We respect your privacy and are committed to protecting your personal data whether you are visiting our website, supplying us with information or having some other form of interaction with us.

It is Protect Insurance PCC Limited’s policy to respect your privacy regarding any information we may collect from you across our website, https://www.protectpcc.gi/, and other sites we own and operate.

Website Information we collect

Log data

When you visit our website, our servers may automatically log the standard data provided by your web browser. This data is considered “non-identifying information”, as it does not personally identify you on its own. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

We may also collect data about the device you are using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal information
We may ask for personal information, such as your:
·       Name
·       Email
·       Phone/mobile number
·       Home/Mailing address

This data is considered “identifying information”, as it can personally identify you. We only request personal information relevant to communicating with you, or providing you with a service and only use it to help provide or improve this service.

This website is not intended for children, and we do not knowingly collect data relating to children.

How we collect website information

We collect information by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used. You are free to refuse our request for this information, with the understanding that we may be unable to provide you with some of your desired services without it.

Use of website information

We may use a combination of identifying and non-identifying information to understand who our visitors are, how they use our services, and how we may improve their experience of our website in future. We do not disclose the specifics of this information publicly, but may share aggregated and anonymised versions of this information, for example, in website and customer usage trend reports.

Data processing and storage

The data we collect is stored and processed in Gibraltar and the United Kingdom. We only transfer data within jurisdictions subject to data protection laws that reflect our commitment to protecting the privacy of our users.

Cookies

We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified. Please refer to our Cookie Policy for more information.

Third-party access to information

We use third-party services for analytical tracking

These services may access our data solely for the purpose of performing specific tasks on our behalf. We do not share any personally identifying information with them without your explicit consent. We do not give them permission to disclose or use any of our data for any other purpose.

We may, from time to time, allow limited access to our data by external consultants and agencies for the purpose of analysis and service improvement. This access is only permitted for as long as necessary to perform a specific function. We only work with external agencies whose privacy policies align with ours.

Limits of our policy

This privacy policy only covers Protect Insurance PCC Limited‘s own collecting and handling of data. We only work with partners, affiliates and third-party providers whose privacy policies align with ours, however we cannot accept responsibility or liability for their respective privacy practices.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

Feel free to contact us if you have any concerns or questions about how we handle your data.

Our PRIVACY NOTICE for customers

Purpose of this Privacy Notice?

We are an authorised insurance company in Gibraltar and need to collect and process data in order to provide our insurance policies to customers. We are committed to maintaining the accuracy, confidentiality, and security of your personal information and this Privacy Notice describes the personal information that we collect from you or about you and how we use it and to whom we disclose this information.

As a business regulated by the Gibraltar Financial Services Commission (GFSC), we may on occasion need to process your data to comply with the regulatory requirements or fulfil the obligations of a contract we have entered with you.

Gibraltar has its own data protection laws that apply certain EU laws modified as necessary. This is referred to as the “Data Protection Legislation”, which includes:

The Data Protection Act 2004 (as amended) (“DPA 2004”), and regulations made under that Act; and

The “Gibraltar GDPR”, which is essentially the EU’s General Data Protection Regulation or (Regulation (EU) 2016/679, or the “EU GDPR”) as it forms part of Gibraltar law. The Gibraltar GDPR is read slightly differently to the EU GDPR, but still offers privacy protections and guarantees in a similar manner.

What is personal information?

For the purposes of this Privacy Notice, personal information is any information about an identifiable individual, other than the person’s business title or business contact information when used or disclosed for the purpose of business communications.  Personal information does not include anonymous or non-identifiable information (i.e. information that cannot be associated with or tracked back to a specific individual).

Personal Information we collect, process, hold and share may include:

  • Name
  • Residential address
  • Contact details
  • Date of birth
  • Proof of identity
  • Background check data
  • Bank details
  • Occupation
  • Marital status
  • Special categories of data including medical and criminal information.

Why we collect and use this information

  • Establishing and maintaining communications with you
  • Providing our contracted services to you for the insurance cover and handling claims
  • Collecting, forwarding and refunding of premiums
  • Processing transactions through service providers
  • Complying with any requirement of Law, Regulation or reporting to a Regulatory or Tax authority
  • Undertaking anti-fraud, sanction, anti-money laundering and the countering of the financing of terrorism and other checks to protect against fraud, suspicious or other illegal activities.

In the future, if we intend to process your personal data for a purpose other than that which it was collected, we will request your consent where necessary and provide you with information on that purpose and any other relevant information.

Marketing – we do not conduct marketing, advertising or publishing activities.

Promotional Offers – we do not conduct or make promotional offers.

Third-party Marketing – we will never share your personal data for marketing purposes.

Opting-out – as we never use or share your personal data for marketing purposes then there is no requirement for you to ask us to stop sending marketing communications.

The lawful basis on which we process this information

Under the Data Protection Legislation the lawful basis we rely on for processing the information is to comply with our legal and contractual obligations for the issuance and fulfilment of your insurance policy with us.

You have provided your consent for the processing of the information. You are able to remove your consent at any time by contacting our Data Protection Officer at:

Email address: compliance@protectpcc.gi, or

By post: Protect Insurance PCC Ltd, 5/5 Crutchett’s Ramp, Gibraltar GX11 1AA

Collecting this information

Much of the information we hold will have been provided by your insurance intermediary as part of their contract with us.  We outsource the handling of our claims and when processing a claim the claims handling company may also obtain information directly from you that is passed onto us.  We do not use automated decision making (including profiling) in any circumstances.

Storing this information

We hold your personal data on our Microsoft SharePoint cloud platform. The information will be stored until the expiration of a period of six years after the expiry of your policy, and it will then be fully deleted from our platform.

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

Who we share this information with

Personal data may be shared with our senior management and employees of our Insurance Manager, SRS Management (Gibraltar) Limited, a company regulated by the GFSC. Information may also be shared with the Company’s auditors, parties that provide certain information technology and data processing services, and to claims handling companies to provide you with the service, all of which enable us to operate our business.

In limited and necessary circumstances, your information may be transferred outside of the European Union, or countries not appearing on the Adequacy list, or to an international organisation, to comply with our legal or contractual requirements.  Those transfers would always be made in compliance with relevant data protection legislation and we would ensure that appropriate safeguards to protect your personal data were put in place.

Your Rights

Under the Data Protection Legislation, you have certain rights with regards to your personal data including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

It is our policy not to make a charge for exercising your rights, but in limited circumstances (if the request is repeated, excessive or would require a disproportionate effort) we may make a nominal charge to cover administrative costs, where appropriate. If you make a request, we will respond to you within 30 days.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to our Data Protection Officer by contacting them at:

Email address: compliance@protectpcc.gi, or
By post: Protect Insurance PCC Ltd, 5/5 Crutchett’s Ramp, Gibraltar GX11 1AA

You also have the right to complain to the Gibraltar Regulatory Authority in Gibraltar who regulate the processing of personal data, or the ICO in the UK. They can be contacted at:

Gibraltar Regulatory Authority
2nd Floor, Eurotowers 4
1 Europort Road
Gibraltar
GX11 1AA
www.gra.gi

Information Commissioner’s Office
Wycliff House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk

Protect Insurance PCC Ltd - Privacy Notice_March 2025