Privacy Policy – Chas Insurance Limited 

CHAS Insurance Limited and its affiliated companies and subsidiaries (collectively referred to any,” “we,” or “us”) respect your privacy. 

This Privacy Policy explains how we collect, use, share, store and protect your personal information including where we use artificial intelligence (AI) or automated tools to enhance our services to you, so that you may decide whether or not to provide information to us. 

By accessing our website, or purchasing our products or services, you agree to this Privacy Policy in addition to any other agreements we might have with you. This Privacy Policy does not govern the practices of entities that we do not own or control, or entities that do not own or control us.

We take your privacy seriously and are committed to handling your personal information lawfully, fairly and transparency under the UK GDPR and the Data Protection Act 2018.

Contact details

Please contact us if you have any questions about our privacy policy or personal information, we hold about you.

What personal information do we collect

The information we collect may include your personal information, such as your name, contact information, IP addresses, product and service selections. We collect personal information from you at different points, including but not limited to the following:

• When we correspond with you as a customer or prospective customer
• When you visit our website
• When you take out an insurance policy via us
• When you contact us for help

We may also need to use special category information, but only, where relevant and with your explicit consent.  Special category information is listed below under “Our lawful basis for processing your personal information”

How we use your personal information 

We may use information that we collect about you to:

• Deliver the products and services that you have requested
• Manage your customer relationship and provide you with customer support
• Perform research and analysis about your use of, or interest in, our products or services
• Communicate with you by e-mail, postal mail, telephone and/or mobile devices about products or services that you may hold with us, may be of interest to you either from us, or other third parties
• Verify your eligibility to credit facilities
• Carrying out identity, fraud and anti-money-laundering checks
• Transfer personal information to third parties for any legally permissible purpose in our sole discretion
• Enforce our terms and conditions
• To keep accurate records and meet regulatory requirements we may record: 

Emails, notes of telephone call, meeting notes

Records required to meet the FCA’s requirements

• Communicating with you about your services, plans, policies

Disclosure of your personal information to Third Parties  

To provide you with our services, we sometimes need to share your personal information with trusted third parties. These may include:

• Financial product providers such as insurers
• Compliance consultants, auditors and professional advisers who help us meet regulatory requirements
• IT service providers and secure cloud platforms that support our systems
• Regulators and authorities such as the FCA, HMRC and the Financial Ombudsman Service 
• Credit reference agencies, but only when necessary

We never sell your personal information to anyone.

Using artificial intelligence (AI) or automated tools to process personal information

We may use AI tools to help us review information more efficiently and provide you with faster, more accurate services. We do not use any systems for making automated decisions. All outputs and decisions made by AI are subject to human review and approval before being used or relied on.

Purpose of AI use

AI tools may be used to:

• Draft or summarise internal documents (e.g., meeting notes)
• Identify patterns or errors in data
• Enhance compliance monitoring
• Support risk assessments or vulnerability detection (non-decision-making)

Data sharing and storage  

Where AI tools are used we will : 

• Ensure only the minimum necessary personal information is processed
• Anonymise or pseudonymise, where possible, personal information
• Ensure processing occurs in secure, regulated systems 

Your data protection rights

You have several rights under data protection law. This helps you understand and control how your personal information is used.

• Right to be informed – You can ask us to explain how we collect, use, share, and store your personal information
• Right of access – You can request a copy of the personal information we hold about you, along with details of how we use it
• Right to rectification – If you think any of your information is wrong or incomplete, you can ask us to correct or update it
• Right to erasure – In some situations, you can ask us to delete your personal information
• Right to restrict processing – You can ask us to limit how we use your information in certain circumstances
• Right to object – You can object to us using your personal information, for example for direct marketing
• Right to data portability – You can ask us to send your personal information to you, or directly to another organisation, in a structured, commonly used electronic format
• Rights related to automated decision-making and profiling – If a decision about you is made without human involvement, you can challenge it and ask for someone to review it.

We will respond to any request you make about your data protection rights within one month,  which is a time period set in law.

To make a request, please contact us using the contact details at the top of this privacy notice.

