Lochain Patrick Insurance Brokers Limited (“LP”, “we”, “our” or “us”) are committed to protecting your personal data and complying with data protection laws.
Please read this privacy policy carefully. It provides information about how we process personal data of our customers, job applicants and website visitors (“you”, “your”) and the rights available to you under data protection laws. We act as a controller in relation to your personal data. If you are applying for a job with us, we act as a joint controller with our group company Burns & Wilcox Global Solutions Limited.
Layered Approach
We use a layered approach to delivering information about data protection through:
• the brief privacy notice incorporated in your policy documentation when we issue your policy, which will refer to this more detailed privacy policy;
• this privacy policy accessible online; and
• the London Market Core Uses Information Notice. We may process your personal data as set out in the LMA Insurance Market Information Notice, but please note that this privacy policy sets out how we use personal data more specifically in the context of our business.
This privacy policy covers the following areas of our data protection and privacy practices:
• Information we may collect about you
• Why we collect personal data
• Sharing and safeguarding your personal data
• Retention of your personal data
• Your rights
• Contacting us
• Changes to this privacy policy
• Cookies
• Your right to complain
01. Information we may collect about you
We may collect and process the following personal data about you:
• Information provided to us by you, including:
• individual contact details, such as names, postal and email addresses, telephone numbers;
• any information you choose to provide us when applying for a job with us, such as information in your resume or Curriculum Vitae (“CV”) like job history, education and qualifications; or
• identification details, such as dates of birth and registration numbers (including passports/national insurance numbers); or
• policy and claims information including policy number, details of cover, premiums due, relationship to the policyholder and previous claims history; or
• special categories of personal data, i.e., personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life sexual orientation or personal data relating to criminal convictions and offences (e.g. details of any criminal or fraudulent behaviour, medical information or job applicant adjustments);
Information provided to us through third parties, such as retail insurance companies, other retail brokers or recruitment agencies, including:
• any information required to assess your suitability for a job with us, including information in your resume or CV like job history, education and qualifications; or
• policy and claims information including policy number, details of cover, premiums due, relationship to the policyholder and previous claims history; or
• special categories of personal data (e.g. details of any criminal or fraudulent behaviour, medical information or job applicant adjustments);
We may maintain records of any correspondence with you including phone records;
Information we collect through cookies. Please see our cookies statement for further information.
02. Why we collect personal data
We are required by data protection laws to have a lawful basis to process and use your personal data. The following table sets out the purposes and our lawful basis for processing your personal data:
Purpose of processing
To assess the risk and arrange an insurance policy with appropriate cover, for example reviewing your application, or in relation to the administration and maintenance of your insurance policy, or in order to process a valid claim, or to process payments and pursue and collect outstanding monies owed.
Categories of personal data
• Individual contact details;
• Identification details;
• Policy and claims information;
• Records of any correspondence with you; and
• Special categories of personal data.
Lawful basis
This processing is necessary for the performance of a contract between you and us. If you fail to provide us with this personal data, we will be unable to perform our obligations under the contract, which may include being unable to arrange a contract of insurance or handle any claims.
Where we process any special categories of your personal data, we will obtain your consent at the point of collection unless one of the following substantial public interest conditions apply:
• insurance purposes in the UK;
• preventing or detecting unlawful acts; or
• to manage legal claims.
Purpose of processing
To review your job application, make reasonable adjustments for you, and/or assess your suitability for a role with us.
Categories of personal data
• Individual contact details;
• Any information you choose to provide us, or we require, when applying for a job with us; and
• Special categories of personal data.
Lawful basis
When reviewing your job application or assessing your suitability for a role with us, it is in our legitimate interests to do so. These interests include:
• managing our relationship with you;
• to ensure we carry out a fair recruitment process; and
• to make an informed recruitment decision.
We process your personal data to comply with our legal obligation to ensure we make reasonable adjustments for you throughout the recruitment process.
Where we process special categories of your personal data, it is necessary to do so to comply with employment, social security and social protection law.
Purpose of processing
To prevent, identify, monitor and investigate fraud or any similar activity that is in the public interest.
Categories of personal data
• Individual contact details;
• Identification details;
• Policy and claims information; and
• Records of any correspondence with you.
