Home/Privacy notice

Legal & service information

Privacy notice

A clearer explanation of the information that may be used across the CoverInMinutes website, temporary car insurance journey, payment, document and support services.

Last reviewed: September 2026

Overview

This notice explains the main categories of personal information that may be used when you visit the website, check a vehicle registration, request a quote, enter driver details, complete payment, access My Portal, request documents or contact support.

The organisation responsible for particular processing can vary by stage. CoverInMinutes / Northbridge Motor Solutions may handle website and support information, while insurers, intermediaries, payment providers, fraud-prevention providers and other service providers may act as separate controllers or processors for their own activities. Where another organisation provides its own privacy information, you should read that information as well.

Information you may provide

Identity information: name, date of birth and other details used to identify the proposed driver.
Contact information: email address, mobile number and postal address.
Vehicle information: registration, make/model information and other vehicle details used in the quote journey.
Driving and eligibility information: licence details, driving history and answers to eligibility or underwriting questions.
Cover information: requested start/end dates, intended use and quote/policy references.
Payment information: transaction status and payment-provider references. Card details are tokenised through TagadaPay for card checkout. Do not send your full card number or security code to support.
Support and complaint information: messages, correspondence, issue descriptions and documents you choose to provide.
Technical information: IP address, browser/device information, security events, logs and cookie/consent information where applicable.

HOW INFORMATION MAY BE USED

Different data supports different parts of the journey.

Not every category is used for every visitor or every quote.

Vehicle & quote

To look up vehicle information, prepare quote data, check eligibility and present information relevant to the requested temporary cover.

Payment & fulfilment

To connect the journey with secure payment, reconcile transaction status and support document/policy fulfilment where a purchase completes.

Support & complaints

To identify customers, investigate issues, answer support requests, handle complaints and keep an appropriate record of communications.

Fraud & security

To protect accounts, forms, transactions and the service from misuse, fraud, unauthorised access and other security threats.

Legal & compliance

To maintain records and respond to obligations, disputes, claims, regulatory requirements or lawful requests where they apply.

Service improvement

To understand technical performance and how the service is used, subject to applicable cookie, consent and data-protection requirements.

Where information can come from

Information may come directly from you, from vehicle or address lookup services, from insurers/intermediaries involved in the insurance journey, from payment providers, from fraud/security providers or from technical logs created when the service is used.

Lawful bases

The lawful basis depends on the purpose and organisation responsible for the processing. Depending on the activity, processing may be necessary to take steps at your request or perform a contract, comply with a legal obligation, pursue legitimate interests such as security or fraud prevention, or rely on consent where consent is the appropriate basis.

Where another organisation is responsible for a particular activity, its own privacy notice should explain the lawful basis it relies on.

Sharing information

Information may be shared where necessary with organisations involved in providing or supporting the journey, such as insurers, intermediaries, underwriting or administration providers, payment processors, vehicle/address lookup services, fraud-prevention and identity services, hosting/technology suppliers, professional advisers and public authorities where disclosure is lawfully required.

Payment security: do not send full card numbers, CVVs, PINs, passwords or one-time security codes through the support form or ordinary email.

RETENTION & SECURITY

Information should not be kept forever without a reason.

Retention can differ depending on the record and who is responsible for it.

Retention

Records may be kept for different periods.

The period can depend on contract administration, accounting, fraud prevention, complaints, claims, legal requirements and the need to establish or defend legal rights.

Security

Access should be limited to what is needed.

Reasonable technical and organisational measures can include access controls, secure hosting, logging, encryption in transit and controls around payment information.

Providers

Third parties may keep their own records.

Payment providers, insurers and intermediaries can have their own retention, security and legal obligations that are explained in their privacy information.

Transfers

Some technology providers may process data outside the UK.

Where international transfers occur, the organisation responsible should use an appropriate legal mechanism or safeguard where required.

Your data-protection rights

Depending on the processing and the circumstances, UK data-protection law can give you rights such as:

to be informed about how personal information is used;
to request access to personal information held about you;
to ask for inaccurate or incomplete information to be corrected;
to request erasure in circumstances where the right applies;
to request restriction of processing in certain circumstances;
to object to particular types of processing where the right applies;
to request portability for qualifying processing; and
rights relating to certain automated decisions, where applicable.

These rights are not absolute in every situation. An organisation may need to keep or continue using information where there is a lawful reason, such as a legal obligation, fraud-prevention need, insurance/claims requirement or the establishment or defence of legal rights.

Making a privacy request

Use the support route and clearly state that the message is a privacy or data-rights request. You may be asked for enough information to verify identity and locate the relevant records. Do not send more identification than is requested.

Contact support about privacy →

Complaining about use of personal information

If you are unhappy with how a privacy request or data-protection issue is handled, raise the concern with the organisation responsible for that processing. You may also have the right to complain to the Information Commissioner's Office.

Cookies and similar technologies

Separate information about browser storage, analytics, advertising measurement and similar technologies is available in the cookie notice.

Changes to this notice

This notice may be updated when the service, providers, technology or legal requirements change. The version published on the website is the current website version.

PRIVACY CHECKLIST

Use the right notice for the right part of the journey

The website, insurer, intermediary and payment provider may each have separate responsibilities.

Only provide accurate information relevant to the person seeking cover.

Use secure payment fields for card information and never send card-security credentials to support.

If you exercise a privacy right, enough information may be needed to verify the request and locate the correct records.