Privacy Notice for Clients

Garratts Insurance Brokers Limited (‘we’, ‘us’ or ‘our’) are committed to protecting and respecting your privacy.

This privacy notice sets out the basis for which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views

Who we are

The data controller for your information will be Garratts Insurance Brokers Limited, Camden House, 2 Camden Place, Preston PR1 3JL. ICO Registration 582592.

What information do we collect about you?

All client data will be held by us in our manual and automated filing systems.

This may include:

  • contact details (including names, postal addresses, email addresses and telephone numbers);
  • bank details;
  • other details/records that may be necessary to assist us in placing your insurance needs potentially including special categories of personal data such as health and criminal convictions.

How is your personal information collected?

Your personal information may be collected directly from you during the process of setting you up as a client of ours or during the course of taking instructions from you or providing you with advice. We may also collect information from third parties including, background check agencies, credit reference agencies and other online sources.

Purpose – how will we use your personal information?

We will only use your information on the basis that it is necessary to administer your insurance contract or help you make a claim. Where we need to pass information to other firms, it will only be for that purpose. These firms will be insurers, other insurance brokers and firms handling or assisting in the handling of claims. It includes finance providers and firms that process or administer our records.

When we contact you, it will either be for the above reason, or because we have a legitimate interest in marketing related products e.g. to provide you with information about our services; to invite you to events or seminars that may be of interest to you; to provide you with updates about topics that may be of interest to you.

Failure to provide personal information

Failure to provide certain information when requested may result in us being unable to perform both our legal obligations and our contractual duties to you, such as making payments to and on your behalf.

Disclosure of data

We may share your personal information with third parties, where this is reasonably necessary, for the purposes set out in the policy. Third parties may include other brokers, insurers, auditors, loss adjusters, solicitors, regulatory bodies (such as the Financial Conduct Authority), our data processors providing business support services and law enforcement agencies. We may also disclose your personal information with other third parties, for example in the context of the possible sale or restructuring of the business.

Data may also be disclosed if we are under a duty to share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of business and other agreements from time to time. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Transfer and storage of data outside the EU

The personal information you provide to us will not be transferred and stored outside of the European Economic Area (EEA) for the purposes of carrying out administration and other functions necessary to provide our legal services to you.

Data Subject Rights

Under certain circumstances, you have the right to:

  • Access your information.
    You are entitled to request access to the information we hold about you (known as a ‘data subject access request’). You are entitled to receive a copy of the personal information we hold about you and to check that it is being lawfully processed.
  • Correct your information.
    If the information we hold for you is incomplete or incorrect, you have the right to request a correction.
  • Request erasure.
    Where there are no reasons for continuing the processing of your personal information, you are able to request the removal or deletion of the personal information.
  • Object to processing.
    Where we rely on legitimate interest for the processing of your personal information, or for the purposes of direct marketing, you have the right to object to the processing.
  • Request the restriction of processing.
    You are entitled to request for a suspension for the processing of your personal information, for example, if you are awaiting the reasons for the processing of the information or require us to establish its accuracy.
  • Transfer your personal information.
    You are able to request the transfer of your personal information to another party.

There may be occasions where we are unable to delete records. We will discuss this with all clients who request any data to be deleted.

It is important that the personal information we hold for you is accurate and up to date. If you would like to review, verify, correct or request erasure of your personal information, object to the processing of your personal data or request that we transfer a copy of your personal information to another party, please contact:

No fee

These rights are available to you at no cost; however we may charge a reasonable fee where a request is deemed to be excessive or unfounded. In such circumstances, we may otherwise refuse to comply with the request.

How long is your personal data retained?

We will hold your information for a minimum of seven years after your relationship with us ends. Personal information may be retained for as long as necessary to comply with our legal obligation, or in order to protect yours or another person’s vital interest.


We understand the importance of protecting your privacy and we will ensure your data is safeguarded and held securely in accordance with our obligations under the Data Protection laws. Appropriate technical and organisational measures have been implemented to ensure personal information is protected and to prevent your personal data from being lost, used, accessed in an unauthorised way, altered or disclosed. Details of these measures are available upon request. We also limit access to your personal information to those employees, contractors and other third parties who have a business need to know. This access will be granted on a confidential basis and processing of the information will only take place subject to our instruction.

We have in place procedures and a policy to deal with any potential data security breaches, and data subjects and any applicable regulators will be notified where we are legally required to do so.


If you consider that our processing of your personal information infringes the Data Protection laws, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO).

How to contact us

By email at or write to the Garratts Insurance Brokers Limited, Camden House, 2 Camden Place, Preston PR1 3JL.

Revisions to our Privacy Notice

We reserve the right to revise this Notice or any part of it from time to time and will provide you with a new Privacy Notice where any substantial updates are made. We may also notify you through other means, about the processing of your information.