Privacy Policy

Table of Contents

Controllers of Personal Information

Trinity Lane Insurance Company Limited is a data controller, authorised and regulated by the Gibraltar Financial Services Commission (GFSC). Following the UK’s departure from the European Union, Trinity Lane Insurance Company Limited provides services into the United Kingdom under the relevant post-Brexit regulatory frameworks, statutory cross-border regimes, and transitional market access provisions. Consequently, Trinity Lane Insurance Company Limited subscribes to the Association of British Insurers (ABI), the Motor Insurers’ Bureau (MIB), and the Financial Services Compensation Scheme (FSCS). References to “We”, “Us”, and “Our” in this Privacy Policy refer to Trinity Lane Insurance Company Limited.

Data Protection Officer

We have appointed a Data Protection Officer. Please direct any data protection queries, right requests, or compliance concerns to:

  • Email: [email protected]
  • Postal Address: Data Protection Officer, Trinity Lane Insurance Company Limited, 824 Europort, Gibraltar, GX11 1AA.

We reserve the right to amend this Privacy Policy at any time and without notice in response to changes in data protection laws and privacy legislation.

Your Rights

Under the Gibraltar General Data Protection Regulation (G-GDPR) and the Gibraltar Data Protection Act 2004 and the UK General Data Protection Regulation (UK-GDPR), you possess distinct rights regarding how we handle, process, and safeguard your data:

  • Right of Access: You have the right to access or obtain copies of the personal information held about you by us. A response to your request will be provided within one month of us receiving a valid request. In accordance with the G-GDPR and the UK-GDPR, we will not charge for this information in most cases. If you wish to exercise this right against our partners, you must contact them directly.
  • Right to Rectification: You have the right to request that we correct any inaccuracies in the personal information held about you. Please contact your broker if your personal information needs updating.
  • Right to Erasure (Right to be Forgotten): You are entitled to request the removal of your personal data from our records. To ensure your data is completely processed, the most effective way to request this is by contacting your broker. As long as your request meets our statutory data retention periods, we will overwrite/remove your personal and special category information. Any remaining anonymised data will be used for statistical purposes only.
  • Right to Data Portability: You have the right to have your data transmitted directly to another data controller where technically feasible.
  • Right to Restrict Processing: You have the right to restrict data processing, where this does not conflict with our contractual or legal obligations, if: 
    • You contest the accuracy of the personal data we hold.
    • The processing is unlawful and you oppose the erasure of your data.
    • We no longer need the data for processing, but you require it for the establishment, exercise, or defence of legal claims.
    • You have objected to the processing of your data pending the verification of whether our legitimate grounds override your objection.
  • Right to Object: You have the right to object to the automated processing of your data, including profiling. This excludes circumstances where processing is necessary for entering into or performing a contract.

Security Note: For security reasons, you must include your full name, address, and date of birth when writing to us or your broker to exercise your rights.

Submitting a Complaint

You have a right to submit a complaint to either the Information Commissioner’s Office in the United Kingdom or the Gibraltar Regulatory Authority in Gibraltar if you believe we have not complied with our obligations under the applicable data protection laws.

Data We Collect

We collect personal data and special category personal data as part of providing insurance services to you. This data is typically collected by your broker and passed to us. We may also monitor or record calls, emails, SMS messages, or other communications in accordance with applicable Gibraltar and UK laws.

Types of Data We May Collect

  • Personal Data: Name, address, date of birth, gender, telephone numbers, email address, occupation, lifestyle information, and claims history.
  • Special Category Data: Medical history and details regarding criminal convictions or offences.

Call Recording and Monitoring

We monitor or record communications for:

  • Business purposes such as quality control, compliance, and training.
  • Processing necessary for entering into or performance of a contract.
  • Prevention of unauthorised use of our telecommunication systems and websites.
  • Ensuring effective infrastructure and systems operation.
  • Meeting any legal, regulatory, and statutory obligations.
  • Protecting your vital interests.
  • Prevention or detection of crime and financial fraud.
  • The legitimate interests of the data controller.

Uses for Your Data

The data you provide to us will be used for the following purposes:

  • Quotation: Your data will be used to provide you with the most accurate quote in relation to the insurance services you are requesting a quotation for.
  • Risk Assessment & Fraud Prevention: To assess your insurance risk, verify your identity, help prevent fraud and calculate the correct premium. We, or your broker, may obtain information from third parties at quotation and renewal and in certain circumstances where policy amendments are requested. This information includes a quotation search from a credit reference agency. This search will appear on your credit report and will be visible to other credit providers. It will be clear that this is a quotation search rather than a credit application by you to pay by monthly instalments.
  • Scoring & Underwriting: We may use scoring methods to assess this application. This information may also be used for debt tracing, anti-money laundering (AML) compliance, and the general management of your account. Alternatively, we may ask you to provide physical forms of identification.

Sharing Data

We do not sell your data to third party companies. We may share your data with selected third parties for:

  • Claims handling – in the event of a claim your details may be passed to Hadleigh Claims Management (or another designated claims handling partner) , on the basis of contractual requirement, who we use for claims handling.
  • Fraud Prevention – We may check and/or share your details with the police, Fraud Prevention and Detection Agencies, or any legal authority that requests it in order to combat financial crime and fraud. If you give us false or inaccurate information and we suspect fraud, we will record this by ourselves, these agencies and databases.
  • Motor Insurance Database – Information relating to your insurance policy will passed to the Motor Insurance Database (MID) managed by the Motor Insurers’ Bureau (MIB). MID and its stored data may be used by certain statutory and authorised bodies including the Police, the DVLA, the DVLNI, the Insurance Fraud Bureau and other bodies permitted by law for purposes not limited to but including:
    • Electronic Licensing
    • Continuous Insurance Enforcement (CIE);
    • Law enforcement (prevention, detection, apprehension and or prosecution of offenders)
    • The provision of government and or public services aimed at reducing the level and incidence of uninsured driving.

Data Retention Policy

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or regulatory reporting requirements. The maximum period of time that we will hold your data for is 10 years from the expiry of the policy or conclusion of a claim, in line with statutory limitation periods.

Third-party websites

We cannot be held responsible for the privacy policies and practices of other websites linked to our websites. While we take great care in ensuring only links to reputable companies, organisations and individuals following the same standards and policies as us remain on our website, we cannot guarantee this. In such instances, you are advised to check the privacy policies on external websites.

Changes to our Privacy Policy

We keep our privacy policy under review and reserve the right to make changes to our privacy policy in accordance with applicable Gibraltar and UK legislation. Where applicable we will make you aware of any significant changes by email, text message or post. We recommend that you make regular checks on our privacy policy to ensure that you are aware of any changes that may have been made.

This policy was last updated on: June 18, 2026.