Privacy Notice

Arc Legal Group (“Arc”) are committed to protecting and respecting your privacy in accordance with the current Data Protection Legislation. Below is a summary of the main ways in which we process your personal data. Arc is a wholly owned subsidiary of the ANV Group Limited

Data Controller

Typically, Arc act as a Data Controller which means we are responsible for ensuring that your information is collected, processed, secured, and retained in accordance with applicable data protection laws.

How we use your personal data and who we share it with

We may require to collect personal data from you in order to provide our service(s) to you. Personal data is information about you from which you can be identified such as your name and contact details. Depending upon what services you need from us, this may include sensitive personal data such as medical information. Such data will only be used for the specific purposes set out in this notice.

We will either collect information directly from you, from someone who has authority to act on your behalf, or your general insurer or broker (who sold your policy) when:

➢ You purchase an Arc product
➢ You use your policy, such as making a claim or using one of our helplines and discussing your claim with us as it progresses
➢ You make enquiries or a complaint
➢ You use our website
➢ You communicate with us by telephone, in writing by post or email, or via online channels
➢ We audit your claim that is being handled by a third party
➢ Your insurer/broker/solicitor provides us with details of your policy purchase

We may use the personal data we hold about you to;

What we use your personal information for	Our reasons and/or lawful basis
Manage your claim, including providing updates and to make decisions related to policy coverage	➢ Performance of a contract ➢ Necessary for legitimate reasons
Provide you with the services outlined in your policy (this may include sharing information with third party service providers)	➢ Legitimate Interest - As you are involved in a legal claim, we have a legitimate interest in processing your data ➢ For establishing, exercising, or defending any legal claims in relation to the policy
Process the data of parties involved in our Policy Holders’ & Claimants’ claims when managing the claims	➢ Legitimate Interest - As you are involved in a legal claim, we have a legitimate interest in processing your data ➢ For establishing, exercising, or defending any legal claims in relation to the policy
Handle complaints	➢ Necessary for our legitimate interests (to investigate and respond to complaints raised by you)
Share with regulatory bodies, auditors, and other insurance companies (directly or via shared databases) when required by law and to prevent and detect fraud	➢ In order to comply with our legal obligations ➢ Necessary for our legitimate interests

Disclosure of your personal data

We may disclose your personal data to third parties involved in providing products or services to us, or to service providers who perform services on our behalf.

These may include;

➢ affinity partners
➢ the broker(s) who sold you your policy
➢ third party suppliers and/or administrators
➢ insurers and/or reinsurers
➢ other insurance intermediaries
➢ insurance reference bureaus
➢ credit agencies
➢ medical service providers
➢ fraud detection agencies
➢ loss adjusters
➢ external law firms
➢ external auditors and/or accountants
➢ regulatory authorities
➢ and as may be required by law

Retention

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy. We will only retain your data thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

International transfers of data

We do not transfer, process or store your Data outside the UK and/or European Economic Area (“EEA”).

Were we to transfer your personal data outside of the UK and/or EEA, we would take all steps necessary to ensure that it is treated securely and in accordance with UK protection laws or equivalent.

Your rights

You have the following rights in relation to your Data;

➢ Right to be informed – You have the right to be informed about what personal data we hold and why. This Privacy Notice provides you with that information.
➢ Right to access - You have the right to request and receive a copy of all the personal data we hold about you.
➢ Right to rectification - the right to have your Data rectified if it is inaccurate or incomplete.
➢ Right to erasure - the right to request that we delete or remove your Data from our systems.
➢ Right to restrict our use of your Data - the right to "block" us from using your Data or limit the way in which we can use it. We will comply with this request providing there are no legal reasons why we cannot do so.
➢ Right to data portability - the right to request that we move, copy or transfer your Data for your own purposes across different services we provide.
➢ Right to object - the right to object to our use of your Data including where we use it for our legitimate interests.
➢ Rights in relation to automated decision making and profiling - You have the right to object to decisions based solely on computer processing and to question the decisions made about you by a computer.
➢ Right to withdraw consent – Where we have obtained your consent to process certain types of personal information or sensitive information, you do have the right to withdraw this consent at any time. You can make this request by contacting our claims department at claims@arclegal.co.uk (please quote your reference number if available) or qualityassurance@arclegal.co.uk

Please note, these rights are not absolute and there may be times when we cannot do what you ask us to. If that is the case, we will explain why when we reply to you.

If you have any questions regarding your rights, please email qualityassurance@arclegal.co.uk