WHO ARE WE?
We are FMB Insurance Services, a company registered in England No.01520341, at the addresss of Star House, Star Hill, Rochester, Kent, ME1 1UX. We are authorised and regulated by the Financial Conduct Authority. We are a wholly owned subsidiary of the Federation of Master Builders Limited , registered in England No. 368163, at the address of Star House, Star Hill, Rochester, Kent, ME1 1UX. FMB is registered as a data controller at the Information Commissioner’s Office with number Z6547840.
We own and operate this site.
You can find out who to contact about anything contained in this Privacy Policy in the “Contact Us” section on our website.
ABOUT THIS POLICY?
This Privacy Policy explains how information that you provide to us is collected, used, and disclosed by the FMB and it’s subsidiary, FMB Insurance. This Privacy Policy applies to information we collect when you access or use our products and services (such as our insurances, membership, websites, and online services), or when you otherwise interact with us (phone, social media, texts mail).
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy, and in some cases, we may provide you with additional notice (such as adding a statement to our website’s homepage or sending you an email notification). We encourage you to review the Privacy Policy frequently to stay informed about our information practices and the ways you can help protect your privacy.
OUR PRINCIPLES
We will respect your privacy. And we will do our very best to protect your privacy by using appropriate security technology.
We make sure that we have appropriate security measures to protect your information, and when we ask another organisation to provide a service for us, they have appropriate security measures.
We will be clear as to what information about you we will collect and how we will use it.
We will use personal information only for the purposes for which it was originally collected and we will make sure we delete it securely when appropriate.
Should we send you marketing (whether by email, post, SMS or telephone) we will make sure it is clear how you can opt out, for example, we have boxes you need to tick if you longer want to receive to receive marketing emails.
However, we may email you occasionally with information or questions about your Insurances, for example, with reminders, renewal notices, requests for reviews and market research.
If we or our service providers transfer any information out of the European Economic Area (EEA), it will only be done with the relevant protection (stated under UK law) being in place.
We will regularly train our staff on their privacy obligations and ensure they understand how important the protection of your data is.
We will update our records when you inform us that your details have changed.
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
WHAT PERSONAL DATA DO WE COLLECT?
We collect information you provide directly to us.
We collect and store the information which you give us when you apply for insurance, use our online services or enquiry forms on our site, participate in contests, leave us reviews, communicate with us via third-party social media sites, request customer support or otherwise communicate with us.
The types of information we may collect directly from you include your name, FMB membership number (if applicable), email address, phone number, billing address, demographic information, type of products you are interested in and any other information you choose to provide.
Should you be an FMB member we also have access to data held by the Federation of Master Builders. Please view their own privacy policy to see personal data they collect.
We will only use this information for the purpose for which it is provided, and will not share it with any third parties unless you have either given us permission to do so, or we are required by law by a statutory agency such as Trading Standards, to do so.
Information We Collect Automatically:
When you access or use our online services we automatically collect information about you, and we may associate it with information that you provide directly to us.
For example, we may collect:
Log Information:
We log information about your use of our website, such as IP address, web browser type and language, access times, referring and exit websites, and clickstream data.
Mobile Device Information:
We collect information about your mobile device when you access or use our mobile applications, such as the hardware model, operating system version, unique device identifiers, and performance and diagnostic data regarding your use of our website.
Information Collected by Cookies and Other Tracking Technologies:
We use cookies and other similar technologies (e.g., web beacons, pixels, mobile identifiers) on our websites, mobile applications, email messages, and advertisements, to help us understand user behaviour, improve our services, customise your experience, see which areas and features of our websites and applications are popular, and understand usage and campaign effectiveness. Please refer to our Cookie Policy for more information.
Information We Collect from Other Sources:
In order to fulfil your Membership, we may also obtain information from other sources and combine that with information we collect through our products or services. For example, we may collect information about you from credit reference agencies, feedback from your clients, and information from third party bodies such as Trading Standards. Details of these sources are contained on the Membership Application form.
HOW DO WE USE YOUR PERSONAL DATA AND ON WHAT LEGAL BASIS?
