Privacy Notice
Last updated: [date]
This notice explains what personal data we collect, why we collect it, and what we do with it. It is issued under the Personal Data Protection Act 2010.
Who we are
We are the data user in respect of the personal data described below.
- Agency: [registered name]
- Business registration number: [number]
- Address: [registered address]
- Contact for privacy matters: [email] · [phone]
What we collect
When you enquire through our website. Your name, phone number, email address where you give one, the adviser you asked for, and anything you write in the message box.
When you apply for a role. Your name, phone number, email address and whatever you tell us about yourself.
When you are a client and we handle a claim. Your name, phone number, date of birth, the hospital and doctor you attended, the medical condition treated, the amount claimed, and your own written account of how the claim went. This is sensitive personal data and we treat it accordingly.
Feedback about doctors. Where you tell us about a doctor who treated you, we record your rating and comments. These are used inside the agency to decide where we refer clients. They are opinions, and they are not published.
Why we collect it
- To answer your enquiry and arrange an appointment with an adviser.
- To advise you on cover, and to help you make and follow through a claim.
- To keep a record of the claims we have handled for you.
- To improve where we refer clients, using what other clients have told us.
- To meet our obligations as a licensed insurance intermediary.
Who we share it with
We share your personal data only where it is necessary:
- with the insurer concerned, where you ask us to place or claim on a policy;
- with our service providers, who are bound to keep it confidential and may use it only to provide that service to us; and
- where we are required to by law, a court, or a regulator.
We do not sell your personal data, and we do not share it for anyone else's marketing.
Feedback links
After a claim, your adviser may send you a private link to a feedback form. That link is unique to you, can be used once, and stops working after 30 days. Please do not forward it.
How long we keep it
We keep client records for [retention period] and then delete them. Enquiries that do not become clients are kept for [retention period].
Cookies
This website sets two cookies, both necessary for it to work: one that keeps your session while you are on the site, and one that remembers whether you are reading in English or Chinese. There is no advertising or tracking cookie, and we do not use analytics that identify you.
Keeping it safe
The system is reached over an encrypted connection and staff use individual logins. An adviser can see the personal details only of their own clients. The database is backed up daily.
Your rights
You may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or withdraw your consent to our using it. Limiting what we may hold may limit the advice we can give you.
To make any of these requests, contact us at [email] or [phone]. We will respond within 21 days.
Consent
By sending us an enquiry, or by completing a feedback form, you consent to our using your personal data as described in this notice.
Changes
We may update this notice. The version on this page is the current one, and the date at the top tells you when it last changed.