Get A Quote Now

Privacy Policy

Privacy Policy

Please take time to read this document carefully as it contains details of the basis on which we will process (such as collecting, using, sharing, transferring) and store your information.

You should show this notice to all parties related to your insurance arrangement. You must ensure that any such personal data you supply relating to anyone else is accurate and that you have obtained their consent to the use of their personal data for the purposes set out above. Where you authorise a third party on the policy, it is our standard practice to speak to either you or the third party regarding the policy, after completing relevant identity checks.

This document should be read in conjunction with our Terms of Business and Website Terms of Use which is available on our website www.goshorty.co.uk

If you have any questions or need further information you can contact us by calling 0333 433 0001 or emailing info@goshorty.co.uk or writing to us at GoShorty, First Floor, West Wing, London House, First Avenue, Poynton Cheshire SK12 1YP

Who are we?

goshorty is a trading style of Complex to Clear Group Limited, (referred to as “GoShorty” “us” or “we”) is an insurance broker authorised and regulated by the FCA No. 751221. GoShorty arranges and administers insurance policies in conjunction with our panel of insurance companies, product and service providers.

Complex to Clear Group Limited T/A GoShorty is a registered company, company number 05044963 registered in England and Wales. Address – First Floor, West Wing, London House, First Avenue, Poynton Cheshire SK12 1YP.

Data Controller and Data Processer

GoShorty will treat your personally identifiable information strictly in accordance with The Data Protection Act 2018 (DPA 2018) as amended on 01 January 2021 to reflect the United Kingdom’s status outside the EU.

We will ensure data is processed lawfully, fairly and in an open and transparent manner and ensure appropriate security measures are in place against unauthorised or unlawful processing or accidental loss, destruction or damage using appropriate technical or organisational measures.

As a processor, we operate strictly in accordance with contracts we have in place with our suppliers (e.g., Insurance Companies, Software Providers, and similar providers of services to us) which set out our relationship as a processor as required by The Data Protection Act 2018.

In relation to the personal data we collect from and use, we are the ‘data controller.’ This means we decide the purpose and manner in which your personal data is used and processed. Our service and product suppliers may also be data controllers of your personal data, and this is explained more fully below. 

The data we may collect about you

The following is a list of the types of personal data we may collect and hold about you:

Types of personal dataDetails
Individual detailsName, address (including proof of address), other contact details (e.g. email and telephone numbers, gender, marital status, date and place of birth, nationality, employer, job title and employment history, and family details, including their relationship to you, vehicle and property details.)
Identification detailsIdentification numbers issued by government bodies or agencies, including your national insurance number, passport number, tax identification number and driving license number.
Financial informationBank account or payment card details, income or other financial information.
Risk detailsInformation about you which we need to collect in order to assess the risk to be insured and provide a quote. This may include data relating to your health, criminal convictions, motoring convictions or offences or other special categories of personal data.
Policy informationInformation about the quotes you receive and policies you take out.
Credit and anti-fraud dataCredit history, credit score, sanctions and criminal offences, and information received from various anti-fraud databases relating to you.
Previous and current claimsInformation about previous and current claims, (including other unrelated insurances), which may include data relating to your health, criminal convictions, motoring convictions or offences or other special categories of personal data and in some cases, surveillance reports.

Some of the personal data you share with us may be ‘special category’ personal data. Certain categories of personal data have additional protection under data protection regulation due to its sensitivity. Special category data includes data relating to health, criminal convictions, racial or ethnic origins, political opinions, religious or philosophical beliefs, trade union membership, genetic, biometric or data concerning sex life or sexual orientation. For the purposes of this notice, we should only process special category relating to health or criminal convictions.

Using information about you

We may collect and process your personal data to:

  • provide an insurance quotation;
  • arrangement and placement of a policy;
  • provide administration through-out the lifecycle of an insurance arrangement as well assisting in certain circumstances;
  • provide your metrics and personal details to Insurers or other third parties for the purpose of seeking a future Quote; the Insurers will be acting as data controllers which means they are in charge of how they handle your personal data and will have their own legal basis for processing;
  • provide your email address and mobile phone number to Insurers, for the purpose of administering an insurance policy that you purchase from them following a quote
  • display tailored product offers to you;
  • check your (or any other person included on the policy) licence details and conviction data using DVLA MyLicence to confirm licence status, entitlement and relevant restriction information and endorsement/conviction data;
  • provide you with our service, including for the purpose of quality control and analysis;
  • protect you and us from fraud or other threats;
  • conduct analysis, segmentation, and profiling of your data in order to provide you with direct marketing communications;
  • analyse our users’ behaviour and preferences, in order to improve the services we provide to our customers and the user experience on the website;
  • provide anonymised or pseudonymised data or statistical information to third parties to improve their own product and service offerings;
  • improve our service and manage our customer relationships.

