Special Categories of Data Policy

Our privacy policy gives you information on how we collect and process your personal data and how and why we may disclose that personal information to third party service providers and insurance partners.  Some of the personal information we collect and process may take the form of criminal convictions, your sexuality or your medical history.  The GDPR imposes tighter restrictions on how we may use this information. 
Part 4 of Schedule 1 of the Data Protection Act 2018 requires us to prepare a policy like this to explain how and why we use these special categories of personal information.
Why do we process this personal information?
We may process these special categories of personal information in order to:
(i) provide our comparison services to you; or
(ii) comply with any legal and/or regulatory obligations to which we are subject.
What lawful basis do we have to process such information?
We will only process personal information relating to criminal convictions, your sexuality and/or your medical history where the processing is necessary so that we can provide our services to you, where we have a legitimate interest in doing so or where we have otherwise obtained your consent to such processing.
A further explanation as to the legal bases on which we process this personal information for different purposes can be found in our privacy policy.
How we will safeguard this data 
We have procedures in place to ensure that we only process these special categories of personal information in accordance with the law.  In particular we ensure that:
(i) this personal information is processed lawfully, fairly and in a transparent manner.  Our privacy policy sets out the legal bases on which we rely to process personal information for various purposes;
(ii) we only collect this personal information for specified, explicit and legitimate purposes and we only process the information for these purposes. A further explanation as to the purposes for which we collect personal information can be found in our privacy policy;
(iii) any personal information we collect is adequate, relevant and limited to what is necessary in order to provide you with our comparison services;
(iv) this personal information is accurate and kept up to date as we require you to input your personal information on our website each time you use our comparison services;
(v) we keep this personal information in a form which allows identification; and 
(vi) we keep this personal information secure as we have put in place appropriate security measures to protect personal information from being accidentally lost, used or accessed in an unauthorised way. 
Retention of Data 
We keep personal information for up to six (6) years following the date on which it is provided to us or only for as long as is reasonably necessary thereafter in order to:
(i) respond fully to any questions or complaints;
(ii) evidence that we have treated customers fairly or satisfy some other legal, accounting, tax or reporting requirement; and
(iii) establish, exercise or defend legal claims in accordance with statutory limitation periods.