Effective Date: 10 July 2026
This Privacy Policy applies between you, the individual accessing this Website and the BrokerCentral platform, and Nuworks Ltd, the owner and provider of this Website and Service. Nuworks Ltd takes the privacy of your information very seriously. This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website or our services.
This Privacy Policy should be read alongside, and in addition to, our Terms of Service, which can be found at: https://www.brokercentral.co.uk/legal/terms-of-service.
Please read this Privacy Policy carefully.
"Authorised User" means an individual employee authorised by the Customer to access and use the Platform under the Customer's account in accordance with this Agreement, the applicable Order Form, and the Customer's permitted Subscription entitlements.
"Data": All information that you submit to Nuworks Ltd or that we collect in relation to your use of the Website and our services, including personal Data as defined under applicable Data Protection Laws.
"Cookies": A small text file placed on your device by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
"Data Protection Laws" means all applicable laws, regulations, regulatory requirements, statutory guidance, and codes of practice relating to Personal Data, privacy, electronic communications, direct marketing, cookies, similar tracking technologies, or AI-enabled processing, in each case to the extent applicable to Personal Data, privacy, electronic communications, or AI-enabled processing, including:
(a) the UK General Data Protection Regulation ("UK GDPR");
(b) the Data Protection Act 2018;
(c) the Privacy and Electronic Communications Regulations 2003 ("PECR");
(d) the Data (Use and Access) Act 2025 ("DUAA 2025");
(e) any legislation by which the foregoing is amended, replaced, supplemented or re-enacted; and
(f) any binding guidance, statutory codes, or regulatory requirements issued by the Information Commissioner's Office ("ICO") or other competent supervisory authority.
"GDPR": The UK General Data Protection Regulation.
"Nuworks Ltd", "we", or "us": Nuworks Ltd, a company incorporated in England and Wales with registered number 13061639 whose registered office is at Suite 5, 26--27 West Street, Horsham, West Sussex, RH12 1PB.
"Personal Data" means any information relating to an identified or identifiable natural person as defined under applicable Data Protection Laws.
"Restricted Transfer" means any transfer of Personal Data that is subject to restrictions under applicable Data Protection Laws relating to international transfers of Personal Data.
"Special Category Data" means Personal Data classified as special category data, sensitive personal data, or equivalent protected data under applicable Data Protection Laws.
"PECR" means the Privacy and Electronic Communications Regulations 2003 (as amended, replaced, supplemented or re-enacted).
"Website": The website that you are currently using, https://www.brokercentral.co.uk, and any sub-domains of this site unless expressly excluded by their own terms and conditions.
"you": Any third party that accesses the Website and/or uses the BrokerCentral platform.
BrokerCentral may process Personal Data in different roles depending on the context.
BrokerCentral acts as controller where it determines the purposes and means of processing Personal Data. This may include processing relating to:
operation and administration of the BrokerCentral website;
business enquiries and sales communications;
customer account administration;
billing, payments, invoicing, subscriptions, renewals, and contract management;
customer support and relationship management;
service security, fraud prevention, abuse detection, and platform protection;
legal, regulatory, tax, accounting, audit, insurance, dispute-resolution, and compliance purposes;
marketing communications where permitted by law;
recruitment, supplier, contractor, professional adviser, and business contact management; and
BrokerCentral's own analytics, diagnostics, telemetry, and service improvement activities, where BrokerCentral determines the relevant purposes and means of processing.
Where BrokerCentral acts as controller, this Privacy Policy explains how BrokerCentral collects, uses, discloses, retains, and protects Personal Data.
BrokerCentral acts as processor where it processes Personal Data on behalf of a Customer through the BrokerCentral Platform and Services in accordance with the Customer's instructions.
This may include Personal Data relating to the Customer's clients, policyholders, claimants, prospects, brokers, employees, contractors, authorised users, business contacts, suppliers, and other individuals whose information is uploaded to, stored within, or processed through the Platform by or on behalf of the Customer.
Where BrokerCentral acts as processor:
the Customer is responsible for determining the purposes and means of processing;
the Customer is responsible for providing appropriate privacy notices, lawful bases, consents where required, transparency information, and other information to relevant individuals;
the Customer's own privacy notice will generally govern how the Customer collects and uses Personal Data relating to its clients, policyholders, claimants, prospects, brokers, employees, contractors, and other relevant individuals;
BrokerCentral processes Personal Data in accordance with the Customer's instructions, the Data Processing Agreement, the Terms of Service, and applicable Data Protection Laws; and
requests or complaints relating to Customer-controlled Personal Data may need to be referred to, or handled in coordination with, the relevant Customer.
