Privacy Policy

Last updated: February 2023

Protecting your personal information is extremely important to us. It's especially important for a company like ours, as our customers trust us to look after a huge amount of sensitive information on everything from their date of birth to their medical history.

The way we collect, use, store and share your information is important. Our customers expect us to manage their information privately and securely. If we don't, they'll lose their trust in us.

This policy tells you how we collect and process your personal information. Please take a few minutes to read it, and show it to anyone else connected to your product whose information you are sharing with us (including, but not limited to, trustees and beneficiaries). This policy may be subject to future change.

Unfortunately, sending information via email is not completely secure; anything you send is done so at your own risk. Once received, we will secure your information in accordance with our security procedures and controls.

Who are we?

Investment Discounts On Line Limited is part of the Legal & General Group and is the registered data controller of your personal data for the purposes of the Data Protection Act. Trading names of Investment Discounts On Line Limited also known as theidol.com include comparecover.com, protectmypeople.com and annuityready.com.

What does this policy cover?

This privacy policy relates to retail customers and / or any individual consumers of goods / or services including users of application-based technology and those who obtain quotes, utilise our service, purchase provider products, enter into agreements via our services including individuals covered under their employer sponsored schemes, from one of the product providers hosted by us and/or individuals that we may otherwise interact with in the course of our business.

What is personal information?

When we talk about personal information we mean information about an individual that can identify them, like their name, address, email address, IP address, telephone number and financial details. It can relate to customers (including prospective customers), their appointed representatives (e.g. power of attorney), employees, shareholders, business contacts and suppliers. Any reference to 'information' or 'data' in this policy is a reference to personal information about a living individual.

What information do we hold?

We may collect and process the following personal information about you:

Type of data	Description	Examples of how we use it
Contact	Who you are Where you live (including previous addresses) How to contact you Third party contacts (e.g. family members)	Servicing your products Marketing Analysis and profiling Enhancing our product and service offering Assessing eligibility based on product provider's requirements
Personal Details	Age Gender Family details Visual images and personal appearance Financial Details Lifestyle, health, medical information and social circumstances	Marketing Analysis and profiling Quotations provided Product underwriting Assessing eligibility based on product provider's requirements Services selected
Vulnerability details	Capability / capacity Financial circumstances Life events Health details	Ensuring accessibility Servicing your products Making sure the products and services meet customer needs
Transactional	Bank and/or card details How you use your products Changes you make to your products	Servicing your selected product Making sure our hosted products and services are fit for purpose Transmit your payment card details to your selected provider's Payment Service Provider
Consent and preferences	Ways you want us to market to you Ways you want selected product providers or partners to market to you Information from third parties acting on your behalf Lifestyle, health, medical information and social circumstances	Marketing Prevention of direct marketing to those who have opted out Obtain quotes including prices from product providers
Technical	Details on the devices and technology you use	Making sure our products and services are fit for purpose
Open data and public records	Information about you that is openly available on the internet (including social media platforms)	Product and service administration
Documentary data and national identifiers	Details about you that are stored in documents like: Your passport Drivers licence Birth certificate National insurance number IP address	Identification and verification Prevention of financial crime
Location data	Your device's current location Use of location services such as the location services of your operating system, or browser, sensor data from your device (e.g. Bluetooth data, beacon data, Wi-Fi access points, GPS data and cell tower data).	In limited circumstance some products and/or services will require location data for the purpose of access control functionality, however you can change location setting on your device at any time. We will never share your location with others, except with your express consent or as permitted under the Privacy Policy.
Location data	If you have turned on persistent background location services on your device, we may obtain your device's location even while you are not using the services or products on your device. The persistent background location services use various technologies to determine your precise location, such as the location services of your operating system or browser, sensor data from your device (e.g. magnetometer, barometer, gyroscopes, accelerometers, compasses, Bluetooth data, beacon data, Wi-Fi access points, GPS data, and cell tower data). If you have opted-in to sharing our background location with us as part of using our services or products, you can opt-out at any time by going into your device settings and switching off background sharing / location services.

Where do we get our information from?

Information you give us directly such as when you request a quote or apply for one of our provider products, information regarding our products and services, or contact us by phone, e-mail etc. We may record phone calls for our mutual protection, to meet our regulatory and contractual obligations and to improve our customer service standards.
Information we collect about you or receive from other sources. This could be information you provide to us electronically (through our website or an online portal, for example), information we get from your online browsing activity, or information from a third party or from publicly available sources such as Regulatory Bodies e.g. FCA and Companies House and social media platforms. We may also receive information if you have been dealing with a financial adviser or have been introduced to us by another company (e.g. aggregator) or your employer (or their financial adviser).
Cookies. We use cookies and similar technologies to support the functioning of our websites and applications. This includes allowing you to browse between pages effectively, recording and storing your preferences and generally improving your online experience. They can also help to ensure that adverts you see online are more relevant to you. You can find more information about setting your cookie preferences by using the 'Cookie Policy' link at the bottom of our website or, alternatively, refer to our cookie policy.

