Privacy Policy
This Privacy Policy explains how Vector Drive Ltd ("we", "us", "our") collects, uses, stores and protects your personal information when you use our services.
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As an insurance intermediary authorised and regulated by the Financial Conduct Authority, we also comply with the Insurance: Conduct of Business Sourcebook (ICOBS) and other applicable regulatory requirements.
Please read this policy carefully. If you provide us with information about another person, you confirm that they have authorised you to do so and that you have made them aware of this Privacy Policy.
Data Controller: Vector Drive Ltd, Staverton Court, Staverton, Cheltenham, GL51 0UX
Contact: For any data protection queries, email dpo@vectordrive.co.uk or write to our Data Protection Officer at the address above.
1. Information We Collect
To provide you with motor insurance, we collect the following categories of personal information:
Information you provide
- Personal details: name, date of birth, address, contact details
- Driving information: licence number, driving history, claims history
- Vehicle details: registration, make, model, modifications
- Employment and occupation details
- Payment and billing information
Information from third parties
- DVLA driving licence data via the MyLicence service
- Claims history from the Claims and Underwriting Exchange (CUE)
- Vehicle data from motor trade databases
- Credit reference information where relevant to premium finance
- Information from price comparison websites where you have requested a quote
Mileage verification data
We collect mileage data to verify your actual driving distance. This may include odometer readings obtained through various verification methods. We do not collect GPS location data, journey information, or driving behaviour data.
2. Special Category and Criminal Conviction Data
We may also process special category data including health information where this is relevant to your insurance (for example, medical conditions that affect your ability to drive). We process this data on the basis of substantial public interest for insurance purposes, as permitted under Schedule 1 of the Data Protection Act 2018.
3. How We Use Your Information
We use your personal information for the following purposes:
Insurance services
- Providing quotations and assessing risk
- Underwriting and administering your policy
- Processing claims and managing disputes
- Collecting premiums and managing payments
- Communicating with you about your policy
Legal and regulatory obligations
- Reporting to the Motor Insurance Database (MID) as required by law
- Complying with FCA regulatory requirements
- Preventing, detecting and investigating fraud
- Responding to requests from law enforcement and regulatory bodies
Business purposes
- Improving our products and services
- Training and quality monitoring (including call recording)
- Statistical analysis and research (using anonymised data)
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
Contract
Processing necessary to provide your insurance policy and related services, including quotations, policy administration, claims handling and renewals.
Legal Obligation
Processing required to comply with our regulatory obligations, including FCA requirements, anti-money laundering rules, and reporting to the Motor Insurance Database.
Legitimate Interests
Processing for fraud prevention, business improvement, and defending legal claims, where these interests do not override your rights and freedoms.
Consent
Where you have given specific consent, for example to receive marketing communications. You may withdraw consent at any time.
5. Who We Share Your Information With
We share your personal information with the following categories of recipients where necessary to provide our services:
- Insurers and reinsurers: To underwrite and administer your policy
- Premium finance providers: If you choose to pay by instalments
- Claims handlers and loss adjusters: To manage claims
- Fraud prevention agencies: Including CIFAS and the Insurance Fraud Bureau
- Industry databases: Including CUE, the Motor Insurance Database, and No Claims Discount databases
- Regulatory bodies: Including the FCA and the Information Commissioner's Office
- Service providers: Including IT providers, mileage verification providers, and communication services
- Professional advisers: Including lawyers and auditors where necessary
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
6. Fraud Prevention
We may share your information with fraud prevention agencies and industry databases to prevent and detect fraud. If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies and may affect your ability to obtain insurance, credit and other services.
We participate in industry initiatives including the Insurance Fraud Register and may share data with the Claims and Underwriting Exchange (CUE), the Motor Insurance Anti-Fraud and Theft Register, and other industry databases.
7. International Transfers
Your personal data is primarily stored and processed within the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office, or transfers to countries with an adequacy decision.
8. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting or reporting requirements.
- Quotations not taken up: 14 months from the quote date
- Policy records: 7 years from the end of the policy
- Claims records: 7 years from settlement or closure (longer for bodily injury claims)
- Call recordings: 7 years from the date of the call
After the retention period, your data will be securely deleted or anonymised for statistical purposes.
9. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete personal data.
Erasure
Request deletion of your personal data in certain circumstances.
Restriction
Request restriction of processing in certain circumstances.
Portability
Receive your personal data in a structured, machine-readable format.
Object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact our Data Protection Officer using the details at the top of this policy. We will respond to your request within one month.
Some rights are not absolute and may be limited where we have a legal obligation to retain or process your data, or where the data is necessary for the establishment, exercise or defence of legal claims.
10. Automated Decision-Making
We use automated systems to help calculate your premium and assess whether we can offer you insurance. These decisions are based on the information you provide and data from third-party sources.
You have the right to request human intervention, express your point of view, and contest any decision made solely by automated means that significantly affects you. To do so, please contact us using the details provided.
11. Marketing
With your consent, we may contact you about products and services that may be of interest to you. You can opt out of marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Updating your preferences in your online dashboard
- Contacting us at info@vectordrive.co.uk
Opting out of marketing will not affect service communications about your policy.
12. Cookies
Our website uses cookies to improve your experience and analyse site usage. For full details, please see our Cookie Policy.
13. Complaints
If you are unhappy with how we have handled your personal data, please contact our Data Protection Officer in the first instance. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will notify you directly.
Last updated: December 2024