Privacy Policy
Privacy Policy
Last Updated: 19-09-2025
1. Who We Are
M&H Insurance Services (Small Heath) Ltd we our committed to protecting and respecting your privacy.
-
Company name: M&H Insurance Services (Small Heath) Ltd
-
Registered office: 900 Coventry Road, Small Heath, Birmingham B10 0UA
-
Regulated by: Financial Conduct Authority (FCA Number: 308853)
-
Website: www.mandhinsuranceservices.com
-
Telephone: 0121-773-1234
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the Data Controller of your personal data.
2. Information We Collect
We may collect and process the following personal data:
-
Identity Data: name, date of birth, gender
-
Contact Data: address, email address, phone number
-
Financial & Insurance Data: policy details, claims history, payment information
-
Technical Data: IP address, browser type, device information, website usage statistics
-
Marketing & Communication Preferences
3. How We Collect Your Data
We collect data:
-
Directly from you when you request a quote, take out insurance, make a claim, or contact us
-
Automatically when you use our website (via cookies and analytics)
-
From third parties (e.g. insurers, claims handlers, fraud prevention agencies, credit reference agencies)
4. How We Use Your Data
We use your data to:
-
Provide insurance quotes, policies, and services
-
Manage and process claims
-
Comply with legal and regulatory requirements (including FCA rules)
-
Improve our services and website
-
Communicate with you about your policy or enquiries
-
Send you marketing (where you have given consent or where we are otherwise permitted)
5. Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
-
Contract – to arrange, provide, or administer your insurance policy
-
Legal obligation – to comply with FCA regulations and other legal duties
-
Legitimate interests – for fraud prevention, business operations, and limited marketing
-
Consent – where required, such as for email marketing or non-essential cookies
6. Cookies
Our website uses cookies to:
-
Enable functionality
-
Analyse traffic and usage patterns
-
Improve your browsing experience
You can manage cookies through your browser settings. Non-essential cookies will only be used with your consent.
7. Sharing Your Data
We may share your data with:
-
Insurers and underwriters
-
Claims handlers and loss adjusters
-
Service providers (e.g. IT, payment processors, website hosting)
-
Regulators, law enforcement, or government bodies where required by law
-
Fraud prevention and credit reference agencies
We do not sell your personal data.
8. International Transfers
If we transfer personal data outside the UK/EEA, we will ensure appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses) in line with data protection law.
9. Data Retention
We only keep your data for as long as necessary to:
-
Fulfil our contractual and legal obligations
-
Handle claims or queries
-
Comply with FCA and HMRC requirements
After this period, data will be securely deleted or anonymised.
10. Your Rights
Under UK data protection law, you have rights to:
-
Access the personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Request deletion of your data (where applicable)
-
Restrict processing of your data
-
Object to processing (including for direct marketing)
-
Request transfer of your data (data portability)
-
Withdraw consent at any time (where processing is based on consent)
To exercise your rights, contact us using the details in Section 1.
11. Complaints
If you are unhappy with how we process your data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
-
Website: www.ico.org.uk
-
Telephone: 0303 123 1113
12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.