Privacy Policy

Who are we?

In this Privacy Policy the terms “you” and “your” means the individual (acting in their own capacity or on behalf of their employer) using this website..

“HUB Group”, “us”, “we” or “our” means one or more of the applicable companies set out in the “Important Information” section of the Website which are collectively referred to as HUB Group. HUB Group is a trading name used collectively by those companies. HUB Group companies are all part of the Just group of companies. For more information on Just Group please visit the website at www.justgroupplc.co.uk

HUB Group takes all reasonable care to prevent any unauthorised access to your personal data.

HUB Pension Consulting is a trading name of HUB Financial Solutions Limited. HUB Financial Solutions Limited is authorised and regulated by the Financial Conduct Authority. It is registered with the Information Commissioner’s Office with number Z964954X. TOMAS Online Development Limited (trading as HUB Digital Solutions) is registered with the Information Commissioner’s Office with number ZA789809.

Please read carefully and understand our Privacy Policy together with the Terms of Use ("Terms") and our cookie policy which govern your use of this website.

We respect the privacy of every individual who visits our website and have developed this policy because we want you to feel confident about the privacy and security of your personal information.

By using our website you acknowledge that you have read, and understood the terms of this privacy policy and the use of personal information described.

What is personal information?

Personal information means any information about you which is personally identifiable, including your name, age, address, telephone number, email address, financial details, and any other information from which you can be identified.

It also includes genetic and biometric data, location data and online identifiers which may identify you, such as your internet protocol (IP) address (the unique personal address which identifies your device on the internet) and mobile device IDs.

What types of personal information do we collect from you?

We collect the following information about you and any dependants (this includes a person to whom you have granted a power of attorney) when you use any of our products or services and we may also collect personal information indirectly from our business partners, for example financial intermediaries:

Personal data: your name, date of birth, telephone number, address, email address, dependants, marital status, IP address and media access control (MAC) address.
Sensitive/special categories of personal data: gender and other sensitive information such as information about your physical and mental health.
Financial information: information that may relate to your financial circumstances (for example your pension values, income and existing investments), bank account details and details of product options you may consider.
Technical and cookies information: information to measure and analyse the use and effectiveness of our services, and to customise the targeting of advertising relating to our services.

How we process your personal information

We will process your personal information for legitimate business purposes or for the performance of a contract in order for us to provide the following:

to identify and advise on which products or services best suit your requirements or needs;
for administration and to support your choice through updates on policy or product changes;
allow you to create an account and communicate with us;
to invite you to take part in customer research potentially using specialist market research;
to comply with legal and regulatory obligations;
for business and analysis purposes;
including protecting your data through secure storage and backups;
for the prevention and detection of fraud.

HUB Group provides an extensive range of different products and services and may use the personal information you have provided (when applicable) to help identify and tailor products and services that may be of interest to you.

In order to:

obtain your marketing preferences and communicate with you in accordance with preferences or options you have selected; through email, telephone or SMS;
to send you marketing literature covering our range of products and services and may continue to do this after your policy has ended; and
use your personal data for automated decision-making, including profiling for research and marketing purposes as well as actuarial and statistical analysis.

We will seek to obtain your explicit consent where we are required to process any special categories of personal data (such as medical information).

In the event that we intend to process your personal data for new purposes requiring your consent, we will contact you to obtain your consent for such new purposes.

Who we may share your personal information with

The personal information we hold about you may be shared with the following recipients subject to security, contractual and transfer adequacy safeguards as appropriate:

(a) our Group affiliates;

(b) our agents; and

(c) business partners/service providers who assist us in providing the services we offer through our website applications and third party comparison portal(s).

The following categories of agents, business partners and close affiliations assist us in the provision of ancillary services and only use your personal information to the extent necessary to perform their functions:

Providers for pricing/underwriting purposes: these providers may share your personal information with their Group companies for the same purpose.
Service providers: for the provision of support services such as reinsurance, product administration, receiving and sending marketing communications, data analysis and validation, IT support services, archiving, auditing, business administration and other support services and tasks, from time to time.
Business partners who may have referred you to us: to provide them with relevant management information.
Other companies in the event we undergo a re-organisation or are sold to a third party.
Regulators and public authorities who have a legal right to request and process your personal information.
Other companies in Just Group, where relevant, for management information purposes.
We may also disclose your personal information if legally entitled or required to do so, for example if required by law or by a court order or if we believe that such action is necessary to prevent fraud or cybercrime or to protect the Site or the right, property or personal safety of any person.

