Legal

Privacy Policy

Last updated: 30 June 2026

This policy explains how Cover Sorted ("we", "us", "our") collects, uses, shares and protects your personal data when you use coversorted.com ("the site"). It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

This page is maintained by Cover Sorted to answer common privacy questions about our service. It is app-owned editable content and not an independent certification.

1. Who we are

Cover Sorted is the "data controller" responsible for your personal data when you use this site.

Trading name: Cover Sorted
Address: 91 Maes Pedr, Carmarthen, SA31 3BW, United Kingdom
Privacy contact: privacy@coversorted.com

If we are required to register with the Information Commissioner's Office (ICO) or the Financial Conduct Authority (FCA), we will publish those registration numbers here once issued.

2. What personal data we collect

You give us directly

Quote details: name, age/date of birth, gender, smoker status, height/weight, occupation, income, marital and family situation, the cover amount and term you're considering.
Contact details: email address, phone number, postcode.
Communications: messages you send us via the contact form, email or phone.
Consent records: whether you ticked the marketing/contact consent box, with timestamp.

Special category data

Some answers (e.g. health-related questions, smoker status) are "special category" data under UK GDPR. We process this only with your explicit consent and only to obtain insurance quotes for you, relying on Article 9(2)(a) UK GDPR and the substantial-public-interest condition for insurance in Schedule 1 of the Data Protection Act 2018.

Collected automatically

Device & usage data: IP address, browser type, device type, operating system, referring URL, pages viewed, time on page.
Cookies and identifiers: see section 7.

3. How and why we use your data

To match you with FCA-authorised insurance broker partners who can provide quotes and advice.
To respond to enquiries you send via the contact form, email or phone.
To improve the site, debug issues and analyse traffic.
With your consent, to measure and optimise our advertising (including on Meta/Facebook & Instagram).
To comply with our legal, regulatory and tax obligations.
To prevent fraud and keep the service secure.

4. Our lawful bases

Consent (Art. 6(1)(a)) — for marketing cookies/pixels, marketing emails or SMS, and processing of health data via the quote form.
Contract / pre-contract steps (Art. 6(1)(b)) — to take steps at your request to obtain insurance quotes.
Legitimate interests (Art. 6(1)(f)) — to run, secure and improve the site, and to handle enquiries. Our interests are balanced against your rights; you can object at any time.
Legal obligation (Art. 6(1)(c)) — to comply with UK insurance regulation, tax and record-keeping laws.
Explicit consent / substantial public interest — insurance (Art. 9(2)(a) and Sch. 1 DPA 2018) — for health and other special-category data.

When you submit the quote form, your details are shared with a panel of FCA-authorised insurance brokers so they can prepare quotes and contact you. One or more of them may call, email or SMS you about your enquiry. Each broker becomes an independent data controller for the data they receive and will have their own privacy notice.

We also share data with the following categories of processor that act on our instructions:

Hosting & infrastructure: Lovable / Cloudflare (site hosting and edge delivery).
Lead delivery: Zapier (passing quote submissions to our broker panel).
Advertising platforms: Meta Platforms Ireland Ltd (Facebook/Instagram) — see section 6.
Communications: email and SMS providers we use to reply to you.

We may also disclose data where required by law, regulator request, court order, or to protect our rights, property or safety (or those of our users).

We do not sell your personal data.

6. Marketing, Meta Pixel & advertising

We advertise on Meta platforms (Facebook and Instagram) and use the Meta Pixel and Conversions API to measure ad performance, build audiences and show you more relevant ads. These tools may collect:

Your IP address, browser/device information and pages viewed on coversorted.com.
Events such as page views, button clicks, form starts and quote submissions.
Hashed (irreversibly transformed) versions of identifiers such as email address or phone number, where you provide them, so Meta can match conversions to ad impressions.

Meta acts as a joint controller with us for the collection and transmission of Pixel/Conversions API event data, under the Meta Controller Addendum. Meta is the sole controller for any further processing it carries out for its own purposes. You can read Meta's privacy notice at facebook.com/privacy/policy.

We only set the Meta Pixel and load Conversions API events after you give consent via our cookie banner. You can withdraw consent at any time by clearing the consent banner or by adjusting your ad preferences inside your Facebook/Instagram account.

We will only send you marketing emails or SMS where you have ticked the consent box. You can opt out at any time using the unsubscribe link, replying STOP, or emailing privacy@coversorted.com.

7. Cookies & similar technologies

We use cookies and similar technologies in three categories:

Strictly necessary — required to deliver the site (e.g. load balancing, security, remembering your consent choices). These do not require consent.
Analytics — help us understand how the site is used. Set only with your consent.
Advertising / targeting — including the Meta Pixel. Set only with your consent.

You can accept, reject or change your choices at any time via the cookie banner. You can also control cookies in your browser settings; blocking cookies may affect site functionality.

8. How long we keep your data

Quote enquiries: up to 24 months from your last interaction, then deleted or anonymised.
Contact form messages: up to 24 months.
Marketing consent records: for as long as you remain subscribed plus 24 months as proof of consent.
Analytics & advertising data: according to the provider's standard retention (Meta typically retains event data for up to 2 years).
Records required by law / regulator: for the period required, typically 6 years.

9. International transfers

Some of our processors (including Meta, Cloudflare and Zapier) are based in or transfer data to countries outside the UK, including the United States. Where this happens, transfers are protected by one or more of: the UK "data bridge" / adequacy regulations, the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses with the UK Addendum, or the UK Extension to the EU–US Data Privacy Framework.

10. How we protect your data

We use HTTPS/TLS encryption in transit, restrict access to personal data on a need-to-know basis, and use reputable hosting and processor partners with their own technical and organisational measures. No system is 100% secure; if you become aware of a vulnerability, please email privacy@coversorted.com.

11. Your rights

Under UK GDPR you have the right to:

Be informed about how we use your data (this notice).
Access a copy of the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten"), where applicable.
Restrict or object to processing, including direct marketing.
Data portability — receive your data in a machine-readable format.
Withdraw consent at any time, without affecting prior lawful processing.
Not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.

To exercise any of these rights, email privacy@coversorted.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We'd appreciate the chance to address your concerns first.

12. Children

The site is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page and, where appropriate, notified to you by email. The "Last updated" date at the top shows the latest revision.

14. How to contact us

For any privacy question, request or complaint, contact:

Email: privacy@coversorted.com
Post: Cover Sorted, 91 Maes Pedr, Carmarthen, SA31 3BW, United Kingdom