1. Who we are
Market Harbor (“we”, “us”, “our”) operates marketharbor.co.uk, a service that matches people and businesses who want quotes with providers who can supply them. We are the data controller for personal data collected through this website.
Our offices:
- United Kingdom: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom · uk@marketharbor.co.uk
- United States: Trade Center, Manhattan, New York, NY, United States · us@marketharbor.co.uk
- Canada: Bay Street, Toronto, Ontario, Canada · ca@marketharbor.co.uk
Our data protection contact is privacy@marketharbor.co.uk.
2. What personal data we collect
- Quote requests. Name, email address, telephone number, country, postcode or ZIP code, the service you are interested in, your timeframe and the details you type into the message box.
- Partner enquiries. Business contact details, company name, the services, countries and areas you cover and the volume of enquiries you want.
- Marketing preferences. The channels you agreed to (email, SMS, phone), the wording you agreed to and the time you agreed.
- Technical data. IP address, browser and device type, pages viewed and timestamps.
Please do not include special category data (such as health details) in the message box unless it is needed for the quote you are asking for, for example pre-existing medical conditions for travel insurance.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Passing your quote request to matched providers | Consent, given with the tick box on the form |
| Checking enquiries are genuine before they are passed on | Legitimate interests |
| Setting up and running partner accounts | Performance of a contract; steps prior to a contract |
| Sending offers you opted in to | Consent |
| Site security, fraud and spam prevention | Legitimate interests |
| Analytics | Consent (non-essential cookies only) |
| Legal, tax and accounting duties | Legal obligation |
4. Who we share data with
Providers matched to your request. When you ask for quotes we pass your enquiry to up to three providers (or one, for an exclusive enquiry) who cover your country, area and service, so they can contact you. Each provider becomes a separate controller of your data and handles it under its own privacy policy. For insurance, loans and mortgages we only pass enquiries to firms that are appropriately authorised in your country.
We do not sell your details to marketing lists. We also use processors who help us operate:
- Cloudflare, Inc. for hosting, security and form processing
- Our email provider, for form notifications and confirmations
- Our CRM and lead-delivery tools, for matching and delivering enquiries
- Analytics providers, only where you accepted analytics cookies
- Professional advisers and regulators, where legally required
5. International transfers
We operate in the UK, USA and Canada, so your data may be handled in any of these countries. Transfers out of the UK rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum, with suitable safeguards.
6. How long we keep it
- Quote requests: 24 months from the date of the request
- Partner records: the length of the relationship plus 6 years
- Marketing consents and opt-outs: until withdrawn, plus a suppression record
- Server and security logs: up to 12 months
7. Your rights
Depending on where you live (UK GDPR, the California Consumer Privacy Act and other US state laws, or Canada’s PIPEDA) you may have the right to:
- access a copy of the personal data we hold about you;
- have it corrected or deleted;
- object to or restrict how we use it;
- withdraw consent at any time, including consent to share with providers;
- opt out of any sale or sharing of personal information.
To use any right, email privacy@marketharbor.co.uk or your country office. We reply within one month. UK residents can also complain to the Information Commissioner’s Office at ico.org.uk; Canadian residents to the Office of the Privacy Commissioner at priv.gc.ca.
8. Security
We use TLS encryption in transit, least-privilege access, multi-factor authentication on admin accounts and regular review of third-party access. No system is completely secure, so we cannot guarantee absolute security.
9. Children
Our services are for adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us data, contact us and we will delete it.
10. Changes to this policy
We review this policy at least once a year. Changes are posted here with a new revision date.
Related policies
Questions about this policy? Email hello@marketharbor.co.uk.