Privacy Policy

Lukango Ltd ("we", "our", "us") is committed to protecting your personal data and complying with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025 (together, "data protection laws"). This policy explains how we use your personal data and the rights you have.

Terms such as "personal data", "special category data", "consent" and "processing" have the meanings given to them in data protection laws.

1. Who we are

Lukango Ltd is a company registered in England and Wales (company number 13607288) with its registered office at 63/66 Hatton Garden, Fifth Floor Suite 23, London, England, EC1N 8LE. We are registered with the Information Commissioner's Office (ICO) under registration number ZB316748.

We are an insurance intermediary. We are an Appointed Representative of Pro MGA Global Solutions Ltd, which is authorised and regulated by the Financial Conduct Authority. We do not provide insurance ourselves; the insurance we arrange is provided by insurers.

For the purposes of data protection laws, Lukango Ltd is the controller of the personal data described in this policy. The insurers who underwrite your policy are also controllers of the data they receive about you.

2. How we tell you about data protection

We use a layered approach:

this privacy policy, available on our website;
a short privacy notice in your policy documents, which refers to this policy; and
the London Market Core Uses Information Notice, which explains how personal data is used across the insurance market and is available from the Lloyd's Market Association website at lmalloyds.com, or from us on request.

3. Information we collect

Depending on how you deal with us, we may collect:

Contact and identity details, such as your name, business name, address, email and phone number.
Business and risk information, such as your trade, turnover, number of employees, premises and claims history, needed to quote for and provide insurance.
Policy and payment information, such as your policy details and payment records. Card payments are processed by our payment provider and we do not store your full card details.
Claims information, which may include details of injuries to you or others.
Criminal offence and fraud information, such as unspent convictions or details of suspected fraud.
Communications, including emails, messages and recordings of phone calls.
Website and device information, collected through cookies (see section 14).

4. Where we get your information

Most information comes directly from you when you get a quote, buy a policy, contact us or make a claim. We may also receive information from:

partners and platforms that introduce you to us;
insurers and claims handlers;
fraud prevention, sanctions and credit reference agencies; and
publicly available sources such as Companies House.

5. How we use your information and our lawful basis

We must have a lawful basis for each way we use your personal data:

To provide quotes, arrange and administer your policy, take payments, and handle renewals and cancellations. Lawful basis: performance of a contract, or steps before entering one. Without this information we cannot provide insurance.
To pass information to insurers and support claims. Lawful basis: performance of a contract. Insurers handle claims under your policy.
To meet our legal and regulatory obligations, including record keeping, complaints handling and reporting to regulators. Lawful basis: legal obligation.
To prevent and detect fraud, money laundering and other crime, including sanctions checks. Lawful basis: legal obligation and legitimate interests.
To run our business, keep our accounts and records, and improve our products and website. Lawful basis: legitimate interests. We make sure this does not override your rights.
To establish, exercise or defend legal claims. Lawful basis: legitimate interests.
To send you marketing. Lawful basis: consent, or legitimate interests for similar products to existing customers. See section 11.

6. Special category and criminal offence data

Some information, such as health information in a claim, is special category data. Information about criminal convictions and offences is also given extra protection. We process this data where necessary for insurance purposes, for the prevention and detection of fraud and crime, or for legal claims, as permitted by the Data Protection Act 2018. Where none of these apply, we will ask for your consent.

7. Automated decision making

When you get a quote online, our system uses the information you provide and the insurer's rules to automatically decide whether cover can be offered and at what price. This is necessary to enter into the insurance contract. If you disagree with an automated decision, you can ask for it to be reviewed by a person, give your point of view and contest the decision by contacting us using the details in section 13.

8. Who we share your information with

We only share your information where needed for the purposes above, and with contracts in place to protect it. Recipients include:

Insurers who underwrite your policy, any broker we use to place it (where applicable), and their claims handlers.
Our principal, Pro MGA Global Solutions Ltd, for regulatory oversight.
Service providers who help us run our business, including our policy administration platform, customer service provider, payment provider, cloud hosting and IT providers.
Partners who introduced you to us, where needed to administer the arrangement (for example, confirming a policy was taken out).
Regulators and authorities, such as the Financial Conduct Authority, the Financial Ombudsman Service, the ICO, HMRC, courts and law enforcement.
Fraud prevention and anti-money laundering agencies, where crime is detected or suspected.
Professional advisers, such as lawyers, auditors and accountants.
A buyer or investor, if all or part of our business is sold or restructured.

9. International transfers

Some of our service providers may store or access your data outside the UK. Where this happens, we make sure it is protected, for example by using countries the UK recognises as providing adequate protection, or approved contractual safeguards such as the International Data Transfer Agreement. Contact us for more information.

10. How long we keep your information

We keep personal data only for as long as needed:

quotes not taken up: for as long as we need them to give you a quote again if you come back, prevent fraud and meet our regulatory obligations;
policy and claims records: 7 years after the policy ends or the claim is closed, longer where a claim may still be made (for example, some liability claims);
call recordings: 6 years;
marketing records: until you unsubscribe, after which we keep a suppression record so we do not contact you again.

11. Marketing

With your consent, we may send you information about our products and services, and those of our partners, which may interest you. If you are an existing customer, we may send you information about similar products and services unless you have told us not to.

You can stop marketing at any time by using the unsubscribe link in any message or emailing support@lukango.com.

12. Your rights

You have the right to:

be informed about how we use your data;
access your personal data;
have inaccurate data corrected;
have your data erased;
restrict how we use your data;
data portability;
object to how we use your data, including for marketing;
withdraw consent at any time, where we rely on consent; and
not be subject to decisions based solely on automated processing, and to ask for human review (see section 7).

To use any of these rights, contact us using the details in section 13. We will respond within one month, which may be extended by up to two further months for complex requests. There are some circumstances where these rights are limited, for example where we must keep records by law. More information is available on the ICO website at ico.org.uk.

13. Contact us and how to complain

If you have a question about this policy, or you are unhappy with how we have handled your personal data, please contact us:

Phone: 0330 165 5716 (Mon to Fri 8am to 9pm, Sat 8am to 7pm, Sun 9am to 6pm)
Email: support@lukango.com
Post: Lukango Ltd, 63/66 Hatton Garden, Fifth Floor Suite 23, London, EC1N 8LE

You can complain to us in any way, including by phone or social media. We will acknowledge your complaint within 30 days, investigate it without undue delay, and tell you the outcome.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Complaints about your insurance policy or our service (rather than about your personal data) are handled under our complaints procedure, which is set out in your policy documents. You can raise these with us using the contact details above.

Additional needs

If you have additional needs or require information in a different format (such as large print, braille or audio), or would prefer to communicate in a different way, please let us know using the contact details above and we will do our best to help.

14. Cookies

Cookies are small text files stored on your device that help our website work and help us understand how it is used. We use:

Strictly necessary cookies, needed for the website to work, for example to keep your quote secure. These cannot be switched off.
Analytics cookies, which count visitors and show us how people use our website so we can improve it.
Functionality cookies, which remember your choices when you return.
Targeting cookies, which record the pages you visit so we can make our marketing more relevant. We may share this information with third parties for this purpose.

We only use cookies that are not strictly necessary if you agree to them through our cookie banner. You can change your choices at any time through our cookie banner or your browser settings.

15. Other websites

Our website contains links to other websites. This policy only applies to our website, so please read the privacy policies of any other websites you visit.

16. Changes to this policy

We review this policy regularly and will publish any updates on this page. This policy was last updated in November 2026.