SAGA GROUP DATA PROTECTION PRIVACY POLICY

INTRODUCTION

"Saga" means the Saga Group of companies and all companies within the Saga Group resident anywhere in the world.

Saga is committed to protecting your privacy. We comply with the principles of the Data Protection Act 1998 and aim to maintain consistently high levels of best practice in our processing of personal and/or sensitive personal data.

How we use information you provide us.

We use the information we receive from you to provide goods and/or services that you request, to communicate with you, and to personalise our information sent to you. We do not sell, trade, or rent your personal information to others.

Examples of how we may personalise information might include preparing an insurance quote for you, working out which departure airports are near to you or when we will be delivering certain products in your area.

Third parties may deliver some of our products to you or provide all or part of the service requested by you. In these instances, whilst the information you provide will be disclosed to them, it will only be used for the administration of the service provided (including for example claims processing), underwriting and pricing purposes as appropriate, testing, and to maintain management information for business analysis.

If you apply for the Saga Visa Card, we will search your record at a credit reference agency. If you apply for the Saga Secure ISA we will check your details with fraud prevention agencies. The precise nature of these processes is explained fully when you apply.

We ask for your home, mobile telephone number, and e-mail address to enable us to contact you in relation to an enquiry you have made, to contact you about relevant products or services, to contact you if there is a problem with your order, or there is another genuine reason for doing so. If you provide us with credit or debit card details in order to pay for a service or product, we will keep such details secure and ensure that the details are only used further with your consent and/or for the purposes of any appropriate refunds.

In respect of Saga Circles, (our free web-based service for meeting past present and future friends) certain details and information provided by you will be monitored from time to time and certain data such as messages sent by you will be retained by us for up to 12 months in accordance with the Anti-Terrorism Crime and Security Act 2001. Such details may be disclosed to the police and law enforcement agencies for the purpose of fraud detection, crime prevention and national security. We also reserve the right to move or edit messages or materials that we, in our sole discretion, deem to violate Saga Circles' Code of Conduct as set out in its terms and conditions or any applicable content guidelines, or which in any way is otherwise unacceptable.

When participating in Saga Circles' activities such as discussions or reunion requests, your contributions will often be identifiable. You will be able to see whether this is the case in the appropriate area of the website.

When you enter a contest or other promotional feature, we may ask for your name, address, telephone numbers and e-mail address so we can administer the contest and notify winners.

Occasionally, we may also use the information we collect to notify you by post, telephone, mobile telephone, e-mail and SMS about new Saga services and special offers we think you'll find valuable, or to inform you about important functionality changes to our website.

We may also use the information we collect to occasionally notify you about important functionality changes to the website.

Each time you receive marketing information or a message, you have the option to decline to receive further marketing information from us. This is known as an 'opt-out'. If you wish to exercise the opt-out, please write to the Saga Group Data Protection Officer at The Saga Building, Enbrook Park, Sandgate, Kent CT203SE. If you have more than one address or e-mail address please make sure to notify any changes to your preferences for each address or e-mail address you have registered with us.

How we protect customer information.

As required by the Data Protection Act 1998, we follow strict security procedures in the storage and disclosure of information you have given to us.

If we provide information to a third party (either a provider of a product or service, or an external data processing agency such as a mailing house) we will exercise the strictest control over the third party contractually, requiring it to:

a) Maintain the security and confidentiality of the information and restrict access to those of its own employees;

b) Use the data for the agreed purpose only and prevent it being used for any other purpose by any other party;

c) Refrain from communicating with you other then concerning the product in question.

d) Return the data to Saga at the conclusion of any contract term and destroy or delete any copies made of all or any part of the information unless copies are needed to be kept to comply with regulations;

In addition, Saga will restrict the information disclosed to the absolute minimum necessary, for example, to provide the product or service.

Our own security procedures mean that we may occasionally have to request proof of identity or check your presence on the electoral roll.

In the event of telephone calls from you, we also reserve the right to ask security questions (which we in our sole discretion deem appropriate), in order to satisfy ourselves that you are who you say you are.

Your Consent

Before you provide any data to us, we will endeavour to make it clear why we need it. Sometimes we may need sensitive personal data (examples might be past medical history or motoring convictions). When this is required we will obtain your consent first. Otherwise, by providing us with information, either orally or written, or by using our website, you consent to the collection, use and processing of this information by Saga to provide and send you information about its services.

A customer may properly give his or her spouse's consent over the telephone or via the website provided he confirms that he has permission to do so. If the consent is written, the spouse must independently endorse such consent.

Please note that Saga provides products including holidays outside the European Economic Area (EAA). Therefore if you travel on such holidays the information you provide may occasionally be transferred outside the European Economic Area for the purpose of processing by Saga and its suppliers. It is worth noting however that some non-EEA countries do not afford the same level of data security as the UK. By submitting your details, you consent to this transfer.

