Skip to main content
QBE Automotive Protection

Privacy Policy

1. Introduction

QBE Management Services (UK) Limited ('QBE', 'we', 'us', or 'our'), which operates the Automotive Protection business, is part of a wider group of companies, the QBE Insurance Group, one of the world’s leading international insurers and reinsurers.

QBE Automotive Protection is a global dynamic insurance business and a recognised leader in the automotive protection sector. We offer a wide range of digital direct to consumer and point-of-sale vehicle warranty and GAP solutions, as well as other loyalty and retention products for automotive manufacturers, distributors, dealerships, financial institutions and affinity groups.

This Privacy Policy applies to all personal information (also referred to as 'personal data') collected over our Automotive Protection website.

Please note that this website is an informational business website only and individual consumers cannot purchase our products or services via this website.

2. The information we collect

We collect the following personal information about you:

  • Details of visits made to our website such as the date, time and duration of your visit, browser type, operating system and page visits.
  • Information you provide to us when you sign up on the website to receive information about Automotive Protection or where we are otherwise in contact with you, such as your name, email, telephone number, job role/title and company/employer.
  • Your request to receive further information about the Automotive Protection Business.
  • Any other personal information you provide to us voluntarily.

Our website also uses cookies for a variety of purposes, including to help us to provide you with a good experience when you browse our website and to distinguish you from other users of our website. Please see our Cookie Policy to find out more information about our use of cookies.

3. Sources of your data

We obtain information directly from you when you visit our website, sign up for news alerts, newsletters or other forms of communication, use or enquire about our products or services, provide feedback to us, complete surveys or otherwise engage with, or contact us, in relation to our services.

4. Why we collect your personal data and our legal basis for doing so

We collect your data to:

  • customise or personalise our website to your needs;
  • improve our website based on how you and other users interact with our content;
  • manage our services and business;
  • correspond with website users to resolve their queries or complaints;
  • engage with you when you enquire about, or contract with us to obtain, our services;
  • send you marketing communications (e.g. newsletters), where it is lawful for us to do so;
  • comply with our legal and regulatory obligations; and
  • establish, exercise or defend our legal rights.

We will only collect, use and share your personal data where we are satisfied that we have an appropriate legal basis to do this. This may be because:

  • we need to use your personal data for our legitimate business interests. For example, we have a legitimate commercial interest in promoting and growing our business, building good relations with our customers and suppliers, operating a website, providing information to prospective and actual customers, suppliers and other interested parties on the services we provide and the activities of QBE and contacting such individuals from time to time;
  • you have consented to the processing (for example, where you consent to the placing of cookies on your device or when you consent to receive direct marketing materials from us);
  • the processing is necessary to perform a contract we have entered into with you or to take steps at your request prior to entering into a contract. Please note that if you do not provide the information we request, this may mean that we are not able to proceed with the contract; or
  • we need to use your personal data to comply with a relevant legal or regulatory obligation that we have.

5. How we share and disclose information

We share your personal data in the manner and for the purposes described below:

  • within the QBE Group, where such disclosure is necessary to provide you with our products and/or services and/or to manage our business;
  • with third party service providers (who will operate on our instructions) who help manage our business and assist us in providing information or services to you (for example, suppliers of relationship management or marketing solutions and third party IT service providers to manage and improve the website);
  • with consultants and professional advisers, including our lawyers, accountants and auditors; and
  • with government organisations and agencies, law enforcement and regulators if needed to comply with applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies.

If, in the future, we sell or transfer some or all of our business, shares or assets to a third party, we may disclose information to a potential or actual third-party purchaser.

6. Data transfers

QBE is a group with affiliates, divisions and offices situated throughout the world, and it will therefore be necessary, from time to time, to pass your information between QBE locations internationally. Similarly, QBE contracts with providers located around the world and sends data to other third parties as necessary to manage its business and provide its services.