If you are a client, policyholder, claimant, prospect, broker, employee, contractor, or other individual whose Personal Data has been submitted to the Platform by a BrokerCentral Customer, you should usually contact that Customer in the first instance regarding how your Personal Data is used and how to exercise your data protection rights.
This Privacy Policy does not apply to third-party websites, services, or applications that can be accessed from the BrokerCentral website or Platform, including links to social media, unless expressly stated otherwise.
The Personal Data BrokerCentral collects or processes depends on whether BrokerCentral acts as controller or processor.
Where BrokerCentral acts as controller, BrokerCentral may collect and process:
name, job title, profession, employer, organisation details, and business contact details;
account registration details, login details, authentication information, user identifiers, and account administration information;
billing, payment, invoicing, subscription, renewal, and contract information;
communications with BrokerCentral, including enquiries, support requests, feedback, complaints, meeting notes, and correspondence;
marketing preferences, communication preferences, consent records, and engagement information;
website, device, browser, IP address, usage, analytics, telemetry, log, and security information;
information relating to demonstrations, onboarding, training, account management, and customer relationship management;
recruitment, supplier, contractor, professional adviser, and business contact information;
information received through integrations where BrokerCentral determines the relevant purpose and means of processing, including authentication tokens and email address where a user connects a Google account to BrokerCentral; and
information required for legal, regulatory, tax, accounting, audit, insurance, security, fraud prevention, dispute-resolution, and compliance purposes.
Where BrokerCentral acts as processor on behalf of a Customer, BrokerCentral may process Personal Data submitted to, stored within, generated by, or processed through the Platform by or on behalf of that Customer.
This may include:
names, contact details, dates of birth, addresses, and other identifying information;
insurance policy information;
quotation, underwriting, broking, claims, renewal, customer onboarding, compliance, fraud prevention, and transaction information;
Customer client, policyholder, claimant, prospect, broker, supplier, and business contact records;
documents, proposals, policy documents, quotes, renewal notices, notes, attachments, communications, and workflow records;
prompts, inputs, outputs, Customer Data, AI-assisted workflow data, and related operational information;
account, access, user, technical, usage, operational telemetry, log, and security information;
Special Category Data or other sensitive information where submitted by or on behalf of the Customer; and
any other Personal Data uploaded, submitted, generated, or processed through the Platform by or on behalf of a Customer.
BrokerCentral does not control the Personal Data that Customers choose to upload to or process through the Platform. Customers are responsible for ensuring that their use of the Platform complies with applicable Data Protection Laws and for providing appropriate privacy information to relevant individuals.
We collect Data in the following ways:
Data you give to us directly (e.g. via registration forms, when you contact us, when you use our services).
Data collected automatically when you visit the Website (e.g. IP address, browser type, usage patterns via cookies).
Data provided through integrations (e.g. via Google OAuth if you connect your Gmail account).
BrokerCentral uses Personal Data for different purposes depending on whether BrokerCentral acts as controller or processor.
Where BrokerCentral acts as controller, BrokerCentral may use Personal Data to:
operate, administer, secure, monitor, maintain, and improve the website, Platform, and Services;
create, administer, manage, and support customer accounts;
provide demonstrations, onboarding, training, support, account management, and customer relationship management;
process billing, payments, invoicing, subscriptions, renewals, and contract administration;
respond to enquiries, complaints, requests, and communications;
send service communications, administrative notices, security alerts, and operational updates;
send marketing communications where permitted by law;
monitor service performance, usage, reliability, security, fraud, abuse, and compliance;
conduct analytics, diagnostics, troubleshooting, product improvement, and operational reporting;
manage suppliers, contractors, professional advisers, recruitment, and business contacts;
comply with legal, regulatory, tax, accounting, audit, insurance, security, and compliance obligations;
establish, exercise, or defend legal claims; and
protect the rights, property, security, integrity, and availability of BrokerCentral, Customers, individuals, and others.