Subsequent to your purchase of a Saga product or service, we may enter into an arrangement for that service to be provided by a new third party. If this happens, the terms and conditions of your contract with us will provide that you consent to the transfer and processing of personal and/or sensitive personal data to the new provider, subject to the requirement of the Data Protection Act 1998 and associated regulations.

If you use Saga Circles you agree for us to put you on the site, and to display the notes you write about yourself and the Circles you join. We will not publish any direct contact details, except where you specifically confirm that you wish such information to be published.

How we use cookies

Cookies are text files, which identify your computer to our server. Saga will automatically issue your computer with a cookie whenever you register on our website, (or possibly when you browse), in order to track traffic flows and to additionally make our website easier for you to use.

Cookies themselves only record which areas of the site have been visited by the computer in question, and for how long.

You have the opportunity to set your computers to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time.

Selecting not to receive cookies can mean that certain services, such as Saga Circles or previous registration identification cannot then be provided.

It is worth noting that some of the third parties present on our Website may also issue cookies.

How to accept cookies

Netscape Communicator 6.0

On your Task Bar, click:

1. Edit, then
2. Preferences
3. Click on Privacy and Security
4. Then Cookies
5. Select Enable

Internet Explorer 6.0

1. Choose Tools, then
2. Internet Options
3. Click the Privacy tab
   Move the slider to select the level of privacy you prefer, or click on 'Advanced' for customised settings.

How to delete cookies.

You can easily delete any cookies that have been installed in the cookie folder of your browser. For example, if you are using Microsoft Windows Explorer:

1. Open 'Windows Explorer'
2. Click on the 'Search' button on the tool bar
3. Type "cookie" into the search box for 'Folders and Files'
4. Select 'My Computer' in the 'Look In' box
5. Click 'Search Now'
6. Double click on the folders that are found
7. 'Select' any cookie file
8. Hit the 'Delete' button on your keyboard

If you are not using Microsoft Windows Explorer, then you should select "cookies" in the "Help" function for information on where to find your cookie folder.

If you have any doubts or do not use any of the above systems please refer to www.allaboutcookies.org, which explains in detail how cookies work and how they can be managed.

Disclose of information to third parties.

As previously mentioned Saga does not sell, trade or rent your information and will never disclose information about you to third parties, except to fulfil your specific orders for a product or information in the event that third parties deliver the relevant service. For example, if you go on a Saga holiday, the hotel needs to know whom you are. If you take out an insurance policy provided by a third party, they will need your details in order to administer the policy and process any claims. Other circumstances where we are operationally or contractually obliged to pass on your information may be where third parties administer part or all of the service, underwriting, for pricing purposes, testing, and to maintain management information for business analysis.

Saga may of course be obliged at law to pass on your information to the Police or any other statutory authority.

DPA Mailing List Consent

This document sets out the procedure adopted by the Saga Group in relation to gaining your consent to be placed on our mailing list.

When you first make an enquiry of or buy a product from Saga, your details are placed on our mailing list and we will send you a 'qualification' questionnaire. This gives a list of all our products and gives you the option of choosing which products you would or would not like to receive information about. You can also choose not to receive any mail from us. Once you have chosen what you would like to receive we ask you to return the completed form back to Saga who then administers the mailings where applicable.

Amendment and Retention of information

Please advise us in writing as to any changes in your circumstances. Obviously it is preferable for us to retain up to date information. We will amend details as required. We are however obliged and permitted by law and regulation to retain certain types of data for a minimum period of time. The minimum period of time tends to be for six years but can be longer if the statute or regulation requires.

Subject Access Requests

You have a statutory right of access to accessible personal and/or sensitive personal data that we hold about you. In order to exercise this right, your application must be in writing for security reasons. Please write to the Data Protection Officer at The Saga Building, Enbrook Park, Sandgate, Kent CT20 3SE, United Kingdom. Please refer to the information you wish to see giving dates if possible, and enclose your cheque for £10 payable to Saga Group Limited. We will not administer Subject Access Requests by a third party unless accompanied by a written authority of the individual who is the subject of the request.

Your choice of information

You may change the type of material sent to you at any time.

We allow you to select which products you wish to receive information about, and to cancel any previous expressions of interest in particular areas. If you wish to take advantage of this please write to Information Processing at The Saga Building, Enbrook Park, Sandgate, Kent CT203SE.

Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will update all relevant documentation and post any changes onto our website so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it.

Tell us what you think

Saga welcomes your questions and comments about privacy. Please write to The Group Data Protection Officer, The Saga Building, Enbrook Park, Sandgate, Kent CT20 3SE, United Kingdom.

Saga Group Limited October 2006