Lawful basis
Where it is in our legitimate interests to do so (for example, to protect the public and our business), or to ensure compliance with our legal obligations under UK law.
Purpose of processing
To defend ourselves against or make any legal claims
Categories of personal data
• Individual contact details;
• Identification details;
• Policy and claims information;
• Records of any correspondence with you;
• Any information you choose to provide us, or we require, when applying for a job with us; and
• Special categories of personal data.
Lawful basis
It is in our legitimate interests to do so, for example, to protect our business’ interests or our employees.
Where we process special categories of your personal data for this purpose, it is necessary to do so to establish, exercise or defend legal claims, including prospective legal action.
Purpose of processing
To maintain our accounts and records
Categories of personal data
• Individual contact details;
• Identification details;
• Policy and claims information;
• Records of any correspondence with you; and
• Special categories of personal data.
Lawful basis
Where it is in our legitimate interests to do so (for example, to comply with standard business practices or in compliance with international regulations and authorities), or to ensure compliance with our legal obligations (for example, where we are required to maintain records of any transactions with you for compliance with UK law).
Purpose of processing
To gather market intelligence in order to develop and improve our products and services
Categories of personal data
• Policy and claims information
Lawful basis
It is in our legitimate interests to do so, for example, to ensure we are competitive and providing an excellent service.
Purpose of processing
To market our services and products to you
Categories of personal data
• Individual contact details;
• Identification details; and
• Policy and claims information.
Lawful basis
We will obtain your consent, or we may rely on our legitimate interests to do so, via the soft opt-in.
Purpose of processing
In exceptional circumstances, where processing is necessary to protect your life.
Categories of personal data
• Individual contact details; and
• Special categories of personal data.
Lawful basis
We will do so to protect your vital interests.
Where we process your personal data for our legitimate interests, we ensure this processing is necessary for our business practices and does not outweigh any rights afforded to you as an individual. For more information about this, please contact us using the details in section 6 of this privacy policy.
03. Sharing and safeguarding your personal data
All personal data supplied to us is stored on secure servers and only accessed and used in line with our data protection policies and procedures. Your personal data will only be accessed by our employees or authorised third parties who require the information for their business purposes. In some instances, we may share your personal data with our associated companies, insurers or service providers in the United States of America. In these circumstances, we will share your data in compliance with data protection laws, which require us to either rely on an adequacy decision or have an appropriate safeguard in place. You may contact us using the details in section 6 of this privacy policy to request a copy of any safeguards we use.
Our group companies
We may share your personal data with our group companies listed on our website www.lpib.co.uk but only for the purposes laid out in this privacy policy such as where services are shared between our group such as marketing and recruitment. For example, where you apply for a job with us, we will share your personal data with Burns & Wilcox Global Solutions Limited to proceed with your application.
Authorised third parties
We may share your personal data with the following categories of organisation:
• third party outsourced claims handling suppliers;
• third party IT service providers/companies that provide services for us on our behalf, including IT services and mailing services, payment services, website hosting and SMS sending providers;
• third party digital platform providers, including for recruitment purposes;
• third party recruiters or recruitment agencies, instructed by either you or us;
• our software providers who may use your information to provide you with the services you request, analyse and assess their market, customers, products and services;
• law enforcement authorities, including the police;
• our professional advisers, such as accountants, law firms, auditors and insurers;
• fraud prevention agencies and debt collection agencies;
• prospective sellers, buyers or other third parties involved in the transfer, sale, reorganisation or merger of our business; or
• our third party managing agents.
Governmental, legal and regulatory authorities
It may be necessary for us to share your personal data with financial and regulatory organisations (e.g. the Financial Ombudsman Service, the Financial Conduct Authority, the Information Commissioner’s Office) or law enforcement agencies (including courts) in order to assist them with enquiries, investigations or proceedings and ensure our compliance with our regulatory and legal requirements. As a financial services company, we are required to have certain processes in place with regard to anti-bribery and corruption, money laundering and fraud. If any criminal offence is detected or suspected, we may share data with third parties (e.g. law enforcement agencies, fraud prevention agencies, anti-money laundering agencies) in order to prevent crime or aid investigations if crime is identified. We may also access this data as part of our ‘Know Your Client’ procedures to establish the parties we are dealing with and when assessing a claim payment in order to prevent criminal offences.
