Privacy Notice – My Health Protected Ltd
Protecting Your Data While Helping You Find the Right Health Insurance
Protecting Your Data While Helping You Find the Right Health Insurance
At My Health Protected Ltd, your privacy matters. We are committed to protecting your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Financial Conduct Authority (FCA) Consumer Duty.
This Privacy Notice explains how we collect, store, use, and share your personal data when you use our services to find and manage private health insurance policies. It also outlines your legal rights and how to exercise them.
My Health Protected Ltd is an FCA-authorised and regulated health insurance broker offering independent advice to individuals, families, and businesses across the UK.
Registered Office: 79a High Street, Wimbledon, London, SW19 5EG
Phone: 0203 859 1822
Email: info@myhealthprotected.co.uk
Website: www.myhealthprotected.co.uk
FCA Firm Reference Number: 785132
We help you compare health insurance quotes, find suitable insurance cover, and manage your policy throughout the year.
We believe in transparency, fairness, and delivering good outcomes. Whether you're seeking comprehensive medical insurance, mental health support, or family health insurance, your personal data is handled securely and ethically.
We design our services to meet your needs and provide full visibility over how your information is used.
When providing a health insurance quote or managing your insurance policy, we may collect the following information:
Full name and contact details (email, phone, address)
Date of birth and age
Employment and income details
Information about family members (for joint or family policies)
Medical history and health information, including mental health
Details of your existing or previous health insurance plans
Payment or financial data (e.g. card details, premium records)
IP address and device/browser data when using our website
Communications (phone calls, emails, online messages)
We only collect what is necessary to provide an appropriate health insurance plan tailored to your circumstances.
We collect personal data in several ways:
Directly from you when you complete a form, request a quote, or contact us
Through your use of our website or digital tools
From insurers, medical professionals, or other parties where this is necessary and lawful
Via cookies and analytics tools used to improve our website performance
Google Analytics measurement starts when you visit unless you have previously opted out. Choose “Options” in the cookie banner, switch “Google Analytics” off and select “Save choices” to stop further Google Analytics tracking. You can also reopen Cookie settings in the footer at any time. Your choice is remembered in this browser. Google Ads storage and personalisation remain off until you select “Accept all”, or enable “Google Ads” in Options and select “Save choices”. Opting out does not remove information already collected.
In addition to the information you provide to us directly, we may obtain personal data about you from carefully selected third-party sources where this is lawful.
These sources may include:
Data providers and marketing partners
Publicly available sources, such as Companies House or the open electoral register, where applicable
Partner organisations where you have engaged with their services
Insurers, introducers, or administrators involved in arranging or servicing your policy
We only work with third parties who can demonstrate that personal data has been collected and shared in compliance with applicable data protection laws, including the UK GDPR.
The categories of personal data we may receive from third parties include:
Title
First name and surname
Postal address
Telephone number (landline and/or mobile)
Email address
Basic policy or enquiry information relevant to the services you have requested
If we obtain your personal data from a source other than you, UK GDPR transparency rules require us to tell you both the source of the data and the categories of personal data obtained.
We use your personal data lawfully, based on one or more of the following:
To perform a contract, for example to arrange, manage, or renew your insurance cover
To comply with legal obligations, for example anti-money laundering checks or regulatory record-keeping
For our legitimate interests, for example improving services, fraud prevention, internal training, and contacting individuals about relevant insurance services where permitted by law
With your consent, for example marketing communications or where special category data requires explicit consent
Where necessary for reasons of substantial public interest or to respond to regulators or authorities, where applicable
We process health information where necessary to advise on, arrange or administer your insurance. Alongside the applicable lawful basis for processing personal data, we rely on the substantial public interest condition for insurance purposes where its legal requirements are met. Where explicit consent is required, we will ask for it separately.
Your data is used to:
Compare and arrange suitable health insurance policies
Provide advice on your insurance options and explain policy features
Support claims handling and policy amendments
Carry out customer service and respond to your enquiries
Send you relevant offers, news, or renewal reminders where lawful
Improve our website and services
Comply with the rules set by the FCA and other authorities
We do not use your data for purposes that are incompatible with these purposes.
We only keep your data for as long as necessary. Factors that determine this include:
The duration of your insurance policy
Claims handling or renewal requirements
FCA, HMRC, or other legal and regulatory obligations
Internal audits, complaint handling, or reporting needs
Once your data is no longer needed, we delete or anonymise it securely.
