Privacy Policy

1. Introduction St Andrew's Group plc and its group companies* have developed this privacy policy in order to assist in its position as a trusted provider of creditor insurance and to ensure it upholds and maintains visitors' rights to privacy in the on-line environment. St Andrew's Group plc ('StAG'), is a public limited company incorporated under English law with registered number 3011193 whose registered office is at St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA. StAG is the data controller, as defined by the Data Protection Act 1998, collecting the information obtained by this website, for the specified purposes as outlined below.

2. Collection and use of personal information StAG will only collect and use personal information voluntarily provided by visitors to this site. Visitors are able to browse the site without disclosing any personal information. A visitor to the site may choose to provide StAG with limited personal information as required in order to register for certain services. This personal information may be used for recruitment, administration, customer services and fraud prevention. Personal information collected by this website may be transferred to other member organisations within the StAG group where it is necessary to meet the purpose for which the information was submitted.

3. Uses of personal data for marketing Occasionally, members of our group of companies may contact you by letter, telephone, e-mail and text message or otherwise to inform you about other products and services that may interest you. If you wish to exercise your right to opt out, simply let is know by a means convenient to you.

4. Transfers of personal data outside the European Economic Area Sometimes we need to give information to our agents and subcontractors so that they can provide a particular service for us. Sometimes, these companies may be located abroad in countries that do
not have adequate data protection laws. In these circumstances we always take great care to ensure that your personal information is kept
safe and secure.

5. E-mail communications If you e-mail us, or give us your e-mail address, we will keep a record of it. We may use it to contact you occasionally about other products and services, which may interest you, unless you ask us not to do so. We will not give your e-mail address to any unauthorised third parties. When e-mailing us, we recommend you use the e-mail facility on our website to make sure that the contents of your e-mail is secure. If you send us e-mail in other ways, remember that it will be 'insecure' and can be intercepted. If you do send us 'insecure' e-mail, please keep the amount of confidential information you include to a minimum. We will do likewise when we reply.

6. Disclosures of information Your personal information may be passed on to or used by subsidiary companies within StAG and other group companies but will not be disclosed to outside organisations and/or individuals unless:

• you consent to the disclosure; or
• to comply with legal/regulatory obligations.

7. Retention and accuracy of personal information Information collected from visitors to the site will only be kept to provide the required service. Once the service has been completed all the information will be destroyed in accordance with StAG's data retention policies. Should you require your information to be updated, amended or deleted from your records please contact the Data Protection Officer at St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA, outlining your requirements.

8. Access to your personal information Under the Data Protection Act 1998 Visitors to this site are entitled to a copy of their personal information held by StAG on payment of a small fee. For further information please contact the Data Protection Officer at St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA.

9. Information security StAG has implemented accepted standards of technical measures and security policies that protect the personal information it has under its control from:

• unauthorised access;
• improper use or disclosure;
• unauthorised modification; and
• unlawful destruction or accidental loss.

We also use encryption and authentication procedures to protect your personal information. In addition, our staff have a personal responsibility for maintaining user confidentiality. We provide training and education to all our staff to remind them of their obligations, which are fully supported by our internal policies and procedures.

10. Cookies We use these once you register with StAG to allow us to personalise our service to you. If you do not want a cookie, you can always set your browser to deny it.

11. Notification to the Information Commissioner StAG has an obligation as a Data Controller to notify the Information Commission of the purposes for which it processes personal information. Full details of StAG's data protection notification can be obtained from the Data Protection Officer at the address below or from the Information Commissioner's website (www.ico.gov.uk).

12. Telephone monitoring Telephone calls may be monitored and recorded to assist with staff training and for quality control purposes.

13. Contact details If you have any queries concerning your personal information of any questions on our use of the information, please contact the Data Protection Officer, St Andrew's Group plc, St Andrew's House, Portsmouth Road, Esher, Surrey, KT10 9SA. * St Andrew's Group plc is part of the Lloyds Banking Group of companies which at the time of printing includes the Bank of Scotland, Halifax and Mentor Professional Services Limited.

* St Andrew's Group plc is part of the Lloyds Banking Group of companies which at the time of printing includes the Bank of Scotland, Halifax and Mentor Professional Services Limited.