Privacy Policy

Pay by Mile, form RAC Car Insurance is introduced by RAC Financial Services, is underwritten by Highway Insurance Company Limited, and is managed and administered by Wrisk Transfer Limited.

Purpose and legal basis for using your information

When you purchase a Pay by Mile policy, the following parties will each be a data controller for the personal data you provide, which means that they are each responsible for how they use your data and the purposes for which they use your data:

We will also share your information with regulators, technology partners, credit or ID checking sites and authorities when relevant.

This privacy notice only covers how Wrisk Transfer Limited handles your information.

We will not sell or rent your information to third parties and will not share your information with third parties for marketing purposes.

Wrisk Transfer Limited is a wholly owned subsidiary of Wrisk Limited. Wrisk is a trading style of both companies and this policy applies to both entities as Joint Data Controllers.

Wrisk Transfer Limited respects your privacy and is committed to protecting your personal data.

This privacy policy, together with our cookies policy, explains when and why we collect personal information about you, how it is used, who we share it with and your rights as the data subject. When we ask you to provide certain information or obtain certain information by which you can be identified, your information will only be used in accordance with this policy.

We acknowledge and agree that we will safeguard your personal data in line with the Data Protection Act 2018.

Registered address

Wrisk Transfer Limited
25 Moorgate, London, EC2R 6AY

Wrisk Limited
25 Moorgate, London, EC2R 6AY

What type of information do we collect from you and how is it used?

When you contact us for a quotation we use your data for the purpose of providing a quotation and to administer your policy.

When you visit our website, we use a third party analytics service to record information about your visit in ways which do not personally identify you.

We collect two types of information;

  1. Personally identifiable information on you and any named drivers
  2. Sensitive information on you and any named drivers, e.g. motoring and criminal conviction data

This information is used to provide our products and services (eg providing you with a quote and administering your policy). Without this information we can’t give you a quote or insurance policy and it may affect the outcome of any claims you make. Note that in order to perform this contract Wrisk uses your personal data to make automated decisions to help determine prices, policy terms, relevant products/services, when you research or ask for a quote, buy insurance, make changes or make a claim Please see the personal information rights section below.

1. Personally identifiable information

Information you directly provide to us for a quote i.e personal information about yourself and named drivers, your vehicle details, and your insurance needs. This continues throughout your policy period for any amendments, cancellations and renewals.

Why we collect it
To understand the level of risk you represent and price your quote correctly. We also use this to search publicly available fraud databases. This information will also be included in an anonymised aggregated database so we can analyse and improve our products and services, question sets and pricing models for the benefit of our customers.
Our lawful reason
So that we can perform our contract of insurance with you and comply with FCA Regulations and our Contract with Insurers.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract. If you choose to not bind a policy with us, we keep the quote data for 3 years from the date of the quote.

Trip information provided to us via the use of the smartphone app, specifically mileage information.

Why we collect it
To understand the level of risk you represent and price your quote correctly.
Our lawful reason
So that we can perform our contract of insurance with you and comply with FCA Regulations and our Contract with Insurers.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract.

Data about you or anyone insured to drive on your policy with regards to motoring offences and convictions. Information you provide about anyone other than yourself will be processed on the basis that you have obtained their explicit consent.

Why we collect it
To understand the level of risk you and/or any named drivers represent, assist with decisions about the provision and administration of insurance and to price your quote correctly.
Our lawful reason
So that we can perform our contract of insurance with you, and comply with FCA Regulations and our Contract with Insurers.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract.

Your email address.

Why we collect it
To email you your policy documents, administer your policy and send other relevant notifications about your policy.
Our lawful reason
So that we can perform our contract of insurance with you and comply with FCA Regulations and our Contract with Insurers.
How long we keep it for
Until the end of your policy with us or until we no longer require it for claims purposes.

Your email address.

Why we collect it
We will communicate with you about relevant news, updates and promotions related to Wrisk, RAC and authorised suppliers of RAC Products.
Our lawful reason
We do this only with your explicit consent, which you can withdraw at any time.
How long we keep it for
Until you remove your consent, or until we no longer need the information, whichever comes first.

Details of any reported and actual claims including, but not limited to, cause of loss, the value of total loss and total loss insured.

