Cookie Policy
Cookies policy and Privacy notice
Our website uses first party cookies, which allow us to distinguish you from other users of the website. They maintain functionality as you move between pages and help us to improve our site. We also use some widely-used third-party social media plugins as marketing tools, and to provide convenience tools for our visitors, which create cookies.
What are cookies?
A cookie is a small file which is placed on your computer's hard drive when you visit a website. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the site owners, such as which pages you find useful or not. A web browser normally deletes session cookies when it quits.
A cookie does not give us access to your computer or any information about you, other than the data you choose to share with us. Cookies are used on this site to maintain functionality as you move between pages.
How we use cookies
Cookie |
Name |
Purpose |
More information |
|---|---|---|---|
|
Browser session |
ASP.NET_SessionId |
This cookie is automatically set when you land on the website. It enables functionality between pages and is essential for parts of the site to operate (for example, the Login function cannot work without it). It is held temporarily and is deleted when you close your web browser. It does not contain personally identifiable information and is anonymous. |
|
|
Google Analytics |
• _utma – it ascertains the number of times a visitor has been to web site. It expires after 2 years. • _utmb - it detects when a unique user session. It expires after 30 minutes. • _utmc – it determines when to create a new session for a website visitor. It’s a session cookie and expires when you exit the browser. • _utmz – it tracks how you found us and calculates traffic & navigation within the website. It expires after 6 months. |
These cookies to identify which pages are being used. This helps us to count the number of visitors, which pages they visited and where they have come from, so we can improve the way our website works. The cookies collect information in an anonymous form. We report on this activity in aggregate, and use this information solely for the purposes of monitoring and improving our website. |
• More details on the cookies set by Google Analytics: Google Code • An overview of Google’s Privacy Policy • To opt out of Google Analytics, use their Opt Out Tool |
How to manage your cookies
Cookies are sent to your browser by a website and then stored in the cookies directory of your device. To check and update your cookies settings, you will need to know what browser you are using and what version of it you have. You can usually find this out by opening the browser (just as if you were going to use the internet) and then clicking on 'Help' and then 'About'.
To find out how to allow, block, delete and manage the cookies on all standard web browsers, go to www.allaboutcookies.org and select the browser and version you are using. You'll also find information about how to delete cookies from your computer.
If you choose to have your browsers refuse cookies, this may prevent you from taking full advantage of this website.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by ARAG plc’s privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Your Consent
By submitting your information you consent to the use of that information as set out in this policy. If we change our cookies policy we will post the changes on this page. Continued use of the service will signify that you agree to any such changes.
If you have given your consent, Google Analytics, a web analysis service of Google Inc. ("Google") is used on this website. The use includes the "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices. This data protection notice is provided by www.intersoft-consulting.de.
N.B :
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to ensure anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
Purposes of the Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use.
Legal Basis
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a UK GDPR.
Recipients or Categories of Recipients
The recipient of the collected data is Google.
Transfer to Third Countries
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. You can download the certificate here.
Duration of Data Storage
The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Rights of the Persons affected
You can revoke your consent at any time with effect for the future by blocking the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functionalities of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing a Browser Add-on. Opt-out cookies will prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt-out on all systems used.
If you click here, the opt-out cookie will be set: Disable Google Analytics
We believe you should always know what personal information we collect from you and how we use it, ARAG UK is committed to being open and transparent with how we use your personal information. That is the basic purpose of this Privacy Notice.
ARAG UK is committed to ensuring that your privacy is protected. Whilst providing our services we may be required to collect certain personal data from you. Should we ask you to provide personal data then you can be assured that it will only be used in accordance with this privacy statement.
This Privacy Policy was updated on 25 November 2024.
Data Controller
This Privacy Notice is issued by ARAG UK (collectively referred to as “ARAG”, “we,” “us” and “our” in this Privacy Notice) that operate in the United Kingdom.