04. Retention of your personal data
We will only keep your personal data for as long as is reasonably necessary for the relevant purposes for which it was collected as set out in this privacy policy or when we are obliged to do so in order to comply with legal or regulatory requirements. The amount of time we retain your data for depends on the nature of the personal data and what we require it for. When your personal data is no longer required, we will ensure it is securely deleted.
We may also keep your personal data where necessary to establish, exercise or defend legal claims or to comply with our legal or regulatory obligations, but for a limited period and only for so long as is necessary for such purposes.
05. Your rights
Under data protection laws, you have rights in relation to the personal data that we process about you as listed in this section below. Please note that the rights listed in this section are not absolute and only apply to you unless an exemption under data protection law applies. Where an exemption does apply, we will explain this to you when responding to your request.
Access
The right to obtain from us confirmation that your personal data is being processed, and to be provided with copies of your personal data.
Rectification and Erasure
The right to rectification is your right to require the correction of incorrect or inaccurate personal data.
The right of erasure (often referred to as the "right to be forgotten") applies in a number of circumstances, including:
• the personal data is no longer needed for the purposes for which it was collected and used, e.g. you no longer have an insurance contract provided by us on one or more of our (re)insurance carrier partners; or
• if you object to or withdraw consent to use the personal data and there is no overriding legitimate reason for us to keep the information.
Restriction of processing
The right to ask us to restrict processing activities for some of your personal data, provided certain conditions apply:
• if you have challenged the accuracy of the personal data we hold, you can ask us to stop processing inaccurate personal data;
• if your personal data has been processed unlawfully;
• if you have exercised your right to object, you may ask us to restrict processing of the relevant personal data whilst we assess if our legitimate interests allow us to continue processing the personal data; or
• if we no longer need the personal data for the purposes of the processing activities we are using it for, but you require us to keep it in order to establish, exercise or defend a legal claim.
Objection
The right to object to personal data being processed in certain circumstances, such as:
• for marketing purposes; or
• any processing based on our legitimate interests or carried out in the public interest, unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedom, or if such processing is required for the establishment, exercise or defence of legal claims;
Data Portability
The right to transfer your personal data to a third party in a standardised machine-readable format.
Automated decision making
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affect you. Our processing does not involve automated decision making.
Complaint
The right to raise a complaint with us directly if you believe we have infringed any data protection laws. For further information, please see section 9 of this privacy policy below.
Withdraw consent
Where we rely on your consent to process any personal data, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing of your personal data before your consent was withdrawn. To withdraw your consent, please contact us using the details in section 6 below.
For further information regarding your rights, please visit the Information Commissioner’s Office (the “ICO”) website.
In addition to your rights above, where we are processing your personal data jointly with Burns & Wilcox Global Solutions Limited, you can request an explanation of how we manage our respective responsibilities to you under data protection laws.
06. Contacting us
If you have any questions regarding how we process your personal data, including how we jointly process your personal data, you may contact us on the details below:
• Phone: 0207 481 1683
• Address: 8th Floor, 30 St. Mary Axe, London EC3A 8BF
• Email: compliance@burnsandwilcox.uk
Where we process your personal data as a joint controller, LPacts as your sole point of contact so please use the information in this section to contact us.
07. Changes to our privacy policy
We may change our privacy policy from time to time. We will let you know when we update this privacy policy and any changes will be displayed on this page. This privacy policy was last updated in April 2026.
08. Cookies Statement
Our website uses cookies. Please read our cookies policy to find out more about how and why your personal data is processed through cookies.
09. Your right to complain
Should you have any concerns regarding how we process your personal data, please contact us using the details in section 6 of this privacy policy. We will handle any complaint in accordance with our internal complaint procedures.
We would be grateful for the opportunity to respond to your complaint first. However, you also have the right to report your concern to:
• the ICO if you are in the UK (online at Make a complaint | ICO; by phone on 0303 123 1113; or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF); or
• the relevant supervisory authority in the EEA (a list of the relevant data protection authorities can be found online here) if you are in the EEA.