Why we collect it
This data is required to comply with FCA regulations, and will also go into our anonymous data set to improve our products, services and pricing model.
Our lawful reason
We have a lawful obligation to retain this data, for example, to comply with any complaints in line with regulations.
How long we keep it for
10 years after claim settlement after which time it will be pseudonymised.

Correspondence between you and Wrisk including conversations on our chat function, via email and on the telephone.

Why we collect it
For compliance monitoring, and provide support in administering your insurance.
Our lawful reason
So that we can perform our contract of insurance with you.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract.

Sanctions lists and fraud detection databases.

Why we collect it
Prevention of money-laundering, fraud and illegal activities.
Our lawful reason
To comply with financial regulations.
How long we keep it for
Indefinitely.

Pages visited, browser type and settings, and cookies.

Why we collect it
To calculate anonymous, aggregate statistics and to improve the features and usability of our website. View our cookies policy for more details.
Our lawful reason
We do this by your consent, which can be revoked at any time.
How long we keep it for
6 months.

2. Sensitive information

Sensitive data about your criminal or driving convictions of anyone insured to drive on your policy. Information you provide about anyone other than yourself will be processed on the basis that you have obtained their explicit consent.

Why we collect it
To understand the level of risk you and/or any named drivers represent, assist with decisions about the provision and administration of insurance and to price your quote correctly. This information will also be included in an anonymised aggregated database so we can analyse and improve our question sets and pricing models for the benefit of our customers.
Our lawful reason
So that we can perform our contract of insurance with you.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract.

Any personally identifying data of another individual, submitted by yourself on their behalf, including sensitive data ) and any criminal data.

Why we collect it
To understand the level of risk you and/or any named drivers represent, assist with decisions about the provision and administration of insurance and to price your quote correctly. This information will also be included in an anonymised aggregated database so we can analyse and improve our question sets and pricing models for the benefit of our customers.
Our lawful reason
We do this on the basis that explicit consent has been obtained.
How long we keep it for
The duration of your policy and for 10 years after termination of the contract.

Your rights as the data subject

As the data subject you have rights to the information we hold on you. These are as follows:

If you would like to exercise any of these rights in relation to this product, then please contact us on privacy@paybymile.rac.co.uk, or alternatively you can contact Ned Barton, the Wrisk Data Protection Officer (DPO) directly at privacy@wrisk.co.

Please also contact our DPO if you wish to make a complaint about how we have handled your data and if you feel that we have used your data not in accordance with the law then you can complain to the Information Commissioner’s Office on their website: ico.org.uk.

Transferring your information outside of Europe

As part of the services offered to you, the information which you provide to us may be transferred to countries outside the European Economic Area (EEA). If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

How you can access and update your information

The accuracy of your information is important to us and we therefore take such reasonable steps to ensure the personal information we collect and hold about you is accurate, up-to-date and complete. However we rely on the accuracy of the personal information you provide to us.

We’re working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change your email address, or any of the other information we hold is inaccurate or out of date or you wish to exercise your right to ask for a copy of the information Wrisk holds about you, please email us at privacy@paybymile.rac.co.uk, or alternatively you can contact Ned Barton, the Wrisk Data Protection Officer (DPO) directly at privacy@wrisk.co.

When making a request for access and/or correction, your request should be accompanied by sufficient identification and by any information that is reasonably necessary to locate the personal data sought.

Once we receive a request for access and/or correction we will respond to that request within one month after the request is made.

Review of this policy

We keep this Policy under regular review and may change this policy from time to time. The Policy was last updated in March 2021.

Please check this page occasionally to ensure that you’re happy with any changes.

Cookies

What are cookies?

A cookie is a small text file that’s stored on your computer or mobile device when you visit a website, which can remember your activities and preferences.

Why do you use cookies?

We use cookies to tailor our content to make it more relevant to you. We also use some cookies provided by other companies whom we trust, which may track things such as how long you spend on the site and the pages that you visit. Understanding how customers are using our site and products helps us improve the customer experience.

How can I turn cookies off?

Should you wish to, you can prevent the use of cookies by adjusting the settings on your browser (see your browser help for how to do this), but this does mean things might not work as expected.