This policy explains how, when and why we collect your personal information during the course of providing services to you, under what circumstances we may disclose your personal information within our Group of Companies and to others, and how we keep it secure.
1. What information do we collect about you?
2. Why we use the information about you?
3. How will we use the information about you?
4. Information that we share
5. How we use credit reference agencies?
7. Information Security
8. Transferring your information outside of the European Economic Area (EEA)
9. Information we collect through your use of our websites
10. Your individual rights
11. Retaining your data
14. Who to contact in relation to processing of personal information at NFU Mutual
We need information about you to create your policy, service your policy and to offer our range of services. We need to collect information from you to do this and to offer you the right product for your circumstances.
This can include personal information about you and other people you may want included on a policy, information that we collect automatically, and personal information we collect from other sources.
The information we collect will include:
Where necessary, we may also collect the following information:
In addition to the above, we may also collect information specifically for the following insurance products and services:
A Motor policy requires us to collect the personal information listed and further information about you and anyone to be covered by the policy or authorised to act on your behalf. This includes the type of license you hold and for how long you have held it, any penalty points or motoring offences, any medical conditions which must be declared to the DVLA (or equivalent body e.g. DVLNI) and previous claims. We need this information to effectively price your premiums.
A Personal policy requires us to collect the personal information listed and additional information about you and any other people to be covered by the policy, such as information about your lifestyles and employment status, your home and any assets to be insured.
A Commercial policy requires us to collect some of the personal information listed and additional information about the company's directors and employees, as well as business contact details. If your business is under your name and located at your home address, naturally the information we collect will be personal to you.
A Life product requires us to collect the personal information listed and additional information about you and any other people to be covered by the product. This may include information about your family, your financial preferences, salary, tax and pension details.
Risk Management Services
Our health and safety consultancy and loss control surveys require us to collect some of the personal information listed as well as information about the property or business being assessed.
We collect your personal information for a number of reasons: so we can provide you with a quote, administer your policies, handle claims, protect us and you from fraud, improve the products and services we offer, and inform you of other products you may be interested in.
To process your information we rely mainly on the following legal bases:
Performance of a contract: The use of your information is necessary to perform the contract that you, or a person covered on the policy, has with us.
Legitimate interests: We may use your information for our legitimate interests, such as to provide you with the most suitable policy, website experience, emails or newsletters, or to improve and promote our products and services, along with administrative, fraud prevention and detection and legal purposes.
Consent: We may rely on your consent to use your personal information for certain products or to assist in a claim, and also for direct marketing purposes. You may withdraw your consent at any time, by contacting us at the address provided at the end of this Policy.
We use the personal information we collect for a number of reasons.These include:
Life products and Services - In addition to the above, we may also use your information to share your data with third party tracing service providers, where appropriate, if we are unable to contact you, or to check if you have passed away.
Risk Management Services - In addition to the above, we may also use your information to provide you with risk management advice and technical assistance.
Corporate Business – In addition to the above, we may also use your information for the purpose of statistical analysis and management information to enable you to understand the volume and types of claims made against your insurance policies.
We may have to share your information with other companies in the Group, the Farming Union, or to categories of third party service providers, including insurance partners and brokers, in certain circumstances:
Motor – In addition to those listed above, a Motor policy may require the following categories of suppliers for handling a claim:
Personal – In addition to those listed above, a Personal policy may require the following categories of suppliers for handling a claim:
Commercial – In addition to those listed above, a Commercial policy may require the following categories of suppliers for handling a claim:
Life – In addition to those listed above, a Life policy may require the following categories of suppliers for handling a claim:
The Farming Unions Privacy Policies can be found here:
A credit reference agency (CRA) is an independent organisation that assists insurance companies in deciding whether to offer insurance policies to potential customers, based on information gathered about them from public sources and from major lending companies.
