How do we use your data?
Your personal privacy is important to us and will only be used where it is necessary in the set guidelines. The following information regards how we manage the personal information that we have collected. If you have any issues, comments or concerns regarding our privacy policies or the use of your personal information then please contact us.
Your personal data
In order to use our website, we require the following personal information;
• Contact Details: First name, last name, phone number and email address
• Type of Insurance you are looking for
• Date of birth
• Your Smoking status
• Preferred Policy Start Date
• Your Postcode
Why do we hold this data?
This information is relevant for an FCA regulated intermediary advisor to complete a full health insurance quotation and will be passed directly to that advisor. We may then keep this information for our records, for legal and for regulatory purposes.
Why are we allowed to use this information?
• Consent: By providing us with this information our customers consent to us using their information
• Public interest: The use of the information is in the public interest, specifically the provision of insurance
• Legal obligations: We have legal and regulatory obligations to show that we are carrying out our business in a compliant manner
• Legitimate interest: We have a legitimate interest in carrying out our business of insurance introductions, including that we keep a record of our activities both for our client’s benefit and for our own legal and regulatory reasons.
Who do we share this information with?
The information you provide is shared with our partner insurance intermediaries and their advisers.
How long do we keep this information?
The information provided is stored for 12 months after receiving your details unless a customer has cause for concern or a customer has given consent for the data to be kept for longer. If a customer has requested for the data to be removed from our records this will be carried at as soon as possible.
Who is this information disclosed to?
In addition to the already mentioned, we may also share information with the following third parties;
• Third parties such as IT providers
• Regulatory bodies
• Insurance Intermediaries and their employees
• Legal services for advice, eg. in respect of a dispute.In the event of a claim or dispute, we will require your information in order to obtain legal advice. This may also include a court or Ombudsman.
Withdrawal of consent
You have the right to withdraw your consent for us to hold your information at any time by contacting us through email at info@whichprivatemedical.co.uk. We will stop using your information and remove it from our database as soon as possible.
Your rights
• A right of access to your information, including details about how we use it
• A right to correction of inaccurate information
• A right to be forgotten (i.e to have your information removed)
• A right to regulate our use of your information• A right to information portability
• A right to object to the processing of your information
We will comply with all of the above rights in a timely manner, no later than one month after the request has been received. For more complex requests more time may be requested to fully address the issue. There is no charge for any request, unless it is manifestly unfounded or excessive. If a request is manifestly unfounded or excessive then we will either charge our reasonable administrative costs to comply with it, or we tell you that we are not going to comply because it is manifestly unfounded or excessive.
Access to information
You may access any of the information that we hold about you as well as the reasons for holding this information, who we disclose the information to, the type of information that has been collected and the length of time in which the data will be held.
If you make a request to access your data that we hold about you, we will need to confirm your identity and then will comply and give you access to the requested data. If you wish to have access to a particular piece of information that we hold about you then you may also request this.
Right to correction
If any of the information that you have provided is incorrect then let us know as soon as possible and we will rectify it. You may also wish to supplement any information that we currently hold about you. If we have supplemented or rectified any information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.
Right to be forgotten
You have the right to ask us to erase the information that we hold about you such as in the following;
• We no longer need to keep it for the purposes for which it was collected or used
• Our only basis to process it is your consent and you withdraw that consent
• You object to our usage of your information and we do not have any overriding legitimate grounds to continue using the information
• We are using the information unlawfully
• We need to erase it to comply with our legal obligations
Unless we have a serious reason for not doing so, such as a legal dispute, then we will remove your details from our system at your request.
If we need to erase any information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.
Right to regulate processing
You have the right to ask us to regulate the use of your information such as in the following;
• You have made a request for rectification or to supplement inaccurate information. You can ask that we restrict your processing while we deal with your request.
• The use of the information is unlawful, but you ask that we restrict our use of the information rather than delete it.
• We do not need to use it anymore, but you want us to keep it in order to use it for a legal claim.
In these circumstances, we will stop using your information (although we may still store it) unless you consent to our use, we need it for legal claims, we need to use it to protect another person or where there is an important public interest in us doing so.
If we need to restrict any of your information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.
Complaints
To exercise all relevant rights, queries or complaints, please contact us at info@whichprivatemedical.co.uk to discuss the issue.
We are a registered data controller with the Information Commissioner’s Office, registration number ZA555711