Where BrokerCentral acts as processor, BrokerCentral processes Customer platform data only:
to provide, operate, secure, maintain, support, and improve the Services;
to host, store, retrieve, transmit, back up, restore, display, process, and manage Customer Data through the Platform;
to provide customer support, troubleshooting, maintenance, integrations, analytics, telemetry, communications, AI Functionality, and operational services connected with the Platform;
to send communications explicitly triggered or configured by the Customer within BrokerCentral, such as policy documents, quotes, renewal notices, or other Customer-directed communications;
to comply with the Customer's documented instructions;
as set out in the Data Processing Agreement and Terms of Service;
as necessary to comply with applicable law; and
as otherwise permitted under applicable Data Protection Laws.
Where Customer platform data relates to a Customer's clients, policyholders, claimants, prospects, brokers, employees, contractors, suppliers, or other individuals, the Customer's own privacy notice will generally explain the Customer's purposes and lawful bases for processing that Personal Data.
BrokerCentral processes Personal Data only where a valid lawful basis exists under applicable Data Protection Laws.
Where BrokerCentral acts as controller, BrokerCentral is responsible for identifying the applicable lawful basis for its processing.
Where BrokerCentral acts as processor on behalf of a Customer, the Customer is responsible for identifying and documenting the applicable lawful basis for the Customer's processing of Personal Data through the Platform. BrokerCentral processes such Personal Data in accordance with the Customer's documented instructions, the Data Processing Agreement, the Terms of Service, and applicable Data Protection Laws.
Depending on the circumstances, BrokerCentral may rely on different lawful bases for different processing activities.
The lawful bases relied upon by BrokerCentral may include:
Where processing involves Special Category Data, automated processing, electronic communications, AI-enabled functionality, or international transfers, additional safeguards, lawful bases, conditions, or regulatory requirements may apply under applicable Data Protection Laws.
BrokerCentral may update or refine the lawful bases relied upon from time to time to reflect:
changes in the Services;
operational practices;
legal or regulatory developments;
guidance issued by supervisory authorities; or
evolving industry standards and technologies.
AI Functionality is live within the BrokerCentral Platform and provides AI-assisted workflow support. This may include assistance with drafting, summarisation, recommendations, operational workflow support, and other AI-enabled functionality made available within the Services.
AI Functionality may be made available within normal BrokerCentral Platform workflows and, unless otherwise agreed with the relevant Customer, may not be separately disabled at Customer level.
AI Functionality may be used for purposes including:
generating recommendations, summaries, drafts, or operational assistance;
supporting insurance broking, compliance, underwriting, or workflow activities;
improving platform functionality and user experience;
monitoring system performance, reliability, and security;
fraud prevention and abuse detection;
analytics, diagnostics, and service optimisation;
customer support and troubleshooting; and
maintaining, securing, and improving the Services.
AI-generated outputs may be probabilistic in nature and may be inaccurate, incomplete, unreliable, biased, unexpected, or unsuitable for a particular purpose. Users should apply appropriate human review, verification, and professional judgment before relying on AI-generated outputs.
AI-generated outputs must not be used as the sole basis for regulated, legal, financial, insurance, employment, compliance, customer-facing, or similarly significant decisions.
BrokerCentral does not use Customer Data, Customer Personal Data, prompts or outputs to train public or shared AI models, and contractually restricts relevant AI providers from doing so, unless expressly agreed in writing.
BrokerCentral may use anonymised and aggregated operational telemetry, analytics, performance metrics, and usage information for:
service improvement;
security monitoring;
reliability and operational support;
diagnostics;
fraud prevention;
capacity planning; and
platform optimisation,
provided that such information does not reasonably identify any individual.
Certain AI, analytics, telemetry, support, infrastructure, or security providers used in connection with the Services may process Personal Data on BrokerCentral's behalf in accordance with applicable contractual, security, confidentiality, and Data Protection Law obligations.
Where AI-enabled processing, profiling, automated processing, or analytics activities involve Personal Data, BrokerCentral will process such information in accordance with applicable Data Protection Laws and implement safeguards appropriate to the nature of the processing activities.
We may share your Data with:
Our employees, agents, and professional advisers, where necessary to provide the services.
Third-party service providers strictly for service delivery (e.g. AWS for hosting, payment processors, and email infrastructure providers).
Regulators or legal authorities if required by law.
We do not sell your Data or share it with advertisers.
