Privacy & Cookie Policies

Privacy Policy

About this Privacy Notice

International Breakdown T/A National Breakdown takes your data privacy seriously. In order to provide you with our services we collect and use personal data which means that we are a ‘Data Controller’ and we are responsible for complying with Data Protection Laws and the UK General Data Protection Regulations (UK GDPR) which apply in your country of residence.

We specialise in Nationwide Roadside Rescue and Recovery for businesses and individuals and offer GAP Insurance for Business Fleets. We collect and process information about you in order to arrange cover and to process claims. Your information is also used for business purposes such as fraud prevention and detection and financial management.

This may involve sharing your information with third parties such as vehicle recovery operators, insurers, credit reference agencies, service providers, professional advisors, our regulators, police and government agencies or fraud prevention agencies.

In this Privacy Notice, we want to inform you what information we collect, how we use it and what rights individuals have in relation to the collection and processing of their personal data.

Our Contact Details

If you have any questions in respect of this Privacy Policy or how we manage your personal data, please contact International Breakdown T/A National Breakdown at cs@nationalbreakdown.com or on 01274 288488. Alternatively you can write to us at Office 1, 1 Link 606 Business Park, Staithgate Lane, Bradford, BD6 1YA.

Why Do We Collect Your Information?

Where we collect and process personal data, we identify both the purpose and legal basis for doing so. The legal bases which are:

• Consent – where we have consent from the individual to the processing of his or her personal data for one or more specific purpose
• Contract – where the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
• Legal Obligation – the processing is necessary for compliance with a legal obligation to which we are subject
• Vital Interests – where the processing is necessary in order to protect the vital interests of the data subject or another natural person
• Public Interest – where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• Legitimate Interests – where the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

Our Processing of Your Personal Information

The information we collect and our lawful basis for processing it will depend on the type of service we provide for you.

• Prospective, new or existing customers or parties covered under a policy we have arranged
• Insurers and brokers
• Service providers including vehicle recovery operators
• Potential employees

What Personal Data Do We Collect?

A – New, prospective or existing customers (or parties covered under an insurance policy we have arranged)

Where you have arranged an insurance policy and / or entered into a contract for our services, we can collect, store or use the following types of personal data which is regularly reviewed throughout the lifespan of your relationship with us:

• General contact details such as name, address, email address, telephone number
• Business activities of the person whose personal information we are processing
• Details of previous insurance arrangements including claims history
• Details of your demands and needs in relation to insurance
• Full details of your insurance risks where cover has been arranged by us
• Details of other insurance risks not managed by us
• Sanctions information
• Details of policies purchased and services provided to you
• Financial details such as credit history or payment or bank details
• Information obtained through our use of cookies
• Your marketing preferences

Special categories of personal data that we collect:

• Details relating to disabilities to establish effects on delivering assistance where it is relevant to the cover being arranged
• Information relating to criminal sanctions (including offences and alleged offences and any caution, court sentence or criminal conviction), which can be established directly from you or as a result of carrying out sanctions checks
• Information relating to any professional disciplinary action you have been the subject of where it is relevant to the policy being arranged
• Special category information offered by you in the course of your discussions with us relating to race, ethnicity, religious or philosophical beliefs, political opinions, trade union memberships or data concerning your sex life or sexual orientation (processed only where necessary, e.g. in connection with a claim or legal proceedings, and otherwise only with your explicit consent)

How we collect your information: In most cases, we collect your data directly from you when you complete an online form, speak to us on the telephone, email or write to us, or view our website via your browser’s cookies.

Or indirectly: We may also receive your data indirectly from sources such as social media platforms and public sources (e.g. demographic data, market research, local directories).

Purpose	Lawful Basis	Lawful Basis for Any Special Category of Information
To understand your insurance requirements, needs to offer terms as part of an ongoing contract of service with you	The processing is necessary for the performance of our ongoing contract with you.	It is necessary for an insurance purpose
To provide documentation and assist with any ongoing claims made under an insurance policy we have arranged	The processing is necessary for the performance of our ongoing contract with you.	It is necessary for an Insurance Purpose
To assist with any renewals, mid-term adjustments of your insurance policy or cancellations.	The processing is necessary for the performance of our ongoing contract with you.	It is necessary for an Insurance Purpose
To hold you on our records as a client including carrying out annual credit, fraud, sanctions and anti-money laundering checks	We have a legal or regulatory obligation.	The prevention of fraud is in the substantial public interest.
To comply with our legal or regulatory obligations (such as our requirements to report to the FCA)	We have a legal or regulatory obligation	It is necessary to establish and exercise our legal rights.
To communicate with you, respond to your queries and notify you about changes to our service	It is in our Legitimate Interests to use your personal information to keep you informed about any changes that may affect you	It is necessary for an insurance purpose.
For Electronic Marketing of similar services to existing customers including invitations to renew cover	It is in our legitimate interests to use your personal information for marketing purposes where the services being marketed are relevant to you.
For electronic Marketing of services to new customers	We rely on Consent for direct electronic marketing to individuals
For Direct Marketing to Businesses	It is in our Legitimate Interests to market our services to other businesses which can include personal business email addresses
Managing our business operations such as maintaining accounting records, analysing financial results, complying with internal audit requirements and receiving professional advice (e.g. tax or legal advice)	It is in our Legitimate Interests to manage and improve our business operations and activities.

B – Insurers, brokers, specialist claims experts, service providers including vehicle recovery operators

• General contact details such as name, address, email address, telephone number
• Information about your business, job title and role

Purpose	Lawful Basis
To assist in any claims made under an insurance policy we have arranged.	It is in our legitimate interests to assist clients in any claims which have been made under an insurance policy we have arranged
Prevention, detection and investigating and prosecuting fraud. This can include sharing personal data information with third parties including the police, and other insurance and financial providers.	It is in our Legitimate Interests to ensure that we take all necessary steps to prevent fraud.
Managing our Business operations such as maintaining accounting records, analysing financial results, complying with internal audit requirements and receiving professional advice (e.g. tax or legal advice)	It is in our Legitimate Interests to manage and improve our business operations and activities.

C – Potential employees

• General contact details such as name, address, email address, telephone number
• General identity information such as driving licence number, National Insurance number
• Employment history
• Education history
• Salary and benefits history
• Special category data where relevant (e.g. trade union memberships, health or disability information in relation to requirements of an employment contract)

Purpose	Lawful Basis	Lawful Basis for Any Special Category of Information
To hold your information during a recruitment process	The processing is necessary to consider entering into a Contract.	This is necessary to consider any requirements in relation to employment.
To contact potential candidates during a recruitment process	It is required in the process of considering entering into a contract of employment.

Who Do We Share Your Information With?

From time to time we may share your personal information with third parties for the various purposes set out above. These can include:

• Insurers with whom we are obtaining quotations or placing cover
• Insurers or brokers who also act for you
• Industry bodies, accountants, regulators or auditors
• Payment services providers
• Service providers such as vehicle recovery operators
• Software providers (IT suppliers, insurance software providers, cloud services)
• Lawyers, specialist claims experts
• Fraud detection agencies
• Police and law enforcement agencies where reasonably necessary for the prevention or detection of crime
• Debt collection agencies
• Credit reference agencies
• Selected third parties in connection with the sale, transfer or disposal of our business

Direct marketing: We may send you details of similar services to those you have enquired about or purchased from us previously including renewal invitations. You can opt out at any time by contacting us or clicking ‘unsubscribe’ on any messages you receive. We will never share or sell your information to any other party for marketing purposes.

International Data Transfers

Some recipients of your personal data can be located outside your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. Where this is the case, we make sure that additional safeguards are in place (for example, adequacy decisions under the UK GDPR or standard contractual clauses).

Automated Decision-making or Profiling

We can use automated means to make decisions about your cover. We consider the information provided to determine whether your application for cover can be accepted and the premium. All such decisions are reviewed by us and you can request that the decision be made by an individual decision maker.

How Long Do We Keep Personal Data For?

We will retain personal data in accordance with legal and regulatory requirements and for no longer than is necessary to fulfil the purposes set out in this privacy policy. We maintain and review a detailed retention policy and schedule which documents how long we will hold different types of data. We will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous, unless we are legally obliged to keep your personal data longer (e.g. for tax, accounting or auditing purposes).

• Where it is still necessary for the provision of our services – including the duration of any contract for services and for a period of 12 months after the end of any contract (to help maintain and improve performance, keep systems secure, and maintain appropriate business and financial records)
• Where required by statutory, contractual or other similar obligations – for example, where storage obligations arise from laws or regulations, depending on the type of insurance policy, or to store data in relation to pending or future legal disputes

Your Rights as a Data Subject

As a data subject, you have rights in relation to your personal data, including:

• The right to access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent (where consent is the lawful basis)

To exercise any of these rights, please contact us using the details provided above.

How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us via International Breakdown T/A National Breakdown at complaints@nationalbreakdown.com or on 01274 288488. Alternatively you can write to us at Office 1, 1 Link 606 Business Park, Staithgate Lane, Bradford, BD6 1YA.

You also have the right to complain to the Information Commissioner’s Office (ICO): Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: www.ico.org.uk.

How We Keep Your Personal Data Secure

We protect your personal data through technical and organisational security measures to minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. We store your data within secure software platforms and cloud service providers and use protections such as firewalls, antivirus, malware protection and encryption. We also maintain operational policies and procedures including access controls, password security requirements, remote working and clear desk restrictions.