NFU Mutual provides information to credit reference agencies and works with them to make decisions, for example, when:
We would like to send you information about our products and services and other companies in our Group which may be of interest to you. We will collect your information for marketing purposes, if you agree, when you obtain a quote, take out a policy with us, enter into a competition or provide your personal information through the NFU Mutual website. We may also purchase your data from third-party providers.
To ensure that we keep our marketing communications relevant and useful to you, we will share your data with carefully selected third party marketing analytics organisations for customer profiling.
If you enter one of our competitions, we will collect your information in order to randomly select a winner and send out their prize.
To stop us contacting you for marketing write to Marketing Department (Do Not Contact Me), NFU Mutual, Tiddington Road, Stratford-upon-Avon, CV37 7BJ or talk to your local agency.
We work hard to keep your data safe. We use an appropriate combination of technical and organisational measures to ensure, as far as reasonably possible, the confidentiality, integrity and availability of your information at all times. If you have a security-related concern, please contact us using the details provided at the end of this Policy.
In order to provide our services, the information you give us may be transferred to countries outside the European Economic Area (EEA). These countries may not have similar data protection laws to the UK. When we do transfer your personal data outside of the EEA, we ensure that any party with access to your information has implemented the necessary security and privacy measures to ensure that your personal data is kept secure and confidential as outlined in this Policy.
Cookies help us understand how you use our websites, view our products and respond to our advertising, so we can tailor direct marketing and enhance our overall product and service offering to you. When you visit one of our websites, we may record your device information including IP address, hardware and software used, general location, and when and how you interact with our websites.
This information is retained and used to note your interest in our products and to improve customer experience. When you receive direct marketing from us by email, we may use technology or links to determine how you use our direct marketing, and your interest in it.
You have a number of rights with regards to the personal information that we hold about you, which you will have provided as part of taking up a quote or service with us.
Right of Access - You have the right to request a copy of the information that we hold about you. We will provide you with this information within one month of receiving your request and verifying your identity. If the request is complex, we may extend the response time. We will inform you if this is the case and explain why.
Right to Rectification - We want to make sure that your personal information is accurate and up to date. You may ask us to correct, update or remove information you think is inaccurate or incomplete, and we ask that you inform us promptly of any changes to your circumstances.
Right to Erasure - You may also ask us to erase your personal information from our systems, in certain circumstances. There are some specific circumstances where the right to erasure does not apply and we are permitted to hold your data. We will explain the reason for this at the time, should this occur.
Right to Data Portability - You may also ask us to move, or ‘port’, your personal information to another organisation electronically. We will only port personal information you have provided to us, that we have processed based on your consent or performance of a contract, or that has been processed automatically. We will port your personal information without charge and within one month, where technically feasible.
Right to Restricting processing – You have a right to request that we restrict the processing of your personal data in certain circumstances. We will inform our third parties to whom we have disclosed your personal data that they must also restrict processing. We will inform you when the restriction on processing your personal data ends.
If you would like to exercise these rights, please write to us, using the details provided at the end of this Policy, outlining your specific request.
NFU Mutual, and the information we collect about you, are subject to various regulatory and legislative requirements. In addition, we will endeavour not to keep your personal information for longer than we have to for us to fulfil our obligations to you. Where it is not possible for us to delete your data, we will ensure the appropriate security and organisational measures are put in place to protect the use of your information.
We work hard to ensure that your personal information is treated safely and securely. However, if you have a complaint, write to us using the details provided at the end of this Policy. You also have the right to complain to the Information Commissioner’s Office.
National Farmers Union Mutual Insurance Society Limited controls the processing of personal data on its systems. If you would like to discuss anything in relation to this policy or how we handle your personal information, you can reach the Data Protection Officer for NFU Mutual by writing to: Data Protection Officer, NFU Mutual, Tiddington Road, Stratford-upon-Avon, CV37 7BJ.
You can also talk to a member of the team
If you’d like this document in large print, braille or audio, just contact us.