Shortfall.co.uk

Aequitas Automotive Ltd, trading as Shortfall.co.uk, Totallossgap.co.uk, GapInsurance123.co.uk, Easygap.co.uk, TyreInsurance123.co.uk, and BMPro.co.uk understands your concerns over the privacy of Personal Data you may provide to us as part of our day to day dealings with you. We will only collect and use information in ways that are useful to you and in a manner consistent with your rights and our obligations under the law.

This policy provides you with information about what types of information are collected, retention periods and other elements to comply with the EU Wide - General Data Protection Regulations and the UK’s Data Protection Bill 2018.

If you have any questions about this Privacy Policy or our treatment of your Personal Data please contact us using the details given below.

If you are dissatisfied with this response you may request that your complaint be escalated, in which case it will be escalated to a member of the Aequitas executive team who will review your complaint and the initial response and provide a further response within 28 days of your request to escalate the matter.

If we are unable to resolve your complaint, you may make a complaint to the Information Commissioner’s Office (if based in the UK, otherwise to your local Supervisory Body). Please see https://ico.org.uk/for-the-public/raising-concerns for more information.

Whilst this privacy policy sets out a general summary of your legal rights in respect of your Personal Data, this is a complex area of law and this privacy policy is not intended to represent legal advice. More information about your rights in respect of your Personal Data can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public.

Who we are

Aequitas Automotive Ltd, Aequitas House, 56 Hamilton Square, Birkenhead, Merseyside, CH41 5AS

Contact Information Data Officer – Mark Griffiths

0151 647 7556

Email – [email protected] (please mark data enquiries 'Subject Data/Privacy')

Key Terms

The following terms are used or referred to in this privacy notice – as such it helps to be familiar with these core terms: -

‘Data Controller’ – company/individual that determines the purposes and means of the processing of personal data (typically this refers to us when we market to you.)
‘Data Processor’ – Company/Individual which processes personal data on behalf of the controller.
‘Data Subject’ – The Company/Individual about who the data is held.
‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes signifies agreement to the processing of personal data relating to him or her. This is typically used by us to provide marketing services to you.

Our approach to your data

We only keep your data for as long as We need to in order to use it as described in this policy, typically per statutory requirements and/or as long as You are an active client.

Data security is of great importance to Us, and to protect your data, We have put in place suitable physical, electronic and organisational procedures to safeguard and secure your personal data.

Some examples of the steps We have taken to secure your data include:-

Cyber Essentials Certified which demonstrates We have implemented 5 core cyber security best practices.
Meeting the IASME – Information Assurance for Small/Medium/Enterprises which covers a risk-based approach to information security.

Where we send your data

Aequitas Automotive Ltd will only transfer your data to third parties within the EEA.

Information and Data we collect and why

Personal Data is anything which identifies You as an individual, either on its own or by reference to other information. If You are engaging with Us to provide services this also applies to any information You share with Us.

In some cases, the collection of data may be a statutory or contractual requirement, and We will be limited in the products and services We can provide You without your consent for Us to be able to use such data.

Aequitas Automotive Ltd act primarily as an insurance broker. The primary products We provide would include Gap Insurance, Tyre Insurance, Alloy Wheel Insurance, Cosmetic Repair Insurance, Smart Care Insurance and Motor Excess Insurance. Aequitas Automotive Ltd can also act as a credit broker if You apply for a premium credit agreement to pay for the goods and services We may arrange on your behalf.

When You apply for goods or services from Aequitas Automotive Ltd We may request a number of aspects of personal data in order to comply with the contractual execution of your insurance contract. These may include:

Full Name
Address
Date of birth
Telephone number
Email address

When You elect to pay for your product or services We may require credit or debit card details to do this. These details are entered directly into a third party car processor gateway (We currently use Braintree and PayPal for that purpose). You may elect to apply for a premium credit agreement to pay for your goods and services over a set term (currently Aequitas Automotive Ltd act as a credit broker in that case, and will ask for bank details to pass to Premium Credit PLC to process that application).

Aequitas Automotive Ltd do not retain payment details and, as soon as the details are entered on the third party gateway, Aequitas Automotive Ltd cannot access payment details again.

Aequitas Automotive Ltd do record incoming and outbound calls for training and monitoring purposes. Aequitas Automotive Ltd does not record sections of the call that detail any payment methods that may be provided in order to pay for your product or service.

Data Retention Policy

We only keep your data for as long as We need to in order to use it, and/or for as long as We have your permission to keep it. In any event, We will conduct an annual review to ascertain whether We need to keep your data. Your data will be deleted if We no longer need it in accordance with the terms of Our Data Retention Policy.

Some of your personal data will need to be kept to meet either contractual or legal requirements. These may include contractual performance of your insurance policy, tax, regulatory or where we need to establish, bring or defend a legal claim.

Aequitas Automotive Ltd will retain your personal information for a period of 7 years from when your policy expires or from when You provided your data for quotation or enquiry purposes. After this time your data will be deleted.

This will apply unless:

the law requires Us to hold your personal information for a longer period, or delete it sooner;
You exercise your right to have the information erased (where it applies) and We do not need to hold it in connection with any of the reasons permitted or required under the law;
We bring or defend a legal claim or other proceedings during the period We retain your personal information, in which case We will retain your personal information until those proceedings have concluded and no further appeals are possible; or
in limited cases, existing or future law or a court or regulator requires Us to keep your personal information for a longer or shorter period.

Our Website(s)

We have a website which also collects details about You including your IP address and We may also use a technical feature called a cookie to record your visits.

We will only use your personal data for providing and managing access to Our website and if appropriate tailoring your experience whilst visiting.

