LEGAL
ECOEUS LIMITED is the data controller for personal information collected through this website and our customer services, except where an insurer, administrator, broker, claims handler, finance provider, or other regulated partner explains that it acts as a separate controller. ECOEUS LIMITED is registered in England and Wales under company number 12086484.
Depending on how you use our services, we may collect your name, contact details, date of birth, address history, policy number, product interests, application answers, payment-related information, policy and claims information, communication preferences, consent records, complaint details, customer-service correspondence, identity and fraud-prevention information, and technical data such as device, browser, IP address, cookie identifiers, and website activity. Some insurance applications may require health, criminal-conviction, or other sensitive information. Where this applies, we will explain why it is needed and the additional legal condition relied upon.
We use personal information to provide quotations and product information; process and administer applications; arrange, service, renew, and support policies; operate the customer portal; match policies to verified customers; provide documents; respond to enquiries, changes, claims-support requests, and complaints; keep records of consent; prevent fraud and misuse; meet legal and regulatory duties; improve our services; and send marketing where permitted. Our lawful bases may include taking steps at your request before entering a contract, performing a contract, complying with legal obligations, pursuing legitimate interests, and consent where required. Where we rely on legitimate interests, we consider the impact on your rights and expect the use to be proportionate.
We may share information with insurers, underwriting agencies, administrators, brokers, claims handlers, assistance providers, finance and payment providers, identity and fraud-prevention services, professional advisers, technology and hosting suppliers, communications providers, analytics suppliers, regulators, ombudsman services, law-enforcement bodies, and other parties where disclosure is required or permitted by law. The relevant product documents will identify the insurer or provider responsible for the policy. We require service providers acting on our instructions to protect information and use it only for agreed purposes.
When you create or access a portal account, we use verified account information to identify policies associated with you. A policy number and matching email address may be used to link an existing policy securely. The portal may retain current and expired policy details, policy documents, structured policy highlights, service requests, consent history, and complaint records. Policy highlights are summaries for convenience and do not replace the full policy wording, schedule, certificate, or provider communications.
We may send relevant product or service communications where you have consented or where another lawful route permits this. You can opt out of marketing at any time without affecting essential policy communications. We use necessary cookies to operate the website and portal. Optional analytics or advertising technologies should only be used in line with the choices presented through our cookie controls. More information is available in our Cookie Policy.
We keep personal information only for as long as reasonably necessary for the purpose collected, including servicing policies, retaining expired policy history, responding to complaints or legal claims, preventing fraud, and meeting insurance, financial-services, tax, and regulatory record-keeping duties. Retention periods vary by record type and provider. Information that is no longer required is deleted, anonymised, or placed beyond operational use in accordance with our retention arrangements.
Some suppliers may process information outside the United Kingdom. Where personal information is transferred internationally, we use an approved legal mechanism and appropriate safeguards where required, such as adequacy regulations or contractual protections.
We use organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration, or disclosure. Depending on the circumstances, you may have the right to be informed; request access to your information; correct inaccurate or incomplete information; request deletion or restriction; receive certain information in a portable format; object to certain processing, including direct marketing; withdraw consent; and ask for human review of a solely automated decision that has legal or similarly significant effects. These rights can be limited by law, and we may need to verify your identity before responding.
To ask a privacy question or exercise a data-protection right, email hello@protectyourfamily.co.uk or use our Contact page. Please do not send sensitive policy or payment information by unsecured email. If you are dissatisfied with our response, you also have the right to complain to the Information Commissioner’s Office. Further information is available at ico.org.uk.
We may update this notice when our services, providers, legal obligations, or data practices change. The latest version will be published on this page with an updated date. Where a change materially affects how we use information, we will take reasonable steps to bring it to the attention of affected customers.
