• If you bought your policy on or after the 10th of April 2024: Assurant General Insurance Limited with offices at Emerald Buildings, Westmere Drive, Crewe, Cheshire, CW1 6UN is the insurer and controller of your personal information in the context of your policy.
• If you bought your policy before the 10th of April 2024: London General Insurance Company Limited with offices at TWENTY Kingston Road, Staines-upon-Thames, Surrey, TW18 4LG, United Kingdom is the insurer and controller of your personal information in the context of your policy.

The website mypolicyportal.assurant.co.uk is managed by Lifestyle Services Group Limited with offices at Emerald Buildings, Westmere Drive, Crewe, Cheshire, CW1 6UN, on behalf of the insurers listed above (hereinafter "Assurant," "We," and "Us"). This self-service portal allows you to view and manage your insurance policy (hereinafter the 'Service').

When you use the Service, your personal information is processed as set forth below. Personal information means information relating to an identified or identifiable individual.

This privacy notice (hereinafter the 'Notice') applies only with respect to personal information collected when you use the Service and does not reflect the data handling practices of other services, websites, or applications.

The following information is collected about you when you use the Service:

• Policyholder information (policy number and Amazon Order ID)

You may decide whether to share this information. If you do not provide this information, you will not be able to access or use the Service.

• Name and contact details (this includes postal address, phone number, email address),
• Policyholder information (policy number and Amazon Order ID)
• Details of your policy (for example, policy documents, start date, product covered, cover type, status, invoices, claim history.)
• Records of any correspondence related to specific matters, and
• Feedback provided by you about the Service.

Your personal information is processed for the purposes and legal bases set forth below.

4.1 The performance of the contract to provide you with the Service, this includes the following data processing operations:

• Provide you with the self-service portal,
• Allow you to view your policy documents, invoice and claim history,
• Cancel your policy (when applicable),
• Update your details (when applicable),
• Transfer your policy to another person (when applicable), and
• Enable you to initiate a claim (when applicable).

4.2 Where necessary to pursue Our legitimate interests, in particular for the following purposes of processing:

• Answer your questions and address Service-related issues you may have.
• For purposes of statistical analysis, customer surveys for internal administrative functions, customer relationship management and evaluation of the quality of the Service.
• Monitor and improve products and customer experience and manage internal procedures in accordance with industry standards.
• Improve the safety, security, and performance of the Service.
• Prevent fraud and detect fraud,
• Prevent and detect money laundering and terrorist financing, and
• Perform compliance and sanctions screening.

Your personal information may be disclosed on a need-to-know basis to the following parties:

• Third party suppliers of services, such as the website service provider, customer support, customer communications, audit, application and database hosting.
• Public Authorities: if required by law or for the legal protection of Controller's legitimate interests in compliance with applicable law, your personal information may be disclosed to Public Authorities.
• Fraud prevention services and databases; if you provide false or inaccurate information to Assurant, and the possibility of fraud is suspected, your information will be share with fraud agencies.

Your personal information will be retained for the period strictly necessary for the full performance of your insurance policy. This means that your personal information will not be retained for more than 6 years after the end of your insurance policy, or after its cancellation, to respond to requests, claims for compensation or requests for information. However, your information may be retained for a longer period if this is necessary to comply with applicable law or to protect and exercise Our rights.

Automated decision-making will be used in certain circumstances. These automated decision-making tools are typically used when the insurer makes direct decisions about the policyholder. For example, when you make a claim, certain decisions are based on the answers that you give, the circumstances and claims history. We will give you additional information about automated decision-making processes before, or when decisions are made. You have the right to have someone to review the decision and obtain an explanation of the decision. If you wish to do so, please contact us by using the contact details set out below.

For individuals located in the United Kingdom ('UK'), personal information may be transferred to, and processed in, countries where data protection and privacy regulations do not offer the same level of protection as the UK and other parts of the world. Where personal information is transferred outside the UK to a country that is not subject to adequacy decisions, including to the US, it is adequately protected by approved standard contractual clauses, or other approved transfer mechanisms.

To obtain a copy of the relevant transfer mechanism or additional information on such transfers, please address these requests to Us.

You have the following rights regarding your personal information:

• Right to access the personal information We hold about you (Access)
• Right to have your personal information corrected (Rectification)
• Right to have your personal information deleted (Erasure)
• Right to request the restriction of the processing of your personal information (Restriction)
• Right to request the portability of your personal information (Data Portability)
• Right to object the use of your personal information when we base the processing on a contract or on Our legitimate interests (Objection)
• Right to withdraw your consent when we base the processing on your consent (Consent)

If you wish to submit your privacy right request, please click on the following link: www.assurant.com/dataprotection/eu.

If you have unresolved privacy concerns, and you are located in the UK, you have the right to complain to the Information Commissioner's Office.

Assurant implements the appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, taking into account the state of knowledge, the costs of implementation and the nature, scope and context of the purposes of the processing as well as the risks to the rights and freedoms of natural persons. In particular, safeguards have been implemented to protect your personal information in accordance with industry standards. Dedicated measures are also in place to restrict access to personal information to those individuals who have a valid business purpose to have access to such information.

10.1 Minimum Age

You must be at least 18 years old to use the Service. Consequently, personal Information about children under the age of 18 are not collected for the Service.

10.2 Changes to the Notice

This Notice may be updated from time to time. If material changes to this privacy notice are made, then you will be notified by email or by means of a notice through the Service. Please review changes to this Notice carefully.

10.3 Contact Us

For general inquiries about the Service, please contact Assurant by email: enquires@techprotection.co.uk or call 0303 313 00 02 (local rates applicable).

If you have queries or questions about this Notice, please contact us:

By email: dataprotectionofficer@assurant.com

By post to the controller:

Lifestyle Services Group Limited with offices at Emerald Buildings, Westmere Drive, Crewe, Cheshire, CW1 6UN.