How do we use your information?

We use personal information that we hold about you:

To share with the companies who provide the quotations for products and services that you request and to provide you with the information, products and services requested.
To share with your selected insurance product provider to enable a requested policy, product or service to be set up.
To provide you with marketing information about other services or products we offer across the Investment Discount On Line Limited brands that are similar to those that you've already enquired about, or services or products you've consented to receiving. If you have opted in to receive marketing from us, based on your marketing preferences, we may deliver this information by email, post, telephone or personalised online marketing via our own systems, social media platforms and/or other third party websites e.g. YouTube. Please note that if you choose not to receive online marketing, you will not see personalised messages using your personal data, however you may still see generic online advertising about our products and services. We will not sell your data to third parties for them to market to you. We may also send marketing to you using our 'legitimate interests', please see below for further information.
Where you consent to marketing from your selected insurance product provider and / or partner on our website, we will share your request with them.
To tell you about changes to our services and products.
To comply with any applicable legal or regulatory requirements (including 'know your customer' checks, or to comply with any applicable regulatory reporting or disclosure requirements).
For carrying out market research, statistical analysis and customer profiling to help us to improve our processes, products and services and generate new business (e.g. to understand digital behaviours, identify financial attitudes, find new audiences with similar attributes and develop more engaging communications).
To validate sales information.
To run our business in an efficient and proper way. This includes testing our systems, managing our financial position, business capability, planning, communications, corporate governance, and audit.
For any other purpose that we've agreed with you from time to time.

When you request a quotation for a product or to receive a service from us, the online form (or in some instances the application form) you fill out or the resulting contract may contain additional conditions relating to the way we use and process your personal information. These will apply in addition to the uses described in this document.

Whilst Investment Discounts On Line Limited remain the data controller in relation to the information you provide to us, the product and service providers (such as those insurance companies we request quotes from) will also act as data controllers in relation to the information we pass to them. Requesting a quotation will be taken as acceptance for your data to be passed to our panel of insurance and annuity providers.

Each product and service provider has their own privacy policy and terms and conditions available on their website which will apply to their treatment of the data.

In some cases, we may use software or systems to make automated decisions (including profiling) based on the personal information we hold or collect from others. These may include:

The prevention and detection of fraud and financial crime: To perform transaction monitoring, identity verification, money laundering and sanctions checks, and to identify politically exposed individuals. We are required by law to perform these activities which may be achieved using solely automated means to make decisions about you or any individual related to your product or application. We may use these activities to decline the services you have requested or to stop providing existing services to you.
Providing quotes, calculating premiums, and underwriting ratings: We may process a number of factors including information about you and your health, lifestyle information such as your postcode, occupation and hazardous pursuits that you perform. These factors may be assessed against our panel of providers pricing and underwriting criteria which may include statistics regarding life expectancy, illness, injury and demographic risks and where you live. The products providers may use these activites to determine the price of your products and whether they should undertake the risk of insuring you - including how much insurance should be granted to you, how much you should pay for it and whether or not to insure you in the first place.
Speech Analytics: We may use speech analytics on recorded phone calls to meet our regulatory obligations e.g. identify vulnerable customers, complaints, staff training needs, process and product service development, quality control and audit. These profiling activities are not solely based on automated processing. The results are manually reviewed to decide if we need to take further action.
Servicing activities such as (i) Personalising the content and design of communications and online services and (ii) Determining when to provide tailored communications about your products and the appropriate channel(s) to use. These may be achieved using profiling in order to predict certain characteristics about you (e.g. your economic situation, interests, personal preferences or transactional behaviour). The activities will not have a detrimental effect on you.