For the purpose of the UK General Data Protection Regulation, the following entitles are part of ARAG UK and can act as data controllers of your personal information:
Entity |
ICO Registration Number |
|---|---|
| ARAG Legal Expenses Insurance Company Limited | Z5929870 |
| ARAG plc | Z9365535 |
| ARAG UK Holdings Limited | Z5930219 |
The registered office for all our legal entities is Unit 4, Greenway Court, Bedwas, Caerphilly, CF83 8DW.
Typically, ARAG UK entities act as Data Controllers which means we are responsible for ensuring that your information is collected, processed, secured, and retained in accordance with applicable data protection laws.
What we need
Whilst providing our services we may require personal data. Personal data is information about you from which you can be identified such as your name and contact details. Depending on what services you receive from us, this may include sensitive personal data such as medical information. We will not collect any personal data from you that we do not need to provide our service to you.
The personal information you have provided, or we have received from third parties typically includes:
Type of personal information |
Description |
|---|---|
| Personal details including contact information | Information that identifies or links to you as an individual such as your name, postal address, e-mail address, telephone number, date of birth or age, marital status, gender identification, national insurance number, vehicle registration number and driving licence details. |
| Financial | Financial details for the purposes of processing payments and transactions, this may include your card details, and / or account information. |
| Special Category Data (sensitive information) |
We may collect sensitive information such as:
|
| Criminal offence data |
We may collect information related to any:
|
We will either collect information directly from you, from someone who has authority to make a claim on your behalf, or your general insurer or broker (who sold you your policy) when:
- You purchase an ARAG product.
- You use your policy, such as making a claim or using one of our helplines and discussing your claim with us as it progresses.
- You make enquiries or a complaint.
- You use our website.
- You communicate with us by telephone, in writing by post or email, or via online channels.
- We audit your claim that is being handled by a third party
- Your insurer/broker/solicitor provides us with details of your policy purchase
We collect information through “Cookies” when you use our website, we use them to analyse how you use our website, to allow us to provide optimised content and to help us provide a better overall browsing experience. To find out more about Cookies please read our separate Cookie Policy.
How we use your information
If you are an ARAG employee, former employee, or a prospective employee, please refer to the Employee Privacy Notice or contact
We will use your information to:
What we use your personal information for |
Type of Information collected |
Our Reasons |
|---|---|---|
| Manage your policy |
|
|
| Manage your claim, including providing updates and to make decisions relating to policy coverage |
|
|
| Provide you with the services outlined in your policy (this may include sharing information with third party service providers) |
|
|
| Process the data of parties involved in our Policy Holders’ & Claimants’ claims when managing the claims |
|
|
| Handle complaints |
|
|
| Share with regulatory bodies, auditors, and other insurance companies (directly or via shared databases) when required by law and to prevent and detect fraud |
|
|
| Contacting business partners & prospective business partners |
|
|
| In the event of a merger, asset sale, or other related transaction |
|
|
| Reporting and analytic purposes; Training and monitoring purposes (for example by reviewing recorded telephone calls and auditing claims); Customer satisfaction surveys. |
|
|
| We may indirectly /directly access your information for cyber security monitoring purposes – to ensure the protection of your personal data by monitoring cyber security threats. |
|
|
| Making Reasonable Adjustments as a result of a vulnerability, this may include information related to your physical and mental health |
|
|
| Sharing your personal and sensitive information in an emergency situation |
|
|
Sharing data
We have put in place physical, electronic, and operational procedures intended to safeguard and secure the information we collect.
We will not disclose your personal or sensitive information for any purpose other than the purpose for which it was collected. If it is necessary to share your personal data with third party service providers, we will ensure appropriate contractual obligations are in place to protect your personal data.
We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.
The personal information we collect will be used by us and third parties who process information on our behalf. This may include:
- Law firms.
- Other companies within the ARAG Group.
- Third party suppliers authorised to provide services on behalf of ARAG, such as hire car providers, roadside assistance services and home emergency engineers.
