Legal

Privacy & Cookies

Plain English: what we collect, who we share it with, and what you can ask us to do. Last updated 3 October 2026.

Who we are

Hiscox Media Limited (“we”, “us”) is the data controller for personal data collected through this website. We are registered in England & Wales (company no. 13914909) and with the Information Commissioner’s Office (registration ZC240134). Reach us at enquiries@hiscox.biz.

What we collect, and why

  • Enquiries. When you use our contact or quote forms we collect your name, email, company and message, so we can reply and, if you go ahead, provide a quote or service. Lawful basis: our legitimate interest in responding to you, and taking steps at your request before any contract.
  • Site security & delivery. Our hosting provider processes technical data (such as IP address) to keep the site available and to block abuse. Lawful basis: legitimate interest in a secure service.
  • Customers of our services. When you order from us we hold your company details, contacts, delivery and invoice addresses, quotes, orders, the results for the cards we handle, and invoices and payments, in our customer portal and our accounting system. Lawful basis: performing our contract with you, and our legal obligations (for example, tax records).
  • Aggregate analytics. We measure visits using privacy-friendly, cookieless analytics that do not identify you or track you across sites.

We do not sell your data, and we do not use it for advertising or profiling.

Who processes it for us

We use a small number of reputable providers, each acting under a data-processing agreement:

  • Cloudflare, website hosting, content delivery, security and cookieless analytics.
  • Brevo, delivering your enquiry to us by email.
  • Microsoft 365, our business email, where your enquiry is received and handled.
  • Intuit QuickBooks, our accounting system, where invoices, payments and customer accounts are kept. Our customer portal sends it the details an invoice needs.

Some providers may process data outside the UK; where they do, that transfer is covered by UK-approved safeguards (such as the International Data Transfer Agreement or Addendum).

How long we keep it

We keep enquiry details only as long as we need them to deal with your enquiry and any follow-up, and then delete them. Where an enquiry becomes a customer relationship, related records are kept for as long as we provide the service and for the periods required by law (for example, tax records).

Cookies

This site uses only strictly necessary cookies, set by Cloudflare to keep the site secure and to tell humans from bots (for example on our forms). These are exempt from consent requirements, so we don’t show a consent banner.

We do not use advertising, marketing or cross-site tracking cookies. Our visitor analytics are cookieless and store nothing on your device. You can block or delete cookies in your browser settings; the site will still work.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict our use of it, and to data portability. To exercise any of these, email enquiries@hiscox.biz and we’ll respond within one month.

If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d appreciate the chance to put things right first.

Changes

We’ll update this notice as our services change, and revise the date at the top. This version is dated 3 October 2026.