Privacy Policy
Introduction
Endeavour Financial Insurances Services Limited (“we”, “us”, “Endeavour”) are committed to protecting your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (the “GDPR”).
The Endeavour Financial Insurances Services Limited Privacy Policy (the “Policy”) explains what personal data we collect about you and how we use that personal data. It also explains the rights you have in relation to that personal data. This Policy applies to the personal data of our Website Users, Business Associates, Suppliers, and to the emergency contacts of our Staff.
For the purposes of the GDPR, the data controller is Endeavour Financial Insurances Services Limited, a private limited company registered in England and Wales under company number 09130767 with its registered and main trading office at Plough Court, 37 Lombard Street, London, EC3V 9BQ. This means that we are responsible for deciding how we hold, use and keep personal data secure. It also means we are responsible for responding to requests you make in relation to how your personal data is used.
How do we collect personal data?
We will collect limited personal data from a number of sources. These include:
- Directly from you: when you contact us by phone, email, or communicate with us directly in some other way (such as social media).
- Our website: we collect anonymous information about users when they visit our website.
- From your organisation: when your colleague provides us with your phone number, email, or other contact information for the purposes of ensuring our business relationship runs smoothly.
What personal data do we collect?
Endeavour collects both personal and anonymous data when you send us information or visit our website.
We collect the following types of personal data from you:
Contact details: This is personal data that can identify you as an individual. In particular this includes title, first name, surname, email address and telephone number.
In general, the data we hold about Business Associates is very limited. We generally only need to have your contact details or the details of individual contacts at your organisation (such as their names, telephone numbers and email addresses) to enable us to ensure that our relationship runs smoothly. We may also hold extra information that someone in your organisation has chosen to tell us.
We don’t collect much data about our Suppliers. We’ll collect the details for our contacts within your organisation, such as names, telephone numbers and email addresses. We’ll also collect bank details, so that we can pay you. We may also hold extra information that someone in your organisation has chosen to tell us.
In order to ensure the safety and security of our Staff, we also collect some basic background information of emergency contacts. We only ask for very basic contact details so that we can get in touch with you because you’ve been listed as an emergency contact for one of our Staff members such as name, email address and telephone number.
We collect the following types of anonymised data from you:
Device Event Information: This is anonymous data that will not identify you as a person, but with each of your visits to our website we automatically collect a limited amount of data from you including the web pages you have viewed, domain type, search terms and the URL you came from. The data is collected to measure the number of visits, average time spent on the website and pages viewed etc. This information is used to measure the use of endeavourfinancial.com and improve the content and online services.
We use Google Analytics (“GA”) to record such data. GA aggregates all the data making it anonymous, and at no point do we have access to the raw data and your personally identifiable information.
How we use your information
To find the right balance, we will only use your information:
- To store (and update when necessary) your details on our database, so that we can contact you in relation to our agreements;
- To offer services to you or to obtain support and services from you;
- To perform certain legal obligations;
- To keep you updated with our recent news and activities; and
- In more unusual circumstances, to help us to establish, exercise or defend legal claims
In the below description, we describe in a little more detail the purposes for which we collect your personal data; the categories of personal data we process for that purpose; the legal basis that allows us to process your personal data; and how long we will keep your personal data for.
Provisions of Service
- Purpose of processing: We use your information to communicate with you, as well as for internal business administration and operations.
- Categories of data processed: We use all of your personal information relevant for carrying out our service agreements with you.
- Legal basis of processing: Our legal basis for collecting this information from you is that it is in our legitimate interest to use your personal information to ensure we are able to provide you with a service in relation to our agreements.
- Data storage period: We review data annually to ensure that it is still relevant and necessary. Data shall be kept for no longer than is necessary for the purposes for which it is being processed.
Understand the website user journey and make improvments
- Purpose of processing: By monitoring and analysing trends it allows us to better understand how users interact with our website, which in turn helps us improve your experience. For example, by adding new features we think you will enjoy or making existing ones easier to use.
- Categories of data processed: Domain name, operating system, browser, IP address of device(s) used, crashes, system activity, hardware settings, browser type, browser language, operating system, device type, the date and time of your request and referral, location in terms of country and telephone code, the web pages you have viewed, domain type, search terms and the URL you came from.
- Legal basis of processing: Our legal basis for processing this information is that it is in our legitimate interest to improve your website experience. All data obtained from our website is anonymised and we do not have access to the raw, personally identifiable, data.
- Data storage period: We review data annually to ensure that it is still relevant and necessary. Data shall be kept for no longer than is necessary for the purposes for which it is being processed.
Direct Marketing
- Purpose of processing: We may contact you via electronic means to provide you with information on our recent news and activities that we feel may be of interest to you based on our previous or existing business relationship with you.