- Experts for the purposes of obtaining evidence to support your claim.
- Investigation agents and/or online tracing and investigation databases.
- Costs draftsmen.
- Document management services.
- Storage within a cloud server.
- The business partner who sold you your policy.
- Regulators and arbitration services such as the Financial Ombudsman Service.
- External Customer Experience agencies.
- Where we act on behalf of, or in conjunction with another insurer/reinsurer we may share your information where it is necessary for the management of your insurance product or account.
- Payment service providers.
- Group or external auditors.
Transferring your information outside of the UK
Your information may be transferred outside of the UK for claims handling, processing, storage, administration, or any other use stated in this notice. The processing of any information outside the UK will comply with UK data protection laws or equivalent.
Where it is necessary to send your personal information outside of the UK steps will be taken to make sure appropriate safeguards are in place to ensure the safety and privacy of your information as set out in this privacy notice.
How long will we retain information about you
Typically, we keep your personal information for 7 years after the claim or service enquiry has been closed or completed. We will only retain and use your personal information thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you would like to learn more about our Data Retention and Disposal Policy, please contact us at
Your rights
Under data protection law you may have certain rights we need to make you aware of. The rights available to you depend on our reason for processing your information. These rights are a priority to ARAG and may include:
-
The right to be informed (about the collection and use of your personal data).
You have the right to be informed about what personal data we hold and why. This Privacy Notice provides you with that information. -
The right of access (to your personal data and supplementary information, known as a Subject Access Request).
You the right to request and receive a copy of all the personal data we hold. If you wish to do this, please write to us at. -
The right to rectification (if your personal data is inaccurate or incomplete)
You have the right to correct inaccurate personal data and complete incomplete personal data we hold. -
The right to erasure (and removal of your personal data)
You the right to request the deletion of your personal data. We will comply with this request providing there are no legal reasons why we cannot do so. -
The right to restrict processing (or ‘block’ the use of your personal data).
You can request that we do not process any personal data that we hold. We will comply with this request providing there are no legal reasons why we cannot do so. -
The right to data portability (to obtain and reuse your personal data for your own purposes across different services)
You can obtain and reuse your personal data for your own purposes across different services which we provide. -
The right to object (to the processing of your personal data in certain circumstances).
You have the right to object to your personal data being processed for a legitimate interest such as direct marketing or for statistics. -
Rights in relation to automated decision making and profiling.
You have the right to object to decisions based solely on computer processing and to question the decisions made about you by a computer.
If you have any questions regarding your rights, please email
Please note that that there are times when we will not be able to honour your request regarding your personal data. This may be due to us requiring that data to fulfil our legal or regulatory duties or where there is a minimum, statutory period for which we must keep your information. If we are unable honour your request, we will let you know our reasons.
Right to withdraw consent
Where we have obtained your consent to process certain types of personal information or sensitive information, you do have the right to withdraw this consent at any time. You can make this request by contacting our claims department at claims@arag.co.uk (please quote your reference number if available) or the data protection department
Please note, these rights are not absolute and there may be times when we cannot do what you ask us to. If that is the case, we will explain why when we reply to you. If you have a question about this Privacy Notice, how we use your personal information, or if you are not happy with how we process your information, please contact the Data Protection Officer at: dataprotection@arag.co.uk or writing to:
Data Protection Officer
ARAG UK
Unit 4
Greenway Court
Bedwas
Caerphilly
CF83 8DW
If you would like to access your personal information, you can request this by using our data request form.
How to make a complaint
If you wish to complain about how we have handled your personal data, or you have any questions/concerns about the way we process your personal information please contact us by emailing:
Data Protection Officer
ARAG UK
Unit 4
Greenway Court
Bedwas
Caerphilly
CF83 8DW
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO). You can contact the Information Commissioner’s Office by visiting ico.org.uk, by telephone at 0303 123 1113 or by post to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF