Privacy Policy
Effective as of 01/10/2024
Who we are
Businessinsurance365.ie (“Website”) is owned and operated by Marketing Mix 365 Limited ("we," "us," or "our"). . This Privacy Policy outlines how we collect, use, disclose, and protect the personal data we collect from you when you use our Website. We are committed to safeguarding your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
“Data controllers” are the people or organisations that determine the purposes for which, and the manner in which, any Personal Data is processed and make independent decisions in relation to the Personal Data and/or who/which otherwise control that Personal Data.
For the purposes of the UK GDPR and EU GDPR (the ‘’GDPR’’), Business Insurance 365 is the data controller with regard to the Personal Data described in this Privacy Notice.
Business Insurance 365 connects medium to large businesses in sectors such as manufacturing, engineering, wholesale, retail, and hospitality with a diverse network of insurance providers, delivering competitive quotes tailored for organisations across Ireland.
Business Insurance 365 has outsourced the function of the Data Protection Officer to XpertDPO Ltd.
Our Data Protection Officer can be contacted as follows:
Phone: +353 1 678 8997
Email: dpo@xpertdpo.com
Postal Address: XpertDPO Ltd., 20 Harcourt Street, Saint Kevin's, Dublin, D02 H364, Ireland
Purpose and Scope of this Notice
The purpose of this Privacy Notice is to provide you, as our data subject, with a statement regarding the Data Protection and Privacy practices and obligations of Business Insurance 365 and an explanation of your rights under applicable data protection laws.
This Privacy Notice applies to our business practices, including the use of our website, accessible at
https://www.businessinsurance365.ie, and the services we provide. While Business Insurance 365 is established in the Republic of Ireland and falls under the jurisdiction of the Data Protection Commission (DPC) this notice also addresses our obligations under the EU GDPR.
We may collect and process Personal Data related to your use of our services and platform. Please note that external websites linked from our platform have independent privacy policies, for which we are not responsible.
Laws that apply to us:
Business Insurance 365 complies with the following data protection and privacy laws:
The General Data Protection Regulation (EU) 2016/679. Data Protection Act 2018 and related regulations.
S.I. No. 336/2011 - European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011, implementing the EU ePrivacy Directive (Directive 2002/58/EC) on privacy and electronic communications, also known as the ePrivacy Directive (ePD).
This ensures our services adhere to Irish and EU data protection requirements.
Why and how do we ensure compliance?
Data protection and privacy laws grant individuals rights concerning the use of their Personal Data. As an organisation, Business Insurance 365 is legally bound by the EU GDPR to comply with these laws when collecting, storing, and using Personal Data.
Beyond legal obligations, we ensure compliance to maintain your trust and protect our reputation. We demonstrate accountability through written policies, privacy-by-design principles in our systems, regular internal audits, and prompt action when non-compliance is identified. We also keep detailed records of our data processing activities to ensure transparency and control.
Who must comply?
All representatives of Business Insurance 365, including employees, contractors, and third-party service providers, must comply with our Data Protection Policies and Procedures when processing Personal Data on our behalf. This ensures that everyone handling Personal Data is aware of their responsibilities under applicable data protection laws.
What Are the Data Protection Principles and Rules?
We adhere to the following principles outlined in data protection law:
Lawfulness, fairness, and transparency: Personal Data must be processed lawfully, fairly, and transparently.
Purpose limitation: Personal Data must be collected for specified, legitimate purposes and not further processed in an incompatible manner.
Data minimisation: Personal Data must be relevant and limited to what is necessary for the purposes for which it is processed.
Accuracy: Personal Data must be accurate and, where necessary, updated.
Retention: Personal Data must not be retained longer than necessary.
Integrity and confidentiality: Personal Data must be processed securely.
Accountability: We must not only comply with these principles but also demonstrate compliance through documented policies, audits, and records of decisions.
What is personal data?
Personal Data is any information that can directly or indirectly identify you, such as your name, email address, or IP address, collected by Business Insurance 365. It does not include anonymised data where your identity has been completely removed.
