Privacy policy

Last updated April 2026 

Our Privacy Policy explains when and why we collect, store, use and share personal information about our customers.  It applies to personal information provided, either by you or by others on your behalf and explains the rights you may have in relation to the personal information that we hold on you. 

You can read our privacy policy in full or use the links below to read a particular section.  If you would like to print a copy of our Privacy Policy you can download the full version, available here. Find out more below about how we process your personal data.

1. About us

This privacy policy applies to Scottish Friendly group of companies’ offering a wide range of financial products and services. Scottish Friendly is acting as a data controller with the information we process unless stated and are committed to protecting the personal information we collect. 

3. How do we collect your personal data?

The personal information we collect about you will depend on the products and services you use.  We have set out below examples of the types of information we may collect about you.  We may receive this information from:  

• You (including the devices that you use to contact us)  

• Third parties we work with such companies who distribute our products, your solicitor, health professional, or employer  

• Research organisation we use or   

• Information that is publicly available  

Where you provide information about other people, we expect you to be responsible for ensuring that they know we are using their personal information in accordance with this Privacy Policy and that you have obtained their consent.   

We may ask you for, or you may voluntarily provide, sensitive information such as health information. For example, we may request this information when you purchase health insurance policies from us or you may provide us with details of your health to help us to understand your specific circumstances, we will use it make appropriate adjustments to the products and services we offer based on the information you provide.   

Special category data will only be used with your consent, unless the law permits us to use such information without your consent.  

Scottish Friendly will process personal data for any of the following processes depending on the nature of the relationship you have with is. The following sections will explain what these are. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to fulfil some of our business requirements for example, administer your policy on our behalf, welcome gift and benefit scheme suppliers and carry out searches that help us trace you if we lose touch. 

• Reinsurers - Reinsurers help us manage our risk and so they need to see information about the policies they are reinsuring. 

• Anyone you ask us to share your information with - If you ask us to share your information, for example with a trustee or professional adviser, we may check with you to confirm that the person asking for information on your behalf has your permission. 

• Regulatory, Government and Industry Bodies – To comply with our legal and regulatory obligations, this may include acting in accordance with best practice. 

Our lawful basis for processing your personal data is in connection with meeting our legal and regulatory obligations under our FCA licence as well as to allow us to meet our obligations under any contract we agree with yourself. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to fulfil some of our business requirements for example, administer your policy on our behalf, welcome gift and benefit scheme suppliers and carry out searches that help us trace you if we lose touch. 

• Reinsurers - Reinsurers help us manage our risk and so they need to see information about the policies they are reinsuring. 

• Anyone you ask us to share your information with - If you ask us to share your information, for example with a trustee or professional adviser, we may check with you to confirm that the person asking for information on your behalf has your permission. 

• Regulatory, Government and Industry Bodies – To comply with our legal and regulatory obligations, this may include acting in accordance with best practice. 

Our lawful basis for processing your personal data is in connection with meeting our legal and regulatory obligations under our FCA licence as well as to allow us to meet our obligations under any contract we agree with yourself. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to fulfil some of our business requirements for example, administer your policy on our behalf, welcome gift and benefit scheme suppliers and carry out searches that help us trace you if we lose touch. 

• Anyone you ask us to share your information with - If you ask us to share your information, for example with a trustee or professional adviser, we may check with you to confirm that the person asking for information on your behalf has your permission. 

• Regulatory, Government and Industry Bodies – To comply with our legal and regulatory obligations, this may include acting in accordance with best practice. 

Our lawful basis for processing your personal data is to meet legitimate interests. Our legitimate interests is to allow us to meet our customers’ needs. Our customer’s legitimate interest to ensure that they are not being disadvantaged by any vulnerability. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do; in order to fulfil some of our business requirements for example carry out searches that help us trace you if we lose touch. 

Our lawful basis for processing your personal data is to allow us to meet our contractual obligations with our customers.  

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to fulfil some of our business requirements for example, helping Scottish friendly analyse data and suitably segment our customer base. 

Our lawful basis for processing your personal data is legitimate interest. Our legitimate interest is so that we can better communicate and support our customer and potential customers with relevant messages and information whether it is to nurture and engage with customers about their current investments with us or to make them aware of products and services we offer them. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to send these nurture communications to you. 

Our lawful basis for processing your personal data is legitimate interest. We have a legitimate interest to communicate information that will allow you to understand your product better. 

You have the right to opt-out of these communications at any time - you can do this by sending an email to us at [email protected] or by sending any other form of communication to Scottish Friendly. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to allow you to provide customer feedback and to analyse responses which allows us to identify way we can improve our service. 

Our lawful basis for processing your personal data is to meet our legitimate interests to allow us to ensure we are providing a good service and identify improvements to services and products we provide. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, in order to record and listen to call recordings where there is a need to do so. 

• Anyone you ask us to share your information with - If you ask us to share your information, for example with a trustee or professional adviser, we may check with you to confirm that the person asking for information on your behalf has your permission. 

• Regulatory, Government and Industry Bodies – To comply with our legal and regulatory obligations, this may include acting in accordance with best practice. 

Recording of calls is necessary to protect the interests of you, our staff or both. Our lawful basis for processing your personal data is legitimate interests, unless those interests are overridden by you asking for your call not to be recorded. You may request that your call isn’t recorded, and, in this situation, you will normally be advised to contact us either in writing or by email. 

If you are a member the information collected is the same as what is collected when you purchase a product form us. 

We may share data as part of this process with the following parties: 

• Suppliers who provide services on our behalf - We use service providers, who agree to treat your data as securely as we do, such as provide, maintain and keep our systems which hold this information secure. 

Our lawful basis for processing your personal data is in connection with meeting our legal and regulatory obligations as a friendly society. 

23. Changing this privacy policy

We may change this Privacy Policy from time to time to keep it up to date, or to comply with legal requirements.  Any changes we make in the future will be posted on the Privacy Policy section of our website, and where necessary, notified to you.