Marshmallow Go - Privacy Notice

Marshmallow   Technology   Ltd,   Marshmallow   Financial   Services   Limited, MarshmallowTechnology Hungary Kft, Marshmallow Credit Services Limited, Marshmallow Repair Limited and Marshmallow Insurance  Limited   (collectively referred to as “Marshmallow, “Marshmallow Group”, “we”, “us” or “our”) are committed to maintaining the privacy and confidentiality of information you provide to us. This privacy notice sets out how Marshmallow uses and protects your personal data through your Marshmallow Go policy.

1. What personal data we collect about you

If you have the Marshmallow Go policy, we will collect your personal data. We may collect, use, store and transfer the below categories of your personal data:

The above personal data is collectively referred to as “Marshmallow Go Data”.

2. Where we collect your personal data from

We will collect the Marshmallow Go Data through the Marshmallow Go App, which is operated by Sentiance. You can view Sentiance’s privacy policy here.

3. Purposes of processing your data and our lawful basis

The UK GDPR requires us to have a legal basis for collecting and using your personal data. When we collect and use your personal data, we make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Process / Purpose
What personal data we use
Legal Basis

To better understand how our customers drive so we can develop more accurate pricing in our insurance products

Marshmallow Go Data

Legitimate interest - it is in our legitimate interest to develop and improve our services and products for your benefit

4. Who we share your personal data with– how harshly you brake or accelerate
– how smoothly you corner
– how often you exceed the speed limit and by how much
– how often you use your phone while driving
– the environments you drive in
– the times of you day you drive

– how harshly you brake or accelerate
– how smoothly you corner
– how often you exceed the speed limit and by how much
– how often you use your phone while driving
– the environments you drive in
– the times of you day you drive
a. Disclosures within the Marshmallow Group 

– how harshly you brake or accelerate
– how smoothly you corner
– how often you exceed the speed limit and by how much
– how often you use your phone while driving
– the environments you drive in
– the times of you day you drive
In order to provide our services, your personal data is shared with other companies in the Marshmallow Group. Your personal data may be shared for our general business administration, efficiency and accuracy purposes, for the prevention and detection of fraud, and also when we make changes to our group company structure. 

– how harshly you brake or accelerate
– how smoothly you corner
– how often you exceed the speed limit and by how much
– how often you use your phone while driving
– the environments you drive in
– the times of you day you drive
b. Disclosures to third parties

– how harshly you brake or accelerate
– how smoothly you corner
– how often you exceed the speed limit and by how much
– how often you use your phone while driving
– the environments you drive in
– the times of you day you drive
We may also disclose your personal data to the below third parties for the purposes described in this notice:

The third party
What we share with them
Why we share it

Sentiance

Marshmallow Go Data

To provide you with your Marshmallow Go policy

5. International transfers

Sharing your personal data both between the Marshmallow Group and to third parties may involve transferring your personal data to countries outside the EU and UK. To ensure that your personal data receives an adequate level of protection, we have put in place contractual obligations by using standard clauses issued by the UK Information Commissioner's Office (or other relevant body) to ensure that your personal data is treated by those third parties in a way that is consistent with and respects UK, EU and local data protection laws. Please contact us at dpo@marshmallow.co for more information on the protections that we put in place.

6. Presence of automated decision making

Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. We do not use Marshmallow Go Data to make any automated decisions.

7. How long we keep your personal data

We will only hold your personal data for as long as necessary to administer your policy, manage our business or in order to comply with legal or regulatory requirements. This will be in line with our data retention policy.

Please see our main privacy notice for more information on how long we keep your personal data for.

8. Your rights under data protection legislation

Please see our main privacy notice for more information on how to exercise your rights. 

Please note that your Marshmallow Go policy requires you to opt-in to sharing your Marshmallow Go Data for at least 4 weeks. Please refer to your policy documents for more information about opting-out of sharing Marshmallow Go Data with us.

9. Where we store your data

We use cloud storage solutions within the UK and EU to store your personal data. In some situations, we may store your data in similar technologies outside of the UK or EU. In these cases, we will ensure that your personal data is stored in a way that is consistent with and which respects UK, EU and local laws on data protection.

10. Our contact details and how to make a complaint

If you have any concerns about this Privacy Notice  or how we process your personal data, please email us at dpo@marshmallow.co and we will work with you to resolve the issue.

If you are still unhappy and would like to progress your complaint further, you have the right to make a complaint to the Information Commissioner’s Office (www.ico.org.uk).

11. Changes to this notice 

We keep this Notice under regular review. Any material changes to this Notice will be sent to you by email.

Last updated: 22 May 2025