Privacy and Cookie Policy

Last updated: 22 September 2026

This website, at thamesbridge-commercial.com, is provided by Thamesbridge Commercial Brokers Ltd (‘we’, ‘us’, ‘our’), trading as Thamesbridge. In providing it, and in providing insurance broking services to you, we may receive and process personal information relating to you. As the controller of that information we are publishing this policy to explain our approach to it.

We intend to process personal information fairly and transparently, as data protection law requires, including the UK General Data Protection Regulation (UK GDPR). Before obtaining information from you, including through the use of cookies, we will tell you about this policy, explain how we intend to process the information, and process it only as the law permits. The UK GDPR also defines certain ‘special categories’ of personal information that are considered more sensitive. Those categories need a higher level of protection, as set out below.

You may browse much of this website without giving us any information about yourself and without accepting optional cookies. If you do that, it is unlikely we will hold or process any information relating to you.

The policy starts with the conditions we have to satisfy before processing your data. You may prefer to start with the table at what we collect, which summarises the information we expect to gather, or with the cookie table, which summarises our use of cookies. The policy also explains some of the security measures we take, and tells you certain things we will and will not do.

Sometimes, when you take a new service or product from us, or discuss one and decide against it, we may wish to send you information about similar services or products by email or other written electronic communication. Whenever we do, we will give you the chance to refuse that information, and you can change your mind at any time by contacting us using the details below. We will remind you of that right each time we write to you in this way.

Who we are and how to contact us

Thamesbridge Commercial Brokers Ltd is an Appointed Representative of Movo Partnership Ltd, which is authorised and regulated by the Financial Conduct Authority under firm reference number 823503.

Trading address	124 City Road, London EC1V 2NX
Registered office	Movo House, 33 Green Lane, Chislehurst, BR7 6AG (the registered office of our principal). [TO BE CONFIRMED: registered office, if not the address above]
Registered number	11544238. [TO BE CONFIRMED: Thamesbridge Commercial Brokers Ltd company number]
General enquiries	enquiries@thamesbridge-commercial.com
Telephone	+44 20 3934 1889
Data protection enquiries	[TO BE CONFIRMED: data protection contact email]

Our data protection contact would welcome any communication from you about data protection, and can be reached at the address above. Wherever this policy refers to contacting us about your information, that is the route to use.

When we are allowed to collect information from you

We will only collect personal information relating to you if one of the following conditions is met:

• You have told us clearly that you are content for us to collect that information, for the particular purpose or purposes we have specified.
• The processing is necessary so that we can perform a contract we have with you.
• The processing is necessary so that we can comply with the law.
• The processing is necessary to protect someone’s life.
• The processing is necessary to perform a task carried out in the public interest.
• The processing is necessary for our legitimate interests, or another party’s. In that case we will balance those interests against yours.

How to give and withdraw consent

Where we need your consent to collect and use information, we will give you the opportunity to tell us you are happy to provide it at the point we collect it.

If you later change your mind and want to withdraw your consent, tell us and we will stop processing your information in the way you have specified, or delete it if there is no continuing reason to hold it.

If you do not consent to a particular piece of processing, we will work to make sure the website and our service continue to operate without needing that information.

Sensitive information

Some information we collect may fall into the special categories of personal information. In particular, it may:

• reveal political opinions
• reveal racial or ethnic origins
• reveal religious or philosophical beliefs
• reveal trade union membership
• relate to biometric data
• relate to genetic data
• relate to your health
• relate to your sex life or sexual orientation

If we do collect information of that kind, we will make sure one of the additional conditions for processing set out in the UK GDPR also applies.

As an insurance broker it is likely we will need to process information about criminal convictions, offences or related security measures, because insurers ask about them on proposal and claim forms. Where we do, we will comply with the extra conditions the UK GDPR sets for that data. Normally this will be because we are legally required to process it, because you have consented, or because you have clearly made the information public.

