Ltd: Property, motor, retail insurance.
• Liverpool Victoria Insurance Company Limited trading as LV= : Property, motor, retail insurance.

We will also share data with our software providers and accounting providers in order to be able to provide quotations, policies and to be able to administer your insurance requirements.

Your Privacy
What information do we collect about you?

Where we have collected information directly from you it will usually be obvious what this is, as you will have given it to us. This might not be the case where we have used cookies to collect information from your computer or portable device. Please see the National Pharmacy Association’s cookies policy for more information. We may also record and monitor calls and emails or other communications in accordance with UK law.

Information collected from others

We can collect information about you from others. This includes information from:

• The companies referenced under “additional data controllers”, who we partner with to provide your insurance policies.
• Joint policyholders. Where you are named on a joint policy we may collect information about you from any named policyholder. We will ask them to confirm that they have your permission to give us this information about you.
• Fraud prevention, law enforcement or government agencies and other data sources used to prevent or detect fraud or provide details about criminal convictions or offences.
• HM Treasury and other authorities in relation to regulatory issues e.g. where someone is subject to a financial sanction they will appear on HM Treasury’s asset freezing list.
• External sources such as no claims discount databases and Claims and Underwriting Exchange to verify the information you have provided.

We use your personal information in order to meet our obligations in our contract of insurance with you: We and the companies referenced under “additional data controllers” use your personal data in the following ways:

A. Provide Insurance services

When you request us to provide you with a quote for one of our insurance policies or you purchase an insurance policy from us, we use information about you:

• To decide what the risk might be in selling you the policy, to quote for, and provide you with, a premium for that policy and any special terms that may apply to that policy.
• To administer your policy and monitor the payment of instalments if you pay your premium that way.
• To contact you about the policy (e.g. for renewal purposes); and
• To provide the agreed service if you make a claim (e.g. sending a loss adjuster to assess any damage in the event of an insurable event occurring).

We cannot provide the services unless we use the information about you in this way.

B. Do what we are required to do by law

As part of our duty as an insurer providing insurance services, sometimes we are required by law to use information about you:

• To help make sure our customers are being treated fairly (e.g. to assist our regulators where we have a legal duty to do so);
• To deal with complaints
• To help prevent and detect crime (including, for example, the prevention or detection of fraud): and
• To comply with legal or regulatory obligations.
• We can use your personal information in this way because we are required to do so by law

C. To administer and improve our services

To administer our services we will share information with others:

• In order to enable us to process your claim or administer your insurance policy more cost effectively:
• To help develop our products, services and systems to deliver you a better sales and claims experience in future: and
• To understand current and future risks in order to provide the correct level of cover and competitive pricing for existing and prospective customers.

We may also process your personal data to better understand you as a customer. Including to determine how best to retain your custom and to identify additional products provided by NPAI that may be of interest to you. We can use your personal information in this way because it is in our legitimate interests to provide you the services in the most efficient way. We will always ensure that we keep the amount of your personal information that we collect and the extent of any processing to the absolute minimum to achieve this efficiency.

Who do we share your personal information with and why do we do it?

We may share your personal information with our “additional data controllers” who we have a relationship with in order to provide you with quotations and cover. It is important that you make sure everything you tell us is correct and that you check your documentation because your records may be checked in the following circumstances:

• When you apply for insurance
• By police and other law enforcement agencies

In particular we share information with:

• Your spouse or partner, who calls on your behalf, provided they are named on the policy or have your permission to act on their behalf. If you would like someone else to deal with your policy on your behalf on a regular basis then please let us know.
• Other insurance companies to help settle any insurance claim or to verify that the information you have provided is correct.
• Insurance industry bodies such as the Motor Insurance Database and the Financial Ombudsman.
• Insurance industry databases such as the Claims and Underwriting Exchange where you make a claim so that insurers can check your claims history is correct and the insurance fraud register.
• The police where they may call to check you have valid insurance in place.

How long may we keep your personal information for?

We are only allowed to keep your personal information if we need it for one of the reasons mentioned previously. As a general rule, we will keep your information for 7 years from the end of your relationship with us, as it is likely that we will need the information for regulatory reasons or to defend or process a claim. We will also retain data in an anonymous form for statistical and analytical purposes, for example to assess risk of flood damage occurring.

When can you ask us to stop using your data?

If we rely on your consent to collect and process your personal information, you can ask us to stop using your personal information at any time by withdrawing your consent and we will stop using your personal information for these purposes with the exception for the reasons outlined previously namely regulatory purposes, claim management and statistical and analytical purposes.

What happens if you don’t give us some of your personal information?

Where you do not provide the personal information we need in order to provide the service you are asking for or to fulfil a legal requirement, we will not be able to provide the service that you are asking us to give you. We will tell you about why we need the information when we ask for it.

How to contact us about this privacy notice

Our Insurance Service Centre will be able to answer questions about this privacy notice or your requests to exercise your rights which are set out below. Any written enquiries should be address to NPA Insurance, Mallinson House, 38- 42 St Peter’s Street, St Albans, AL1 3NP.

You may contact us at the address above for one or more of the following reasons:

• To ask us to correct information about you that is wrong or incomplete (the so-called “Right to rectification”). You can also call us on 01727 800410 for the same reason, Monday to Friday 9.00 – 17.00.
• To ask us to delete personal information about you (the so-called right to be forgotten).
• To tell us you no longer agree to, that you object to, or that you wish to restrict us using information about you and ask us to stop.
• A right of access, namely to ask us to provide you with a copy of all the personal information that we have about you. To receive this information please write to NPA Insurance at the above address.
• A “data portability” right, namely to obtain the information that you have provided to us for your own purposes across different services. You may ask for this information to be provided directly to you or directly to another organisation. We will provide the information in a readable format