We may use information about you for varying purposes, including;
|
Purpose of information collected |
Our legal basis for processing the information |
|
Develop, operate, and improve our products and services |
To fulfil our contractual obligation to provide such services to members. We would not be able to fulfil the requirements of membership without using your information. |
|
Provide and deliver the products and services you request, process transactions, and send you related information, such as confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages |
To fulfil our contractual obligation to provide such services to members. We would not be able to fulfil the requirements of membership without using your information. |
|
Respond to your comments, questions, and requests and provide customer service and technical support |
To fulfil our contractual obligation to provide such services to members. We would not be able to address your comments, questions or requests without this processing. |
|
Communicate with you about products, services, offers, promotions, rewards, and events offered by FMB and others and provide news and information we think will be of interest to you. |
It is in our legitimate interests to be able to offer you other products and services from the FMB. |
|
Monitor and analyse website trends, usage, and activities in connection with our products and services |
It is in our legitimate interests to be able to optimise the performance of our website. |
|
Personalise advertisements, content, and features that match your Membership profiles or interests |
Where we have your consent to do so. |
|
Deliver competitions, promotions and awards and process and deliver entries and rewards |
It is in our legitimate interests to be able to offer you other products and services from the FMB. |
|
Link or combine with information we get from others to help understand your needs and provide you with better service |
It is in our legitimate interests to be able to offer you other products and services from the FMB. |
|
To assist in resolving any disputes arising between you and your clients through the FMB Dispute Resolution Service. |
It is in our, and the public’s legitimate interests to be able to offer you this service. |
|
To assist you in promoting your business through use of customer testimonials on our website and in other communications. |
It is in our member’s legitimate interest in promoting their business. |
|
We will retain personal data from cancelled Memberships and closed accounts in order to enforce our terms and conditions, prevent fraud, resolve disputes, troubleshoot problems, assist with any investigations and take other actions as permitted by law. |
It is in our, and the public’s legitimate interests to be able to retain minimum information in such cases. |
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
You will be pleased to hear that we don’t provide your personal data to third parties for marketing purposes, without your express consent.
We may allow access to your personal data by third parties who supply us with a service - for the purpose of their service only and in accordance with our instructions. Examples include website hosts and businesses which assist us in undertaking communications or monitoring our site.
We may share your data with our email marketing provider MailChimp who are based in the United States. Mailchimp participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework.
We may disclose personal data so far as reasonably necessary:
1) if we think you have or may have breached our terms and conditions
2) to enforce our rights or protect the public or where if we are required to do so by law or appropriate authority;
3) to obtain advice from an external lawyer or consultant
4) in the case of an actual or proposed (including negotiations for a) sale or merger or business combination involving of all or the relevant part of our business.
Except as otherwise specifically included in this policy, this document addresses only the use and disclosure of information we collect from you. If you disclose your information to third parties, whether they are other users of our site or other websites, different rules may apply to their use or disclosure of your information.
Our website may offer social sharing features (such as the Facebook “Like” button), which let you share actions you take on our services with other media. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with that site. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the sites that provide these features.
HOW CAN I ACCESS MY PERSONAL DATA AND HOW LONG WILL WE KEEP IT?
How long do we keep your personal data for?
If we have not had meaningful contact with you (or, where appropriate, the company you are working for or with) for a period of two years, we will delete your personal data from our systems unless we believe that we have another valid reason to keep it (for example, in connection with on-going insurances, warranties or client disputes).
How can you access or amend your personal data?
Even if we already hold your personal data, you still have various rights in relation to it.
Right to object:
If we are using your data because we think it necessary for our legitimate interests to do so and you do not agree, you have the right to object. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
Right to withdraw consent:
Where we have obtained your consent to process your personal data for certain activities (for example, to send you newsletters), or consent to market to you, you may withdraw your consent at any time.
Data Subject Access Requests (DSAR):
You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete such information. At this point we may comply with your request or do one of the following:
Right to erasure (right to be forgotten):
In certain situations, (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will generally assume that you would prefer us to keep a note of your name on our database of individuals who would prefer not to be contacted. That way, we will minimise the chances of you being contacted in the future where your data are collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.
Right of data portability:
Where you have supplied us with information electronically and we process your data based on your consent or contractual necessity, you have the right to transfer your data from us to another data controller. We will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format.
Right to lodge a complaint with a supervisory authority:
You also have the right to lodge a complaint with the Information Commissioners Office (ICO), details of which can be found here.
For information about your rights under UK data protection laws (GDPR), see the website of the UK Information Commissioner’s Office: www.ico.org.uk.