Privacy Policy

About us

Abbeygate Insurance Brokers Ltd ("Abbeygate Insurance") is registered with and regulated by the Insurance Companies Control Service (ICCS), Republic of Cyprus, and provides insurance broking services in Greece under EU passporting rules. We abide by the General Data Protection Regulation (GDPR) and process all personal data lawfully, fairly and in a transparent manner.

What information do we collect about you, and why?

As a brokerage and as part of our service we only collect information from you so that we can advise on and arrange products that may be suitable for you. We obtain information by phone, email or post and confirm the accuracy of the data collected. It is important that all the data we hold on you is accurate so that we can advise on and arrange suitable products.

The types of information we collect include: contact details, occupation, income and expenditure, credit details, insurance requirements, existing policies, bank details. We may also collect sensitive personal data such as medical conditions or criminal-offence data where required to arrange a policy.

How will we use this information?

We use your information to research the market on your behalf, prepare a personalised quotation, arrange the policy with the chosen insurer, contact you at renewal or review, assist with claims or complaints, and (with your consent) keep you informed of new products or offers that may be of interest. Telephone calls may be monitored and/or recorded for training purposes and complaint handling. Where we record the call you will be informed.

The lawful basis on which we use this information

We process your data using the lawful basis of "legitimate interests" — the most suitable basis for arranging insurance policies under GDPR.

Who will it be shared with?

If you proceed to take out a policy we will pass your details to the insurer the policy is arranged with. Where we assist with a claim we will liaise with the insurer and the loss adjuster appointed. We may forward your details to regulatory authorities or fraud agencies where we have a legal obligation to do so.

Security of personal information

We will not share any of the information you provide with third parties for marketing purposes, or store any of your information outside of the European Economic Area. We use leading technologies and security measures to safeguard your information.

How long will we retain your data?

We hold data for no longer than is necessary. Where we have arranged a policy on your behalf, we keep your file (including personal data and any call recording) on record for a minimum of six years, in line with our regulatory obligations.

Your rights

You have the right to:

• Be informed about how we use, share and store your personal information;
• Request access to the personal data we hold on you (a Subject Access Request) — we will respond promptly and within one month;
• Request your personal data is amended if inaccurate or incomplete;
• Request your personal data is erased where there is no compelling reason for its continued processing;
• Request that the processing of your data is restricted;
• Object to your personal data being processed;
• Rights in relation to automated decision-making and profiling (we do not use these systems).

Marketing

Where we need your consent we will ask for it separately — no pre-ticked boxes. You may withdraw your consent at any time by contacting us by email or phone.

Right to complain

If you are unhappy with the way we have used your data, please notify our Compliance Officer (Andrew Francis) using the contact details below. You may also raise concerns with the Hellenic Data Protection Authority (HDPA) — www.dpa.gr.

How to contact us