The Skill is not intended for use by children and we do not knowingly collect information relating to children.
- Communications through the Skill
- Information we will collect from you and how we use it
- Purposes of processing your personal information
- Cookies and similar technologies
- Where we store your personal information
- Security and passwords
- Disclosing your information
- Third party sites and services
- Cancelling your account
- Your rights and access to information
- Contact us
1. Communications through the Skill
The Skill allows you to verbally request information from us through your Alexa-enabled device to obtain information about your pension and other products you have with Aviva by linking to your MyAviva account.
You are responsible for all interactions with us through the Skill, and you accept the risk that someone other than you may interact with us via your Alexa-enabled device or someone could over hear your interaction with us through your Alexa-enabled device and learn information about you.
2. Information we will collect from you and how we use it
We will collect and process the following information about you:
- Customer data such as your policy ID, email address and name; and
- Data items relating to your pension or other Aviva product such as pension valuation, contributions, your product renewal date, premium and date of last pension valuation.
We need this information to verify your identity and to provide the functionality to use the skill to meet contractual obligations; and
- Your voice pin, chosen by you to access the Skill. We need this to ensure appropriate safeguards are put in place to protect your security. This information will not be made available to anyone else.
Without this information, we are unable to allow Amazon to access this data from your MyAviva account and provide the Skill functionality.
In order to make use of the Skill, if you don’t already have one, you will need to complete the registration process to register for a MyAviva account.
Log Information and Aggregated Data
When you use the Skill (including the Aviva Webpages), we will also automatically collect and store certain information in our server logs to get a better understanding of how people use the Skill, for system administration purposes and to ensure we provide a good user experience and customer service.
This type of information includes information about when and how you use the Skill as well as date or time stamps. This information is used for service level reporting for example, so that we can identify when there may be high levels of usage.
Security and Fraud Prevention
Your personal information is used to ensure the security of your use of the Skill, your user account and our business, as well as for the purposes of preventing or detecting fraud or abuses of our services.
4. Purposes of processing your personal information
This means that the legal basis for us processing your personal information as described above will typically be one of the following:
- because it is necessary to fulfil a contract that we have in place with you or a contract which you’ve entered into;
- for our legitimate business interests such as the development of improved products and services;
- where the processing is necessary for compliance with our legal obligations.
5. Cookies and similar technologies
6. Where we store your personal information
We take steps to ensure that the personal information that you provide is retained for only as long as it is necessary for the purpose for which it was collected. We apply criteria to determine the appropriate retention period for different categories of personal information you provide us with. For example, we will keep information necessary to protect us in a legal claim, such as information relating to a contract, for the lifetime of your product contract and up to seven years after. After this period it will be deleted or in some cases anonymised. Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will delete your personal information. If we have anonymised your personal information or aggregated your personal information in a way that you can no longer be identified from it, then we will continue to keep and use this anonymised information. No additional data is stored by Aviva in order to deliver the Skill functionality.
7. Security and passwords
You must keep your password, your voice pin and any other authentication information confidential. You must not disclose it to anyone else. If you know or suspect that anyone other than you knows your password or any other authentication information, you must promptly notify us using the contact details below.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted via the Skill and/or Aviva webpages; any transmission is at your own risk.
8. Disclosing your information
We will disclose your personal information to:
(a) any member of our group of companies (a list of which can be found here www.aviva.com), which means our subsidiaries, our ultimate holding company and its subsidiaries; and
(b) suppliers, such as cloud hosting providers who provide services to us or on our behalf so you can use the Skill.
We may need to disclose your personal information: (a) to enforce any part of the terms and other agreements or to investigate potential breaches.
With your permission, we will use your personal details to promote the Skill. You will be contacted before any release of such information for our promotional purposes, and you may withdraw any permission that you may grant at any time.
9. Third party sites and services
10. Cancelling your account
You can cancel your user account for the Skill at any time through your Alexa service. If you do so, we will delete any personal information we hold about you specifically in relation to the Skill apart from any information which is held in our back-up systems and information we hold which is anonymous. Back-up data is deleted periodically.
11. Your rights and access to information
Data protection legislation in the European Union and the UK gives you certain rights in relation to your personal information. These include:
- the right to withdraw consent to the processing of your personal information;
- the right to access to your personal information;
- the right to request access to your personal information;
- correct any mistakes on our records;
- erase or restrict your personal information where they are no longer needed for the purpose for which they were obtained or used;
- object to our use of personal information based on legitimate business interests, including for profiling and marketing; and
- receive a machine-readable copy of, your personal information.
12. Contact us
If you have any questions about how we use personal information, or if you want to exercise your rights stated above, please contact our Data Protection team by either emailing them at firstname.lastname@example.org or writing to the Data Protection Officer, Level 4, Pitheavlis, Perth PH2 0NH.
If you have a complaint or concern about how we use your personal information, please contact us in the first instance and we will attempt to resolve the issue as soon as possible. You also have the right to lodge a complaint with the Information Commissioners Office at any time.
For the purposes of data protection legislation the data controller in respect of your personal information is: Aviva UK Digital Limited