Using your information in accordance with data protection laws

Data protection laws require us to meet certain conditions before we're allowed to use your personal information in the way we describe in this privacy policy. We take these responsibilities extremely seriously. To use your personal information, we'll rely on the following conditions, depending on the activities we're carrying out:

Providing our services to you: We'll process your personal information to carry out our responsibilities resulting from any agreements you've entered into with us and to provide you with the information, products and services you've asked from us which may include online services.
Complying with applicable laws: We may process your personal information to comply with any legal obligation we're subject to.
Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we'll rely on a condition known as "legitimate interests". It's in our legitimate interests to collect your personal data as it provides us with the information that we need to provide our services to you more effectively. We may use your information to:
- Carry out market research and product development, which can include creating customer demographics and/or profiling.
- Develop and test the effectiveness of marketing activities.
- Develop, test and manage our brands, products and services.
- On occasion we may wish to send a card or small gift to a customer, in recognition of their particular circumstances.
- Study and also manage how our customers use products and services from us and our business partners, including customer surveys.
- Manage risk for us and our customers.
This requires us to carry out an assessment of our interests in using your personal data against the interests you have as a citizen and the rights you have under data protection laws.

The outcome of this assessment will determine whether we can use your personal data in the ways described in this privacy policy (except in relation to marketing, where we'll always rely on your consent). We'll always act reasonably and give full and proper consideration to your interests in carrying out this assessment.
Consent: We may provide you with marketing information about our services or products where you've provided your consent for us to do so.

You may opt out of marketing at any time by visiting our Unsubscribe service, emailing customerservices@theidol.com or by telephoning our customer service team on 0800 915 7885.
Special category (sensitive) data: We will process medical and health, racial and ethnic origin, genetic and biometric or sex life and sexual orientation information you have provided with the insurance providers, and any other sensitive information obtained from a third party, solely for the purposes of allowing us to administer your products. Our lawful basis for processing will be either your explicit consent or we may process special category data for reasons of substantial public interest in accordance with applicable law. We will only process data that is needed for specific purposes.
Alternatively, we may process special category data for reasons of substantial public interest in accordance with applicable law. We will only process data that is needed for specific purposes.
Criminal Conviction Data: Where necessary, we will process this type of information for the purposes of allowing providers to underwrite and administer your products and deal with claims as well as to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.

Please be aware that the personal information you provide to us, and which we collect about you, is required for us to be able to provide our services to you and without it we may not be able to do so.

How long do we keep your information for?

We'll keep your personal information in accordance with our internal retention policies. We'll determine the length of time we keep it for based on the minimum retention periods required by law or regulation. We'll only keep your personal information after this period if there's a legitimate and provable business reason to do so.

For annuity products, we may retain your personal information indefinitely using the legitimate interests condition in order to support future enquires from you, your family or our regulators.

Occasionally, it may be impossible to delete data, due to technical limitations. In these case, we will take steps to put the data beyond use. This means that your data will not be access or shared and your rights and freedoms will not be affected.

Who do we share your personal information with?

We'll only disclose your information to:

Our hosted panel of product providers, insurance service providers, third-party suppliers, contractors and the company that has referred you to us (including their third-party suppliers) for the purposes listed under 'How do we use your information?' above.
The relevant payment service provider who processes your premium payment on behalf of your selected product provider. No payment card details will be stored by theidol.com so should you have any payment or payment card queries you should contact your insurer direct.
Selected third parties, so that they can contact you with details of the products and services that they provide, where you have expressly opted-in or consented to the disclosure of your personal data for these purposes.
Our regulators, law enforcement agencies, data verification and fraud prevention agencies, as well as our business partners etc.

Additionally, we may disclose your personal information to third parties:

In the event that we sell or buy any business or assets, in which case we'll disclose your personal data to the prospective seller or buyer of such business or assets.
If we, or substantially all of our assets, are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
If you have been dealing with a financial adviser, we'll provide information about your products or service and, where appropriate, with other information about your dealings with us, to enable the adviser to give you informed advice.
For employer sponsored schemes, we may share some details of your plan with your employer and any professional advisor(s) they appoint on their or your behalf to service and provide accurate financial advice about the scheme.
In order to apply the terms of any service with you.
If we're under a duty to disclose or share your personal data in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.
To protect you and your selected provider from financial crime, we may be required to verify the identity of new and sometimes existing customers. This may be achieved by using reference agencies to search sources of information relating to you (an identity search). This will not affect your credit rating but our credit record will show that a search has been made (sometimes referred to as a soft footprint. If this fails, we may need to approach you to obtain documentary evidence of identity.
If you make a claim, we'll share your information (where necessary) if requested by your selected insurance or annuity company to prevent fraudulent claims.

Additionally, your information, including special category and criminal conviction data, may be disclosed to any other insurance company to whom you apply for products or services.

