Privacy Policy
Lassie Pet Health Limited
Last updated: June 2026
Your privacy matters to us. This Privacy Policy explains what personal data Lassie Pet Health Limited (“Lassie”, “we” and “our” all refer to Lassie Pet Health Limited) collects about you, why we collect it, how we use it, and what rights you have. Please read it carefully. If you have any questions, contact us at hello@lassie.co.uk.
1. Who we are
Lassie is registered in England and Wales. We are authorised and regulated by the Financial Conduct Authority (FCA reference number 1045889). We act as an Appointed Representative of Advent Solutions Management Ltd ("OneAdvent"), which holds the relevant FCA Part IV permission. The insurer for Lassie insurance policies is Newline Insurance Company Limited ("Newline"). You can verify our authorisation status at any time by visiting the FCA Register at: https://register.fca.org.uk
Our company number is 16501346 at Companies House.
For the purposes of UK data protection law, Lassie is the data controller of your personal data when we collect and use it for our own purposes.
Our data protection contact details:
hello@lassie.co.uk./ 020 4652 4500 | |
Post | Lassie Pet Health Limited, [C/O Dac Beachcroft Llp] First Floor, Woolgate, 25 Basinghall Street, London EC2V 5HA |
Regulator | Information Commissioner’s Office (ICO) - ico.org.uk |
2. What personal data we collect
We collect different types of personal data depending on how you interact with us.
Customers and policyholders
Policyholder name, date of birth and contact details (address, email, phone)
Payment information (bank details, payment history)
Pet details (species, breed, age, microchip number, veterinary history)
Claims information (injury or illness description, vet records, supporting documents)
Records of communications with us (calls, emails, messages)
Website and app users
Technical data: IP address, device identifiers, browser type, operating system
Usage data: pages visited, interactions, session data
Account data: login credentials and profile information (including where you sign in via Apple, Google or Facebook)
People requesting a quote
Name, contact details, pet details and date of birth
Sensitive (special category) data
When handling claims, we may need to process health or medical information. We only do this where it is necessary to assess or settle your claim, and we handle it with extra care. Further detail is in Section 3 below.
3. How and why we use your personal data
We only use your personal data where we have a valid legal reason to do so. The table below sets out our main purposes.
What we use it for | Data types | Legal basis | How long we keep it | Who we share it with |
Providing your insurance policy | Name, DOB, address, contact details, bank details, payment history | Contract; Legal obligation | 7 years from policy end or last claim (whichever is later) | OneAdvent, Newline, claims handlers, fraud prevention databases |
Processing claims | Claim details, vet records, correspondence, payment info, health data | Contract; Insurance purpose (DPA 2018, Sch.1 para.12); Legal obligation | 10 years from claim settlement | Newline, loss adjusters, reinsurers, fraud prevention databases |
Providing a quote | Name, pet details, address, DOB | Steps prior to contract; Legitimate interests | 12 months (if no policy taken out) | OneAdvent |
Keeping you informed about your policy | Name, email, phone | Contract; Legitimate interests | Duration of policy plus 7 years | Email and communication service providers |
Marketing to existing customers | Name, email address | Legitimate interests (you can opt out at any time) | Until you unsubscribe or object | Email service provider |
Improving our website and app | IP address, device ID, session data, analytics | Legitimate interests | 13 months | Analytics and fraud detection providers |
Meeting legal and regulatory obligations | All relevant data categories | Legal obligation | As required by law | FCA, ICO, HMRC, law enforcement |
Automated decisions
We use automated processes in the following ways:
Pricing: we use information about you and your pet to calculate your premium. You can request a human review of any pricing decision by emailing hello@lassie.co.uk.
Claims: straightforward claims may be decided automatically. You have the right to ask for human intervention and to challenge any automated decision - contact hello@lassie.co.uk.
Eligibility: applications can be automatically declined, e.g. where the applicant is under 18 or fails our sanctions screening checks.
Sensitive data and health information
Where we need to process health or medical information in connection with a claim, we rely on the insurance purpose condition under Schedule 1, Part 2, paragraph 12 of the Data Protection Act 2018. In limited cases where that condition does not apply, we will ask for your explicit consent before processing. You can withdraw that consent at any time by contacting hello@lassie.co.uk., though this may affect our ability to handle your claim.
