1st Central - are they breaking any data protection laws?

[nightkid]

Hi all

Just want some opinion on this matter.

 

I've regrettable insured with 1st Central 3 months ago and on 2 separate occasions being asked for proof of details which I think they are over stepping their boundaries in terms of privacy. 

 

1st time round they requested usually stuff like DVLC check code, driving licence, NCB and V5 That was fair enough

 

the latest request for a bank statement showing the card I paid the policy with; I don't understand what influence that has to the policy. They also want proof of home address (council tax statement or utility statement) which I would think a scanned driving licence I give them 1st time round was sufficient. I really don't think they are using my data to valid my insurance policy anymore.

 

I'm generally cautious of my online presence. Nowhere in their policy do they mention data protection and how is my data stored/managed.

 

Frankly I don't really trust them as I know they use very aggressive cookies on their website to track IP addresses, device names etc. I've never been asked to submit proof of personal details to this level before by any insurance company; Is this the norm now how insurance company operate?

 

Another point is they given me 2 choices; either email it (not particularly safe) or post them which is at my cost every time I post to meet their constant request.

[slick132]

Hi NK,

 

Just to give some balance to this, I've had 3 cases where fraudsters have tried to insure 3 different cars using my bank account. The charges went through on my bank account but were flagged up as suspicious and they asked me to confirm if I'd made the transactions.

 

They want to check it was really YOU that paid for the insurance with YOUR bank or credit card account, as well as proof of your address. 

 

Instead of being suspicious about their need for data, you could view this as their attempt to check they're using your money to insure your own car.

 

Use email if you want to save on postage but send the proof documents by post for security.

[nightkid]

Slick132

Maybe I would also think like you if they asked me in the beginning and not 3 months into the policy .

 

Regardless of their need for data is genuine or not there's a definite ignorance of data security here by lack of defined policy on this matter. We all read companies getting hacked or misplaced customer data which is one potential reason why you found fraudsters having access to your bank details in the first place. Again no mention on data protection by 1st central on this matter so they could be selling my data to dodgy third parties using unencrypted channels without my consent for all I know. What happened to GDPR here? 

 

I can see why banks steps in with checks as they are legally bounded by it and it hits their bottomline. Just not convinced why 1st Central would stand into this "policing" role.

 

Going back to the genuine need of the data, logically there 3 possible outcomes when I submit the requested information:

1) policy continues, no problem.

2) changes to the policy: £50 plus whatever increase due to new information

3) cancel policy: £75 deducted, remaining policy refunded. 

 

Either way they have profited from "someone's" account. I'm not sure they would care where the money came from once the bank have authorised it.

 

Maybe there's some new law that insurance companies have to do more with due diligence and/or the frauds are hurting this finances somehow. Hence why I asked if this is going to be the new norm? Are other insurance companies also requesting this level of data?

[Migster]

Their privacy policy is on their website.   https://www.1stcentralinsurance.com/legal/privacy-policy

[nightkid]

@MigsterThanks for the link to the privacy policy.

 

The story continues unfortunately:  

 

I posted the requested info and had it tracked & signed via Post Office (3rd Sep). Email 1st Central the tracking number straight after. Expected a confirmation within 5 working days as per their policy to state whether everything is accepted or not.

 

Heard nothing but 1 month later (01 Oct) I got an email saying "Unfortunately we are unable to locate the item you have sent to us in the post. We have tried to complete a track and trace on the Royal mail website to confirm it was signed for using the reference number you have provided but the site does not appear to be working at this time and will not carry out the search on your reference number."

 

I went on the Royal Mail website and the tracking detail works fine; I just email them a screen shot of this stating it was signed and delivered 1 month ago so now I'm questioning whether they are saying the Royal Mail did not fulfil their service to deliver the mail or they have lost/mishandled my private data in their process (which brings back the original question in the title). The usual threat of policy cancellation after 10 calendar days if I don't sent them the information.

 

From the start I refused to email my personal data via un unencrypted email hence I posted it which was the option they suggested I do.  I think I've done everything within reason and complied to all their request but they keep asking for something different every month with continuous threats to cancel my policy.

 

Will appreciate any advise and how best to deal with this as it's getting tiring with no clear indication when they will be satisfied.  

The final option is to cancel the policy myself but I don't see why I have to take the financial penalty for it.  

Many Thanks.

 

Edited October 2, 2020 by nightkid