Accordingly, your personal data may be transferred and stored in regions and countries outside your country of residence, including Australia, Asia Pacific, New Zealand, Pacific Islands, India, North America and within Europe, including QBE's services company located in the Philippines which provides sales, claims administration and other services to the Group, and/or to any other countries where QBE entities operate or may operate in the future and where its service providers or business partners are located, each of which may be subject to different standards of data protection to your country of residence.

If we need to transfer your personal information outside the UK and the EEA, we will take steps to ensure that your personal data is protected in accordance with applicable data protection law. We will do this using a number of different methods including:

  • putting in place appropriate contracts. We use international data transfer contract clauses which have been approved by the relevant data protection authorities (such as the European Commission's Standard Contractual Clauses or the UK's International Data Transfer Addendum to such clauses). You can find out more about these clauses here. If you wish to receive a copy of the international data transfer contract clauses used by QBE, please contact us using the details set out in section 11 below;
  • transferring personal information only to countries which have been deemed by the relevant authority to have adequate levels of data protection. You can find out more about this here. For transfers of personal data to the US, this may include utilising the EU-US Data Privacy Framework and/or the UK extension to the EU-US Data Privacy Framework (the UK Data Bridge).

7. How we keep your information secure

We take the security of the information we collect seriously. We have implemented and maintain technical and organisational security measures, policies and procedures designed to reduce the risk of accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, such information appropriate to the nature of the information concerned.

If we transfer your personal data to third parties who help provide our products and services on our behalf, we also obtain contractual commitments from them to protect your personal data in accordance with applicable privacy laws.

Our security measures are kept under periodic review and are regularly updated to reflect developments in technology and security and changes to our business. However, please be aware that there are inherent security risks in transmitting data, such as e-mails or via the Internet, because it is impossible to safeguard completely against unauthorised access by third parties.

8. Data retention

We will keep your personal information for as long as reasonably necessary for the purposes for which it was collected (as explained in this Privacy Policy) and to comply with our legal and regulatory obligations.

We have a detailed retention policy in place which governs for how long we will hold different types of information. The exact time period will depend on your relationship with us and the type of personal information we hold.

When the applicable retention period ends, we will securely delete your personal data in accordance with applicable laws and regulations.

9. Your rights

You have a number of rights in relation to the personal information that we hold about you which we set out below. You can exercise your rights by contacting us at any time using the details set out in section 11 below.

  1. Right of access

Subject to certain conditions, you are entitled to a copy of the personal information we hold about you and certain details about how we use it.

  1. Right to rectification

You have the right to have inaccurate personal information corrected by us.  If you believe that there are any inaccuracies, discrepancies or gaps in the information we hold about you, you can contact us and ask us to update or amend it.

  1. Right to erasure

This is sometimes known as the 'right to be forgotten'. It entitles you, in certain circumstances, to request deletion of your personal information. For example, where we no longer need your personal information for the original purpose for which we collected it.

Whilst we will assess every request, there are other factors that will need to be taken into consideration. For example, we may be unable to erase your information as you have requested because we have a legal or regulatory obligation to keep it.

  1. Right to restrict or object to processing

In certain circumstances, you have the right to object to, or ask us to restrict, the processing of your personal information. This includes a right to object to our processing of your personal data for direct marketing purposes.

  1. Right to withdraw consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. If you withdraw your consent, this will only take effect for future processing of your personal information.

  1. Right to make a complaint

You have the right to complain to the data protection regulator in the country where you are resident. We would, however, appreciate the opportunity to deal with your concerns before you approach them, so please contact us in the first instance using the details set out in section 11 below.

10. Links to other websites

This Privacy Policy may contain links to other third party websites, including LinkedIn. We are not responsible for the content of these other sites and you should read the privacy policies provided by such websites.

11. Contacting us

If you would like further information about any of the matters in this policy or if you have any other questions about how we collect, store or use your personal information, you may contact our Data Protection Officer by emailing dpo@uk.qbe.com or writing to:

The Data Protection Officer
QBE European Operations
30 Fenchurch Street
London EC3M 3BD
United Kingdom

Version: 1.0
Date: 29th January 2024