Legal notices

NFU Mutual Agent Appointment Privacy Policy

NFU Mutual understands that the information you trust us with is important to you, and we are committed to protecting and respecting your privacy.

This Policy explains how, when and why we collect your personal information throughout the Agent appointment process, under what circumstances we may disclose your personal information to others, and how we keep it secure.

1. What information do we collect about you?
We only collect personal information about you where it is completely necessary, or you have provided it voluntarily (e.g. diversity monitoring). We will ensure that we only collect information we need to process your application such as contact details, work history and directorships, or if separate consent is given, to remain part of our Talent Database and/or to connect on LinkedIn.

As part of our Agent appointment process we may ask you to provide personal data which is described as being in a “special category” such as gender or other characteristics protected under the Equality Act 2010. To help protect against fraud and financial crime, we also collect details such as criminal history, involvement or connections with local, national or international politics. court proceedings and credit checks.

2. How will we use the information about you?
The personal information that you provide to us as part of your application and any subsequent activities relating to your application will be used by NFU Mutual, other parts of the Group and Agencies of NFU Mutual (who operate as Appointed Representatives) for the purpose of assessing your suitability as an Agent of NFU Mutual and partner in an Agency.

Agents operating in partnership as Appointed Representatives of NFU Mutual are subject to Financial Conduct Authority (FCA) regulation and are also Approved Persons individually under the same regulation. NFU Mutual has certain obligations as the principal firm. Therefore, NFU Mutual will undertake screening for all prospective Agents which includes criminal records. (Please be aware that some spent criminal offences may be considered if you are applying for a post where exemptions apply under the Rehabilitation of Offenders Act). We will also undertake financial checks. In the event of adverse findings, we reserve the right withdraw offers.

We may use AI and automated decisions in the process. If this technology is used, it will be done in a way that is responsible, fair, secure and transparent. Where an automated process results in a decision that may significantly affect you, we ensure that the outcome is reviewed by a trained member of our team. You can request human involvement using the contact details in section 10.

We may use profiling tools in the appointment process to understand your personality preferences and behaviours.

We also use your personal information to ensure we comply with legal and regulatory requirements. This includes internal audits, monitoring and assurance activities to examine and evaluate the systems and controls within NFU Mutual.

3. Why we use the information about you
To process your information we rely mainly on the following legal bases:

Performance of a contract
The use of your information is necessary to take the required steps prior to entering into the agency contract with you.

Legitimate Interests
We may use your information for our legitimate interests, such as the detection and prevention of fraud, and the monitoring of diversity and equality of opportunity

Consent
We may rely on your consent to use your personal information for certain activities, for example maintaining your information on our Talent Database, connecting on LinkedIn and sending you SMS messages relating to your job application and recruitment process. You may withdraw your consent at any time by contacting us at the address provided at the end of this Policy.

Legal Obligation
Some of the information we collect from you is collected in order to meet any legal obligations we are subjected to. Where we process sensitive data (E.g. Convictions, Ethnicity/Race), we need to have an additional legal basis. The below lists the additional lawful bases we rely on to process your sensitive data:

Where we process sensitive data (E.g. Convictions, Ethnicity/Race), we need to have an additional legal basis. The below lists the additional lawful bases we rely on to process your sensitive data. The list below shows the additional legal basis we are relying upon with examples:

Substantial public interest
For the detection and prevention of fraud
To ensure equality of opportunity or treatment

4. Information that we share
Where necessary within the Agent appointment process, we may share your personal information with other companies in the Group, the Farming Unions (NFU England and Wales, Ulster Farming Union and NFU Scotland) and with third-party service providers.

The following examples demonstrate why and with whom your information may be shared:
 

  • The Farming Unions (NFU England and Wales, Ulster Farming Union and NFU Scotland) for Agent and Senior Agent appointment process where the incoming partner will also carry out the role of Group Secretary or Group Manager (UFU).
  • Providers of psychometric testing, video interviews, reference and fiduciary screening.
  • Where it is required by law, we will share your information with third parties such as law enforcement agencies and companies tasked with fraud/criminal activity detection. Where fraud is detected, this may affect your ability to obtain products, services or employment in the future. For more information, please contact us using the information in section 9.
  • We will share your information with third party IT providers who support us in hosting, transferring, processing, testing and problem resolving. This enables us to provide the services you need
  • We may also share information with third party audit companies providing expertise and assurance over our processes and controls
  • Where we share personal information with those suppliers, we have the appropriate contracts or controls in place, which will assess the security of their processing arrangements


5. Your individual rights
You have a number of rights with regards to the personal information that we hold about you, which you will have provided as part of the application process.

Right of Access: You have the right to request a copy of the information that we hold about you. We will provide you with this information within one month of receiving your request and verifying your identity. If the request is complex, we may extend the response time. We will inform you if this is the case and explain why.

Right to Rectification: We want to make sure that your personal information is accurate and up to date. You may ask us to correct, update or remove information you think is inaccurate or incomplete, and we ask that you inform us promptly of any changes to your circumstances.

Right to Erasure: You may also ask us to erase your personal information from our systems, in certain circumstances. There are some specific circumstances where the right to erasure does not apply and we are permitted to hold your data. We will explain the reason for this at the time, should this occur.

Right to Data Portability: You may also ask us to move, or ‘port’, your personal information to another organisation electronically. We will only port personal information you have provided to us, that we have processed based on your consent or performance of a contract, or that has been processed automatically. We will port your personal information without charge and within one month, where technically feasible.

Right to Restricting Processing: You have a right to request that we restrict the processing of your personal data in certain circumstances. We will inform our third parties to whom we have disclosed your personal data that they must also restrict processing. We will inform you when the restriction on processing your personal data ends.

Right to Object: Where are relying on legitimate interests, you have the Right to Object to the processing of your personal data. If you would like to exercise these rights, please write to us, using the details provided at the end of this Policy outlining your specific request.

Rights regarding Automated Decision Making, including Profiling: You have a right not to be subject to a significant decision based solely on automated processing, including profiling, and can request a human review of the decision.

Right to be Informed: You have the right to request further information about how and why your personal data is processed.

6. Information security
We work hard to keep your data safe. We use an appropriate combination of technical and organisational measures to ensure, as far as reasonably possible, the confidentiality, integrity and availability of your information at all times. If you have a security-related concern, please contact us using the details provided at the end of this Policy.

7. Retaining your data
NFU Mutual, and the information we collect about you, are subject to various regulatory and legislative requirements. In addition, we will endeavour not to keep your personal information for longer than we have to for us to fulfil our obligations to you. Where it is not possible for us to delete your data, we will ensure the appropriate security and organisational measures are put in place to protect the use of your information.

8. Complaints
We work hard to ensure that your personal information is treated safely and securely. However, if you have a complaint, write to us using the details provided at the end of this Policy. You also have the right to complain to the Information Commissioner’s Office.

9. Changes to our Privacy Policy
We review our Privacy Policy regularly and will place any updates on the relevant websites 10. Who to contact in relation to processing personal data at NFU Mutual National Farmers Union Mutual Insurance Society Limited controls the processing of personal data on its systems. If you would like to discuss anything in relation to this Policy or how we handle your personal information, you can reach the Data Protection Officer for NFU Mutual by writing to: Data Protection Officer, NFU Mutual, Tiddington Road, Stratford-Upon-Avon, CV37 7BJ.

You can also talk to a member of the team email: agentrecruitment@nfumutual.co.uk

If you’d like this document in large print, braille or audio, just contact us at the address above.