Excessbuddy.com is a trading style of Rock Insurance Services Limited (ROCK). At ROCK, we respect your right to privacy. This privacy policy will help you understand how ROCK collects, uses and stores your data and the actions we take to protect it. You should show this notice to anyone else included on your policy. Please read this Privacy Policy carefully.
This Privacy Policy should be read alongside and in addition to the Cookies Policy and your Policy Wording (where applicable). If you have any feedback or questions on this policy then please contact us .
For information about how we intend to safeguard your data please see the information below.
- About Us
- What information we collect
- When we collect your data
- How we use your data
- Who has access to your data
- Legal basis for using your information
- Retaining your information
- Security of your information
- Your legal rights
- Related notices and terms
- Changes to this policy
1. About Us
This website is provided by Rock Insurance Services Limited. We are authorised and regulated by the Financial Conduct Authority (Firm reference number 300317).
References to “our Website” or “the Website” are to https://excessbuddy.com.
ROCK acts as Data Controller, which means that we determine the way in which your data is used (as described in this privacy notice).
2. What information we collect
We collect personal data as part of providing services to you. We may also monitor or record calls, emails, SMS messages or other communications in accordance with UK law.
Types of Data we collect
Personal Data:
- Location information including address and telephone information
- Online identifiers including IP address, email and social media
This information is necessary in order to provide you with the service you expect, if you do not provide us with the requested information, we may not be able to provide you with quotations from our panel of providers.
3. When we collect your data
We will collect your personal data when:
- You ask for a quote
- You make general enquiries
- You register for information or other services
- You respond to communications or surveys
- You make a complaint
4. How we use your data
- To provide you with a quote
- Making sure that we are safeguarding your interests through quality assessments, training and competency, customer surveys and staff feedback
- Providing (partner) relevant information so they can manage applicable loyalty schemes
- Engaging with you in relation to your existing quote and/or policy, it’s expiry and requesting you to provide feedback on your experiences
- Keeping you informed of our latest offers and products
5. Who has access to your data
It is our aim to use only providers who will ensure your data is processed in the UK or European Union (EU) to provide a high standard of data protection. However we accept that we work in a global environment and cannot completely limit the transfer of data. Where data is transferred outside the UK or EU we require it to be protected to the same or equivalent standards.
6. Legal basis for use of your information
We must make sure that there is an appropriate lawful reason for us to process your data. These legal bases are set out in data protection law and we rely on a number of different conditions for the activities we carry out.
Necessary for the performance of contract:
- Providing a quote
- Answering any queries
- Handling complaints
- Ad hoc correspondence with you
We have a legal obligation to:
- Quality assess policies
- Manage training and competency of our staff
- Assessing sales KPIs (key performance indicators)
- Giving feedback to our staff
- Ad hoc reporting
Where we process your data using your consent:
| Consent Required | Activity |
| NO | We will send you important information about your policy, including your Certificate of Insurance, a renewal notice if you have purchased an Annual policy and a timely reminder asking you to check that your policy is suitable for your needs. |
| YES | We will only send you additional information about our products and services if you choose to opt in to that activity during the purchase of a policy. You can always opt out later if you change your mind.
Contact us here if you also want to opt out of this process. |
| YES | We will only send you information about other companies’ products and services if you choose to opt in to that activity during the purchase of a policy. You can always opt out later if you change your mind.
Contact us here if you also want to opt out of this process. |
- Retaining your information
Your personal data shall be retained as long as needed for the authorised purposes listed in section 4. This includes retention of some personal data following the end of our relationship with you, for example to resolve any potential disputes and for ongoing or prospective legal proceedings, to maintain records of our services, and otherwise to comply with our legal obligations and to defend our legal rights. We keep any data used to create a quote for 14 days. All other correspondence and voice recordings will be retained for 8 years.
Please contact us if you need further information about our retention periods.
- Security of your information
We regularly review the technical and organisational security measures we have in place on our information and communications systems in order to prevent the loss, misuse or unauthorised alteration of your personal information. We also use industry standard security to encrypt sensitive data in transit to our servers.
Communications sent through our website, email or social media, rely on the internet which is a publicly hosted network and is therefore not secure unless the site has been encrypted. ROCK cannot accept responsibility for any unauthorised access or loss of personal information that is beyond our control.
ROCK has deployed an adequate procedure to identify and communicate any incident of data breach within a delay of 24 hours and to resolve it within a reasonable timescale.
Further information about security measures we apply to communications sent by email or over our website is available on request.
- Your Legal Rights
You have the following Individual Rights:
The right to be informed about how we collect, use and store your data through this Privacy Policy
The right of access to your data and to request a copy of the personal data we hold about you. Please contact us here and we will acknowledge your email within 48 hours. We will not charge you for this request and we will make sure that you receive your information within 40 days.
The right to request that we correct any inaccurate data. Please contact us here and we will take action to correct the data and confirm to you once this has been done.
The right to ask us to erase any data that we hold. Please contact us here
Your request will then be considered and we will write to you by email to inform you of the outcome of our decision and any actions that we will take.
The right to withdraw consent to your data being used to receive direct marketing communications. You can opt out here.
The right to ask us to transfer your data to a new provider. You can make this request here.
The right to complain about how your data is being collected, used or stored. You can complain by clicking here. Alternatively you can contact our Data Protection Officer as follows:
FAO Sarah Hall-Strutt, Data Protection Officer
Rock Insurance Services Limited
Griffin House, 135 High Street, Crawley, West Sussex, RH10 1DQ
Telephone: 0333 202 5670
Email: [email protected]
If you are dissatisfied with the response then you have the right to appeal to the Information Commissioners Office. Please visit https://ico.org.uk/ for further information about how to do this.
- Related notices and terms
We only show the privacy notices below for our panel members. Their privacy notices will include details of all companies used within their distribution and supply chains.
Click here for the insurefor.com privacy notice.
Click here for the Bigbluecover.com privacy notice.
Click here for the MRLinsurance.co.uk privacy notice.
Click here for the Debenhams Personal Finance privacy notice.
Click here for the Fortify.uk privacy notice.
Click here for the LeisureGuard.com privacy notice.
Our Cookie Policy provides information about the use of cookies on our website. We will ask you to consent to our use of cookies in accordance with the terms of the policy when you first visit our website.
- Changes to this policy
This privacy policy was last updated on 30/04/2019. We reserve the right to make changes to this policy and you will be prompted of any changes when you next visit our website.
From time to time we may need to change the way we use your personal data. Where we believe you may not reasonably expect such a change we will write to you. When we do so, you will have 60 days to object to the change.