Any Personal Data you provide is handled with strict security measures, including encryption and access controls, in accordance with the Data Protection Act 2018, the UK GDPR, and the EU GDPR. This ensures your data is treated with the highest levels of confidentiality and protection.
What personal data do we process?
We may collect and process the following categories of Personal Data:
Personal Details:
-
Name, title, email address, physical address, phone numbers, and date of birth.
Professional Data:
-
Commercial or professional information, such as company, address, job title, Business Cover Required and contact details.
Technical Data:
-
IP address, operating system, browser type/version, time zone, location, and usage data (via Cookies and similar tools).
Communication Data:
-
Any data shared through email, text, or other electronic communications.
Special Category Data
We do not collect or process Special Category Data as defined under the EU GDPR. This includes data concerning health, racial or ethnic origin, political opinions, religious beliefs, or data regarding a person’s sex life or sexual orientation.
Children’s Data
Our services are not directed at children under the age of 18. We do not knowingly collect data from children or provide services to them.
Criminal Convictions / Offence Data
Business Insurance 365 does not process data in relation to criminal convictions or offences.
Aggregated Data
We collect statistical and analytical information, such as demographic and usage data, on an aggregated basis from all visitors to our website. This information is not considered personal data because it does not directly or indirectly identify you. However, if we combine Aggregated Data with any of your personal data in a way that could identify you, we treat the combined data as personal data and apply the same protections outlined in this Privacy Notice.
How and why we use your data
Below is a consolidated table of activities detailing how and why we use your personal data, as well as the legal bases for processing it. This table provides an overview of our data processing practices. If you require more specific information or have any queries regarding the use of your personal data, please contact our Data Protection Officer (DPO) at the details provided in this Privacy Notice.
This statement ensures transparency while providing a point of contact for any further details or inquiries.
Legal Bases for using your data
We use your personal data for the purposes outlined above. In doing so we rely on a number of separate and overlapping legal bases to lawfully process your personal data. These may include:
Where necessary to perform our contract with you:
Where you have consented to the processing Where necessary for statutory obligations
Where necessary for us to comply with a legal obligation, or to establish, exercise or defend legal claims
For the purposes of our legitimate interests, provided that those interests are not overridden by your interests or fundamental rights and freedoms
How long do we keep your data
We will retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting obligations. To determine retention periods, we consider the type and sensitivity of the data, the risk of harm from unauthorised use, and any applicable legal requirements.
We have a Retention Policy and Schedule in place to ensure data is securely destroyed when no longer needed. In some cases, by law, we are required to retain basic information (e.g., contact, identity, and transaction data) for up to six years for tax purposes.
You may also request deletion of your data under certain circumstances. In cases where data is anonymized, it may be used indefinitely for research or statistical purposes. If you have any questions about our retention periods, please contact us at dpo@xpertdpo.com.
Third Parties and Disclosures of your Personal Data
We require all third parties to respect the security of your personal data and comply with data protection laws. Third-party service providers are not permitted to use your personal data for their own purposes and may only process it for specified purposes under our instructions.
When you provide us with your personal data, we will also request your consent to share it with relevant third parties.
Business Insurance 365 conducts due diligence and maintains contracts with all suppliers and third parties. Any payment transactions are encrypted using secure encryption technology to protect your data.
Third Parties we may disclose your data to
We may share your personal data with the following categories of third parties:
Service Providers: Acting as processors, based in the UK, Ireland, and Europe, who provide IT, development, and system administration services.
Authorised Insurance Experts: Businessinsurance365.ie is an independent free website created to help medium to large businesses find the best deals on business insurance. We act only to introduce you to authorised insurance experts who are regulated in the Republic of Ireland by the relevant Financial Authorities. Please visit the CBI website for further details at https://www.centralbank.ie/regulation.
Technical Providers: Entities that interact with us to deliver our services.
