Privacy Policy
Last updated: June 2026
This Privacy Policy explains how BLD PROTECTION LTD (trading as znobia) collects, uses and protects personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are (data controller)
The controller is BLD PROTECTION LTD, company number 13422142, registered office 88 Holland Way, Newport Pagnell, England, MK16 0LW.
- Data-protection contact: [email protected] (or via our contact page).
- ICO registration: the firm registers with the ICO and pays the data-protection fee before launch; the registration number is shown in our Legal & Regulatory Information once issued.
2. The personal data we collect
- Enquiry / submission data: name, role, work email, company, custody model, assets-under-custody range, coverage interest and any free text you provide via our forms.
- Introduction data: information you provide so we can introduce you to the right FCA-authorised broker — business and individual contact details, custody model, risk and control information. The broker (not znobia) arranges and administers any cover. Where any higher-protection category of data (UK GDPR Art. 9) is involved, we process it only with an appropriate lawful condition in place.
- Technical data: IP address, device/browser information and usage data via essential cookies — see our Cookie Policy.
3. Purposes and lawful bases (UK GDPR Art. 6)
We rely on the following lawful bases. (This register is reviewed and confirmed by the firm before launch.)
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and submissions | Art. 6(1)(b) (pre-contract steps) and 6(1)(f) (legitimate interests) |
| Introducing you to FCA-authorised brokers | Art. 6(1)(f) (legitimate interests) and, where relevant, 6(1)(b) |
| Regulatory and legal compliance (AML, sanctions, tax) | Art. 6(1)(c) (legal obligation) |
| Website security and operation | Art. 6(1)(f) (legitimate interests) |
| Marketing, where applicable | Art. 6(1)(a) (consent) — subject to PECR |
Where special-category data is processed, an additional Art. 9 / Data Protection Act 2018 condition applies.
4. Who we share data with
- Insurers, underwriters, Lloyd's syndicates, reinsurers and other market counterparties, as necessary to obtain quotes and place and administer cover.
- Service providers acting as processors under written contract (hosting, email, IT).
- Regulators, law-enforcement and other authorities where required by law.
- Professional advisers (legal, audit, accounting).
We do not sell personal data.
5. International transfers
Where personal data is transferred outside the UK, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses) together with a transfer risk assessment.
6. Retention
We keep personal data only as long as necessary for the purposes above and to meet legal and regulatory record-keeping obligations (insurance and anti-money-laundering record-keeping periods apply). Detailed retention periods are set out in our internal retention schedule and available on request.
7. Your rights
You have the right to access; rectification; erasure; restriction; data portability; objection; and rights regarding automated decision-making. To exercise any right, contact us at the address in section 1. You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
8. Security
We maintain appropriate technical and organisational measures to protect personal data. Where a personal-data breach is likely to result in a risk to individuals, we notify the ICO within 72 hours as required by UK GDPR Art. 33.
9. Cookies
See our separate Cookie Policy.
10. Changes
We may update this policy; the date above shows the latest version.
Information, not legal advice — lawful-basis selection and retention periods are confirmed by the firm's data-protection lead before launch. © 2026 BLD PROTECTION LTD (trading as znobia).