Broker Direct Plc Privacy Statement

Broker Direct Plc is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This privacy statement explains your rights and how Broker Direct may collect and use your information.

IMPORTANT – If you are a Broker Direct Plc insurance policyholder further data protection information is provided in your insurance documentation.

Broker Direct Plc acts as a data controller, joint controller or data processor in relation to personal information, depending on the nature of the services provided, the processing activities undertaken and the arrangements with our business partners.

Where we act as a data controller, we determine the purposes and means of processing personal information. Where we act as a joint controller, we share responsibility for determining these purposes and means with another organisation. Where we act as a data processor, we process personal information on behalf of another organisation in accordance with its documented instructions.

If you have any questions about how your personal information is processed, please contact us using the details provided in the 'How to Contact Us' section below.

The Purpose of Processing

Broker Direct Plc process your information to enable us to:

Policyholder Processing

  • Consider entering or renewing a contract of insurance with you including customer profiling.

  • Undertake checks for the purposes of credit checking, preventing fraud and money laundering, and to verify your identity.

  • Administer and monitor your policy as required.

  • Deal with any claims on your policy.

The above processing and provision of personal data is necessary for the entering into and performance of the insurance contract.

Third Party Processing (such as third party claimants or witnesses)

  • Undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity.

  • Deal and investigate any claim(s) made.

  • To administer and monitor any claim as required.

The processing is necessary for legitimate interests, defence of legal claims and compliance with a legal obligation.

 Website user only processing

  • our website to function and to enhance your website experience;

  • us to see how you interact with our website and to create general statistics on website use;

  • you to contact us and to request we contact you;

  • deliver any services you have requested;

  • you to take the first step in making a claim.

What we Process and Share

The personal data you have provided, we have collected from you, or we have received from third parties may include your:

  • Name; date of birth, residential address and address history.

  • Contact details such as email address and telephone numbers.

  • Financial and employment details.

  • Identifiers assigned to your computer or other internet connected device including your Internet Protocol (IP) address.

  • Health or criminal conviction information.

  • Vehicle or household details.

  • Anonymous demographic information, which is not unique to you, such as your postcode, age, gender, preferences, interests and favourites.

  • Information such as your IP address, browser type, domain names, access times and referring web site addresses.                                        

We may enable crime and fraud prevention agencies, including their members, law enforcement agencies and other relevant organisations to access and use your personal data to detect, investigate and prevent crime.

Insurance information may be recorded on industry databases such as the Claims and Underwriting Exchange (CUE) and the Motor Insurance Database (MID). Insurers are the data controllers for the records they submit and are solely responsible for reviewing and updating those entries.  Requests to correct or dispute a record must be directed to the insurer that created the entry. The Motor Insurers’ Bureau (MIB) cannot amend insurer records and can only provide access to the information held.

 If you believe information recorded about you is inaccurate, you should contact the insurer that handled the claim or created the entry in the first instance so that it can be reviewed.

The Motor Insurers’ Bureau (MIB), which operates the CUE database, cannot amend insurer-submitted records and can only provide access to the information held.

We may monitor or record calls for training purposes or to improve the quality of our service.

We use artificial intelligence (AI) tools to assist in the analysis of internal management information, including the review of telephone calls and associated data. This may involve data relating to staff or customers and is carried out to help identify trends, improve service delivery, and monitor business performance.  The AI is not used to make automated decisions or to profile individuals, and all outputs are subject to human review and oversight. Data processed in this way is protected in accordance with our data protection policies and legal obligations under Data Protection Act 2018.

Please keep in mind that if you directly disclose personally identifiable information or personally sensitive data through Broker Direct Plc public message boards, this information may be collected and used by others. Note: Broker Direct Plc does not read any of your private online communications.

Sensitive Information

Some of the information Broker Direct ask you for may be sensitive personal data, as defined in Data Protection Legislation (such as information about health or criminal convictions). We will not use such sensitive personal data about you or others except for the specific purpose for which you provide it and to carry out the services described in your policy documents. Please ensure that you only provide sensitive information about other people with their explicit consent.

Who we may receive information from

We may receive information about you from the following sources:

  • Your insurance broker.

  • From third parties such as credit reference agencies and fraud prevention agencies, including their members.

  • From insurers, witnesses, the police (in regards to incidents) and solicitors.

  • Directly from you.

Who may receive your information?

Broker Direct Plc does not sell, rent or lease its customer lists to third parties. 

Broker Direct Plc may use and share your information with other group companies, fraud prevention agencies, including their members, credit reference agencies, law enforcement and other relevant organisations, to help us and them:

  • Assess financial and insurance risks.

  • Recover debt.

  • Prevent and detect crime, fraud and money laundering.

  • Develop our services, systems and relationships with you.

  • Understand our customers’ requirements.

  • Develop and test products and services.

