Privacy Notice
LHK Group is committed to protecting and respecting your privacy. We aim to be transparent about how we process personal data and to demonstrate accountability under the General Data Protection Regulation (GDPR). This Privacy Notice explains how we collect, use, share, and protect your personal data, and outlines your rights.
For the purposes of the GDPR, the data controller is LHK Group.
LHK Group regulated entities:
LHK Insurance Ltd T/A LHK Insurance and LHK Group
LHK Kelleher Insurance Ltd T/A LHK Kelleher Insurance, and LHK Group
Finance One Ltd T/A Finance One, LHK Mortgages, and LHK Group
Contact details:
Dublin: Rosemount House, Dundrum Road, Co Dublin, D14 P924 Tel: 01-205 5600
Drogheda: 12 Trinity Street, Drogheda, Co. Louth A92 RH63 Tel: 041 983 7660
When we refer to ‘we’, ‘us’ or ‘our’, we mean LHK Group and the regulated entities listed above
Please read this Privacy Notice carefully as this sets out the basis on which any personal data that you provide to us, will be processed by us.
Who we are
LHK Group is a Leinster-based general insurance and financial planning advisory firm serving commercial and personal clients, nationally.
How we collect your personal data
The personal information we collect varies depending upon the nature of our services. We will endeavour to provide you with an overview of those categories of personal data our organisation collects and our purpose for using that data. We may collect personal data when you:
- Request a service from us.
- Register for or use our websites or online applications
- Use our website or apps (including cookies and similar technologies).
- Engage with us on social media.
- Contact us with a complaint or enquiry.
- Apply for a position with us.
Sources of personal data
In most cases, we collect personal data directly from you. However, where relevant and permitted by law, we may also obtain personal data from third parties, including:
- Employers, pension scheme trustees, or scheme administrators
- Insurance providers, underwriters, or reinsurers
- Premium finance providers
- Introducers or professional advisers acting on your behalf
- Publicly available sources such as the Companies Registration Office (CRO) or the Register of Beneficial Owners
Where we obtain personal data from third parties, we will ensure this is done in accordance with GDPR and that you are informed where required.
Categories of personal data we collect
The categories of personal data we may collect include:
Contact and Identifying information,
Name, address, email address, mobile and landline numbers
Unique identifiers
PPS number, pension scheme reference numbers, and insurance policy numbers (where required to perform a contract).
Demographic details
Age, gender, marital status, lifestyle, insurance needs, date of birth, dependants, and photo identification. This may also include information about other individuals you wish to insure, such as a spouse or children.
Family and beneficiary data
Dependants, next of kin, nominated beneficiaries, Powers of Attorney, and contact details for solicitors, tax advisers, or accountants.
Employment information
Job role, employment status, salary information, benefits, and employment history. This information is required to complete our Fact Find process.
Publicly available information
Information available in the public domain, such as director details from the Companies Registration Office (CRO) or the Register of Beneficial Owners.
Health information (special category data)
Health status, medical history, medical assessments, personal habits (e.g. smoking or alcohol consumption), biometric data and disability information.
Pensions and insurance benefits information
Details of current benefits, pension entitlements, retirement date, voluntary contributions, and Pensions Adjustment Orders.
Financial information
Bank account details, credit history, bankruptcy status, salary, tax code, deductions, bonuses, benefits, and contribution data.
Claims Data
Information relating to claims made by you or relevant third parties.
Marketing preferences
Your preferences in relation to receiving direct marketing communications
Online and technical data
Information about your visits to our websites, including IP address and browser data. Further details are set out in our Cookie Policy.
Events and social media information
Information about your interest in or attendance at events, and your interactions with our social media channels (e.g. LinkedIn and Facebook).
Criminal records and background checks
Information relating to criminal convictions or confirmations of a clean record (where required for insurance purposes), and checks undertaken for sanctions, anti-money laundering and credit risk using sources such as Credit Safe, Vision Net and the CRO.
Calculation data
Information used in calculators to generate quotations for life insurance or mortgage protection products.