Data retention and anonymisation

If you’re a HUB Financial Solutions customer: Where we have provided you with a service, we will keep your personal information for as long as is necessary for the purposes described in this policy (in line with the data minimisation principle) for a maximum period of 7 years after the service has expired, after which your personal information will be deleted or anonymised in compliance with our established data protection policy.

If you’re a HUB Financial Solutions Limited (which also trades as HUB Pension Consulting) customer: Any information that is received about you may be retained indefinitely once we have made a recommendation that relates to a defined benefit transfer. This type of advice requires information to be held for a longer term, due to the time period over which such advice can have an effect.

Anonymised personal information will not be considered as personal since no individual can be identified by that information. We use anonymised information for further actuarial and business analysis, business research and reporting to help us to develop our products and services.

Cookie use and Cookie Policy

When you visit websites including ours, the website is very likely to use cookies, which are small files downloaded to your computer or mobile device. Most web browsers are set to accept cookies when you first visit a web page.

Cookies may contain information about your general internet usage; the type of internet browser or mobile device in use; your IP address and operating system and how you have arrived on our web page.

We will only use this information to assist us in providing a more effective service and to collect broad demographic information for aggregate use and to help us to improve our website to deliver a better and more personalised service to:

(a) estimate our audience size and usage pattern;

(b) store information about your preferences, and allow us to customise our website according to your individual interests;

(d) recognise when you return to our Site.

When you visit our website, you can change your cookie preferences through your browser settings.

Please refer to our cookie policy for a full explanation, cookie use and your management options for the control of cookies.

Monitoring our communications with you

We may monitor or record your calls and text messages and other communications, such as emails, in accordance with UK law, and in particular for business purposes such as:

(a) quality control;

(b) processing necessary for the entering into or the performance of a contract;

(d) to ensure effective systems operation;

(e) to meet our legal obligations;

(f) in your vital interests;

(g) to prevent or detect crime; and

(h) in relation to our legitimate interests.

Transmission and security of your personal information

We have security measures in place to protect against the loss, misuse and alteration of personal information under our control as required by current data protection laws and the UK GDPR.

For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal information.

Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.

Transfers of personal data outside of the UK and EEA

Your personal data is sent to and stored on secure servers located in the UK or countries within the European Economic Area (EEA).

In the event that your information is transferred outside of the UK or EEA (eg. because any of our advisors or service providers have IT systems located in other jurisdictions), we will ensure that your data is subject to appropriate safeguards, including relying on a recognised legal adequacy mechanism that it is treated securely and in accordance with our privacy policy.

Notification of changes to our privacy policy

We reserve the right to amend or modify the privacy policy at any time and in response to any changes in applicable data protection and privacy legislation.

If we decide to change our privacy policy, we will post those changes on this page and may place notices on other pages of our website, so that you are aware of the information we collect and use it at all times.

If at any point we decide to use or disclose information we have collected in a manner different from that stated at the time it was collected, we will notify you.

Your rights to your personal information

You have options and choices over how we use your personal information. We may provide you with the tools to manage your account or to change your marketing communication preferences at any time.

We may retain a record of your stated objection to the processing of your personal information including in respect of an objection to receiving marketing communications, for the sole legitimate purpose of ensuring that we can continue to respect your wishes and not contact you further, during the term of your objection.

In terms of your rights, you can:

Request to see the personal information we hold on you.
Request your data to be corrected or erased where appropriate.
Restrict/object to the processing of your personal data whilst we investigate your concern.
In certain circumstances, where your request relates to data you provided to us and where technically possible, you may request to receive your personal data in a commonly used electronic format or send the data in that format to another provider.
Withdraw your consent to certain processing activities at any time. For example, to object to direct marketing or profiling for market research and marketing purposes.

Requests for your personal information shall be provided free of charge. However, where requests are repetitive, or manifestly unfounded or excessive, we may charge you a reasonable fee to cover the administrative costs of providing the information, or may refuse to act on the request.

If you have any questions or comments about this privacy policy or our practices, or if you wish to make a request or exercise any of your rights, you can contact us:

By email at: dataprotection@wearejust.co.ukBy telephone on: 01737 233288 By writing to us at: Data Protection Officer, Just Group plc, Enterprise House, Bancroft Road, Reigate, Surrey, RH2 7RP

If you remain unhappy with a response you receive from us, you can also refer the matter to the Information Commissioner's Office.