October 2025
To understand how Sainsbury's Bank uses your information, please take a look at their Privacy Policy.
In this privacy notice, 'we', 'us' and 'our' refers to Hood and ETI unless otherwise stated.
This privacy notice will help you understand how we collect, use and protect your personal information. You should also show this notice to any named persons on your policy and anyone else whose details you provide to us. In order to make sure that the data we hold is accurate please tell us if there are any changes or errors in the data that we hold. You have the right to rectify the data we hold under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
During the life of your policy, we may need to contact you with important information which we will do using the contact details you have given us.
You can manage your communications preferences when taking out the policy or unsubscribe at any time by contacting our travelservice@insurance-sainsburysbank.co.uk.
This policy may include links to websites other than ours and these will contain their own privacy and cookie notices.
There are multiple organisations involved in providing you with a travel insurance service. This privacy policy explains how the following organisations process your data:
There are other organisations which are also involved, and these have their own separate privacy policies which are included below this one. These are:
The type of personal information we collect
The types of information processed are shown in the table below. The identity of the Data Controller for each type of information is also shown. Where both parties are Data Controllers they act independently for that purpose.
Data |
Data Controller |
Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender. |
ETI |
Contact Data includes billing address, postal address, email address and telephone numbers. |
ETI |
Financial Data includes bank account and payment card details used to purchase a policy. Financial data will be encrypted accordingly. |
Hood |
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us. |
Hood |
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. |
Hood |
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses. |
Hood |
Usage Data includes information about how you use our website, products and services. |
Hood |
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences. |
Hood |
Health and Medical Data includes medical history obtained from you. |
ETI |
How we get the personal information and why we have it
The personal information we process is provided directly by you to us when you are applying for a quote for a travel insurance policy (by telephone or submitted through the website) or when you contact our customer services department (by telephone, email, post or real-time web live chat). This information may be shared with ETI to fulfil their own purposes.
You may also provide personal information directly to ETI when making a claim (by telephone, email or post). ETI may also receive personal information indirectly, from a doctor in the event of a medical emergency for which you are making a claim.
The contact details we process will be shared with Sainsburys Bank who will keep in touch regularly, sending you communications on their products and services.
Purposes for processing personal information
Each of us use the information that you have given for different purposes which are listed in the table below along with the identity of the company to which the purpose relates.
Purpose |
Company |
Pricing risk rates |
ETI |
Operations (assistance/claims validation, fraud investigations) |
ETI |
Assistance and Claims Complaints |
ETI |
Pricing retail rates |
Hood |
Amendments to and renewal of a travel insurance policy |
Hood |
Providing you with policy documentation relating to a contract of insurance |
Hood |
Providing a customer services facility via telephone, post, email and real-time web live chat |
Hood |
Complaint's handling (non-claims complaints) |
Hood |
Processing premium payments and refunds |
Hood |
Screening against the HM Treasury financial sanctions list |
Hood |
Prevention and detection of financial crime |
Hood |
Marketing |
Hood |
Providing you with information we believe may be of interest to you related to your travel insurance policy |
Hood |
Understanding how people interact with the travel insurance website |
Hood |
Recording phone calls for record keeping, training and monitoring |
Hood |
We will only share your information if it is allowed by law, for prevention of fraud or with third parties who perform services to administer your policy. These include our respective group companies, price comparison website providers, third party administrators, other insurance intermediaries, insurance reference bureaus, medical service providers, fraud detection agencies, external law firms, external accountants and auditors, regulatory authorities, and as may be required by law.
Under data protection legislation, the lawful bases each party relies on for processing this information are in the table below.
Lawful Basis |
Hood |
ETI |
Definition |
Contractual obligation |
|
|
To deliver a contractual service |
Legal obligation |
|
|
To deliver a statutory obligation |
Legitimate interest |
|
|
To use the data in a way that would be reasonably expected, for example to generate an insurance premium |
Automated Decision Making
ETI and Hood use automated decision making, including profiling, to assess insurance risks, detect fraud, and administer your policy. This helps decide as to whether insurance can be offered and determine prices.
An example is that when you buy a travel insurance product, a potential policyholder may be rejected for cover based on their age. ETI do not offer insurance for customers above a certain age. If accepted, the automated calculation of a person’s age may be used to calculate the premium payable.
If you have any concerns regarding the decision reached, please let Hood know at the contact details set out below and we will arrange for a person to check the accuracy of the result.
How we store your personal information
In the event of a claim, your personal data may be disclosed to service providers outside the United Kingdom (UK) or European Economic Area (EEA).Personal information will not be transferred outside the United Kingdom unless it is to a country which is considered to have equivalent standards with regard to data protection to those in the United Kingdom, or we had taken all reasonable steps to ensure the firm has the necessary privacy and security controls in place to protect your information as if it were in the United Kingdom (e.g., appropriate contractual arrangements to protect your privacy). You can find out the details about any other parties we have shared your personal data with by contacting the Data Protection Officer using the details provided under 'Our contact details'.
We keep your personal data for:
We will then dispose of your information by deleting it from our systems.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact Hood using the details provided under ‘Our contact details’ if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us using the details provided under 'Our contact details'.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO's address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Our contact details
Company |
Hood Travel Ltd |
ERGO Travel Insurance Services Ltd |
Address |
2nd Floor, Dencora Court |
Afon House |
We may update this Privacy Notice from time to time without prior notice. We therefore encourage you to periodically review this Privacy Notice to ensure you understand how we will collect, use and retain your data.
