Privacy notice

1. Who to contact

The data controller is C & D GROUP HOLDINGS (UK) LIMITED, trading on this website as C&D Specialist Insurance. For privacy questions or requests about your information, email admin@candd.uk.com, call 01832 734047, or write to 2 Water Street, Stamford, PE9 2NJ, United Kingdom.

2. Information collected

• Quote enquiries: your name, email address, any phone number you provide, selected insurance interests and your message. Older enquiries may also include a country of residence.
• Technical information used to operate and protect the website, such as request times, requested paths, response status and network information used for security and rate limiting.
• Optional anonymous interest counts, described below. These are separate from your named enquiry.

Your name and email address are needed to respond to a website quote request. You do not need to provide a phone number or a message. Please do not include medical history or other sensitive personal information in this form. If health information is needed later for an application, its use and the appropriate legal conditions must be explained separately.

3. Why information is used

Enquiry details are used to respond to your request, discuss the cover you are interested in and arrange any next steps you ask for. Technical information is used to keep the website working and reduce misuse.

Sending a quote request does not subscribe you to marketing. Permission for any separate marketing activity must be handled separately from your enquiry.

4. Lawful bases

Where necessary to provide a quote or arrange a service you have requested, the proposed lawful basis is taking steps at your request before entering into a contract. For general correspondence and website security, the proposed basis is legitimate interests in responding to enquiries and protecting the service, balanced against your rights.

These bases must be confirmed and documented by the responsible business for its actual services. Any legal or regulatory record-keeping obligations, and any processing of health information, require a separate assessment; this notice does not assume they apply to every website enquiry.

5. Access and service providers

New website enquiries are first reviewed by C&D staff, not automatically forwarded to insurers or outside advisers. They are stored in the restricted Leads area for authorised administrators to review and follow up. Replit provides the website hosting and associated database services. The website attempts to use Resend for a short new-enquiry email alert, but the service is not currently connected. The attempted alert does not include your name, contact details or message; saving your enquiry does not depend on email delivery.

C&D may need to share relevant information with an insurer, adviser or other organisation later if you choose to proceed with cover. The business must confirm when that happens, who receives information and why, and explain the process to you before this notice is finalised. This website notice does not yet describe an insurer application process.

6. Processing locations and international transfers

The business must confirm where its providers process information, whether any personal information is transferred outside the UK, and which adequacy arrangements or other safeguards apply. Those details are not yet verified in this draft. Contact the privacy email above for questions about provider locations or transfer arrangements.

7. How long information is kept

Website enquiry records are scheduled for deletion after approximately 12 months, or earlier by an administrator. Anonymous interest-event records are scheduled for deletion after approximately 90 days. Cleanup runs periodically, so deletion is not instantaneous on the anniversary of submission.

These periods apply to the website records only. The business must separately confirm retention for correspondence, backups, technical logs and any advice, policy or regulatory records held elsewhere. A request to delete information will be considered alongside any applicable legal obligations.

8. Analytics and browser storage

With your optional permission, the website counts visits to the four insurance product pages, clicks on quote links and openings of the quote form. The event records do not contain your name, email, message, IP address or a visitor identifier, and are not joined to enquiries. Essential technical request handling is separate from these counts.

You can decline analytics without affecting your quote request, or change your choice using “Analytics preferences” in the footer. Your choice is saved in browser local storage. Cookies used to maintain administrator sign-in are separate from optional analytics.

9. Your rights

Depending on the circumstances and lawful basis, you may ask to access your personal information, correct it, erase it, restrict its use or receive it in a portable format. You may also object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting the lawfulness of earlier processing.

Contact admin@candd.uk.com to make a request. Reasonable identity checks may be needed to protect your information. Requests are normally answered within one month; permitted extensions or exceptions should be explained to you. These rights are not absolute and requests are normally free of charge.

The website quote form does not make automated insurance eligibility or pricing decisions.

10. Questions and complaints

Please contact the business first if you have concerns about your information. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Visit ico.org.uk/make-a-complaint or call 0303 123 1113.