Lime International Limited is committed to protecting your privacy when using our website and other support services. This Privacy Notice explains how we collect and use your personal data and lists the individual rights you have for managing your personal information.
This privacy notice relates to personal information that identifies you as an actual person (whether you are an actual or potential customer, an individual who browses our website or an individual outside our organisation with whom we interact). We refer to this information throughout this privacy notice as personal data or personal information and further detail of what this includes is set out in this privacy notice below.
Our website does not offer insurance products for children and we do not collect personal data from children.
WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
Lime International Limited (Lime) is a company registered in England and Wales (company number 10180963) with a registered office at Level 30, Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB. It is part of a group of companies of which the ultimate parent company is Lime Global Limited, another company registered in England and Wales (company number: 09666467) and also with a registered office at Level 30, Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB.
Lime (and “we, “us” or “our”) refers to Lime International Limited, and is the company responsible for processing your personal data. For the purposes of data protection legislation, we are the data controller of your personal data. We are registered with the Information Commissioners Office in the UK with reference number ZA207293.
If you have any questions or issues about the privacy notice please email us at: firstname.lastname@example.org or write to Privacy, Level 30, Leadenhall Building, 122 Leadenhall Street, London, EC3V 4AB.
PERSONAL INFORMATION WE COLLECT AND USE
Our aim is to only collect personal data we need for an agreed purpose and we will only ever ask you for personal information needed for that purpose.
We may collect, store and use the following kinds of personal information:
Information relating to any transactions carried out between you and us on our website which would include, your name, age, date or birth, email address, postal address and contact details.
Information that you provide to us for the purpose of subscribing to email notifications and/or marketing notifications.
Information that you provide to us in the course of using our Customer Support Services facilities.
Any other information that you choose to send to us.
We may collect, when permitted by law or with your individual consent, special categories of personal data e.g. race or ethnic origin; political opinions, religious or philosophical beliefs; trade union membership, physical and mental health; genetic data; biometric data; sexual life or sexual orientation; and, criminal records. We must obtain your consent at the point of collecting this information (i.e. when you input your details online or when completing a form) in order to process the data, unless an exemption for insurance purposes is applicable. In some circumstances, if we do not have your consent to process your data, it may impact our ability to issue you with insurance cover or handle claims. If you provide personal information about other individuals such as dependents/beneficiaries, you must obtain their consent prior to your disclosure to us.
We also collect information from third-party suppliers for the purposes of reducing fraud and financial crime, provided such third parties have the required lawful purpose to share such personal data with us.
Why and how we use your personal information
The below is a summary of the purposes for which we use your personal information, together with the legal basis for collecting the information. Our main purpose for processing your personal data is for the provision and performance of an insurance contract e.g. reviewing your application, setting you up as a policyholder, administration and maintenance of your insurance policy or in order to process a valid claim.
We may use your personal information to:
administer and assist you with quotations, insurance policies and claims through our website.
send you email notifications in order to administer your insurance policy.
provide insurers with policy information, claims and complaints information for the establishment and administration of your contract of insurance.
send you marketing communications relating to additional services that might be of interest to you, where you have given specific consent to receive these, via email or similar technology.
provide third parties (insurers and business partners) with statistical information about website users – this information cannot be used to identify any individual user.
deal with enquiries and complaints made by or about you related to insurance policies purchased through the website.
We will only ever share your personal information with others as described in this policy, or when we believe that the law permits or requires it. We will never sell your personal data to other third-parties for marketing purposes.
We use your personal data for the following purposes:
We may rely on one or more of the following legal bases when processing your personal data for the following purposes:
Who we share your personal information with
All personal data you share with us is stored in secure servers and only accessed and used in line with our data protection policies and procedures. Your personal data will only be accessed by our staff or authorised third parties. In circumstances where it is necessary to share your personal data with a third party, we have contractual agreements in place to ensure the securityand confidentiality of your personal data. Such information will only be used for the specific purpose for which it has been provided to them.
