Insify privacy statement (Ireland)
Responsibility for your personal data
The controller for your personal data is:
Insify B.V. or Insify NLD agent B.V. (depending on your relationship with us)
Address: Weesperplein 4B, 1018 XA Amsterdam, the Netherlands
Email: support@insify.ie
The controller is the party that decides how and why your personal data is used. Insify offers its insurance services in Ireland from the Netherlands on a freedom-of-services basis. You can contact our data protection officer via the email address above.
Which data, and for how long?
When you visit our website and request information about an insurance product, we ask for certain details. These include your name, address, email address and telephone number, as well as other information such as your age, occupation or marital status. What we ask depends in part on the type of insurance you apply for. Besides the information you give us yourself, we may collect information about you in other ways, for example from public sources.
You may request information on behalf of a legal entity, such as a limited company with connected persons like directors, shareholders, partners and employees. In that case, we will collect and process information about those persons from public sources, such as the register of the Companies Registration Office (CRO). This privacy statement also governs the processing of that information. We expect you, as the applicant, to tell those persons that you are requesting information from us partly on their behalf. We also assume you will tell them that we process their personal data from public sources in line with this privacy statement.
We keep your personal data for as long as we need it, or for as long as the law requires. Examples include Irish tax law, record-keeping rules for regulated financial service providers, and limitation periods for legal claims. After that, we delete your data or anonymise it, so it can no longer be linked to you. Sometimes you do not complete an application, or we decline it or cannot offer you insurance. In those cases we keep your data for as long as the law allows, and we may use it during that period for research and fraud prevention.
Our website and systems are well secured, and we continuously take measures to prevent misuse of your data.
Special categories of personal data
For some insurance products, we need special categories of personal data, meaning more sensitive types of information that receive extra protection under data protection law. Special categories may include:
Financial information
Payment details
Health and medical information
Information about criminal convictions and offences
Fraud-related information
We only ask for this kind of information where we need it for the service you request. We use it to assess your insurance application and to process payments for your insurance. We also use it to prevent and combat fraud, to report to public authorities (for example Revenue) where required, and to handle claims and complaints.
We treat this information with extra care, and we process it only with your explicit consent or on another legal basis. The General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018 provide these legal bases. For example, section 50 of the Data Protection Act 2018 allows the processing of health data where this is necessary and proportionate for an insurance policy. Section 55 of that Act sets out when data about criminal convictions and offences may be processed. Where required, we apply suitable and specific measures to protect your rights and interests.
Communication
We keep a record of how and when we are in contact with you. This includes the following contact moments:
When you use our website
All letters and emails
Any telephone and chat conversations
Contact via social media, such as Facebook, X and WhatsApp
We store our communications with you to record what we agree with you and to improve our communications.
For what purposes?
We use your personal data to provide the service you request from us. With it, we can prepare a comparison for you, map out your needs and preferences, and show you which products or services suit your situation. We can also apply for the product of your choice with our partner, so that we can deliver that product or service to you.
We also use part of your data to create a customer profile. We sometimes need that profile to make you a better or more relevant offer, and we also use it for our own marketing. That means we personalise our communications with you, or point out a product or service that we think fits your situation.
You are always free to review all information and products and make your own choices.
For this we use:
Information we hold about you because you are a customer of ours.
Information based on your click behaviour in our mailings.
Information based on your browsing behaviour on our website, provided you have accepted cookies.
Information we have actively asked you for, such as your interests, the way you make choices, how you see yourself, and what you find important. If we actively ask you for extra information for this purpose, we will always tell you so.
Information we receive from other companies, such as market information or information from public sources.
If you do not want us to use your data for marketing purposes, you can let us know at any time. We will then no longer use your customer profile to approach you in a personalised way. Every electronic marketing message we send also contains a simple way to opt out.
We also use your personal data to prevent fraud and misuse, for quality assurance, to comply with the law, and for scientific and statistical market research. This research helps us develop new products and align our products and services with the needs of our visitors.