4. Who we share your personal data with
We share your personal data only where necessary. We never sell your personal data to third parties for their own marketing purposes.
We may share your data with:
Advent Solutions Management Ltd (OneAdvent) - our FCA principal, who requires access to policyholder and compliance data under our Appointed Representative agreement
Newline Insurance Company Limited - the underwriting insurer for your policy
Claims handlers and loss adjusters - to assess and settle claims on your policy
Insurance fraud prevention organisations (e.g. the Insurance Fraud Bureau and CIFAS) - to detect and prevent fraud
Reinsurers - where required under Newline’s reinsurance arrangements
Payment processors and banks - to collect premiums and make claims payments
IT, analytics and cloud service providers - who process data on our behalf under written agreements
Regulators and law enforcement - including the FCA, ICO and HMRC, where required by law
Where we share data with OneAdvent or Newline, each party acts as an independent data controller for its own purposes, and their own privacy notices are also relevant to you.
5. International transfers
Where we need to transfer personal data outside the UK, we ensure an appropriate safeguard is in place. Transfers are only made where:
The destination country benefits from a UK adequacy regulation under section 17A of the Data Protection Act 2018; or
The recipient has agreed to the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses; or
Another recognised UK GDPR transfer mechanism applies.
You can request details of the safeguards in place for any specific transfer by emailing support@lassie.co.uk.
6. How long we keep your data
We keep your data only for as long as is necessary. Our main retention periods are:
Policy records | 7 years from policy expiry or last claim settlement (whichever is later) |
Claims records | 10 years from date of claim settlement |
Quotes (no policy taken out) | 12 months |
Marketing data | Until you unsubscribe or object |
Website and app analytics | 13 months |
Financial and accounting records | 6 years (HMRC / Companies Act 2006) |
If you would like more detail on our retention periods, contact us at hello@lassie.co.uk.
7. Your rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights. To exercise any of them, email hello@lassie.co.uk. or write to us at our registered address. We will respond within one calendar month and will ask you to verify your identity before doing so.
Right to be informed | The right to be told how your personal data is used. This Privacy Policy fulfils that obligation. |
Right of access | The right to request a copy of the personal data we hold about you (a ‘subject access request’). This is normally free of charge. |
Right to rectification | The right to have inaccurate or incomplete data corrected. We will also inform any third parties to whom we have disclosed the data. |
Right to erasure | The right to ask us to delete your personal data where it is no longer needed, you have withdrawn consent, or there is no overriding legitimate interest. This right does not apply where we are required to keep the data by law or for legal claims. |
Right to restrict processing | The right to ask us to pause use of your data - for example, while we verify its accuracy or consider an objection. |
Right to data portability | Where processing is based on consent or contract and is automated, the right to receive your data in a structured, machine-readable format and to have it transferred to another organisation where technically feasible. |
Right to object | An absolute right to object to direct marketing (we will stop immediately). For other processing based on legitimate interests, you may object on grounds relating to your situation and we must stop unless we have compelling legitimate grounds that override yours. |
Rights on automated decisions | The right not to be subject solely to an automated decision that has a significant effect on you, and the right to request human review and to challenge the outcome. |
8. Cookies
We use cookies and similar technologies on our website and app to make them work, to understand how they are used, and to improve your experience. For full details and to manage your preferences, please see our Cookie Policy at www.lassie.co.uk/cookie-policy.
9. Security
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it. These include access controls, encryption, regular security testing and secure storage.
If we ever experience a data breach that is likely to put your rights and freedoms at risk, we will notify the ICO within 72 hours. If the breach poses a high risk to you personally, we will also contact you directly without delay.
10. Children
Our services are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with their personal data, please contact us at hello@lassie.co.uk and we will delete it promptly.
11. How to make a complaint
If you are unhappy with how we have handled your personal data, please contact us first at hello@lassie.co.uk. We will do our best to resolve your concern promptly.
If you remain dissatisfied, you have the right to complain to the UK’s data protection authority
Name | Information Commissioner’s Office (ICO) |
Website | ico.org.uk/make-a-complaint |
Telephone | 0303 123 1113 |
Post | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law (including the Data (Use and Access) Act 2025). When we make material changes, we will notify you by email or by a prominent notice on our website, and update the “Last updated” date at the top of this document.
We encourage you to review this Policy periodically.