Data, cookies & privacy policy

Terms and Conditions

This Data, cookies & privacy policy forms part of the terms and conditions ('Conditions') that govern your access and use of the Direct Line for Business Legal Documents Website ('Website') or any part thereof or any services offered thereon ('User Services'). This policy forms a contract between you and Epoq Legal Ltd. Direct Line Group is not a party to this contract. Any arrangements between you and Direct Line Group in relation to how Direct Line Group processes your personal data shall be set out in your welcome pack . It is important that you read and understand the Conditions before you start to use this Website. By accessing this Website, you acknowledge that you have read, understood and confirmed your acceptance of all the parts, as listed at the bottom of this Website, which collectively make up the Conditions. You may print and keep a copy of the Conditions for your reference. If you do not agree with all parts of the Conditions then you are not authorised to use this Website.

Service providers

The User Services, other than the document reviews carried out under the Solicitor Managed Service are provided by Epoq Legal Ltd, a company registered in England and Wales under company number 3707955, and whose registered office is at Unit 2, Imperial Place, Maxwell Road, Borehamwood, Herts, WD6 1JN ("ELL"). ELL is the data processor of your personal data for the purposes of the Data Protection Act 1998. ELL has been appointed by DL Insurance Services Limited (registered number 3001989) with registered office at Churchill Court, Westmoreland Road, Bromley, BR1 1DP ("DLG") to provide this service. DLG shall not have access to, nor shall it process, any personal data that you submit via this Website, unless such access is required by law.

Reference in these Conditions to 'we', 'our' or 'us' is a reference to ELL.

Document reviews carried out under the Solicitor Managed Service are performed by MyLawyer Solicitors LLP ('MyLawyer Solicitors'). MyLawyer Solicitors is a limited liability partnership registered in England and Wales under number OC376661 and whose registered office is at Unit 2, Imperial Place, Maxwell Road, Borehamwood, Herts, WD6 1JN. MyLawyer Solicitors are authorised and regulated by the Solicitors Regulation Authority. Their SRA number is 569955.


We are committed to ensuring that your privacy is protected. This policy explains how we use the personal information we collect about you, how you can instruct us if you prefer to limit the use of that information and procedures that we have in place to safeguard your privacy.


By submitting your personal information via the data submission form provided on this Website and/or by accessing and using this Website, you give your consent that your personal information and that of third parties supplied by you, including any sensitive data, may be held by us and processed as stated herein.

By providing us with information about another person, you confirm that they have appointed you to act for them and that you have the required authority to consent to the processing of their personal data. You also confirm that you have, upon providing us with such information, informed them of our identity and the purpose for which their personal data will be processed.

How your information will be collected and used

When you use this service you provide us with personal information, for example when you complete our online documents we ask you to complete mandatory fields in order to personalise the document for your needs. Depending on the type of document that you complete, some of the information you provide to us will be sensitive data (as defined in the Data Protection Act 1998). We will process this information for the purposes of operating this service, administration, monitoring, statistical analysis and performance measurement.

We may check some of the information that you provide to us against third party databases to confirm that it is accurate. Any calls that you make to our customer team or to other providers involved in the delivery of the service may be recorded and monitored for the purposes of compliance, business management, quality control, training standards and security.

Other service providers who you may engage in the course of your use of this Website may also hold and process your personal information on their systems for the purposes of operating the service they provide to you, administration, monitoring, statistical analysis, performance measurement and business development. We may also provide your personal information to DLG for the purposes of operating the service they provide to you, administration, monitoring, statistical analysis and performance measurement.

We may from time to time aggregate information and statistics for the purposes of monitoring website usage in order to help us develop this Website and our services and may provide such aggregate information to third parties. These statistics will not include information that can be used to identify any individual.

We and DLG may use your information to contact you by letter, telephone or email, but only in connection with the operation of the service that each provides or to meet a regulatory or compliance obligation.

Because of the nature of the internet and our international operations, we may process data in relation to this service in facilities which may from time to time be located outside of the European Economic Area. Any such facilities will at all times be protected by the same data protection standards as are required within the European Economic Area. We shall ensure, as far as is possible, that the information is kept securely and only used for the purpose for which it is provided. We may also transfer your information to other countries. In the event that we do this we shall ensure, as far as is possible, that any party to whom the information is passed is able to provide an adequate level of protection of such personal data. By submitting your information you consent to such a transfer.

We will not rent or sell your personal information without your permission.


When we provide services, we want to make them easy, useful and reliable. This sometimes involves placing small amounts of information on your computer. These are called 'cookies'.