Your information will not be disclosed to anyone outside Broker Direct Plc or your insurer except:

  • Where we have your consent; or

  • Where we are required or permitted to do so by law; or

  • To credit reference and fraud prevention agencies and other companies that provide goods or services to Broker Direct, your insurer, our partners or you; or

  • Where we may transfer rights and obligations under this agreement.

Data Transfers

Broker Direct Plc process your information within the United Kingdom. However, Broker Direct or your Insurer may transfer your information to other countries on the basis that anyone they pass it to provide an adequate level of protection. In such cases Broker Direct Plc or your insurer will ensure it is kept securely and used only for the purpose for which you provided it. Details of the companies and countries involved can be provided on request.

Data Retention 

We retain personal information only for as long as necessary for the purposes for which it was collected, including meeting our legal, regulatory and contractual obligations.

As a general rule, insurance policy, claims and complaint records are retained for seven years following the relevant policy expiry, claims settlement or complaint closure.

Certain information may be retained for longer where necessary to comply with legal or regulatory obligations, establish or defend legal claims, or meet other legitimate business requirements.

At the end of the applicable retention period, personal information will be anonymised in accordance with our data retention policy.

Fraud Prevention

If false or inaccurate information is provided and fraud is identified or suspected, details will be passed to fraud prevention agencies, including their members. Law enforcement agencies may access and use this information. We and other organisations may also access and use this information to prevent fraud and Money Laundering, for example when:

  • Checking details on applications for credit and credit related or other facilities.

  • Recovering debt.

  • Checking details on proposals and claims for all types of insurance.

  • Checking details of job applicants and employees.

Your Rights

Your personal data is protected by legal rights, which include your rights to:

  • Object to our processing of your personal data.

  • Withdraw consent at any time where relevant.

  • Request that your personal data is erased or corrected.

  • Request access to your personal data and data portability.

  • Restrict processing of your data.

  • Complain to the Information Commissioner’s Office, which regulates the processing of personal data.

The address of the Information Commissioner’s Office is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

For more information or to exercise your data protection rights, please contact us using the contact details provided.

Right to Raise a Data Protection Complaint

You have the right to raise a complaint with us if you are unhappy with how we have handled your personal data or your data protection rights.

We take all data protection concerns seriously and will ensure they are handled promptly and fairly.

If you wish to make a complaint about how your personal data has been processed, please contact us at:
compliance@brokerdirect.co.uk

When raising a data protection complaint, please provide as much detail as possible, including:

  • The nature of your concern

  • Any relevant dates or interactions

  • How you believe your data protection rights have been affected

We will:

  • Acknowledge your complaint

  • Investigate the matter fully

  • Provide you with a clear response

We aim to respond to all data protection complaints without undue delay and within applicable legal timeframes.

We maintain a formal internal process for handling data protection complaints in accordance with applicable data protection law.

If you remain dissatisfied with our response, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection Make a complaint | ICO)

Links to other websites

Broker Direct Plc encourages you to review the privacy statements of websites you choose to link to from Broker Direct Plc so that you can understand how those websites collect, use and share your information. Broker Direct Plc is not responsible for the privacy statements or other content on Web sites outside of the Broker Direct Plc and Broker Direct Plc family of web sites.

Use of Cookies

Cookies and Website Analytics

Our website uses cookies and similar technologies to support website functionality, improve the user experience and help us understand how visitors interact with our website.

Cookies are small text files stored on your device when you visit a website. They may be used for purposes such as remembering preferences, supporting secure access to certain areas of our website and collecting information about website usage.

We may use website analytics services, including Squarespace Analytics and Google Analytics, to collect information about how visitors use our website. This may include information about pages visited, time spent on the website, traffic sources, browser types and device information. This information helps us monitor website performance and identify areas for improvement.

Some cookies are necessary for the operation and security of our website and do not require consent. Where consent is required for non-essential cookies, we will obtain this through our cookie consent banner before placing or accessing those cookies.

Visitors can manage their cookie preferences through our cookie consent arrangements and may also control or delete cookies through their browser settings.

We periodically review our use of cookies and analytics technologies to ensure that they remain appropriate and comply with applicable data protection legislation.

Broker Direct Plc secures your personal information from unauthorised access, use or disclosure. Broker Direct Plc secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use or disclosure. When personal information (such as a credit card number) is transmitted to other web sites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Changes to this statement

Broker Direct Plc will occasionally update this Statement of Privacy to reflect company and customer feedback. Broker Direct Plc encourages you to periodically review this Statement to be informed of how Broker Direct Plc is protecting your information.

How to Contact Us

If you have any concerns about this statement or the use of your information, please contact us at:

Deakins Park

Deakins Mill Way

Egerton, Bolton

BL7 9RW

Email –support@brokerdirect.co.uk

We will endeavour to respond to you as soon as possible and in the event of a Subject Access Request or other will respond in 1 month.

V2 2026