Privacy policy - Data protection

The privacy and security of your personal information is very important to us. We want to assure you that your information will be properly managed and protected whilst in our hands.

This policy sets out how Healthsaver Ltd, trading as Eduhealth (referred to as “Healthsaver”, “we”, “us” and “our”), protects any information that you provide when you use eduhealth.co.uk, call us, write to us or email us. Here you can read further information about how we use your data and by using us you are agreeing to the terms set out, and consenting to the use of data described, in this policy.

Healthsaver Ltd is registered with the Information Commissioners Office, registration number Z6578831. Healthsaver Ltd (and it’s trading styles) are registered in England and Wales, Number 4362938. Registered office: 10 Sea King Drive, Fountain Court, Auckley, Doncaster, England, DN9 3QR

1.  Information we collect

We may receive personal information about you, when you contact Healthsaver Ltd for example by doing any of the following:

• Requesting or obtaining a quote
• Attending a Teacher’s Retirement Agency Seminar
• Speaking to a Financial Advisor
• Attending an In-school Seminar
• Purchasing a product from us or from one of our partners
• Using the Website
• Telephoning, texting, writing by post or email, to Healthsaver Ltd or one of our trading styles

2. Personal Information

In providing you with our services, Healthsaver Ltd or one of our trading styles may handle the personal data held about you for the purposes of arranging insurance, handling claims and any other related purposes, for offering renewal, research or statistical purposes, to safeguard against fraud and money laundering, to meet general legal or regulatory obligations and to provide you with information, products or services that you may request.

3. Confidential and Medical information

The confidentiality of your personal information is of paramount concern to Healthsaver Ltd or one of our trading styles and we comply with UK data protection law and all the applicable medical confidentiality guidelines issued by professional bodies such as the General Medical Council and the Nursing and Midwifery Council.

You understand that we may also need to obtain and use sensitive information (such as health information) in carrying out these tasks, and without this information a policy or claim may not be able to be processed.

Your confidential medical information will only be disclosed to those involved with your treatment or care, or in accordance with UK law and guidelines from professional bodies, or for the purposes of clinical audit (unless you object). If you receive services from Healthsaver Ltd or one of our trading styles and that service transfers to a new provider, we may share your personal and confidential medical information with the new provider.

This information may include:

• Basic personal details such as your name, address, e-mail address, telephone number, date of birth or age, gender, marital status
• Additional information about your lifestyle and insurance requirements such as your health.
• Information about your other policies, such as claims history, quotes history, payment history, claims data
• Sensitive personal information such as health information (for example alcohol consumed, recreational drug use, tobacco use, current state of health, existing conditions, family or personal history in relation to some conditions) or disclosures about previous unspent criminal convictions. We will always be clear to explain when and why we need this information and the purposes for which we will use it
• Information about your employment
• Your marketing preferences

4. Use of your information

Any information about you as an individual which we collect from the Website will be used in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws.

We use your personal information to provide you with our services, and to improve and extend our services. This may include:

• responding to your queries, including providing quotes
• supporting your medical treatment or care and other benefits
• internal record keeping and administration
• responding to requests where we have a legal or regulatory obligation to do so
• checking the accuracy of information about you
• assessing any concerns or complaints you raise, so that these can be properly investigated and passed on to the relevant team within
• using your contact information to send you service-related information
• using your contact information to send promotional material about new products, special offers or other information we think you may find interesting

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, in which event we will take steps to ensure that your privacy rights continue to be protected.

The insurer may use and share your information with their group companies, affinity partners, brokers, agents, third party administrators, service providers, reinsurers, other insurance intermediaries, insurance reference bureaus, credit agencies, fraud detection agencies, loss adjusters, accountants, regulatory authorities, and as may be required by law. Your data may be transferred to destinations outside the European Economic Area (“EEA”), and where this occurs it will be treated securely and in accordance with the Legislation. Details of other insurers and third parties are available on request.

You have the right to ask us not to process your data for marketing purposes, to see a copy of the personal information held about you, to have your data deleted (subject to certain exemptions), to have any inaccurate or misleading data corrected or deleted, to restrict processing, to ask us to provide a copy of your data to any controller and to lodge a complaint with the local data protection authority. Your data will not be retained for longer than is necessary and will be managed in accordance with data retention policies unless we are required to retain the data for a longer period due to business, legal or regulatory requirements.

