Privacy Policy

Last Update: September 30th, 2025

This Privacy Policy applies between you, the User of this Website and the BrokerCentral platform, and Nuworks Ltd, the owner and provider of this Website and Service. Nuworks Ltd takes the privacy of your information very seriously. This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website or our services.

This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: https://www.brokercentral.co.uk/legal/terms-of-service.

Please read this Privacy Policy carefully.

1. Definitions and Interpretation

1.1 In this Privacy Policy, the following definitions are used:

"Data": All information that you submit to Nuworks Ltd or that we collect in relation to your use of the Website and our services, including personal Data as defined under applicable Data Protection Laws.
"Cookies": A small text file placed on your device by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
"Data Protection Laws": Any applicable law relating to the processing of personal Data, including but not limited to the UK GDPR, the Data Protection Act 2018, and any relevant national implementing and supplementary laws.
"GDPR": The UK General Data Protection Regulation.
"Nuworks Ltd", "we", or "us": Nuworks Ltd, a company incorporated in England and Wales with registered number 13061639 whose registered office is at Suite 5, 26–27 West Street, Horsham, West Sussex, RH12 1PB.
"UK and EU Cookie Law": The Privacy and Electronic Communications Regulations 2003 (as amended).
"User" or "you": Any third party that accesses the Website and/or uses the BrokerCentral platform.
"Website": The website that you are currently using, https://www.brokercentral.co.uk, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

2. Scope of this Privacy Policy

2.1 This Privacy Policy applies only to the actions of Nuworks Ltd and Users with respect to the Website and our services. It does not extend to any websites that can be accessed from the Website, including links to social media.

2.2 For purposes of the Data Protection Laws, Nuworks Ltd is the "data controller". This means that we determine the purposes for which, and the manner in which, your Data is processed.

3. Data Collected

We may collect the following Data, which includes personal Data, from you:

Name, job title, profession, and organisation details
Contact information such as email addresses and telephone numbers
Login details when you create a BrokerCentral account
Information relating to your use of our services, including documents, proposals, and client details you input into BrokerCentral
Authentication tokens and email address if you connect your Google account to BrokerCentral

4. How We Collect Data

We collect Data in the following ways:

Data you give to us directly (e.g. via registration forms, when you contact us, when you use our services).
Data collected automatically when you visit the Website (e.g. IP address, browser type, usage patterns via cookies).
Data provided through integrations (e.g. via Google OAuth if you connect your Gmail account).

5. Our Use of Data

We use your Data for the following purposes:

To provide, maintain, and improve our services.
To send communications you explicitly trigger within BrokerCentral (such as policy documents, quotes, or renewal notices).
To ensure compliance with insurance and financial regulations.
To provide support and security monitoring of the platform.

Use of Google Data

If you connect your Google account to BrokerCentral:

We request the gmail.send scope only.
We use this scope solely to send emails on your behalf when you explicitly choose to send communications from BrokerCentral.
We do not read, store, or access the contents of your Gmail inbox.
We store your OAuth tokens securely (encrypted at rest).
You can revoke access at any time from within BrokerCentral or via your Google Account permissions page.

We do not request or use broader Gmail scopes such as gmail.readonly or gmail.modify.

We may share your Data with:

Our employees, agents, and professional advisers, where necessary to provide the services.
Third-party service providers strictly for service delivery (e.g. AWS for hosting, payment processors, and email infrastructure providers).
Regulators or legal authorities if required by law.

We do not sell your Data or share it with advertisers.

7. Keeping Data Secure

We use technical and organisational measures to safeguard your Data, including:

Encryption of sensitive Data and tokens at rest and in transit.
Access control — all accounts are secured with unique login credentials.
Hosting in secure UK data centres (AWS London).
Regular penetration testing and vulnerability scanning.

If you suspect misuse, loss, or unauthorised access to your Data, please contact us immediately at [email protected].

8. Data Retention

Account Data: retained while you remain an active customer and for up to 6 years afterwards (for regulatory compliance).
Gmail OAuth tokens: deleted immediately if you disconnect your Google account or revoke access.
Usage Data (cookies, logs): retained in line with our cookie policy.

9. Your Rights

You have the following rights under Data Protection Laws:

Right to access – Request copies of the Data we hold about you.
Right to rectify – Request correction of inaccurate or incomplete Data.
Right to erase – Request deletion of your Data, where applicable.
Right to restrict processing – Limit how we use your Data.
Right to object – Object to processing where our lawful basis is legitimate interests.
Right to data portability – Request transfer of your Data to another provider.

You can exercise these rights by contacting us at [email protected].

10. Cookies

10.1 This Website may place and access certain Cookies on your device. Nuworks Ltd uses Cookies to improve user experience and service quality.

10.2 You will be asked for consent before non-essential cookies are placed. You may disable cookies, but some Website functionality may not work.

10.3 This Website uses the following types of Cookies:

Strictly Necessary Cookies – essential for login and security.
Functionality Cookies – e.g. Calendly (demo booking), Intercom (chat support).
Analytics Cookies – e.g. Google Analytics (tracking interactions to improve the Website).

10.4 You can manage your cookie preferences at https://www.brokercentral.co.uk/cookies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and you will be deemed to have accepted the updated policy on your first use of the Website after the changes.