[TODO: Compliance review required. This page is a placeholder. The final text must be drafted or approved by the compliance officer / legal adviser. The checklist below is a drafting aid, not legal advice.]

What this page must include

  • Identity and contact details of the responsible party and the Information Officer
  • Categories of personal information collected (website forms, risk checks, policy administration, claims)
  • Purposes and lawful basis for processing, including underwriting and the external security review
  • Operators and third parties (insurer, reinsurers, incident response panel, IT hosting) and cross-border transfers
  • Retention periods, security safeguards and data subject rights (access, correction, objection, complaint to the Information Regulator)
  • Cookies and analytics (see Cookie Notice)

Last updated: [TODO: date]