The privacy and security of your personal information are important to us and we will ensure that we keep your data safe and private.

Below we explain who we are, how we collect, use, and share information about you, along with the rights that you have with respect to that information.

Who we are

GG Insurance Services is a division of General & Medical Finance Limited (‘G&M’, ‘we’, ‘us’, ‘our’), which is part of the General & Medical Group of companies.

General & Medical Finance Ltd is a private limited company incorporated in England and Wales with the company registered number 2421641.

We are registered as a data controller with the Information Commissioner’s Office.

We are registered with the Financial Conduct Authority, registration number 579509.

How we collect your personal information

We will collect your personal information, which is based on the information you provide to us when you use any of the following services:

• When you generate a quote or apply for our products and services via our website
• When you provide your details during telephone calls, which may be recorded for training and monitoring purposes, via live online chat, via email, or via any other appropriate channel of communication
• When you make a claim on your insurance policy
• When you participate in competitions and campaigns via our social media
• Feedback forms and surveys

We also may collect your personal information from third parties, such as:
• Companies or individuals that introduce you to us, e.g. your broker or employer
• Medical professionals and hospitals
• Credit reference agencies
• Your family members

Information We Collect

Where we are a data controller of your personal data we may collect the following information about you:

• Basic personal data such as, but not limited to, your name, email address, postal address, telephone number, date of birth, gender
• Financial information such as bank details
• Information relevant to your insurance policy such as your previous policies and claims, information about your employment and lifestyle
• IP address

We may require copies of the following documents:

• Identification
• Company name
• Company registration number
• Company Regulatory license
• Incorporation certificate
• Business insurance certificates

We may also collect sensitive personal data about you such as details about your health. For example, we may need your health records for the purpose of providing you with insurance cover or processing claims.

Where this is required, we will only collect it with your full explicit consent. The consent may be withdrawn at any time, but this may mean that we will be unable to provide certain products and services and/or process claims.

Cookies

These are small text files sent by a web server to a web browser in order that the web server may identify a computer to the webserver. Nearly all websites use cookies for the very least to track traffic flows on the website.

When you visit any General and Medical website we may leave a cookie on your computer in order that your computer will be recognised by our web server. The cookie does not collect personal information it only collects information about what pages you have visited and for how long if you are not a registered user (in these instances we cannot identify the individual user). If you are a registered user it enables us to simplify the ‘logging on’ process. To find out more, please read our Cookie Policy.

Personal information about others

We may collect information about other members of your household or family, for example, family members who may be included on a health insurance policy. If you give us information about another person it is your responsibility to ensure and confirm that:

• You have told the individual who we are and how we use personal information, as set out in this Privacy Policy;
and
• You have permission from the individual to provide that personal information (including any sensitive personal
data) to us and for us to process it, as set out in this Privacy Policy

How We Use Information

We use your personal information to provide you with an insurance policy and all related services.

We process your personal data to comply with our legal and regulatory obligations.

We may use your personal data to keep you informed about relevant products and services where you have expressed interest in them and only where we have appropriate legitimate interests.

Sharing Information

We may share your personal information and certain information about your cover with us within the General & Medical group and the following organisations:

• Insurance underwriters
• Your broker or agent if you have appointed an insurance broker or financial adviser (although no medical information will be provided without your consent)
• Your employer if you are a member under your employer’s group scheme
• Third parties who provide services covered under your insurance policy such as the provider of the GP advice line
• Healthcare professionals, hospitals, clinics and other healthcare providers which provide your treatment
• Other third parties who assist us in the administration of your cover or any associated products or services such as IT providers, marketing agencies
• To your family member or a relative or any third party that you have nominated to speak to us on your behalf (we will only do this if we get your consent first)
• Credit reference agencies
• Regulators and authorities such as the Financial Conduct Authority, Information Commissioner’s Office, Financial Ombudsman Service, