Privacy Policy

1. Who We Are (Data Controller)

My Taxi Insurance is a trading style of Captios Limited. Captios Limited is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following categories of personal data:

3. How We Use Your Information

We use your personal information for the following purposes:

• To arrange insurance quotations and policies on your behalf
• To communicate with you about your insurance enquiry, policy, or claim
• To administer and manage your policy, including renewals and mid-term adjustments
• To comply with our legal and regulatory obligations (including FCA requirements)
• To prevent fraud and financial crime
• To improve our services and website
• To respond to complaints and resolve disputes

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

5. Who We Share Your Information With

We may share your personal information with the following categories of recipients:

• • Insurance companies and underwriters for the purpose of arranging and administering your cover
• • Premium finance providers (where you choose to pay by instalments)
• • Claims handlers and loss adjusters (in the event of a claim)
• • Regulatory bodies including the Financial Conduct Authority and the Information Commissioner's Office
• • Fraud prevention agencies and databases (e.g., CUE, CIFAS)
• • Third-party service providers who assist us in operating our business (e.g., IT, communications)
• • Legal and professional advisers where necessary
• • Any other parties where required by law or court order

We do not sell your personal data to third parties. We require all third parties to respect the security of your data and to treat it in accordance with the law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and for a period thereafter as required by law or for the establishment, exercise, or defence of legal claims.

7. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication measures
• Regular security assessments and updates
• Staff training on data protection
• Secure disposal of records

8. International Data Transfers

Your personal data is primarily processed within the UK and European Economic Area (EEA). Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner, or transfers to countries with an adequacy decision.

9. Your Rights

Under the UK GDPR, you have the following rights:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

10. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The latest version will always be available on this page with an updated "Last updated" date.