Legal & Regulatory
Privacy notice.
How IISL Underwriting uses personal information when you visit our website, contact our team or deal with us through an insurance broker.
1. Who is responsible for your information
IISL Underwriting is a trading name of InShare Insurance Services Limited (company number 12598390). We are a controller of personal information used for our own underwriting, administration, business and regulatory purposes. Our ICO registration number is ZB339457. Insurers, brokers and other organisations involved in your insurance may act as separate controllers and provide their own privacy notices.
Contact for privacy enquiries and rights requests: Graeme Thurgood, Graeme@Insharerisk.com. Postal address: Barrington House, Heyes Lane, Alderley Edge, Cheshire, SK9 7LA. This notice applies to the IISL Underwriting website, including IISL-UW.com, and our related services.
2. Information we use and where it comes from
We use names, business contact details, job roles, correspondence, enquiry details and information needed to assess and administer insurance. This can include risk addresses, property and business information, quotation and policy records, financial or transaction information relevant to the policy, and relevant loss or claims history. Information about a business may identify its owners, representatives, employees or other individuals.
We obtain information from you, your broker, the insured business and, where relevant to the insurance, insurers, appointed service providers and public business or regulatory registers. Please only supply information that is relevant and that you are entitled to share. Where you provide information about other people, please make this notice available to them.
We do not request health information or criminal-conviction data for our current services. Please do not include this information in website enquiries or routine submissions.
3. Why we use information and our lawful bases
• Enquiries and business relationships: to respond, support brokers and manage business contacts. We rely on our legitimate interests in providing and managing our services, balanced against individuals’ rights.
• Quotations and policy administration: to assess risk, arrange and administer cover under our insurer authorities. We rely on contract where the individual is a party to the contract or has requested pre-contract steps; otherwise we rely on legitimate interests in arranging and administering the insurance.
• Legal and regulatory duties: to meet applicable record-keeping, regulatory and legal requirements. We rely on legal obligation.
• Complaints, security and legal claims: to investigate concerns, protect our systems, prevent misuse and establish, exercise or defend legal claims. We rely on legitimate interests and, where applicable, legal obligation.
• Business updates: where we send relevant broker or business communications, we rely on legitimate interests where permitted and obtain consent where required. You can object to direct marketing at any time using the message’s opt-out route or by contacting us. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.
If information needed for a quotation or policy is not provided, we may be unable to assess the risk or administer the cover. We will explain what is needed when requesting it.
4. Who receives information
We share relevant information, where necessary, with the placing broker, insurers and their appointed service providers; group companies providing operational support; and suppliers supporting our website, email, IT and insurance administration. We may also disclose information to professional advisers, auditors, regulators, the Financial Ombudsman Service, courts or other authorities where required or justified by the relevant purpose. We limit sharing to what is needed and apply appropriate confidentiality and data-protection arrangements.
5. Website enquiries and analytics
Our website is hosted by Framer. The contact form collects your enquiry type, name, email address and message. Submissions are processed through Framer and delivered to Graeme@Insharerisk.com so we can respond and route the enquiry. Enquiries and subsequent correspondence are handled in our business email and relevant records.
We use Framer’s built-in analytics to understand aggregate website use. These analytics do not use cookies or persistent visitor identifiers. Technical information may also be processed to deliver and secure the website. See our Cookie policy for more information.
6. International processing
Our service providers may process information outside the UK. Where a restricted international transfer is involved, the required UK data-protection safeguards must apply, such as UK adequacy regulations or approved contractual safeguards with any necessary additional measures. You can contact us for information about the safeguards relevant to your data. Framer’s data-processing terms describe its hosting and international-transfer arrangements.
7. How long we keep information
We retain personal information for as long as needed for the purpose for which it was collected and to meet applicable legal, regulatory and contractual requirements. For enquiries, we consider whether the enquiry remains active and whether follow-up or a record of our response is needed. For insurance records, we consider the policy period, insurer requirements, possible claims or complaints and the time needed to establish or defend legal rights. Records may need to be retained after a policy or business relationship ends. We review information and delete or anonymise it when it is no longer required. Contact us for the retention criteria applicable to a particular record.
8. Online trading and decisions
This website provides information and an enquiry route. Submitting an enquiry does not produce an insurance quotation or acceptance decision. Separate online trading services may provide additional information about how data is used when you access them. Contact our underwriting team if you need information about a quotation, referral or underwriting decision.
9. Your rights and concerns
Depending on the circumstances, you may request access to your personal information, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You have an absolute right to object to direct marketing. These rights are subject to applicable conditions and exceptions. We may need to verify your identity and will respond within the applicable statutory period.
Contact Graeme@Insharerisk.com to exercise your rights or raise a concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We would welcome the opportunity to address your concern first, but you do not have to contact us before the ICO.
10. Updates
We may update this notice when our services or processing change. The date on this page identifies the latest revision.
Last updated: 19 October 2026