Profiling and automated processing of personal data

You should be aware that our assessment may involve an automated decisionto check for customer suitability to our products, for example we might perform a credit search to check an individual’s solvency and credit rating. We also analyse data to identify products and services that customers may be interested in, this is commonly known as profiling. You have the right to object to the use of profiling activities and the use of automated decision making (services/tools and techniques) however in those situations it may prevent us from being able to provide you with insurance.

Please contact us if you object to the use of, or you have any questions relating to the use of, your data, the retention of your personal data or the use of profiling and automated decision-making services/tools and techniques.

Where we may collect personal data about you

We may receive your personal data through various channels; over the phone, through our website, face to face and directly through secure transfer from other providers

We might collect your personal data from various sources, including:

  • you;
  • your family members, employer or representative;
  • other Insurance participants;
  • credit reference agencies, anti-fraud databases, sanctions lists, court judgements and other databases;
  • Claims Underwriting Exchange;
  • government agencies such as the DVLA and HMRC;
  • open electoral register; or
  • in the event of a claim, third parties including the other party to the claim (claimant/defendant), witnesses, experts (including medical experts), loss adjusters, solicitors, and claims handlers

Sharing your personal data                                                                            

We will also share personal data with authorised third parties, this is necessary where we are required to do so by law, where we need to administer our business, to quote for, source, place and administer your insurances, to perform underwriting activities and to process claims. Some examples include:

  • Insurers;
  • Motor Insurance Bureau
  • Other Insurance Brokers;
  • Underwriters;
  • Credit reference agencies;
  • Debt recovery agencies; 
  • Claims handling companies;
  • Loss adjusters;
  • Reinsurers;
  • Regulators.

Examples of important areas where we use third party suppliers include for the purposes of:

  • web and data hosting;
  • marketing
  • cloud software;
  • insurance software rating and administration system providers
  • claims management;
  • print production;
  • market research;
  • pricing and analytics;
  • credit searches*;
  • processing for convictions or offences data;
  • product development;
  • fraud prevention;
  • compliance monitoring, quality management and audit;

We will ensure that any data processor we use has entered into a contract with us which fully sets out the data processor’s duties, including in relation to protecting the processing of your personal data. 

Unless required to do so by law, or for other similar reasons, other than those outlined we will never otherwise share personal information without good reason and without ensuring the appropriate care and necessary safeguards are in place; we will in any other event ask for your consent to share that information and explain the reasons.

* We will conduct credit reference checks at one or more of the UK’s credit reference agencies in certain circumstances. In all cases these checks will be carried out to confirm identity, help prevent fraud and calculate premiums. This is a soft search which means it is only visible to you (if you request a copy of your credit file at the credit reference agencies) and is not visible to other organisations. This type of credit reference check will not affect your credit file.

The search will be visible on your credit report but it won’t affect your credit rating as it’s not an application for credit. The credit reference agencies may add the details of our searches and personal data that we hold about you to their records relating to you.

Telephone call recording

Telephone calls with us will be recorded for training, quality and complaint handling purposes. We may engage third parties to carry out compliance monitoring on our behalf, and personal data including call recordings, is made available to such parties for this purpose.

Lawful Bases

Under the Data Protection Act 2018 (DPA 2018) the below lawful bases are appropriate for our data processing activities. We will use information, including sensitive information, about individuals, and other parties related to our insurance activities, principally:

  • In order to provide you with insurance quotes, set up and maintain your insurance policy, carry out fraud and credit checks, and handle claims, the legal ground for processing your personal data is that it is necessary for the performance of your insurance policy;
  • To comply with a Legal obligation
  • For the protection of vital interests. Because it is necessary to protect the vital interests of a data subject or another person
  • Necessary for our own Legitimate Interests. Because it is necessary for our own legitimate interests or those of other controllers i.e., for the legitimate interests of our Insurers or third parties (e.g., to search at credit reference agencies, monitor emails, calls and other communications or for market research, direct marketing, analysis and developing statistics, network and information security), except where such interests are overridden by the interests, rights, or freedoms of the data subject

Where we rely on legitimate interests in order to process your data, you may object at any time.

We will not change the lawful bases for our data processing without providing you notice.

Please note that Insurers and other third parties we may share your data with will act as data controllers for that data they receive. If we cease to process your data for whatever reason, Insurers or third parties may be required to continue to hold and process your data for their own purposes and based on their own legitimate interests or other legal basis.

Safeguarding your information

When processing personal data for profiling purposes undertaken as part of our activities, including those as a distributor of insurance we will ensure appropriate safeguards are in place, ensuring:

  • processing is fair and transparent and provide meaningful information about the logic involved; as well as the significance and the envisaged consequences
  • use appropriate mathematical or statistical procedures for calculating your carbon offset and driving score
  • appropriate technical and organisational measures are in place to enable inaccuracies to be corrected and minimise the risk of errors
  • secure your personal data in a way that is proportionate to the risk to your interests and rights and prevents discriminatory effects
  • We will also use your information when there is a justifiable reason for doing so, such as compliance with legal obligation (e.g., for the prevention and detection of fraud and financial crime, which may include processes which profile you); and for the recording and monitoring of telephone calls from you to us for auditing reasons.