These cookies cannot be used to identify you personally and are used to improve services for you through:

You can learn more about cookies from or

Users typically have the opportunity to set their browser to accept all or some cookies, to notify them when a cookie is issued, or not to receive cookies at any time. The last of these, of course, means that personalised services cannot be provided and the user may not be able to take full advantage of all of a website's features. Refer to your browser's Help section for specific guidance on how it allows you to manage cookies and how you may delete cookies you wish to remove from your computer.

Multiple cookies may be found in a single file depending on which browser you use.

The cookies used on this website have been categorised based on the categories found in the ICC UK Cookie guide, as follows:

Category 1: strictly necessary cookies

These cookies are essential in order to enable you to move around the Website and use its features, such as accessing secure areas of the Website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.

Category 2: performance cookies

These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don't collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

The list below shows the cookies that we use, other than those that are strictly necessary to this service. If you have any queries about these, or would like more information, please contact

Performance cookies

Google Analytics sets cookies (__utma, __utmb, __utmc, __utmz, _ga, _gat) to help us accurately monitor the number of unique visitors to various parts of the Website and the volumes of usage. Data is only used in aggregate.

For further details on the cookies set by Google Analytics, please refer to the Google Code website.

To provide website visitors with more choice on how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The add-on communicates with the Google Analytics JavaScript (analytics.js) to indicate that information about the website visit should not be sent to Google Analytics.

If you want to opt out, download and install the add-on for your current web browser. The Google Analytics Opt-out Browser Add-on is available for Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari and Opera.

By using this Website, you agree that we can place these types of cookies on your device.

How we protect your information

The security of your personal information is very important to us. All personal information that you supply to us either in respect of yourself or another individual will be treated in confidence by us and will not be disclosed to third parties except in accordance with this policy, where your consent has been otherwise received or where permitted by law.

The internet is not a secure medium. However we take security issues very seriously and abide by strict internal standards. Some of the relevant security procedures are described in this policy.

We capture certain information such as your name, postal address, email address, telephone number and your credit card number and expiry date (where applicable) or bank account details (where applicable) over a secure link using recognised industry standard techniques which encrypt the data while travelling over the internet. Furthermore, we do not send full credit card details (where applicable) back to your screen, for fear of these being overlooked or compromised.

We have installed a mechanism which ensures that there is an encrypted private connection between you and this Website. This mechanism is commonly referred to as SSL and uses digital server identities to help assure you that the website you access is this Website. This is done using a service run by 'DigiCert', a well known certification system technology provider. When you access certain pages which involve the transmission of confidential information over the internet, your browser will be provided with an electronic certificate confirming that you have accessed this Website. These communications between you and this Website will be encrypted. In addition, similar communications with banks, credit providers and with suppliers will be encrypted. You are recommended to use the facilities of your browser to confirm which pages are secured in this way.

Firewalls are used to attempt to block unauthorised traffic to the servers and the actual servers are located in a secure location that can only be accessed by authorised personnel.

We also aim to keep your information confidential. Our internal procedures cover the storage, access and disclosure of your information. We have appropriate technical and organisational measures in place to guard your personal information against unauthorised or unlawful processing, accidental loss or damage. Please ensure you keep your password confidential and remember to log out when not using the site to prevent unauthorised access.

The period for which we will retain your personal information

We shall not retain your personal data which has been processed for the purposes and as indicated herein, for any longer period than is necessary to achieve the purposes set out herein.

Other websites

In as much as this Website contains links to other web sites which are outside our control, such websites are not covered by this policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from this one. If you decide to access any of the third party sites linked to this site, you do so at your own risk.

Fraud prevention, detection and claims history

In order to prevent and detect fraud we may at any time:

If you would like to receive details of those fraud agencies and databases from whom we obtain, and with whom we record, information about you, please contact us at You have a legal right to these details.

Updating your details

If any of the information that you have provided to us on this Website changes, for example if you change your email address, name or payment details (where applicable) please contact us by sending an email with the updated information to Even if you notify Direct Line Group of any updates, you must notify us separately.

Inaccurate data

If you believe that we are holding inaccurate information about you, please contact and we will be happy to correct any errors.

Data request

You have the right to request a copy of all personal information we hold about you. Please contact


Material changes to this Data, cookies and privacy policy will be notified to you and your consent sought where required. Otherwise, we may from time to time amend this Data, cookies and privacy policy to make routine, non-material changes without notice to you, in which case, we will publish the amended version on the Website. You should check the Website regularly to determine whether this policy has changed. Changes shall not affect your statutory rights under the Data Protection Act 1998.

Your consent

By submitting your information you accept these data protection terms and you consent to the use of your personal information as set out in this policy. Continued use of the service will signify that you agree to any changes we may make to this policy from time to time as set out above.

How to contact us

We welcome your views about our privacy policy. If you would like to contact us with any queries or comments please send an email to