Your documents, your data, your rights
CoverBroker connects customers with specialist insurance brokers and offers an optional AI policy review. We are not an insurer or broker and we do not give advice on which policy you should buy. This page explains in plain language what happens to your documents and personal data, who we share them with, and how to delete them.
Encrypted & private
Your documents sit in encrypted private storage. Only authorised CoverBroker staff can open them, using short-lived links that expire.
You stay in control
You can ask to see, correct or delete everything we hold about you at any time. No obligation, no penalty.
Deleted on request
Ask and we remove your documents and enquiry record. We keep only the minimum needed for our record-keeping duties.
Document retention & deletion
We keep your data only for as long as we need it. Here is how long each type of information is held and how to remove it sooner.
| Information | Held while active | Afterwards |
|---|---|---|
| Uploaded policy documents | Until your enquiry closes, then deleted | Removed within 30 days of request |
| Enquiry & contact details | For the life of the enquiry | Up to 24 months for records, then deleted |
| AI review output | Shared with you, not stored long-term | Deleted when your documents are deleted |
| Broker match notes | Until the broker confirms contact | Deleted once confirmed, or within 90 days |
You can ask us to delete your documents at any point — even before an enquiry finishes — and we will action it within 30 days. The uploader itself lets you remove individual files before you submit.
Who processes your data
CoverBroker is the data controller for your enquiry. We use a small number of processors, each with a defined role and only the access they need.
Cloud database & encrypted document storage
Hosts your enquiry details and uploaded documents.
Location & handling: EU/UK-region infrastructure, encrypted at rest and in transit.
AI policy-review provider
Reads your documents to produce the optional AI summary. Only used if you tick the AI review box.
Location & handling: Processes document text to generate a summary; output is not retained by us beyond your enquiry.
Your matched insurance broker
Receives your enquiry and documents to prepare a quote. They become a separate controller of any data you share with them.
Location & handling: Contacted individually; their own privacy notice applies once they hold your data.
We never sell your data, share it for unrelated marketing, or pass it to anyone outside this list.
Your GDPR process & rights
We process your enquiry under UK GDPR and EU GDPR on the basis of your consent, which you can withdraw at any time. We apply data minimisation (we only ask for what we need), purpose limitation, and security by default.
Access
Ask what personal data we hold about you.
Rectification
Correct anything that is inaccurate or out of date.
Erasure
Request deletion of your documents and enquiry record.
Restriction
Ask us to pause processing while a concern is resolved.
Portability
Receive your data in a structured, reusable format.
Withdraw consent
Stop further processing of your enquiry at any time.
To exercise any right, email ulasgovencpost@gmail.com. We respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ICO) or your local EU data protection authority.
Common questions
- How long do you keep my insurance documents?
- Only for as long as needed to handle your enquiry. Once it is closed, documents are deleted automatically or within 30 days of you asking. We do not keep a permanent library of your policies.
- Can I delete my documents myself?
- Yes. Email us at ulasgovencpost@gmail.com and we will remove your uploaded documents and enquiry record. The uploader also lets you remove individual files before you submit.
- Who can see my documents?
- Authorised CoverBroker staff, the AI provider only if you choose the AI review, and the single broker you are matched with. Nobody else — we never sell or publish your data.
- Is CoverBroker compliant with GDPR?
- We follow UK GDPR and EU GDPR principles: lawful basis (your consent), data minimisation, secure storage, clear retention, and your full rights to access, correct and delete. You can raise a concern with the ICO if you are not satisfied with our response.