Updated: 01 September 2025
This Addendum supplements Romero Insurance’s Privacy Notice and applies to personal data collected and/or processed in the United Kingdom (“UK”).
Purposes and legal grounds of Processing
Purposes of Processing | Legal Grounds for Processing |
To perform services for you or our clients. | For the performance of contracts to which you will be a party (or your employer or pension scheme trustee is a party) and in order to take steps at your request (or your employer’s request or pension scheme trustee’s request) prior to you entering into those contracts; or For the purposes of legitimate interests pursued by us (to perform and enter into services for our clients). |
To manage our business operations. | To comply with a legal or regulatory obligation to which we are subject; or For the performance of contracts to which you will be a party and in order to take steps at your request prior to you entering into those contracts; or For the purposes of legitimate interests pursued by us (to manage our business operations). |
To communicate and market to you. | Your consent to this processing; or For the purposes of legitimate interests pursued by us (to communicate and market to you where we do not require your consent). |
To comply with legal obligations. | To comply with a legal or regulatory obligation to which we are subject. |
To monitor and prevent fraud or wrongdoing. | To comply with a legal or regulatory obligation to which we are subject; or For the performance of contracts to which you will be a party and in order to take steps at your request prior to you entering into those contracts; or For the purposes of legitimate interests pursued by us (to monitor and prevent fraud or wrongdoing or defend or protect our legal rights). |
To improve our services. | For the purposes of legitimate interests pursued by us (to improve our services). |
To manage mergers, acquisitions, sales, re-organizations, disposals and integrations. | For the purposes of legitimate interests pursued by us (to manage mergers, acquisitions, sales, re-organizations, disposals and integrations). |
Your personal data rights
You have certain rights in respect of your personal data under UK data protection laws.
Right to access your personal data
You have a right to ask us for copies of your personal data and certain details of how we use it.
To help us process your request efficiently, please provide specific details about the information you need. You are only entitled to such personal data based on a reasonable and proportionate search of our files and records. If we require clarification or additional details to locate the information, the processing time may be paused until the necessary details are received, after which it will resume.
We will respond within one month from the day we receive the request, or other requested information.
For more complex requests, the response time may be extended to up to three months, in accordance with applicable laws.
Right to rectification
You have a right to ask us to amend or update your personal data if you believe the personal data we hold about you is inaccurate or incomplete.
Right to erasure
You have a right to ask us to erase your personal data in certain circumstances, such as where you withdraw consent or where the personal data we collected is no longer necessary for the original purpose. This will be balanced against other factors. For example, we may have regulatory and/or legal obligations which limit our ability to comply with your request.
Right to restriction of processing
You have a right to restrict the processing of your personal data in certain circumstances, such as where you think we no longer need to use your personal data or where you think that the personal data we hold about you may be inaccurate.
Right to data portability
You have a right to ask that we transfer personal data that you have given us to another organization in certain circumstances.
Right to object to processing, including marketing
You have a right to object to your personal data being processed if we process your personal data in our legitimate interest. You may also ask us to stop sending you direct marketing messages and using your personal data for direct marketing purposes at any time.
Rights related to automated decision-making
You have a right to ask not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similar effects.
Right to withdraw consent
We will ask for your consent for certain uses of your personal data. Where we do this, you have the right to withdraw your consent to further use of your personal data.
Right to complain
You have the right to contact us or our data protection officer if you have any concerns with how we use your personal data and we will do our best to resolve your concerns. You also have a right to complain to the Information Commission (IC) if you believe that our use of your personal data is in breach of data protection laws and/or regulations. More information can be found on the IC’s website. Exercising this right will not affect any other legal rights or remedies you have.
There may be circumstances where exercising some of your rights described above or not providing us with personal data will result in us not being able to provide products or services to you (i.e., insurance can no longer be provided or your policy may be cancelled). By exercising your rights (such as your right to erasure), you may also lose the right to bring any claim or receive any benefit, including in relation to any event that occurred prior to the exercise of your rights, if our ability to handle the claim has been prejudiced. Your policy terms and conditions set out what will happen in the event your policy is cancelled.
Contact us
You can contact us if you have any questions about how we collect, process or use your personal data or if you wish to exercise any of your rights with respect to your personal data. To assist in providing you with an accurate response, please let us know the Romero Insurance business you interact with and your applicable country.
Romero Insurance legal entity | Contact details |
Romero Insurance Brokers Limited | Data Protection Officer The Walbrook Building 25 Walbrook London EC4N 8AW Email: GlobalPrivacyOffice@ajg.com |