Our lawful basis for processing your personal information

UK data protection law requires us to have a valid legal reason—called a ‘lawful basis’—for collecting and using your personal information. The UK GDPR sets out the different lawful bases.

The lawful basis’ we may rely on are listed below.

You can read more about your data protection rights, including any exceptions, on the ICO’s website: For the public | ICO

• Contractual obligation – This is the main reason we use your personal information. We need certain details from you so we can deliver the services we’ve agreed to provide.

• Legal obligations – Sometimes the law requires us to collect and use specific information. For example, UK anti-money-laundering laws require us to verify your identity.

• Consent to use special category information – The UK GDPR defines special category information as:

• Health information (e.g. for insurance advice)
• Racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Trade union membership
• Genetic information
• Biometric information used for identification (e.g. access or payment systems)
• Sex life information
• Sexual orientation information
• It is very unlikely we will need to request such information on the products and services we do sell, but in the unlikely event that we do need to, we may need your explicit consent to use such information. We will always explain why we need this information and ask for your clear agreement before using it.

If we do rely on your consent, you can withdraw it at any time.

• Legitimate interests – We may keep certain personal information because we have a legitimate business reason to do so, for example, to check the suitability of our services, respond to any complaints in the future, or to meet the requirements of our Professional Indemnity insurer.

Security measures to protect your personal information 

Our systems have security measures in place to help protect information under our control from the risk of accidental or unlawful destruction or accidental loss, alteration or unauthorised disclosure or access.

Use of cookies and links 

Our web pages use “cookies.” Cookies are text files we place in your computer’s browser to store your preferences. Cookies, by themselves, do not tell us your e-mail address or other personally identifiable information unless you choose to provide this information to us by, for example, registering at one of our sites. However, once you choose to furnish the site with personal information, this information may be linked to the data stored in the cookie. We use cookies to understand site usage and to improve the content and offerings on our site. We also may use cookies to offer you products or services. You have many choices with regards to the management of cookies on your computer. All major browsers allow you to block or delete cookies from your system. To learn more about your ability to manage cookies, please consult the privacy features in your browser.

We may create links to other web sites. We will make a reasonable effort to link only to sites that meet similar standards for maintaining each individual’s right to privacy. However, many other sites that are not associated with or authorized by our Company may have links leading to our site. Our Company cannot control these links and we are not responsible for any content appearing on these sites. Since our website does not control the privacy policies of third parties, you are subject to the privacy practices of that third party. We encourage you to ask questions before you disclose any personal information to others.

Retention of your personal information 

We will retain any personal information only for as long as is necessary to fulfil the business purpose it was collected. We will also retain and use your personal information for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

International transfer of your personal information 

Information collected from you may, on occasion be stored and processed outside the UK in any other country in which our Company or agents maintain facilities, and by accessing our sites and using our services, you consent to any such transfer of information outside of your country. Should this be the case, we will use our best endeavours to ensure the same protection is in place as if your data were held in the UK.

Changes to our Privacy Policy

This Privacy Notice is subject to change. It was last updated in July 2026. If we make changes to this Privacy Notice, we will update the date it was last changed.

How long we keep your personal information

We will retain any personal information only for as long as is necessary to fulfil the business purpose it was collected. 

We will also retain and use your personal information for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Cookies

We do not use cookies on our website

Marketing 

As an existing client, we may contact you with information about our products and services, as well as those from other companies in our group that we think you might find useful. The reasoning behind this is that if you have recently purchased a product or service and did not opt out of marketing messages, then you are probably happy to receive targeted marketing from us about similar products or services. Should such a marketing initiative be made, you will be given the opportunity to opt out of future targeted marketing from us. 

Other websites  

Our website may include links to other sites. 

Please remember that this privacy notice only covers our website, so we recommend checking the privacy policies of any other sites you visit.

If you need to make a complaint

If you have any concerns about how we use your personal information, you can contact us using the details at the top of this privacy notice.

If you are not satisfied with our response, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated  

We review this notice at least annually to ensure that it remains up to date and fit for purpose.

It was last updated in July 2026.