Information we expect to collect from you

We expect to collect the following types of information:

Information type	Purpose and related details	Our lawful basis
Contact details: name, job title, business name, email address, telephone number, postal address.	So we can answer your enquiry, identify you when you contact us, provide quotations and administer your policy.	Necessary to perform a contract with you, or to take steps at your request before entering one.
Business and risk information: trade, turnover, employee numbers, claims history, details of the property, vehicles, plant or contracts to be insured.	So we can assess your demands and needs, approach insurers on your behalf and arrange suitable cover.	Necessary to perform a contract with you.
Payment and bank details.	To collect premiums, arrange premium finance and pay claims settlements.	Necessary to perform a contract with you.
Claims information, which may include details of incidents, injuries and third parties.	So we can notify and manage a claim with your insurer on your behalf. This can include information about health, which is in a special category, and about criminal convictions or offences.	Necessary to perform a contract with you. Where the data is in a special category or relates to criminal matters, we will also rely on one of the additional UK GDPR conditions.
Credit information obtained from credit reference agencies.	To assess eligibility for premium finance and for fraud prevention.	Necessary for our legitimate interests in managing credit risk, and for compliance with the law.
Technical information about your device and how you use this website: IP address, browser type and version, time zone, operating system and pages viewed.	To keep the website secure, and, if you accept optional cookies, to understand how the site is used so we can improve it.	Necessary for our legitimate interests in securing our website. For analytics, your consent.
Records of our communications with you, including emails, form submissions and call notes.	For quality assurance, to evidence the advice we have given and to meet our regulatory record-keeping obligations.	Necessary to comply with the law, and for our legitimate interests in running our business properly.

We may collect personal information about you from a number of sources, including the following:

• From you, when you agree to take a service or product from us.
• From you, when you contact us with an enquiry, complete a form on this website, or respond to a communication from us.
• Automatically as you use this website, through cookies and similar technologies, as described below.
• From documents available to the public, such as the register at Companies House.
• From third parties to whom you have given your consent to pass information on. Where we receive information that way, we will tell you as soon as is reasonably practicable.

If you refuse to give us information we have requested, and that information is necessary for a service we provide to you, we may have to stop providing that service. If at any point you think we have asked for information without explaining why, please object and ask us for our reasons.

Using your personal information

Data protection, privacy and security matter to us. We will only use your personal information for specified purposes, and will not keep it for longer than is necessary to fulfil them. The following are examples of those purposes, with the UK GDPR justification that will usually apply. Which one applies in practice depends on the circumstances of each case.

• To identify you when you contact us. This is normally necessary to perform our contract.
• To identify accounts, services or products that you could take from us or from selected partners. We may do this by automated means using a scoring system that draws on the information you have given us, information we hold, and information from third party agencies including credit reference agencies. We will only use your information this way if you agree to it.
• To administer, and to improve the administration of, any accounts, services and products we have provided, do provide, or may provide in future.
• To carry out marketing analysis and customer profiling, to conduct research, and to create statistical and testing information. This will sometimes require your consent and will sometimes be exempt as market research.
• To help prevent and detect fraud or loss. We will only do this where we consider it necessary or where the law requires it.
• To contact you by written electronic means about products and services we offer, where those products are similar to ones you have already bought from us, you were given the chance to opt out when we first collected your information and in every message since, and you have not opted out.
• To contact you in any way, including post, email, telephone and text, about products and services offered by us and by selected partners, where you have expressly consented to that.

We may monitor and record communications with you, including telephone calls and emails, for quality assurance and compliance. Before we do, we will tell you of our intention and of the specific purpose. Sometimes a recording will be necessary to comply with the law. Sometimes it will be necessary for our legitimate interests, and in that case we will only record where our interest outweighs yours, judged on the circumstances, the importance of the information, and whether we could obtain it in a less intrusive way. If a recording would be useful but is not necessary, we will ask whether you consent, and give you a way to say so.

Where the law requires it, we will check your details with fraud prevention agencies. If you give us false or inaccurate information and we suspect fraud, we intend to record that.

Sharing your personal information

We will not disclose your personal information to any third party except in line with this policy, and then only in one of the following circumstances:

• They are processing the data on our behalf as a data processor, with us as the controller. In that case we will always have a contract with them of the kind the UK GDPR requires. That contract places significant restrictions on how they operate, so that your data is protected to the same standard as this policy describes.
• It is necessary to share data with another controller. Before we do that, we will tell you. If we receive information about you from a third party, we will let you know as soon as reasonably practicable afterwards, as the UK GDPR requires.
• We consider it to be in your interest to send your information to a third party. In that case we will always ask whether you agree before sending it.

Where you give us personal information about someone else, you confirm that you have given them the information set out in this policy and that they have not objected to their information being used this way.

The third parties we may share your personal information with include:

• Movo Partnership Ltd, our principal, which is responsible for our advice, sales, marketing and claims activities.
• Insurers, underwriters, Lloyd’s syndicates and managing general agents, so that we can obtain quotations and place and administer your cover.
• Premium finance providers, where you choose to pay by instalments.
• Loss adjusters, claims handlers and, where a claim requires it, solicitors and other professional advisers.
• Credit reference and fraud prevention agencies.
• Our technology suppliers, who act as our data processors. These include our website hosting provider, our email provider and the service that delivers messages sent from this website.
• Our professional advisers, our auditors, and the Financial Conduct Authority or other regulators where we are required to provide information.