Special categories of personal data
Where we collect special categories of personal data, we will only do so with your explicit consent or where permitted under the Data Protection Act 2018, and we will apply additional safeguards to protect your rights.
Information we collect automatically
We may automatically collect certain information when you visit our websites or communicate with us electronically. This may include IP addresses, server logs, cookies and similar technologies. Non-essential cookies (including analytics and marketing cookies) are only used with your consent
The use of cookies on our website
You can browse our website without providing personal information. Cookies used on our website may store both personal and non-personal data, such as language preferences or device type.
You can manage or withdraw your cookie consent at any time using the Manage Cookies Consent option on our website. Further information on cookies is available at www.allaboutcookies.org.
How we use your personal data
- Providing insurance and financial services
- Meeting legal and regulatory obligations, including AML and Know Your Customer requirements
- Communicating with you, including marketing where consent has been given
- Managing claims and providing quotations
- Responding to queries and complaints
- Administering and improving our website
- Fulfilling contractual obligations
- Arranging premium finance
- Delivering professional services
- Notifying you of changes to our services
Use of artificial intelligence (AI)
We may use artificial intelligence (AI) and automated tools to support certain business activities, such as research, scheduling, document preparation, marketing and data analysis. These tools are used to assist our staff and do not replace human judgement. Where AI or automated processing is used, appropriate human oversight is maintained.
Legal basis for processing
We process personal data on the following legal bases:
- Performance of a contract
- Legal obligation
- Consent (which may be withdrawn at any time)
- Legitimate interests, where these do not override your rights and freedoms
Sharing your personal data
- Vetting and risk management agencies
- Legal advisers, loss adjusters and claims investigators
- Medical professionals (where relevant)
- Regulators and public authorities
- Third-party processors such as IT, payroll, and CRM providers
- Internal and external auditors
All third parties are required to protect your data and process it in accordance with GDPR.
International transfers
Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions or Standard Contractual Clauses. Transfers to the UK are permitted under the EU adequacy decision.
Security
We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, or disclosure
Retention
Personal data is retained only for as long as necessary and in accordance with our Retention Schedule. Data is securely disposed of when no longer required.
Liability insurance
If you hold insurance against a liability that may be incurred by you against a third party, where for whatever reason you cannot be found or you become insolvent, or the court finds it just and equitable to so order, then your rights under the contract will be transferred to and vested in the third party even though they are not a party to the contract of insurance. The third party has a right to recover from the insurer the amount of any loss suffered by them. Where the third party reasonably believes that you as policyholder have incurred a liability, the third party will be entitled to seek and obtain information from the insurer or from any other person who is able to provide it, including LHK Group concerning:
- the existence of the insurance contract,
- who the insurer is,
- the terms of the contract, and
- whether the insurer has informed the insured person that the insurer intends to refuse liability under the contract.
Your rights as a data subject
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (subject to legal limitations)
- Restrict processing
- Data portability
- Object to processing, including direct marketing
- Object to automated decision-making
- Lodge a complaint with the Data Protection Commission
Complaints and contact details
If you have concerns about how we process personal data, please contact:
Email:
Phone: 01 205 5600
You may also contact the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or visit www.dataprotection.ie.
Web: www.dataprotection.ie Email:
See website for updated contact details to reach the appropriate section within the DPC.
Failure to provide further information
If we are collecting your data for a contract and you cannot provide this data, the consequences of this could mean the contract cannot be completed or details are incorrect. When you fail to provide us with information we require to fulfil our obligations to you, we may be unable to offer our services to you.
Profiling – automatic decision making
Some processing activities may involve automated processing or profiling, such as risk assessments, affordability checks, or the generation of insurance quotations. These processes are subject to appropriate human oversight. You have the right to object to automated decision‑making and to request human intervention where applicable.
Privacy notice/ statement changes
When we update this Privacy Notice/Statement, we will post a revised version online. Changes will be effective from the point at which they are posted. We would encourage you to review our Privacy Notice so that you are aware of updates.
This privacy policy was last reviewed in March 2026