We consider it important to keep your data up to date. As part of our duty of care and our legitimate interests, we may therefore carry out research into you or your business. Our legitimate interests are our business interests, which we always balance against your rights. This research helps us keep your data current, for example to prevent under-insurance or over-insurance. For this we may use public sources such as LinkedIn, the Companies Registration Office and social media. The research may concern information about your business, such as employee numbers, business activities, turnover and address details, or information about you personally. If anything has changed since the insurance was taken out, we will of course contact you about it.
As a customer, you are required to notify us of changes that are relevant to your insurance. Personal data processed in this type of research is handled in line with the other provisions of this privacy statement.
On what legal basis?
We process your personal data where this is necessary for: (i) the performance of a contract; (ii) compliance with a legal obligation; or (iii) the pursuit of our legitimate interests. In specific cases, we process your personal data on the basis of your consent.
Do we share personal data?
Yes, because this is sometimes necessary. We share data between the entities of the Insify group, and with our partners and insurers who help us provide our services to you. For example, they calculate premiums, give you and us information about insurance, collect premiums or handle claims. We also share data with other service providers, such as technical providers that host our website, companies that help us promote our products, and parties that enable the secure exchange of information. Finally, we share data with parties that help us comply with our legal obligations or combat fraud.
Below are the insurers we work with for insurance offered in Ireland:
You may take out an insurance policy through us with Axeria IARD as the insurer. In that case, we pass your personal data on to Axeria, which processes that data in line with its own privacy policy, available here: link.
For the administration and handling of claims in Ireland we work with DWF Claims. Where necessary for this purpose, we share personal data with DWF,, including special categories of personal data. DWF’s privacy policy can be found here: link.
Automated decision-making
To calculate your premium and assess your application, we may use automated decision-making. This means we take a decision based on the information we hold about you, without human involvement.
You have the right to obtain human intervention, to express your point of view and to contest such a decision. If you would like more information about a decision, or if you disagree with an outcome, email us at support@insify.ie or write to Insify, Weesperplein 4B, 1018 XA Amsterdam, the Netherlands. You will receive a substantive response as soon as possible, and in any event within 1 month.
Transfers of personal data outside the European Economic Area (EEA)
In principle we process and store your personal data within the EEA, but sometimes it is transferred to countries outside the EEA. This can be done by us, or by the parties with whom we share data, such as insurers and service providers.
If your personal data is processed outside the EEA, we ensure an adequate level of protection. We only transfer data to countries that the European Commission has found to offer adequate protection, which is known as an adequacy decision. Alternatively, we agree appropriate safeguards with the recipient, such as the Standard Contractual Clauses, a set of contractual data protection commitments approved by the European Commission. Where necessary, we add further technical and organisational measures. In exceptional cases, a transfer may take place on the basis of a specific statutory exception under the GDPR.
Your rights
The GDPR gives you certain rights over our use of your personal data. You can request access to the personal data we hold about you, and have it corrected or deleted to the extent the law allows. You can also object to processing or withdraw any consent you have given. In addition, you can have your data transferred to another party (data portability) or temporarily restrict its use.
Email us at support@insify.ie, or write to Insify, Weesperplein 4B, 1018 XA Amsterdam, the Netherlands. You will receive a substantive response as soon as possible, and in any event within 1 month. For complex or numerous requests, we may extend this period by up to 2 further months, in which case we will inform you within the first month.
Lodging a complaint with the Data Protection Commission
If you are not happy with the way we handle your personal data, you always have the right to complain to the Data Protection Commission (DPC). The DPC is the Irish supervisory authority, meaning the regulator that oversees how organisations use personal data. You can reach the DPC at 6 Pembroke Row, Dublin 2, D02 X963, Ireland, or via www.dataprotection.ie. Because our main establishment is in the Netherlands, the Dutch supervisory authority, the Autoriteit Persoonsgegevens, acts as our lead supervisory authority. That is the regulator that coordinates the supervision of Insify within the European Union (EU). If you live or work in another EU country, you can also complain to the supervisory authority of that country. We would of course appreciate it if you contacted us first, so that we can look for a solution together.
Changes to this privacy statement
This privacy statement may change from time to time, for example if legislation changes or if our services change. This version is dated 28 August 2026.