We may also allow other people and organisations to use personal information we hold about you if we, or substantially all of our assets, are acquired by a third party, in which case customer information will be one of the transferred assets, or if we are legitimately asked to provide information for legal or regulatory purposes, or as part of legal proceedings or prospective proceedings.

Credit checks

In connection with a transaction we enter into with you, we may carry out one or more credit checks, and we and the agency may keep a record of the search. Information held about you by these agencies may be linked to records relating to other people at the same address with whom you are financially linked, and those records may be taken into account in credit and fraud prevention checks. Information from your application and payment details of your account may be recorded with one or more of these agencies and shared with other organisations to help make credit and insurance decisions about you and members of your household with whom you are financially linked, and for debt collection and fraud prevention. That includes people who have moved house and who have missed payments.

If you give us false or inaccurate information and we suspect fraud, we will record this and may share it with other people and organisations. We, and other credit and insurance organisations, may also use technology to detect and prevent fraud.

If you would like details of the credit agencies we obtain information from and record information with, please contact us using the details above. We may also need to transmit the payment information you give us in order to obtain authorisation from your bank.

Transfers outside the United Kingdom

From time to time the organisations we pass your personal information to may be outside the United Kingdom or the European Economic Area. We will take all steps reasonably necessary to ensure your information is treated securely and in line with this policy and the UK GDPR. We require all third party service providers processing your personal information for us to respect its security and to treat it in accordance with the law. We do not allow them to use your personal data for their own purposes, and we permit them to process it only for specified purposes and on our instructions.

Protecting your information

We have strict security measures to protect personal information. We work to protect the security of your information in transit by using appropriate technology to encrypt what you enter.

We maintain physical, electronic and procedural safeguards around the collection, storage and disclosure of personally identifiable information. Our security procedures mean we may occasionally ask you to prove your identity before we disclose personal information to you.

It is important that you protect against unauthorised access to your password and to your computer. Remember to sign out when you finish using a shared computer.

Email and the internet

If you communicate with us over the internet, we may occasionally email you about our services and products. When you first give us personal information through this website, we will normally give you the opportunity to say that you would prefer not to be contacted by email for that purpose. You can also email us at any time if you change your mind.

Please remember that communications over the internet, including email and messages sent through a website, are not secure unless they have been encrypted. Your communications may pass through a number of countries before they are delivered, which is the nature of the internet. We cannot accept responsibility for any unauthorised access to, or loss of, personal information that is beyond our control.

Cookies and other tracking technology

When we provide services, we want them to be easy, useful and reliable. That sometimes involves placing small amounts of information on your computer, which is sent back to us later. These are called cookies. Some websites do not use cookies but use related technology to gather information about visitors, such as JavaScript, web beacons, also known as action tags or single pixel gifs, and other technologies. Where that applies, this section covers those too, but the word cookie is used throughout.

Some cookies are essential to a service you have asked for. Others are used to improve the service, for example by:

• letting you move between pages efficiently
• allowing a service to recognise your computer so you do not have to give the same information twice during one task
• measuring how many people use a service, so that it can be made easier to use and given enough capacity to stay fast

To learn more about cookies you may wish to visit aboutcookies.org, youronlinechoices.eu or Google’s own explanation of how it uses cookies.

The cookies this website uses

This website sets no cookies at all until you make a choice in the cookie notice, and it loads no content from third party servers. Fonts and all other assets are served from our own domain, so no request is made to another company simply by visiting a page. Analytics is not switched on at present, so at the time of writing the only cookie this site sets is the one recording your choice. The table below describes the analytics cookies that will be set once it is enabled, and they will only ever be set for visitors who have accepted.

Cookie name	Cookie qualities	Consent needed
ib_consent_v1	Records whether you accepted or declined optional cookies, so that we do not ask again on every page and so that a refusal is honoured. Category 1, strictly necessary. First party: we place it. Persistent cookie, expires after 6 months.	No
_ga, _ga_<id>	Google Analytics. Tells us how many people visit the site, which pages they read and whether they met errors, so we can improve it. Information is collected in a form that does not identify you to us, and is only used in aggregate. Category 2, performance. Third party: placed by Google via our website. Persistent cookies, expiring after up to 2 years.	Yes. Not currently in use. When analytics is enabled these will only be set if you press Accept, and will not be loaded at all otherwise.
WordPress session cookies	Set only for members of staff who sign in to administer the website. They are never set for visitors. Category 1, strictly necessary. First party. Session and persistent.	No

You can change your mind at any time using the cookie settings link, which reopens the notice so you can accept or decline. Declining means no analytics cookies are set and no analytics code is loaded. You can also block or delete cookies through your browser settings, although doing so may affect how parts of this site work.