Where Personal Data is transferred outside the United Kingdom or European Economic Area, Nuworks Ltd will ensure that such transfers are carried out in accordance with applicable Data Protection Laws and are subject to appropriate safeguards and lawful transfer mechanisms.
Such safeguards and mechanisms may include:
adequacy regulations or adequacy decisions;
the International Data Transfer Agreement ("IDTA");
the UK Addendum to the European Commission Standard Contractual Clauses;
EU Standard Contractual Clauses ("EU SCCs");
recognised international transfer frameworks, including the UK-US Data Bridge where applicable;
Binding Corporate Rules ("BCRs"); and
supplementary contractual, technical, and organisational safeguards where required.
Nuworks Ltd maintains governance procedures relating to international transfers, including vendor due diligence, transfer assessments, and transfer record management designed to support ongoing compliance with applicable Data Protection Laws.
Where third-party service providers, Sub-Processors, AI providers, analytics providers, support providers, or infrastructure providers process Personal Data outside the United Kingdom, Nuworks Ltd will implement measures reasonably designed to ensure that Personal Data continues to receive a level of protection substantially equivalent to that required under applicable Data Protection Laws.
We use technical and organisational measures to safeguard your Data, including:
Encryption of sensitive Data and tokens at rest and in transit.
Access control --- all accounts are secured with unique login credentials.
Hosting in secure UK data centres (AWS London).
Security testing, vulnerability scanning, and monitoring measures designed to identify and address security risks.
If you suspect misuse, loss, or unauthorised access to your Data, please contact us immediately at [email protected].
BrokerCentral retains Personal Data only for as long as reasonably necessary for the purposes for which it is processed, including to provide the Services, administer accounts, manage contracts, provide support, comply with legal and regulatory obligations, maintain security, resolve disputes, support business continuity, and meet audit, tax, accounting, insurance, professional indemnity, complaint-handling, and regulatory requirements.
Retention periods may differ depending on whether BrokerCentral acts as controller or processor, the category of Personal Data, the purpose of processing, the Customer's instructions, applicable contractual terms, and applicable legal or regulatory obligations.
The table below summarises BrokerCentral's standard retention approach.
Personal Data may remain in routine operational backups, disaster recovery copies, restricted archive snapshots, logs, or archival systems after deletion from live systems.
Backup and archive data is protected by appropriate safeguards and is not actively accessed, restored, searched, or otherwise used except where reasonably necessary for service restoration, security investigation, legal or regulatory compliance, audit, complaint handling, dispute preservation, insurance, professional indemnity, business continuity, or other legitimate operational purposes.
Where BrokerCentral acts as processor on behalf of a Customer, deletion or return of Customer Personal Data is handled in accordance with the Data Processing Agreement, the Terms of Service, the Customer's documented instructions, and applicable Data Protection Laws, subject to any permitted backup, archive, legal, regulatory, security, audit, complaint-handling, insurance, professional indemnity, dispute-resolution, or operational retention requirements.
You have the following rights under Data Protection Laws:
Right to access -- Request copies of the Data we hold about you.
Right to rectify -- Request correction of inaccurate or incomplete Data.
Right to erase -- Request deletion of your Data, where applicable.
Right to restrict processing -- Limit how we use your Data.
Right to object -- Object to processing where our lawful basis is legitimate interests.
Right to data portability -- Request transfer of your Data to another provider.
You can exercise these rights by contacting us at [email protected].
If you have concerns about how your Personal Data is handled, you may contact Nuworks Ltd using the contact details set out in this Privacy Policy.
Where Nuworks Ltd acts as a data controller, we will investigate and respond to privacy-related complaints in accordance with applicable Data Protection Laws and our internal complaint-handling procedures.
Where Nuworks Ltd processes Personal Data solely on behalf of a Customer as a data processor, we may direct or refer the complaint or request to the relevant Customer responsible for determining the purposes and means of processing that Personal Data.
Nuworks Ltd may maintain records of privacy complaints, requests, investigations, and resolutions for compliance, security, audit, and legal purposes.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your Personal Data has been processed unlawfully.
BrokerCentral may use cookies, local storage objects, session technologies, analytics technologies, scripts, tags, telemetry technologies, and similar tracking or electronic communications technologies ("Tracking Technologies") in connection with the Platform, website, communications, and Services.