We will not sell or pass on your personal information to any other person, except a company within our group or in accordance with the above paragraph, or if we are required or permitted to do so by law.

5. Keeping information

We will only keep your personal information for as long as is necessary and in accordance with UK law, this can vary dependant on the below circumstances:-

• How long you have been a customer with us, the types of products or services you have with us, and when you will stop being our customer.
• How long it is reasonable to keep records to show we have met the obligations we have to you and by law.
• Any time limits for making a claim.
• Any periods for keeping information which are set by law or recommended by regulators, professional bodies or associations.
• Any relevant proceedings that apply.

6. Keeping you informed

Healthsaver Ltd and its trading styles would like to keep you informed of our products and services that we consider may be of interest to you (via mail, email, phone or SMS). We may use your personal information to:

• decide which services we think are relevant to you
• contact you with details of our products and services, including displaying interest-based adverts

If you do not wish to receive marketing information about our products and services, or at any time you change your mind about receiving these messages, please contact our data protection officer on the details shown below.

7. Your rights – GDPR – access request

You have the right to access your information and to ask us to correct any mistakes and delete and restrict the use of your information. You also have the right to object to us using your information, to ask us to transfer information you have provided, to withdraw permission you have given us to use your information and to For more information, see below.

You have the following rights (certain exceptions apply).

• Right of access: you have the right to make a request for details of your personal information and a copy of that personal information.
• Right to rectification: you have the right to have inaccurate information about you corrected or removed.
• Right to erasure ('right to be forgotten'): you have the right to have certain personal information about you deleted from our records.
• Right to restriction of processing: you have the right to ask us to use your personal information for restricted purposes only.
• Right to object: you have the right to object to us processing (including profiling) your personal information in cases where our processing is based on a task carried out in the public interest or where we have let you know it is necessary to process your information for our or a third party’s legitimate interests. You can object to us using your information for direct marketing and profiling purposes in relation to direct marketing.
• Right to data portability: you have the right to ask us to transfer the personal information you have given us to you or to someone else in a format that can be read by computer.
• Right to withdraw consent: you have the right to withdraw any permission you have given us to handle your personal information. If you withdraw your permission, this will not affect the lawfulness of how we used your personal information before you withdrew permission, and we will let you know if we will no longer be able to provide you with your chosen product or service.
• Right in relation to automated decisions: you have the right not to have a decision which produces legal effects which concern you or which have a significant effect on you based only on automated processing, unless this is necessary for entering into a contract with you, it is authorised by law or you have given your permission for this. We will let you know if we make automated decisions, our legal reasons for doing this and the rights you have.

Please note: Other than your right to object to us using your information for direct marketing (and profiling for the purposes of direct marketing), your rights are not absolute. This means they do not always apply in all cases, and we will let you know in our correspondence with you how we will be able to meet your request relating to your rights.

To make your request, Please email enquiries@eduhealth.co.uk and set the subject to right of access request –  and detail your full name.

If you make a request, we will ask you to confirm your identity if we need to, and to provide information that helps us to understand your request better. We have 21 days to respond to requests relating to automated decisions. For all other requests we have one month from receiving your request to tell you what action we have taken.

If we do not meet your request, we will explain why. In order to exercise your rights, please contact us at enquiries@eduhealth.co.uk

8. Accessing information

If you have any data protection queries, please contact our data protection officer Ian Whiting:

Email:  enquiries@eduhealth.co.uk

Write: 10 Sea King Drive, Fountain Court, Auckley, Doncaster DN9 3QR

You should also contact our data protection officer to request a copy of the personal information we hold about you and to ask us to correct or remove (where justified) any inaccurate information. Under GDPR, Healthsaver can only charge fees for data access if the subject's request is repetitive, excessive, or unfounded. We may also ask you to provide additional documentation to confirm your identity or, if you are seeking to access personal information of another individual, proof of their consent or your legal right to receive their personal information.

9. Updating this Privacy Notice

We review and update this notice regularly.