Privacy Policy

Privacy Policy

Last updated: 1 October 2025

The UK Travel Insurance Association (UKTIA) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or engage with us as a member, partner, or visitor.

1. Who We Are

The UK Travel Insurance Association (UKTIA) is a trade association representing travel insurance intermediaries, insurers, claims companies, and assistance providers. We act as the Data Controller for the purposes of applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have questions about this policy or how we handle your data, please contact us at:
Email: info@uktia.com

2. What Data We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, job title, organisation, membership details.
• Contact Data: Email address, telephone number, postal address.
• Website Data: IP address, browser type, pages visited, and cookies (see Section 8).
• Communication Data: Records of enquiries, correspondence, or feedback.
• Membership/Events Data: Registration details for association events, meetings, or working groups.

We do not collect sensitive personal data unless it is strictly necessary (e.g. dietary or accessibility needs for event attendance) and only with your explicit consent.

3. How We Use Your Data

We will only use your personal data where the law allows us to. Common uses include:

• Administering association membership and services.
• Responding to enquiries and providing information.
• Organising events, meetings, and communications.
• Sending newsletters, updates, and industry information (where you have opted in).
• Complying with legal or regulatory obligations.
• Improving our website and digital services.

4. Legal Bases for Processing

We rely on one or more of the following legal bases under UK GDPR:

• Consent – where you have given clear consent for us to process your data.
• Contractual necessity – where processing is necessary for membership or event registration.
• Legal obligation – where we must comply with UK law.
• Legitimate interests – where processing is necessary for our legitimate activities as a trade association, provided these do not override your rights.

5. Data Sharing and Third Parties

We will not sell or rent your personal data to third parties. We may share data with:

• Service providers and IT support who assist in operating our website and systems.
• Event organisers, venues, or partners where necessary for attendance.
• Regulators or authorities if required by law.

All third-party service providers are required to respect the confidentiality and security of your data and comply with UK GDPR.

6. International Transfers

Where data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as the UK Government-approved adequacy regulations or standard contractual clauses.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods are outlined in our internal data retention policy.

8. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance user experience and analyse website traffic. For more information, please see our Cookie Policy.

9. Your Rights

Under UK GDPR, you have the following rights:

• The right to access your personal data.
• The right to correct inaccurate or incomplete data.
• The right to request deletion of your data.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time (where consent was the basis for processing).
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk).

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Any updates will be published on this page with the date revised.