Privacy Policy
This Privacy Policy explains how Construction Guarantee Underwriters Limited, trading as Construction Guarantee ("CGU", "we", "us", "our"), collects, uses, shares and protects personal data in connection with our website, bond application process, client area and related services.
1. Who we are
Construction Guarantee Underwriters Limited is the data controller responsible for your personal data. CGU is a subsidiary of Optio Group Limited, following its acquisition of CGU in 2026. The acquisition did not change CGU's status as a separate legal entity; CGU remains the data controller for personal data collected via this website and in the course of its business.
Registered company name: Construction Guarantee Underwriters Limited
Company registration number: 336897
Registered address: 72 Northumberland Road, Ballsbridge, Dublin 4, Ireland.
Contact for privacy queries: dpo@optiogroup.com
2. Scope of this policy
This policy applies to personal data we collect:
Through general use of our website (technical and analytics data);
- When you submit an enquiry through our Contact Us form;
- When you apply for a bond through our Apply for a Bond process;
- When you register for, or use, our Client Area; and
- In the course of underwriting, administering or handling a claim on a bond.
It does not cover the separate use of cookies, which is addressed in our Cookie Policy.
3. Personal data we collect
3.1 Website and technical data
When you visit our website, we automatically collect limited technical information, which does not on its own identify you:
- Your IP address and internet domain;
- Browser type and operating system;
- Date and time of access;
- Pages visited and, where applicable, the referring website.
This information is used for statistical and administrative purposes, such as understanding site usage and improving website performance.
3.2 Bond applications and client area
Where you apply for a bond, contact us, or use the Client Area, we may collect additional personal data, which can include:
Name, job title and contact details (email, phone, postal address);
Company and business details relevant to the bond application;
Financial and credit information relevant to underwriting a bond;
Details relating to a claim under a bond, including correspondence and supporting documentation;
Login credentials and activity within the Client Area.
4. How we use your personal data and our legal basis
We use personal data for the following purposes, relying on the legal bases indicated:
| Purpose |
Legal basis (GDPR) |
| Assessing and underwriting bond applications |
Performance of a contract / steps prior to entering a contract (Art. 6(1)(b)) |
| Administering the Client Area and ongoing bond relationship |
Performance of a contract (Art. 6(1)(b)) |
| Handling and assessing claims |
Performance of a contract; legitimate interests in managing claims fairly (Art. 6(1)(b) and (f)) |
| Responding to enquiries via the Contact Us form |
Legitimate interests in dealing with enquiries (Art. 6(1)(f)) |
| Website analytics and administration |
Legitimate interests in maintaining and improving our website (Art. 6(1)(f)) |
| Complying with legal, regulatory and insurance obligations |
Legal obligation (Art. 6(1)(c)) |
| Fraud prevention and risk management, including group-level checks |
Legitimate interests (Art. 6(1)(f)) |
5. Who we share your data with
5.1 Optio Group — infrastructure and processing
Following CGU's acquisition by Optio Group, CGU's IT systems and data storage have been migrated onto infrastructure operated by, or on behalf of, Optio Group. Optio Group entities providing this hosting and IT infrastructure act as a data processor on CGU's behalf, under a data processing agreement that requires appropriate technical and organisational security measures. CGU remains the data controller for this data.
5.2 Underwriting capacity providers
We may share relevant data with Hiscox, our capacity provider, where necessary to place, underwrite or manage a bond.
5.3 Other recipients
- Professional advisers (legal, accountancy, audit) where necessary;
- IT and website service providers acting as processors (e.g. website development and hosting support);
- Regulators, tax and law enforcement authorities, where required by law;
- Any relevant third party in the context of a claim, dispute or legal proceedings.
We do not sell personal data to third parties.
6. International data transfers
Personal data processed via Optio Group's infrastructure is currently hosted within the European Economic Area (EEA). As such, this processing does not, at present, involve a transfer of personal data outside the EEA. If this changes — for example, if data is hosted or accessed outside the EEA in future — we will update this policy and put in place appropriate safeguards (such as the European Commission's Standard Contractual Clauses) and notify affected individuals where required.
7. Data retention
We retain personal data for as long as necessary to fulfil the purposes described in this policy, including to meet legal, regulatory, accounting or reporting requirements. Retention periods vary depending on the type of data and the nature of our relationship with you (for example, bond and claims records are typically retained for longer periods to meet insurance and limitation-period requirements).
8. Your rights
- Subject to applicable law, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data, in certain circumstances;
- Request restriction of, or object to, our processing of your data;
- Request portability of data you have provided to us;
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, please contact us using the details in Section 1. You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or at www.dataprotection.ie, or with the supervisory authority in your own EU member state.
9. Security
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including as part of the infrastructure and security arrangements now provided through Optio Group.
10. Cookies
Our website uses cookies. Details of the cookies used and how to manage your preferences are set out in our separate Cookie Policy.
11. Changes to this policy
We may update this policy from time to time, including to reflect changes in our corporate structure, systems or legal requirements. The date of the most recent update will be shown below.
Last updated: 7 October 2026
12. Contact us
If you have any questions about this policy or how we handle your personal data, please contact us at dpo@optiogroup.com