- Categories of data processed: We will use your contact email address.
- Legal basis of processing: Our legal basis for collecting this information is that it is in our legitimate interest as a commercial benefit to keep you updated with our relevant news and activities. We will not, as a matter of course, seek your explicit consent when sending marketing messages to a corporate postal or email address. We are allowed to market products or services to you which are related to the services we provide as long as you do not actively opt-out from these communications. In this situation we will be able to rely on your soft opt-in consent. Soft opt-in consent is a specific type of consent which applies where you have previously engaged with us (for example, where we have been retained by you as a Financial Adviser), and we are marketing other financial-related services. Under ‘soft opt-in’ consent, we will take your consent as given unless or until you opt out. You are able to change your preference regarding the use of your information at any time by emailing info@endeavourfinancial.com, or by calling the London office on 0207 590 2720.
- Data storage period: We review data annually to ensure that it is still relevant and necessary. Data shall be kept for no longer than is necessary for the purposes for which it is being processed.
Your Personal Details
Your privacy is important to us and as such we will not release your personal details to any organisation outside Endeavour for their mailing or marketing purposes. We do however reserve the right to disclose this information in the circumstances set out below under ‘Who has access to your personal data’. We treat all of your personal information as confidential and as such it is held on a secure server.
Who has access to your personal data?
We may share personal information with the following:
- Our staff: your personal data will be accessed by our staff but only where this is necessary for their job role.
- Other service providers and advisors: such as companies that support our IT, help us analyse the data we hold, process payments, provide us with legal or financial advice and help us deliver our services to you.
- The government or our regulators: where we are required to do so by law or to assist with their investigations or initiatives, including the Information Commissioner’s Office and Financial Conduct Authority.
- Police and law enforcement: to assist with the investigation and prevention of crime.
We will never sell your personal information on to any third parties, and do not transfer or otherwise disclose any personally identifiable information outside this company, except where disclosure is required by law.
Cookies
A “cookie” is a tiny element of data that a website can send to your browser, which may then be stored on your hard drive so our website can recognize you when you return to it. You may be able to set your browser to notify you when you receive a cookie. Our cookies collect various items like the operating system and browser that a visitor is using. If you continue viewing our website without changing your cookie settings, you are consenting to their use.
Most web browsers will accept cookies but if you would rather we didn’t collect data in this way you can choose to accept all or some, or reject cookies in your browser’s privacy settings. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences. For more information generally on cookies, including how to disable them, please refer to aboutcookies.org. You will also find details on how to delete cookies from your computer.
Your rights
You have the following rights in relation to the personal information we hold about you:
Your right of access
If you ask us, we will confirm whether we are processing your personal information and, if so, provide you with a copy of that personal information.
Your right to rectification
If the personal information we hold about you is inaccurate or incomplete, you are entitled to have it rectified.
Your right to erasure
You can ask us to delete or remove your personal information where there is no good reason for us continuing to process it, you withdraw your consent, we are unlawfully holding your personal data or we should erase your personal data to comply with applicable EU law. If we have shared your personal information with our analysts, referenced in ‘Who has access to personal data’ above, we will let them know about the erasure where possible.
Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal information, for example, where you contest the accuracy of that personal information or object to us processing it. If we have shared your personal information with others, we will let them know about the restriction where possible.
Your right to data portability
You have the right to obtain personal information you have provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or ask us to transfer this to a third party of your choice.
Your right to object
You can ask us to stop processing your personal information, and we will do so, if we are:
- relying on our own or someone else’s legitimate interests to process your personal information except if we can demonstrate compelling legal grounds for the processing;
- processing your personal information for direct marketing; or
- processing your personal information for research unless such processing is necessary for the performance of a task carried out in the public interest.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, you can report it to the UK Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/.
How to Access Your Information and Your Rights
Please write to us at the following address to obtain a copy of the personal information Endeavour Financial holds about you:
Endeavour Financial Limited
Plough Court, 37 Lombard Street,
London
EC3V 9BQ
You can also contact us using the details below:
Phone: 0207 590 2720
Email: info@endeavourfinancial.com
We will require that you satisfactorily identify yourself to demonstrate your entitlement to view this information. Requests will be fulfilled within 30 days of receiving them. If you require additional copies, we may need to charge a reasonable fee. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. In the event that we decide to not take action on the request, we will inform you of the reasons for not taking action.
Questions Regarding This Privacy Policy
If you have any comments or questions related to this Policy please email info@endeavourfinancial.com and we will respond as promptly as we can.
Changes to This Privacy Policy
This Policy will be amended from time-to-time if we make any important changes in the way we collect, store and use personal data. We recommend that you check for updates to this Policy from time to time but we will notify you directly about changes to this Policy or the way we use your personal data when we are legally required to do so.