At present, BrokerCentral uses Tracking Technologies that are necessary or reasonably required for the operation, security, administration, and delivery of the website, Platform, and Services. These may be used for purposes including:
authentication and security;
maintaining user sessions;
access control and account administration;
fraud prevention and abuse detection;
service functionality;
load balancing and network management;
performance monitoring;
customer support;
operational telemetry;
troubleshooting;
service reliability; and
maintaining the security and integrity of the Platform and Services.
Certain Tracking Technologies may be strictly necessary for the website, Platform, or Services to function properly and may be used without consent where permitted under applicable law, including PECR and applicable Data Protection Laws.
BrokerCentral does not currently use non-essential cookies or similar Tracking Technologies for behavioural advertising or third-party marketing purposes unless and until appropriate transparency information and consent mechanisms are implemented where required by applicable law.
Where BrokerCentral introduces non-essential Tracking Technologies that require consent under applicable law, BrokerCentral will take appropriate steps to provide relevant information and obtain any required consent before placing or accessing those Tracking Technologies on a user's device.
Users may manage certain cookies and similar technologies through their browser settings, device settings, or other controls made available by their browser or device provider. Disabling certain cookies or Tracking Technologies may affect the availability, performance, functionality, or security of parts of the website, Platform, or Services.
BrokerCentral may use third-party hosting, infrastructure, support, communications, AI, security, analytics, or integration providers in connection with the Services. Such providers may process limited technical, operational, usage, or communications-related information where necessary to provide, secure, support, monitor, or improve the website, Platform, or Services.
Where Personal Data is processed through Tracking Technologies, such processing will be carried out in accordance with this Privacy Policy, the Data Processing Agreement where applicable, and applicable Data Protection Laws.
BrokerCentral may update its use of Tracking Technologies from time to time to reflect:
changes in the Services;
operational requirements;
legal or regulatory developments;
security requirements;
implementation of cookie consent or preference management tools; or
evolving industry practices.
BrokerCentral will send electronic marketing communications only where permitted under applicable Data Protection Laws and PECR, including where:
the recipient has provided consent;
the soft opt-in applies; or
another applicable exemption under PECR applies.
Recipients may unsubscribe or manage communication preferences at any time using the unsubscribe link or instructions included in relevant marketing communications, or by contacting BrokerCentral.
BrokerCentral does not currently operate a dedicated cookie preference management platform or detailed cookie settings page.
Users may control or restrict cookies and similar technologies through their browser settings, device settings, or other controls made available by their browser or device provider.
If BrokerCentral implements non-essential cookies, analytics technologies, advertising technologies, or similar Tracking Technologies that require consent under applicable law, BrokerCentral will provide appropriate information and consent controls before those technologies are used.
BrokerCentral may maintain or introduce a separate Cookie Notice, cookie table, or cookie preference management platform in the future to provide additional information about specific Tracking Technologies, providers, purposes, retention periods, and consent controls.
BrokerCentral may update this Privacy Policy from time to time to reflect:
changes to the Services;
operational practices;
legal or regulatory developments;
security requirements;
changes to Tracking Technologies or processing activities; or
evolving industry standards.
Updated versions of this Privacy Policy will be published on the BrokerCentral website and will take effect from the stated effective date.
Where required by applicable law, BrokerCentral will provide additional notice or obtain consent in relation to material changes affecting Personal Data processing activities.
This Privacy Policy is intended to provide transparency regarding BrokerCentral's data processing activities and does not itself amend or override contractual terms contained in the Terms of Service, Data Processing Agreement, or other binding agreements except where expressly stated.
BrokerCentral is a business-to-business platform intended for use by insurance professionals, brokers, commercial organisations, and business users. The Services are not directed to, intended for, or designed for use by children.
BrokerCentral does not knowingly collect Personal Data directly from children or intentionally provide Services to individuals below the age of 18 acting in a personal or consumer capacity.
If BrokerCentral becomes aware that Personal Data relating to a child has been provided unlawfully or without appropriate authority, BrokerCentral may take steps to delete or restrict such information in accordance with applicable law.
If you have any questions about this Privacy Policy or how we handle your Data, please contact:
Email: [email protected] Post: Nuworks Ltd, Suite 5, 26-27 West Street, Horsham, West Sussex, RH12 1PB, United Kingdom