We share your personal data with the following categories of companies as an essential part of the provision and performance of an insurance contract e.g. setting you up as a policyholder, administering and maintaining your insurance policy and for claims management:
Insurers – with whom we arrange and place the contracts of insurance.
Affinity partners – who help introduce you to our site and services.
Professional service providers - who help us provide services, such as collection of debit/credit card details for the payment of premiums, data management and storage and data searches (postal addresses).
Professional agencies - who help us with fraud and identity theft prevention.
Governmental, Legal and Regulatory Authorities (eg. Financial Ombudsman Service, the Financial Conduct Authority, the Information Commissioner’s Office) – to assist with enquiries to ensure compliance with our regulatory and legal requirements and for investigations into money laundering, fraud and corruption.
Members of the Lime Group of companies – who are provided with data analytics on site activities for product and service development.
For a list of our third-party suppliers click here. Some of those third-party recipients may be based outside the European Economic Area — for further information including how we safeguard your personal data when this occurs, see ‘Transfer of your information out of the EEA’ below. We will not share your personal information with any other third party.
How long will we retain your personal data?
We will hold on to your personal data for as long as you have a contract of insurance with us or as long as is necessary for the purpose for which it was collected (including as required by applicable law or regulation).
Where there is no contractual, legal or regulatory requirement, we will retain your personal data (documents and records e.g. emails) for a minimum period of 7 years.
We will only store your data for as long as is necessary to comply with the requirements of your insurance contract(s) and any legal obligations or lawful processing conditions that may exist as a result. You have a number of rights concerning the personal information we use, which you may ask us to observe. In some cases, even when you make a request concerning your personal information, we may not be required, or be able to carry out your request as this may result in us not being able to fulfil our legal and regulatory obligations under the lawful processing conditions under which we hold your data or because there is a minimum statutory period of time for which we have to keep your information. If this is the case, we’ll let you know our reasons.
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested by you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We will make every effort to promptly respond to your request or let you know if we require further information to in order to fully respond.
Right to Access
You have right to access personal information which we hold about you. If you have a contract of insurance with us, you can access most of this information through your account in the Customer Login area of the website.
Right to Rectification
You have a right to request us to correct your personal information where it is inaccurate or out of date.
Right to be Forgotten (Right to Erasure)
You have the right under certain circumstances to have your personal information erased. Your information can only be erased if your data is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the data.
Right to Restrict Processing
You have the right to restrict the processing of your personal information, but only where:
its accuracy is contested, to allow us to verify its accuracy; or
the processing is unlawful, but you do not want it erased; or
it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
you have exercised the right to object, and verification of overriding grounds is pending.
Right to Data Portability
You have the right to data portability, which requires us to provide personal information to you or another controller in a commonly used, machine readable format, but only where the processing of that information is based on (i) consent; or (ii) the performance of a contract to which you are a party.
Right to Object to Processing
You have the right to object to the processing of your personal information at any time, but only where that processing has our legitimate interests as its legal basis. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to Decline Automated Decision Making
You have the right to not be subject to decisions based solely on automated decision making, which produce legal or significant effects for you, except where these are (i) necessary for a contract to which you are a party; (ii) authorised by law; (iii) based on your explicit consent.
Even where such decisions are permitted, you can contest the decision and require us to exercise human intervention. We currently do not use automated decision making (including automated decision making using profiling) when processing your personal information. If we ever use an automated decision making solution, you have a right to request that a decision based off your personal information cannot be solely decided via an automated process.
As noted above, you can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.
If you would like to exercise any of these rights, please: email or write to us at Privacy, Level 30, Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB or email email@example.com.
KEEPING YOUR PERSONAL INFORMATION SECURE
We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
HOW TO COMPLAIN
If you have any queries or concerns you would like to raise about our use of your personal information or if you are not happy with how we manage your personal data, you have the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns
CHANGES TO THIS PRIVACY NOTICE
We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was published on 13/11/2018 and last updated on 13/11/2018.
HOW TO CONTACT US
If you wish to contact us please send an email to firstname.lastname@example.org or write to:
Privacy, Level 30, Leadenhall Building, 122 Leadenhall Street, London EC3V 4AB.