What the categories mean

The distinctions in the table above are as follows. First party cookies are ones we set ourselves; third party cookies are set by other organisations through our website. Session cookies last only for the duration of a visit; persistent cookies last longer. The categories are those in the ICC UK Cookie Guide:

Category		What it covers
Category 1	Strictly necessary	Essential in order for you to move around the website and use its features, such as accessing secure areas. Without them, services you have asked for cannot be provided. We include cookies used only for electronic communication in this category.
Category 2	Performance	Collect information about how visitors use a website, for instance which pages are visited most often and whether visitors meet error messages. This information is only used to improve how the website works.
Category 3	Functionality	Allow the website to remember choices you make, such as your user name, language or region, and provide enhanced, more personal features. They may also remember changes you have made to text size, fonts and other customisable parts of a page. This website sets none.
Category 4	Targeting and advertising	Used to deliver adverts more relevant to you, to limit the number of times you see an advertisement, and to measure the effectiveness of a campaign. They are usually placed by advertising networks. This website sets none.

Category 1 cookies do not require your consent, though we must still tell you about them. Categories 2 to 4 require your specific and informed consent, which is what the cookie notice asks for.

How long we keep your information

We keep personal information only for as long as we need it for the purposes set out in this policy. As a regulated insurance intermediary we are required to keep records of the advice we give and the policies we arrange, and we will normally retain client and policy records for at least seven years after our relationship ends, and longer where a claim, a dispute or a legal obligation requires it. Enquiries that do not lead to a policy are kept for a shorter period and then deleted.

Your legal rights

In certain circumstances you have rights under data protection law in relation to your personal information. You have the right to:

• Request access to your personal information, commonly known as a subject access request. This lets you receive a copy of the information we hold about you and check that we are processing it lawfully.
• Request correction of the information we hold about you. This lets you have incomplete or inaccurate information corrected, though we may need to verify the accuracy of what you provide.
• Request erasure of your personal information. This lets you ask us to delete information where there is no good reason for us to continue processing it, where you have successfully objected to processing, where we may have processed it unlawfully, or where we are required to erase it to comply with the law. We may not always be able to comply, for specific legal reasons which we will explain at the time.
• Object to processing where we are relying on a legitimate interest, ours or a third party’s, and something about your particular situation makes you want to object on the ground that it affects your fundamental rights and freedoms. You also have the right to object where we process your information for direct marketing. In some cases we may show that we have compelling legitimate grounds that override your rights.
• Request restriction of processing. This lets you ask us to suspend processing if you want us to establish the information’s accuracy, if our use is unlawful but you do not want it erased, if you need us to keep it to establish, exercise or defend a legal claim even though we no longer need it, or if you have objected and we are verifying whether we have overriding grounds.
• Request transfer of your personal information to you or to a third party, in a structured, commonly used, machine readable format. This right applies only to automated information which you initially consented to us using, or which we used to perform a contract with you.
• Withdraw consent at any time where we rely on consent. This does not affect the lawfulness of processing carried out before you withdrew it. If you withdraw consent we may not be able to provide certain products or services, and we will tell you if that is the case.

You will not have to pay a fee to access your personal information or to exercise any of the other rights. We may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded, repetitive or excessive.

We may need to ask you for specific information to confirm your identity before we act on a request. This is a security measure to make sure personal information is not disclosed to anyone who has no right to it. We may also contact you for more detail in order to respond more quickly. We try to respond to all legitimate requests within one month. Occasionally it may take longer if a request is particularly complex or you have made several. If so, we will tell you and keep you updated.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first, using the contact details above, and we will do our best to put it right. You also have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

Complaints about our service or about a policy, rather than about data protection, are dealt with under our complaints procedure.

Further information

If you would like more information, or you have any comments about this policy, or you wish to exercise any of your legal rights, please contact us using the details above.

We may have to amend this policy from time to time, for example if we change the cookies we use. If we do, we will publish the amended version on this website. We will try to alert you to a change, but it is also your responsibility to check from time to time whether the policy has changed.

You can ask us for a copy of this policy by writing to the address above or by emailing enquiries@thamesbridge-commercial.com. This policy applies to personal information we hold about individuals. It does not apply to information we hold about companies and other organisations.