Privacy policy

Who we are

GlassDrive is the data controller for the personal information described in this policy. Contact: support@glass-drive.com.

What we collect, and why

We collect the minimum personal data needed to run a temporary car cover consultancy. In practice that means:

  • Quote data: the details you provide when running a quote — driving licence number, date of birth, address, vehicle registration, claims/convictions in the last 5 years, the cover window you've selected.
  • Account data: if you create an account, your email address, password (hashed), and a record of policies you've bought.
  • Payment data: processed via PCI-compliant providers (Stripe, PayPal, GoCardless). We never see or store full card numbers.
  • Technical data: IP address, browser fingerprint, and basic analytics so we can keep the site working.

We use this data to arrange cover with the underwriters on our panel, to issue your certificate, to handle claims and complaints, and to comply with our regulatory obligations.

Who we share it with

  • Underwriters on our panel. When you run a quote we forward your details to the panel; the underwriter that ends up writing your policy receives them as the data controller for that policy.
  • Payment processors for the transaction.
  • The Motor Insurance Database (MID) via the underwriter, as required by law.
  • The Claims and Underwriting Exchange (CUE) if you make a claim.
  • HMRC, the FCA, the Ombudsman, or law enforcement where we're legally required to.

We do not sell your personal data to anyone. We do not share it with marketing partners.

How long we keep it

  • Active customers: while your account is open and for 7 years after closure (HMRC and FCA record-keeping rules).
  • Quotes that don't lead to a policy: 90 days.
  • Claims data: 7 years after the claim is settled.
  • Marketing preferences: until you change them.

Cookies

See the Cookie Policy for the cookies we set and how to control them.

Marketing

You'll receive transactional emails (quote confirmations, certificates, policy reminders, claims correspondence) because they're necessary to operate your policies. You can opt in or out of marketing emails (offers, blog content) in your account settings at any time.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Correct anything inaccurate.
  • Delete your data (where we don't have a regulatory obligation to retain it).
  • Restrict how we use it.
  • Port it to another provider.
  • Object to any processing based on legitimate interests.
  • Withdraw consent for marketing at any time.
  • Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data. ICO contact: ico.org.uk, 0303 123 1113.

To exercise any of these, email support@glass-drive.com with "Data request" in the subject line.

Changes to this policy

We'll update this page when our processing changes. If the change is material, we'll email account-holders before it takes effect.