Privacy Policy

QuoteFlo is a specialist insurance lead-generation service for UK insurance brokers, insurers and intermediaries. "QuoteFlo" is the brand you deal with; MCG Digital Media Ltd is the company that operates it. In this policy, "QuoteFlo", "we", "us" and "our" mean MCG Digital Media Ltd trading as QuoteFlo.

This policy explains how we collect and use personal information when you visit quoteflo.co.uk, submit an enquiry, or book a call with us.

MCG Digital Media Ltd is the controller of personal information collected through QuoteFlo. That means we decide how and why it is used and we are responsible for protecting it under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Enquiry and lead information. When you complete a QuoteFlo enquiry form we collect the details you provide, which may include your name, business email address, phone number, company name, company website, the insurance sector and products you want enquiries for, your approximate monthly enquiry volume, and any notes or other answers you give.

Appointment and booking information. If you choose to book a Discovery Call, we collect your chosen date and time, your time zone, and the contact details needed to arrange the call, together with a reference linking the booking to your enquiry.

Campaign and technical information. We record how you arrived at our website — for example the page you landed on, the referring website, and campaign tags in the link you followed (such as UTM parameters or advertising click identifiers). Our hosting provider also processes standard technical information such as your IP address, browser type and device information to deliver and secure the website.

We do not ask for, and ask you not to provide, special category information (such as health information) through our forms.

• To respond to your enquiry and discuss your lead-generation requirements.
• To arrange, manage and hold any appointment you book with us.
• To send service and administrative communications (see section 6).
• To understand which campaigns and channels bring enquiries to us, so we can run and improve our own marketing.
• To keep our website and systems secure and working properly.
• To meet our legal, accounting and regulatory obligations, and to establish or defend legal claims.

• Steps before entering into a contract — when we respond to your enquiry or arrange a call at your request.
• Legitimate interests — running and improving our business, understanding campaign performance, keeping records of enquiries and bookings, and securing our website. We balance these interests against your rights.
• Legal obligation — where we must keep or disclose information by law.
• Consent — only where we specifically ask for it, for example for marketing communications where consent is required, or for non-essential cookies if we use them. You can withdraw consent at any time.

Service communications are messages we need to send to manage your enquiry or appointment. They include:

• Enquiry acknowledgements
• Booking confirmations
• Appointment reminders
• Rescheduling and cancellation information
• Joining instructions, including Google Meet details
• Other administrative messages directly related to your enquiry or appointment

We send these by email. Where SMS service messages are enabled for appointments and you have been told about this, we may also send them by SMS to the phone number you provided. These messages are limited to administering your enquiry or appointment and do not contain marketing.

Marketing communications are separate from service communications. They include promotional offers, general marketing campaigns, news about new services, and sales messages that are not about administering an existing enquiry or booking — whether by email, SMS, WhatsApp or another channel.

Submitting an enquiry, giving us your phone number, booking an appointment, or receiving a service communication does not mean you have agreed to receive marketing. Where the law requires consent for marketing, we will ask for it separately and record it, and you can withdraw it at any time by contacting us or using the unsubscribe option in any marketing message.

Our website uses your browser's session storage to remember how you arrived (for example the campaign tags in the link you clicked) for the duration of your visit, so that this information can be attached to your enquiry. It is cleared when you close the browser tab.

We may use analytics and advertising measurement tools, such as Google Analytics, Google Ads and Meta (Facebook/Instagram) advertising tools, to understand how visitors use our website and to measure the effectiveness of our advertising. Where these tools use non-essential cookies or similar technologies, we will only use them in line with applicable law, including asking for your consent where required. You can also control cookies through your browser settings.

We do not sell your personal information. We share it only with service providers who help us run QuoteFlo, under contracts that require them to protect it and use it only on our instructions:

• MCG Booking Engine — our appointment scheduling system, operated by MCG Digital Media Ltd, which manages availability, bookings, confirmations and reminders.
• Google (Google Workspace) — Google Calendar holds appointment details and Google Meet hosts online calls.
• Website hosting and database providers — which host our website and securely store enquiry and booking records.
• Email delivery providers — which deliver enquiry notifications, booking confirmations and reminders.
• SMS delivery providers — only once SMS service messages are enabled; we will update this policy to identify the provider when that happens.
• Analytics and advertising providers — where used, as described in section 8.
• Professional advisers and authorities — such as accountants, lawyers or regulators, where necessary or required by law.

Some of our service providers may process information outside the UK, for example in the United States or the European Economic Area. Where this happens we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or equivalent protections.

We keep enquiry and booking information for as long as needed to respond to you and manage our relationship, and generally for up to 6 years after our last contact so we can meet legal and accounting requirements and deal with any queries or claims. If you never become a client, we will normally delete or anonymise your enquiry within 2 years of our last contact unless we need to keep it longer for a legal reason. Records of the privacy notices shown when you made a booking are kept for as long as the related booking record.

We use appropriate technical and organisational measures to protect personal information, including encrypted connections, access controls that limit lead and booking data to authorised staff, and reputable service providers. No system is completely secure, but we work to protect your information and will act promptly if a problem arises.

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Have your information erased in certain circumstances
• Restrict or object to our use of your information, including objecting to processing based on legitimate interests
• Object at any time to direct marketing
• Data portability in certain circumstances
• Withdraw consent at any time where we rely on consent — this does not affect processing carried out before you withdrew it

To exercise any of these rights, email hello@quoteflo.co.uk. We will respond within one month.

If you have a concern about how we use your information, please contact us first at hello@quoteflo.co.uk so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Email: hello@quoteflo.co.uk

Post: MCG Digital Media Ltd, Grosvenor House, 11 St Paul's Square, Birmingham, England, B3 1RB

We may update this policy from time to time, for example when we introduce new services or providers. The version number and effective date at the top of this page show when it last changed. Where changes are significant, we will take reasonable steps to let you know.