Last updated: June 2026

If you would like to make a Subject Access Request (SAR) please email dataprivacymanager@ezeeis.co.uk

Welcome to the e-Zee Insurance Solutions Limited (e-Zee) privacy and cookies policy.

e-Zee respects your privacy and is committed to protecting your personal data. This policy explains how we look after your personal data, your privacy rights, and how the law protects you.

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 set out significant protections for you over your personal data, including:

• greater control of your data
• control over whether and how e-Zee may contact you for marketing purposes
• the ability to change your mind at any time

Personal Data means any information relating to an identifiable person, whether directly or indirectly identifiable by any means, whether electronic or on paper.

1. Important Information and Who We Are

Controller

e-Zee Insurance Solutions Limited is the controller and responsible for your personal data (referred to as "e-Zee", "we", "us" or "our" in this policy).

We have appointed a Data Privacy Manager who is responsible for overseeing questions relating to this policy. If you have any questions about this policy, including requests to exercise your legal rights, please contact them using the details below.

Contact Details

Data Privacy Manager

e-Zee Insurance Solutions Limited

Unit 7, Beech Avenue Business Park, Beech Avenue, Taverham, Norfolk, NR8 6HW

Email: dataprivacymanager@ezeeis.co.uk

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Changes to This Policy

This version was last updated in June 2026. Historic versions can be obtained by contacting us. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-Party Links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:

• Identity Data: first name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data: address, email address and telephone numbers.
• Financial Data: bank account details.
• Transaction Data: details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data: internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Profile Data: orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data: information about how you use our website, products and services.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

If You Fail to Provide Personal Data

Where we need to collect personal data by law, or under the terms of a contract with you, and you fail to provide that data when requested, we may not be able to perform the contract. In this case, we may have to cancel a service you have with us, but we will notify you at the time.

3. How Is Your Personal Data Collected?

We use different methods to collect data from and about you, including through:

Direct interactions. You may give us your Identity and Contact Data through direct meetings, or by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our products or services, subscribe to our services, request marketing materials, enter a competition or promotion, or give us feedback.

Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our cookie policy below for further details.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use it in the following circumstances:

• Where we need to perform the contract we are about to enter into, or have entered into, with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We do this to provide our services to you, comply with our legal and regulatory obligations, and keep you informed about our products and services.

Generally, we do not rely on consent as a legal basis for processing your personal data, other than in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us at dataprivacymanager@ezeeis.co.uk.

Marketing

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what may be of interest to you. You will receive marketing communications from us if you have requested information or purchased services from us, or entered a competition or promotion, and have not opted out.

Third-Party Marketing

We do not share your personal data with any company outside e-Zee for marketing purposes.

Opting Out

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message, or by contacting us at dataprivacymanager@ezeeis.co.uk. Opting out of marketing will not affect personal data processed as part of a service contract or other transaction.

Automated Decision-Making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Disclosures of Your Personal Data

We may share your personal data with the following parties:

• Data processors carrying out work on our behalf, who are required to process your data only on our instructions and are subject to a duty of confidentiality.
• Third parties to whom we may choose to sell, transfer or merge parts of our business or assets. Any new owners will use your personal data in the same way as set out in this policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes.

6. International Transfers

Some of our external third parties are based outside the UK, so their processing of your personal data may involve a transfer of data outside the UK.

Whenever we transfer your personal data internationally, we ensure an appropriate level of protection is afforded to it by implementing at least one of the following safeguards:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection by the UK Government (known as adequacy regulations).
• Where we use providers based in the US, we may transfer data to them under the UK-US Data Bridge, where applicable, which requires them to provide a similar level of protection for personal data. For further details, see the ICO’s guidance on international transfers.
• Where neither of the above applies, we use the UK’s International Data Transfer Agreement (IDTA) or equivalent approved transfer mechanisms.

Our website uses Google Analytics, a web analytics service provided by Google LLC. This involves a transfer of data to Google LLC in the United States. This transfer is made under the UK-US Data Bridge, under which Google LLC is a certified participant.

Please contact us at dataprivacymanager@ezeeis.co.uk if you want further information on the specific transfer mechanisms we use.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation. Access to your personal data is limited to employees, agents, contractors and other third parties who have a business need to know, and they are subject to a duty of confidentiality.

We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Our standard retention periods are as follows:

• Customer data (Contact, Identity, Financial and Transaction Data): retained for six years after the end of the customer relationship, as required by law for tax purposes.
• Website and Technical Data (including cookie data): retained for up to 13 months, in line with ICO guidance.

In some circumstances we may anonymise your personal data for research or statistical purposes, in which case it may be used indefinitely without further notice to you.

You can ask us to delete your data earlier in certain circumstances — see Your Legal Rights below.

9. Your Legal Rights

Under data protection law, you have the following rights in relation to your personal data:

• Request access (Subject Access Request): to receive a copy of the personal data we hold about you.
• Request correction: to have any incomplete or inaccurate data we hold about you corrected.
• Request erasure: to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
• Object to processing: where we are relying on legitimate interests, or where we are processing your data for direct marketing purposes.
• Request restriction: to ask us to suspend processing of your personal data in certain scenarios.
• Request transfer (data portability): to receive your personal data in a structured, machine-readable format, where applicable.
• Withdraw consent: at any time where we are relying on consent to process your data. This does not affect the lawfulness of processing carried out before withdrawal.
• Complain to the ICO: you have the right to complain to the Information Commissioner’s Office at any time (www.ico.org.uk).

To exercise any of the above rights, please contact us at dataprivacymanager@ezeeis.co.uk.

No Fee Usually Required

You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or we may refuse to comply in those circumstances.

Time Limit to Respond

We aim to respond to all legitimate requests within one month. If your request is particularly complex or you have made multiple requests, it may take us longer, but we will notify you and keep you updated.

10. Use of Cookies by e-Zee

Cookies are small text files placed on your device by websites you visit, including www.ezeeis.co.uk. They are widely used to make websites work more efficiently and to provide information to site owners.

Most web browsers allow you to control cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

How We Use Cookies

We only collect standard internet log information and details of patterns of visits. This helps us analyse the number of visitors to our site. All such data is anonymous and we do not attempt to identify any individual from it.

Cookie Consent

When you first visit our website, if you are a new user who has not previously expressed a cookie preference, a cookie consent banner will be displayed giving you three options:

• Allow All — accepts all cookies including non-essential performance cookies.
• Customise — allows you to choose which categories of cookies you accept.
• Deny — rejects all non-essential cookies.

If you have previously made a cookie preference, the banner will not be displayed again unless you choose to change your settings.

You can review or change your cookie preferences at any time in two ways:

• By clicking the cookie settings icon in the bottom left corner of any page on our website.
• By visiting our Privacy and Cookies page, accessible via the link in the footer of our website, which contains the cookie table and links to update your preferences.

If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

Cookies We Use

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off. They are usually set in response to actions made by you, such as setting your privacy preferences, logging in or filling in forms. They do not store any personally identifiable information.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. All information collected is aggregated and anonymous. These cookies involve a transfer of data to Google LLC in the United States under the UK-US Data Bridge — see section 6 for further details.

Note: this policy relates to our website and all of our services, but not any third-party website whether linked from ours or otherwise.