Kita Privacy Policy

We respect your privacy and are committed to protecting your personal data. The purpose of this Privacy Policy is to explain how we collect information about you, why we collect personal data and how we may use it, and to inform you about the policies and procedures that we have in place to respect your privacy.

Please read this privacy policy carefully to understand how we use your data and the rights available to you under relevant data protection laws.

1. Who we are and what we do

Kita Earth Limited (“Kita”, “we”, “our” or “us”) is an Insurance Distributor who distributes insurance products to commercial customers. We are registered in England and Wales under company number 13782654 with our Registered Office at Lloyd's Of London, Lloyd's Lab, Tower 1, One Lime Street, London, EC3M 7DQ. 

We can be found on the Information Commissioner’s Register of Data Controllers under reference number ZB305778. We are also authorised and regulated by the Financial Conduct Authority under firm reference number 981700.

When we use personal data, we are regulated by the Information Commissioner under the Retained Regulation EU 2016/679 (“UK GDPR”) and the UK Data Protection Act 2018 (together, “Data Protection Legislation”). We are accountable as Controller of that personal data for the purposes of Data Protection Legislation.

2. The data we may collect about you

We may collect, retain and process personally identifiable data about you. Predominantly this information is used to arrange and manage your company’s insurance policy.

We may collect, use, store and transfer different kinds of personal data about you while arranging insurance cover for your company or managing a claim. We have grouped this data together as follows:

·       Identity Data includes name, title, job title, and employer details.

·       Contact Data includes address, email address and telephone numbers.

·       Financial Data includes bank account details and sanctions checks.

·       Risk Data includes information about your company which we and other market participants need to collect to assess the risk to be insured and provide a quote.

·       Claims Data includes information about your company's previous and current claims (including other unrelated insurances), which may include personal data.

·       Usage Data includes information about how you use our website, products and services.

·       Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We do not collect any information about criminal convictions and offences.

3. If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

4. How we may collect information about you

We use different methods to collect data from and about you including through:

• when you, as a company representative, visit our website (www.kita.earth), make an enquiry, request a quotation or register with us. This information may consist of basic information such as your name and contact details, for the purpose of responding to any query raised;

• directly from you or from someone you have authorised to incept a policy on your behalf, such as an insurance broker;

• when you, as a company representative, obtain a quote, incept, renew or amend a policy or make a claim. This information may consist of the following personal information:

  • your contact details (name, professional email address, phone numbers, etc)

  • your job information (title, place of work); and

  • any other personal data required for facilitating the electronic signature of documents; and

• from insurers, brokers, other insurance market participants, witnesses, third parties, solicitors (e.g. for details relating to an event that is the cause of a claim)

If you provide us with information on behalf of a third party, you confirm that the third party has appointed you to act on their behalf and/or that you are able to process their personal data in accordance with relevant data protection laws.

Please be aware that this website may include links to third-party websites, plug-ins and applications. If you click on these links or enable those connections, third parties may collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

5. Why we collect personal data

We are required by Data Protection Legislation to have a legitimate reason to process and use your personal data. We may use your personal information for the following lawful purposes under the UK GDPR:

• for the performance of a contract (Article 6(1)b), including the inception, renewal, administration and maintenance of your company’s insurance policy;

• where we have a legitimate interest (Article 6(1)f), including where we assist you with enquiries, where we gather market intelligence in order to develop and improve our products, services and pricing model, or where we gather data for training, quality, and compliance monitoring purposes; and

• to comply with our legal or regulatory obligations (Article 6(1)c), where we are required by our regulator to complete identity and verification checks for the prevention of money-laundering, fraud and other illegal activities.

We do not generally rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

6. How we use your data

We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

 We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

 As we are based in the UK, we may transfer your personal data from the EU or US to the UK. Additionally, some of our external third parties are based outside the UK so their processing of your personal data will involve a transfer of data outside the UK. For example, our website is hosted by Squarespace, which stores data outside of the UK.

 Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data; or

• where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

7. Disclosure to authorised third parties

As set out below, if you obtain a quote or purchase an insurance product or service, your personal data may be shared with the underwriters of your policy.

It may be necessary to share your data with the following categories of third parties, including:

• our insurance broker (where applicable), service providers, sub-contractors and agents in order to administer your account and the products and services provided to you by us now or in the future, including but not limited to our payment processors and electronic documentation providers; and

• our distribution partners, which includes any company that distributes, advertises or recommends insurance policies on our behalf.

In circumstances where it is necessary to share your personal data with a third party, we will always ensure that the information will only be used for the specific purpose for which it has been provided to them, and that they are subject to privacy and security obligations consistent with this Privacy Policy and applicable laws.

We are also legally required to have certain processes in place with regards to anti-bribery and corruption, money laundering and fraud. If any criminal offence is detected or suspected, we may share data with financial and regulatory organisations (e.g. the Financial Conduct Authority, the Information Commissioner’s Office) or law enforcement agencies (e.g. fraud prevention agencies, anti-money laundering agencies and courts) to assist them with enquiries, investigations or proceedings.