Privacy Policy

This privacy notice tells you what to expect us to do with your personal information. Grow Money Group including GMG-Insurance, GMG-Savings and GMG-Carbon Clear ("we," "our," or "us") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our website, platform, or services.

1. Contact Details

If you have any questions or concerns about this Privacy Policy, please contact the Data Protection Officer:

Grow Money Group Limited
Email: enquiries@growmoneygroup.co.uk
Address: 71-75 Shelton Street, London, WC2H 9JQ
2. Information We Collect

Personal Information Types:

  • General information - your name, address, contact details, date of birth, nationality, gender and relationship to the policyholder, if you're not the policyholder.
  • Identification information - national insurance number, passport number, tax identifiers or driving license number.
  • Information about your job - job title, your status as a director or partner, employment history, education history and professional accreditations.
  • Insurance policy information - details of previous insurance policies and claims history. This will depend on the type of policy you hold with us. For example, if you hold a household policy, we may collect and use information which relates to your property.
  • Claims information - Information relevant to any claim you may make. This will depend on the type of claim you make. For example, if you make a claim following a road traffic accident, we may use personal information which relates to your vehicle and named drivers.
  • Financial information - your bank details, payment details and information obtained as part of our credit checks. This may include details of any bankruptcy orders, individual voluntary arrangements or county court judgements.
  • Public source information - Information, including photographs, we obtain by carrying out checks of publicly available sources such as newspapers and social media sites where we suspect fraudulent activity.
  • Sanctions screening - Information we obtain from checking sanctions lists, such as those published by United Nations, European Union, UK Treasury, the U.S. Office of Foreign Assets Control (OFAC) and the U.S. Department of Commerce, Bureau of Industry and Security.
  • Website usage data - Information such as IP address and browsing history obtained through our use of cookies.
  • Call recordings - Information we collect during recorded telephone calls.
  • Marketing and experience data - Your marketing preferences and details of your customer experience with us.
  • Criminal conviction information - This includes offences, alleged offences and any court sentence or unspent criminal conviction.
  • Health information - We might also ask for details of your current or former physical or mental health condition. For example, if you hold a travel policy, we may need details about any medical conditions that affect you, or anyone travelling in your group. This may take the form of medical reports or underlying medical data such as x-rays or blood tests.
  • Special category data - There may be limited circumstances where we ask for details of your race; ethnicity; religious or philosophical beliefs; political opinions; trade union membership; genetic or biometric data; or data concerning your sex life or sexual orientation if it's relevant to your policy or claim. For example, we may process information relating to your trade union membership if you take out a policy with us via your trade union body and we may process information relating to your religious beliefs if it's relevant to your medical treatment.
3. How We Collect Your Data
  • Webforms
  • Cookies and trackers that store browsing behaviors and preferences
  • Quote platforms
  • Opt-in Forms
  • Data gathered directly from the user
4. How We Use Your Information
  • Provide and improve our products and services
  • Comply with legal and regulatory requirements
  • Communicate with you regarding your account and our services
  • Conduct research, analytics, and product development
  • Protect against fraud, security threats, and misuse of our platform
  • Obtain insurance quotes and payment services
  • Dealing with queries, complaints and claims
5. Legal Basis for Collection and Use of Your Data

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful basis in the UK GDPR. You can find out more about lawful bases on the ICO's website. Which lawful basis we rely on may affect your data protection rights which are set out in brief below.

General Lawful Bases:

  • Performance of a contract with you
  • Compliance with legal obligations
  • Our legitimate interests in operating, improving, and securing our services
  • Your consent, where required
  • To obtain competitive insurance quotes from insurance companies and similar organisations

Specific Legal Bases by Purpose:

Client/Customer Account Operations:

Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: To carry out market analysis of insurance products.

Crime Prevention, Detection, Investigation or Prosecution:

Consent -
we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal Obligation - We have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Information Updates and Marketing:

Consent -
We have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract - We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal Obligation - We have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Legitimate Interests - We're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

Our legitimate interest: If there is a change in a policy wording or condition that may affect the insured person(s).

Legal Compliance Requirements:

Our legitimate interest: To prevent fraud

Consent -
We have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract - We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal Obligation - We have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Legitimate Interests - We're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

Queries, Complaints and Claims:

Consent -
we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.

Our legitimate interest: The information may be needed by a claims company, solicitor or other investigation organisation.

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

6. Sharing Your Information

We will never sell your personal information to third parties. We may share your information with the following categories of recipients:

  • Service providers who support our operations (e.g., IT, cloud storage, compliance checks, insurance quotes, AML/KYC checks)
  • Financial institutions where necessary to provide services
  • Regulators or law enforcement when required by law
  • Business partners where you have given consent
  • Insurance providers in order to obtain insurance quotes
  • Our insurance and reinsurance partners such as brokers, other (re)insurers or other companies who act as (re)insurance distributors
  • Other third parties who help us administer your insurance claim. This could be loss adjusters, claims handlers, accountants, auditors, banks, lawyers and other experts including medical experts
  • Companies who provide you with certain services such as home emergency cover and legal expenses cover
  • Fraud detection agencies and other third parties who operate and maintain fraud detection registers or undertake investigations in cases of suspected insurance fraud. This includes the Insurance Fraud Register, the Insurance Fraud Intelligence Hub (IfiHUB) and the Motor Insurance Database
  • Where necessary, courts and other alternative dispute resolution providers, such as arbitrators, mediators and the Financial Ombudsman Service
7. International Data Transfers

If your information is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal protections.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, and to meet legal, accounting, or regulatory requirements. For example, if you take out an insurance policy with us we will typically keep your information for 7 years after the policy has finished.We will store your data in our CRM and Quote platform.

9. Security

We implement appropriate technical and organisational measures to protect your personal information from loss, misuse, or unauthorised access.

10. Your Rights

Under data protection law, you have the right to:

  • Access the personal information we hold about you
  • Request correction or deletion of your data
  • Restrict or object to our processing of your data
  • Withdraw consent where processing is based on consent
  • Request transfer of your data to another provider (data portability)
  • Withdraw from our marketing permissions at any time
  • Right to lodge a complaint with the ICO

To exercise your rights, please contact us using the details below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via our website or email.

13. How to Make a Complaint

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

ICO Contact Details:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Lets Get Started

Take control of your coverage with confidence.

Our team is responsive, knowledgeable, and ready to guide you—just reach out and let us know how we can support your query.