Professional Advisers: Lawyers, bankers, auditors, and insurers, acting as processors or controllers, providing legal, banking, insurance, and accounting services in the EU.
Regulators and Authorities: Based in the EU, requiring reports of processing activities in specific cases.
International Transfers
In compliance with the GDPR, any transfers of personal data outside the European Economic Area (EEA) are subject to strict safeguards. When personal data is transferred internationally, we ensure that appropriate transfer mechanisms are in place, such as the use of Standard Contractual Clauses (SCCs), adequacy decisions like the EU-US Data Privacy Framework (DPF), or binding corporate rules to guarantee that data remains protected to GDPR standards.
Currently, all data is hosted within the EU. However, we use Google Analytics, which may involve data transfers to the US. These transfers are covered by the EU-US DPF and appropriate safeguards.
Security features/data location
Business Insurance 365 uses strict procedures and security measures, including encryption and access controls, to protect your personal data from unauthorized access, loss, or misuse. Our data is stored within the EU. If we engage a data processor or controller outside these regions, we ensure that Standard Contractual Clauses (SCCs) and Transfer Impact Assessments (TIAs) are in place to safeguard your data.
We have procedures to respond to data breaches and will notify you and the relevant authorities if required. Access to your data is restricted to authorized personnel, contractors, and third parties on a need-to-know basis, strictly under contract.
Information on Consent
Where consent is identified as the lawful basis for processing your Personal Data, you are giving us permission to process your data for the specific purposes outlined in this Privacy Notice.
You have the right to withdraw your consent at any time by clearly indicating your decision, either through a statement or affirmative action. To withdraw consent or if you have any questions, contact our Data Protection Officer using the details provided below.
Please note, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Your Rights
Depending on the legal basis for processing your Personal Data, you have the following rights under data protection law:
Access: Request information and a copy of the Personal Data we hold about you.
Correction: Request that incomplete or inaccurate data be corrected.
Erasure: Request deletion of Personal Data when there is no lawful basis for processing.
Objection: Object to processing based on legitimate interests or direct marketing.
Automated Decision-Making: Object to automated decisions, including profiling.
Restriction: Request suspension of processing under certain circumstances.
Data Portability: Request transfer of your Personal Data in a structured electronic format to you or another entity.
For further assistance, please contact our Data Protection Officer.
How do you exercise your rights?
We have appointed a Data Protection Officer to monitor compliance with our data protection obligations and with this policy and our related policies. If you have any questions about this policy or about our data protection compliance, please contact the Data Protection Officer.
If you wish to exercise your rights, please contact our Data Protection Officer who will respond to the request within one calendar month.
Our Data Protection Officer can be contacted as follows:
XpertDPO
Telephone: + 353 1 678 8997
Email: dpo@xpertdpo.com
Post: 20 Harcourt St, Saint Kevin's, Dublin, D02 H364, Ireland
Your Right to Lodge a Complaint
You as the Data Subject have the right to complain at any time to a supervisory authority in relation to any issues related to our processing of your Personal Data. We would like to hear from you first if you have a complaint about how we use your data so that we may rectify the issue.
As our organisation is located in the United Kingdom, and since we conduct our data processing here, we are regulated for data protection purposes by the Information Commissioner’s Office.
You can contact the Data Protection Commission:
Website: https://www.dataprotection.ie/
Phone: (+353) 1 765 01 00 / 1800 437 737
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Updates
Our practices as described in this Privacy Notice may be changed, but any changes will be posted, and changes will only apply to activities and information on a going forward, not retroactive basis.
You are encouraged to review this Privacy Notice periodically to make sure that you understand how any personal information you provide will be used.
We may also email you in certain circumstances to let you know if and when we update this Privacy Notice to ensure you are informed.
Any changes to this Privacy Notice will be posted on this website so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If at any time we decide to use Personal Data in a manner significantly different from that stated in this Privacy Notice, or otherwise disclosed to you at the time it was collected, we will notify you by email, and you will have a choice as to whether or not we use your Personal Data in the new manner.