Analytics (aggregated information)

By collecting information regarding your current, on-going, and past insurance arrangements or policies we will use this to carry out research and analysis (including profiling) principally as part of the actuarial (but not limited to) activities we carry-out to provide insurance arrangements to you now and in the future.

We will do this in such a way, which involves large volumes of information being converted into statistical or aggregated data meaning a particular individual can no longer be identified. Some aspects of the research and analysis undertaken are separate from using your information directly in connection with your insurance arrangement but are compatible with our activities as a distributor of insurance.

Use and storage of your information overseas

From time to time we may need to transfer, process or store some of your information using third parties located in countries outside of the European Economic Area (“EEA”). If your information is processed outside the EEA, we will take all necessary steps to ensure it is adequately protected. This includes ensuring there is a contractual agreement in place with the third parties which provides the same level of protection as required by the data protection regulation in the UK and EEA.

Specifically where the use of third parties who are located within the US is necessary, we will ensure the third party participates in and complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, regarding the collection, use, and retention of personal information about you that is transferred from the United Kingdom to the US.

Retention of your personal data

GoShorty will only keep and maintain information about an individual for as long as is necessary in providing our products and services or for compliance with a legal or regulatory obligation, including our legitimate interests or of a controller.

For the purposes of supporting our complaint handling, quality management, regulatory requirements and to defend against legal claims, personal data associated with the provision of quotes, inceptions and management of policies will be retained for a maximum of 7 years from the conclusion of your relationship with us.

Personal data will be retained for 11 years for the purpose of analysing and assessing risk in relation to insurance claims.

Personal data relating to quotes requested and subsequently not taken up by you will only be processed for marketing purposes for 2 years. Should you wish to stop receiving any form of marketing contact please let us know.

Call recordings will be retained for 3 years. Certain call recordings may be held for longer in the event that they are required to support specific regulatory investigations, complaints handling or the prevention and detection of crime.

GoShorty work with Insurance panel providers in order to provide you with a quote and incept insurance. Insurers will retain and delete personal data according to their own retention policies and you should ensure you read the insurers privacy policy, in respect of your personal data processed and retained by them.

Your rights

Individuals are provided with legal rights governing the use of their personal data. These grant individuals the right to understand what personal data relating to them is held, for what purpose, how it is collected and used, with whom it is shared, where it is located, to object to its processing, to have the data corrected if inaccurate, to take copies of the data and to place restrictions on its processing. Individuals can also request the deletion of their personal data.

These rights are known as Individual Rights under the Data Protection Act 2018. The following list details these rights:

  • The right to be informed about the personal data being processed;
  • The right of access to your personal data;
  • The right to object to the processing of your personal data;
  • The right to restrict the processing of your personal data;
  • The right to rectification of your personal data;
  • The right to erasure of your personal data;
  • The right to data portability (to receive an electronic copy of your personal data);
  • Rights relating to automated decision-making including profiling.

Individuals can exercise their Individual Rights at any time. As mandated by law we will not charge a fee to process these requests, however if your request is considered to be repetitive, wholly unfounded and/or excessive, we are entitled to charge a reasonable administration fee.

In exercising your Individual Rights, you should understand that in some situations we may be unable to fully meet your request, for example if you make a request for us to delete all your personal data, we may be required to retain some data for taxation, prevention of crime and for regulatory and other statutory purposes.

If you require further information on your Individual Rights or you wish to exercise your Individual Rights, please contact us by calling 0333 433 0001 or emailing info@dev.marketing.v3.goshorty.co.uk or writing to us at GoShorty, First Floor, West Wing, London House, First Avenue, Poynton Cheshire SK12 1YP.

Direct Marketing

GoShorty may contact you by post and telephone for our legitimate marketing purposes in order to let you know about offers and other products and services.

With your consent we may also from time to time contact you by SMS or email with details of our other products and services.

We may collect personal data about you which, when combined with the personal data you have given us, helps us to target and tailor communications which we believe may be more relevant to you. 

If you would like to opt out of receiving marketing correspondence of any kind, you can let us know at any time by writing to us, by calling us on 0333 433 0001 or emailing info@goshorty.co.uk

We do not sell or pass on your details to any third parties for the purposes of marketing their own products or services.

Using our Website, and Cookies

We may collect information about your computer including where available your IP address, operating system and browser type.  In addition, we use Cookies, a cookie is a small text file that can be stored on your computer/device and is a standard feature on most modern websites in order to support your browser whilst navigating, to keep your website preferences and help to tailor your online experience. This will be clearly explained to you when you visit our website, and you will typically have to accept the cookies to benefit from all the services our website can offer.

If you would like to read about them in more detail, please see our cookie policy on our website.  

We may also record your visit to our website via online tracking software for the purpose of improving the services we provide to our customers and the user experience on our website.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us by writing to us, by calling us on 0333 433 0001 or emailing info@goshorty.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Updated 25/4/24