Insurance – Privacy Notice


  • Name of service - Insurance
  • Directorate - Resources
  • Date of issue - 5 November 2020
  • Date of current version - 28 November 2023
  • Review date - 28 November 2025


The reasons why we use your personal data

This privacy notice applies to the functions of the Insurance Team that handles insurance claims on behalf of Surrey County Council.

What processing of personal data is undertaken by the service?

We use your personal information to administer your claim and for the prevention and detection of fraud. Surrey County Council is under a duty to protect the public funds it administers.

What information do we collect?

In the course of handling your claim we collect the following personal information when you provide it to us:

  • personal details – name, address, e-mail address, telephone numbers, date of birth and national insurance number (if claiming for personal injury).
  • medical details (if claiming for personal injury) – GP name and address.
  • bank details (if required in order to settle claim).

How we are allowed to use your personal data

We rely on:

  • legal obligation
  • public task
  • for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity for reasons of substantial public interest (equality of opportunity or treatment, preventing or detecting unlawful acts, protecting the public against dishonesty, preventing fraud, suspicion of terrorist financing or money laundering.)

The provision of the information requested in our claim form is required from you to enable us to assess your claim for compensation.

If you do not provide the requested information we will be unable to process your claim.


To process your personal data, we will explain to you what we are asking you to agree to and why. If we have consent to use your personal data, you have the right to remove it at any time. If you want to remove your consent, please contact us at the following email address and we will deal with your request.

Who we share your personal data with

We may disclose your information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our contracts with you; or to protect our rights, or our safety and/or the safety of our service users, or others.

We may also disclose your information to our suppliers and contractors to provide information to you on our behalf and/or in order to fulfil our legal and statutory obligations.

We may share your personal data with our insurers and solicitors who may store it on their databases. Our insurers may search these databases when you make a claim, to validate your claims history or that of any other person or property likely to be involved in the claim.

Insurance services are provided by Orbis a collaboration between East Sussex County Council, Surrey County Council and Brighton & Hove City Council. Personal data will be shared by insurance team members of Orbis working on behalf of the aforementioned Councils.

This authority is under a duty to protect the public funds it administers. In order to prevent and detect fraud, we may, in liaison with our insurers, share information about you with other organisations including the police, check and/or share your details with fraud prevention and detection agencies or bodies responsible for auditing and administering public funds. If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies to prevent fraud and money laundering.

Your personal data will not be shared with any other third parties unless this is required to comply with a legal obligation.

Retention of data

We will hold your personal information for up to 7 years in line with the Limitation Act 1980. In personal injury claims involving a child, the 7 year period does not start until the child reaches the age of 17 and so children's personal information will be held for longer.

Data will be retained in accordance with SCC countywide data retention schedule.

Other information

For further information on our privacy notices, please see information and privacy.

Subscribe to our newsletters for latest news and events.