We might share your personal information with other companies in the Admiral Group, or trusted service providers based outside the UK and the European Economic Area (EEA).
This usually happens when we store data in cloud systems. We aim to keep your data within the UK and EEA, but sometimes overseas providers might need to access it. For example, to help with technical support or troubleshooting.
Sometimes, the data protection laws of these countries aren't as comprehensive as the laws in the UK or EEA. If that's the case, our priority is to make sure your data is kept as safe as possible. Whenever we transfer data internationally, we use tools to:
- make sure the data transfer complies with any laws that apply
- help give your data a suitable level of protection
To make sure each data transfer complies with any laws that apply, we use these legal safeguards:
Standard Contractual Clauses ('SCCs')
These clauses mean the other party has to protect your data and provide you with a certain level of rights and protections.
For example, we use SCCs with the equivalent UK clauses (IDTA) to transfer your personal data.
You can exercise your rights under the SCCs, or the IDTA, by getting in touch with us.
Adequacy decisions
Adequacy decisions mean we can transfer personal data between the UK and the EEA.
We can also transfer personal data to certain other countries outside of the EEA that have adequate laws to protect personal data - this is decided by the European Commission and UK government. For example, we might transfer your personal data to our shared service centres based in Canada.
We also use some extra protections, depending on what's right for each data transfer. For example:
- technical protections, like encryption and pseudonymisation (in a nutshell, this is when we replace any data that could identify you personally with placeholder values, for increased protection)
- policies and processes to challenge disproportionate or unlawful government authority requests
If you have any questions or concerns about how we transfer your personal data, don't hesitate to get in touch.