What Cookies Do We Use and What For?

Our website may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our products services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy is protected and respected at all times.

By using Our Site you may also receive certain third-party Cookies on your computer or device. Third party Cookies are those placed by websites, services, and/or parties other than Us. We use third party Cookies on Our Site for analytical and advertising purposes. These cookies may include Google Analytics and Google AdWords Remarketing cookies.

All Cookies used by and on Our Site are used in accordance with current English and EU Cookie Law.

Can you disable Cookies?

You can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable You to choose whether You wish to disable all cookies or only third party cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete Cookies at any time however You may lose any information that enables You to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

It is recommended that You keep your internet browser and operating system up-to-date and that You consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if You are unsure about adjusting your privacy settings.

For more information on how to use and disable Cookies, as well as in depth information as for their uses in the UK, please refer to http://www.youronlinechoices.com/uk/

Are Cookies safe?

Yes, they are small text files that enable Our website to recognise a user for a single visit or a return visit. They do not contain data such as your date of birth or payment details.

You can choose to delete Cookies at any time however you may lose any information that enables you to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

Marketing

We will market to existing customers where the information/notification is related to existing services only.

For sales related marketing activities - We will require consent and for You to take an affirmative action, furthermore You will have the option to opt-out (unsubscribe at any point). As per your rights – You may also object to direct marketing and We will cease all related activities (unless they impact Our ability to deliver Our contracted services to You – if You are an existing customer).

We will also market to You in relation to services and products We offer, where We have a commercial agreement/contract with You.

Should You wish to Opt Out of marketing please do so by one of the following methods.

Click the unsubscribe link in the email that You have been sent
Email Us, using the subject matter 'unsubscribe' to [email protected]
Write to Us at Aequitas Automotive Ltd, Aequitas House, 56 Hamilton Square, Birkenhead, Merseyside, CH41 5AS

Please note that any request to 'opt out' will be dealt with as promptly as possible but there may be a small delay during which time You may still receive contact and/or marketing.

How we process your personal data and the legal basis for doing so

Lawful Basis

Any personal data that is collected/processed must be processed in a lawful manner, this section details on what basis We may do this and this can be dependent on the method by which the data is provided.

Personal Data

We process the personal data where the lawful basis is Consent where the documented purposes of processing are to provide services/products, examples include: -

Contacting You via a web contact/email sent in by You, using the contact details You provide (email or telephone number)
To provide You a quotation by email and further reminders when the validity of that quotation may expire

We process the following personal data where the lawful basis is Performance of a Contract where the documented purposes of processing are to provide services/products, examples include: -

Where You engage Aequitas Automotive Ltd to provide broker services in order for You to purchase a policy and enter a contract of insurance with one of Our insurers
Where You provide bank details in order for Aequitas Automotive Ltd to provide credit broker facilities in regards to the application for a premium funding agreement

We process the following personal data where the lawful basis is Legal Compliance where the documented purposes of processing are to provide services/products, examples include: -

Where We may be required to pass data to authorities for suspected fraud or criminal activity
Where We are required to provide data to regulators investigating Our business activity

We process the following personal data where the lawful basis is Legitimate Interests where the documented purposes of processing are to provide services/products, examples include: -

In providing You with details on products and services that You may be interested in. These will be closely related in nature to Our core business, i.e. your motoring protection and needs
Sending You email notification of the expiry of your policy and any options You may have for renewal

Data Sharing

In certain circumstances We may be legally required to share certain data held by Us, which may include your personal information, for example, where We are involved in legal proceedings, where We are complying with the requirements of legislation, a court order, or a governmental authority. We do not require any further consent from You in order to share your data in such circumstances and will comply as required with any legally binding request that is made of Us.

We may contract with third parties to supply products and services to You on Our behalf. These may include payment processing, administration and underwriting of your contract of insurance, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

We will share data with the third parties listed below:

Insurer of your policy (as detailed on your policy schedule)*
Claims Administrator of your policy (as detailed on your policy schedule)
Payment processing provider (currently Braintree and PayPal)
Premium credit agreement provider (currently Premium Credit PLC)

Please note that this notice does not cover the Privacy Policy details of third parties We may share your data with. Please check the individual Privacy details provided by the companies detailed on your product or service.

Please note this Privacy Notice does not cover details of any links outbound from Our websites.

What Happens If Our Business Changes Hands?

We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of control of all or part of Our business. Data provided by users will, where it is relevant to any part of Our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use the data for the purposes for which it was originally collected by Us.

In the event that any of your data is to be transferred in such a manner, You will be contacted in advance and informed of the changes.

Your rights

As an individual You have rights associated with your data:-

Right of access by the data subject. You (the data subject) shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and related information.
Right to Rectification – from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
Right to Erasure – the right to obtain from the controller the erasure of personal data concerning him or her without undue delay – subject to suitable grounds.
Right to Restriction of Processing– the right to obtain from the controller restriction of processing where certain rules apply.
Right to notify any recipients – where data is shared in relation to the above.
Right to data portability – to receive personal data concerning him/her which they have provided to a controller.
Right to Object – on grounds relating to his/her situation:
- where the lawful basis is legitimate interests.
- applies to direct marketing purposes.

Changes to Our Privacy Policy

We may change this Privacy Policy as We may deem necessary from time to time, or as may be required by law. Any changes will be immediately posted on Our websites (GapInsurance123.co.uk, Easygap.co.uk, Totallossgap.co.uk, Shortfall.co.uk, TyreInsurance123.co.uk and BMPro.co.uk) and You will be deemed to have accepted the terms of the Privacy Policy on your first use of Our websites following the alterations.

Please check Our Privacy Policy page regularly for any updates.