We use appropriate technical and organisational safeguards, including:
Encryption during storage and transfer
Access controls for sensitive health or payment data
Cybersecurity tools to monitor for unauthorised access
Your information is stored on secure systems and trusted service platforms.
We maintain appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse, disclosure, alteration and destruction.
Although we take security seriously, no internet transmission, website, software platform or electronic communication method can be guaranteed to be completely secure.
Any information submitted through our website is transmitted at the user's own risk, although we employ appropriate safeguards to reduce that risk.
In the event of a personal data breach, we will investigate and respond in accordance with UK GDPR requirements and will notify affected individuals and the Information Commissioner's Office where legally required.
Whilst we aim to keep our website available and up to date, we do not guarantee uninterrupted access and reserve the right to suspend, amend or withdraw content without notice.
Information provided on this website is for general information purposes only and does not constitute regulated financial advice or a personal recommendation. Recommendations can only be provided following an assessment of an individual's circumstances.
Your adviser assesses your needs and makes your insurance recommendation. We use AI tools to help transcribe calls, extract information from policy documents and put our adviser's assessment and recommendation into clear written documents. AI also assists with internal checks of our advice records. Our advisers remain responsible for the advice and for checking documents before they are sent to you.
When we transcribe a recorded call, we send the original audio to AssemblyAI. The recording may contain names, health information, contact details and any other information discussed during the call. Redaction of the resulting text does not remove information from the original audio supplied to the transcription service.
AssemblyAI is configured to redact identifying details from the transcript. Our system applies an additional redaction check before storing newly processed transcripts. These controls are designed to remove dates of birth, home addresses and postcodes, phone numbers, email addresses, bank account and sort-code details, payment-card details and identification numbers. Detected values are replaced with redaction labels.
Your name, the names of family members covered by your policy, and relevant health information remain in the transcript so that our records distinguish the people and circumstances involved. Redacted transcripts therefore remain personal information; they are not anonymous.
We use the Anthropic Claude API to help extract policy information and turn our adviser's assessment and recommendation into draft suitability reports, quote summaries and other client documents. The information used may include transcripts, adviser notes, policy details, names and relevant health information.
Our document-processing system extracts text from supported PDFs on our own systems, using optical character recognition for scanned pages where needed. It applies redaction before sending text to the AI service, rather than sending the original PDF. Documents that cannot be prepared for this process are rejected. An additional redaction check is applied to text before it is sent for AI processing.
Automated redaction reduces the information shared but cannot guarantee that every sensitive detail will be detected, particularly where speech or scanned text is unclear. We check and improve these controls when problems are identified. Redacting a transcript or extracted text does not delete the original recording, uploaded document or information held in other authorised records. Older records may require a separate redaction review.
AI helps prepare the wording; it does not replace your adviser's assessment or decide which policy we recommend. Draft documents must be checked by an adviser before being issued. We use account authentication, access permissions and audit records to support oversight of this processing.
The sections on legal basis, data sharing and international transfers, retention and your rights also apply to this information. If you have questions or wish to object to the use of your information for AI-assisted processing, contact info@myhealthprotected.co.uk. We will consider your request and explain the options available and any records we still need to keep.
You have the right to:
Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion where appropriate
Restrict or object to certain types of processing
Withdraw consent at any time where processing relies on consent
Request portability of certain data
Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of your rights, please contact us at info@myhealthprotected.co.uk.
If you are unhappy with how we handle your personal data, we would appreciate the chance to address your concerns first. Please contact us at info@myhealthprotected.co.uk or on 0203 859 1822.
You also have the right to lodge a complaint with the Information Commissioner's Office:
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
We may use profiling or automation to:
Assess your eligibility for certain insurance products
Provide tailored insurance quotes
Suggest relevant products or services
These processes are reviewed for fairness, transparency, and accuracy.
We may send you relevant content about:
New insurance products
Policy updates or changes
Health-related promotions or discounts
You can update your marketing preferences at any time by:
Clicking “unsubscribe” in our emails
Emailing info@myhealthprotected.co.uk
Calling 0203 859 1822
We respect your choices and do not send unsolicited marketing in breach of the law.
If you are in a vulnerable situation, for example due to health, age, language, or life circumstances, please let us know. We are trained to provide extra support and tailor our communication to suit your needs.
If you have any questions about how we use your personal data or wish to exercise your rights, contact:
My Health Protected Ltd
79a High Street, Wimbledon, London, SW19 5EG
We regularly review and update this Privacy Notice to reflect changes in the law, best practice, or business operations. Please revisit this page for the latest version.