As well as sharing your information with insurance or annuity providers, if you've been introduced to us by another company (such as an aggregator and price comparison website, your employer or their financial adviser) we may share your information with them, to enable them to:

Underwrite your product (insurance and annuity providers only)
Administer and service your products.
Validate the information provided.
Carry out market research, statistical analysis and customer profiling.
Where you have consented, send you marketing information by post, telephone, email and online about their products and those of carefully selected third parties.
Assist you with your application process. (aggregator and price comparison websites only).

Fraud prevention

The personal information Investment Discounts On Line Limited collect from you may be shared with fraud prevention agencies who will use it to prevent fraud and money laundering and to verify your identity. If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies. Law enforcement agencies may access and use this information.

We may also share information about you with other organisations and public bodies, including the police and we may check and/or file your details with fraud prevention agencies and databases. If fraud is detected, you could be refused certain services, finance or employment. Further details of how your information will be used by us and these fraud prevention agencies can be found by accessing this link:

CIFAS: www.cifas.org.uk/fpn
National Hunter: www.nhunter.co.uk/privacypolicy

Investment Discounts On Line Limited and other organisations may also access and use this information to prevent fraud and money laundering, for example, when:

Checking details on proposals and claims for all types of insurance.
Checking details of job applicants and employees.

Investment Discounts On Line Limited and other organisations may access and use from other countries the information recorded by fraud prevention agencies. Please contact us if you wish to receive the relevant details of the fraud prevention agencies by emailing customerservices@theidol.com.

Investment Discounts On Line Limited or your selected provider may also check the details of other parties related to your contract, including verification of identity. This includes beneficiaries, trustees, settlors, third party premium payers, executors or administrators of your estate, parties with power of attorney and any other beneficial owner.

Protecting your data outside the UK

The data that we collect from you may be transferred to, and stored at, a destination outside the UK to to third-party suppliers, delegates or agents. We'll take all reasonably necessary steps to make sure that your data is treated securely and in accordance with this privacy policy to ensure your personal information is handled with the same protections that we apply ourselves.

We'll only transfer your data to a recipient outside the EEA where we're permitted to do so by law (for instance, (A) where the transfer is based on standard data protection clauses adopted or approved by the UK's Information Commission's Office, (B) where the transfer is to a territory that is deemed adequate by the UK, or (C) where the recipient is subject to an approved certification mechanism and the personal information is subject to appropriate safeguards, etc.).

Your Rights

You have rights under data protection law that relate to the way we process your personal data. More information on these rights can be found on the Information Commissioner's website. If you wish to exercise any these rights, please get in touch with our customer services team by emailing customerservices@theidol.com or by telephoning our customer service team on 0800 915 7885.

Your Rights

1. The right to access the personal data that we hold about you.

2. The right to make us correct any inaccurate personal data we hold about you.

3. The right to make us erase any personal data we hold about you. This right will only apply where for example:

We no longer need to use the personal data to achieve the purpose we collected it for
You withdraw your consent if we're using your personal data based on that consent
Where you object to the way we use your data, and there is no overriding legitimate interest

4. The right to restrict our processing of the personal data we hold about you. This right will only apply where for example:

You dispute the accuracy of the personal data we hold.
You would like your data erased, but we require to hold it in order to stop its processing.
You have the right to require us to erase the personal data but would prefer that our processing is restricted instead.
Where we no longer need to use the personal data to achieve the purpose we collected it for, but you need the data for legal claims.

5. The right to object to our processing of personal data we hold about you (including for the purposes of sending marketing materials to you or using your personal information for profiling purposes).

6. The right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to make us transfer this personal data to another organisation.

7. The right to withdraw your consent, where we're relying on it to use your personal data (for example, to provide you with marketing about our services or products).

8. For automated decisions (including profiling), you have the right to:

Obtain an explanation of the decision and challenge it
Request for the decision to be reviewed by a human being

Contacts and complaints

If you have any questions about this privacy policy or wish to exercise any of your rights, including changing your marketing preferences, please get in touch with our Customer Services team.

If you have any concerns about the way we process your personal data, or are not happy with the way we've handled a request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner's Office. Their address is:

First Contact Team
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF

Data Protection Officer

If you'd like to exercise your right to access any personal information that we hold about you, write to: theidol.com, The Edge, Eden Business Park, Penrith, Cumbria CA11 9FB

You can also contact our Data Protection Manager directly with any questions or issues relating to the way we process your personal information:

Name: Mary Davis
Email address: datacontroller@theidol.com
Address: The Edge, Eden Business Park, Penrith, Cumbria, CA11 9FB

If you are not satisfied with the way we deal with your enquiry you can escalate your request to:

Group Protection Officer
Email address: Data.Protection@landg.com
Address: 1 Coleman Street, London, EC2R 5AA