Privacy
policy.

CRS Insurance Brokers is a trading name of CIB Group UK Ltd, a company registered in England and Wales (company no. 13360654). Our registered office is The Copper Room, Deva City Office Park, Trinity Way, Salford, M3 7BG.

We are authorised and regulated by the Financial Conduct Authority (FRN 960073). You can verify our registration at register.fca.org.uk.

For the purposes of data protection legislation, CIB Group UK Ltd is the data controller of your personal information.

We may collect the following categories of personal data when you enquire about or take out insurance through us:

— Contact details: name, address, email address, telephone number. — Business information: company name, company registration number, trade type, number of employees, turnover. — Insurance history: previous claims, existing policies, periods of uninsured activity. — Financial information: details required to arrange premium finance (where applicable). — Communications: records of calls (which are recorded), emails, and other correspondence with us.

We do not collect special category data, such as health information, unless it is necessary to arrange a particular type of cover. Where we do, we rely on the insurance condition in Schedule 1 of the Data Protection Act 2018 rather than on your consent, because consent that could be withdrawn part-way through a policy would leave the cover unworkable. We will tell you when this applies.

Information about criminal convictions is handled under the same Act and only where an insurer needs it to assess the risk.

You do not have to give us your information, but we cannot obtain quotations or place cover without it. A policy can also be voided if what we pass to an insurer turns out to be incomplete or inaccurate.

We use your personal data to:

— Arrange and administer insurance policies on your behalf. — Communicate with insurers, underwriters, and other parties necessary to place your cover. — Process and manage claims. — Comply with our legal and regulatory obligations, including FCA requirements. — Send you renewal reminders and information about your policy. — Improve our services.

Our lawful basis for processing is primarily the performance of a contract, or steps taken at your request before entering into one. Where we have a legal obligation to process data we rely on that. For marketing to business clients and prospects we rely on legitimate interests, being our interest in offering insurance services to businesses likely to need them. Tell us to stop and we will.

We share your personal data with third parties only where necessary:

— Insurers and underwriters, to obtain and place cover. — Premium finance providers, where you choose to pay by instalments. — Credit reference agencies, where you apply for premium finance. A credit search will leave a record on your file. — Industry anti-fraud databases, including the Claims and Underwriting Exchange and the Insurance Fraud Bureau, which insurers use to detect and prevent fraudulent claims. — Loss adjusters and claims handlers, in the event of a claim. — Regulatory bodies including the FCA, where required by law. — IT service providers who support our business operations, under appropriate data processing agreements.

We do not sell your personal data to third parties.

Some of the insurers and reinsurers we approach sit outside the UK. Risks placed at Lloyd's are frequently shared with overseas markets, and a claim on such a policy will involve parties abroad. Google, who provide the analytics on this website, also process data outside the UK.

Where personal data leaves the UK we rely either on the adequacy regulations made by the UK government, or on the International Data Transfer Agreement, so that it remains protected to the same standard as it would be here.

We do not make automated decisions about you. Insurers and finance providers often do. Much commercial underwriting and pricing is now automated, and an application for premium finance will usually involve an automated credit decision.

If a decision affecting you was taken automatically, you can ask for a person to look at it again. Tell us and we will take it up with the insurer or finance provider on your behalf.

We retain your personal data for as long as we have a business relationship with you, and thereafter for a minimum of seven years in accordance with FCA record-keeping requirements and relevant limitation periods under UK law.

Where data is no longer required, it is securely deleted or anonymised.

Under UK data protection law, you have the right to:

— Access the personal data we hold about you. — Correct inaccurate or incomplete data. — Request erasure of your data in certain circumstances. — Object to or restrict certain types of processing. — Receive a portable copy of your data. — Withdraw consent where processing is based on consent.

To exercise any of these rights, or to raise a concern about how we handle your data, please contact us at info@crs-ins.co.uk or call 01455 244630.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We may update this privacy policy from time to time. The current version will always be available on this page. Where changes are material, we will notify affected individuals directly.

This policy was last reviewed in September 2026.