Privacy & Security Policy
Introduction
Our privacy policy provides a detailed picture of how Moris.co.uk c/o Indigo Underwriters Ltd (in the following Moris) as the data processor processes your information. It is important to us that you feel comfortable entrusting your information to us, knowing that we will comply with applicable law at all times.
Our Privacy Policy will also include information about your rights concerning your information.
Who are we?
Moris is a trading name of Indigo Underwriters Ltd, a British insurance agency. Among other things, we write insurance on behalf of Lloyd's, the world’s insurance marketplace. Moris is registered with the Financial Conduct Authority (FCA) under firm reference 514818 and is located in London.
How do you contact us?
MORIS.co.uk C/O Indigo Underwriters Ltd
6th Floor, Duo Building
280 Bishopsgate
London EC2M 4RB
England
Tel: 0203 427 5960
Email: info@moris.co.uk
How do we collect information about you?
We collect information about you both when you use our website or contact us by phone, email, or letter. This will also be done in a claim situation through our cooperation with the relevant claims handlers.
We process your information in order to:
- Provide an insurance quote
- Administer your policy if you have purchased it from us
- Maintain and improve the services we offer you
- Develop and tell you about new products and services
What information do we process, and what is our legal basis for processing?
We collect and process information about your identity as well as contact details (e.g. name, address, email address, phone number, age), information about your car, track day and your insurance (e.g. car make, model, registration number, track, coverages requested), and claims information (e.g. date of claim, circumstances, repair costs).
According to the Data Protection Act 2018, we may only process your personal data if we have a legal basis to do so. Our legal basis is as follows:
- To fulfil our contractual obligations to you as the policyholder.
- To comply with the requirements of the authorities or applicable law. This may be, for example, to keep accounting data for a set period of time.
- When it falls within our legitimate interests. For example, we have a legitimate interest if the processing occurs within a customer relationship.
- When personal data can be used to prevent fraud or to check for financial crime.
- Explicit consent.
Who do we share your information with?
As an insurance agency, we share your information with your insurer Lloyd's and the syndicates etc., to offer you the insurance. We may also share your information with our consultants and IT provider. In the event of a claim, we will share your information with the external claim handler with whom we or your primary insurer work. We may also be required to share your information with courts, regulators, or other authorities.
We require all of our business partners to keep the information we have shared with them confidential and to maintain necessary safeguards.
We will never sell or rent any information you share with us to a third party.
When we share your information with our IT provider, auditors, insurance companies or others, we do so as part of our legitimate interest. We only share your information because it is necessary to provide you with our service in the form of an insurance policy. The information will be used, among other things, to comply with reporting requirements to supervisors, regulators, and/or insurers.
How long do we keep your information?
We will keep your information for as long as is necessary to fulfil the purposes described in this policy and to comply with applicable law.
The length of time will depend on, among other things, whether or not you have reported a claim. If you do not report a claim, we will keep your information for ten (10) years after the expiry of the policy, while after reporting a claim, we will keep your information for ten (10) years after the claim is closed in accordance with the law.
When the above time limits expire, we will delete all information that can be attributed to you. However, we will continue to retain information in anonymised form. This includes some information about your car, sum insured, track, insurance premium and other calculation parameters. We always delete your name, address, registration number, etc., within the specified time limits.
Your rights
Under the Data Protection Act 2018, you have several rights regarding our processing of data about you.
If you wish to exercise your rights, please contact us.
Right to see information (right of access)
You have the right to access the information we hold and process about you and a range of additional information.
Right of rectification
You have the right to have inaccurate information about yourself corrected.
Right to erasure
In certain circumstances, you have the right to have information about you deleted before the time of our general deletion.
Right to restrict processing
In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have processing restricted, we may only process the data in the future – except for storage - with your consent or for the establishment, exercise or defence of legal claims or the protection of an individual or important public interest.
Right to object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data.
You may also object to processing your data for direct marketing purposes.
Right to transmit data (data portability)
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have those personal data transferred from one controller to another without hindrance.
Rights related to automated decision making
You have the right not to be part of an automated decision process, hereunder profiling, in an event where the decision significantly impacts you.
You can read more about your rights at GOV.UK’s Guide to the Rights of Data Subjects, which can be found at https://www.gov.uk/data-protection.
Complaints to the Data Protection Authority
You have the right to complain to the Information Comissioner’s Office (ICO) if you are unhappy with how we process your personal data. You can find the contact details at https://www.gov.uk/data-protection/make-a-complaint.
Social Media
In order to support communication, promotion and marketing of our products, Moris has social media accounts such as Facebook (hereinafter collectively referred to as "Social Media").
Due to the protection of your personal information, in order to communicate with Moris on the products you own or to purchase products, however, we encourage you to contact us via info@moris.co.uk. Only Moris will then be the administrator of your data in this regard, and your data will be protected accordingly. In relation to the data made available by you directly via a Social Media, the provisions of the regulations of the given Social Media may additionally apply. When you interact with us via a particular Social Media, e.g. by using the "like" button, reactions to posts, shares, comments, private messages (e.g., through the Messenger tool), the controller of personal data within the framework of such interactions also becomes the controller of the respective Social Media and the provisions of that Social Media shall apply.
Mouseflow
This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback surveys, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymised IP address, location (city/country), language, and similar metadata. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you'd like to opt-out, you can do so at https://mouseflow.com/opt-out. If you'd like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at privacy@mouseflow.com.
For more information, see Mouseflow’s Privacy Policy at https://mouseflow.com/legal/company/privacy-policy/
For more information on Mouseflow and GDPR, visit https://mouseflow.com/legal/gdpr/.
Document information
This is the 3rd version of Moris's privacy policy written 28/11 2024.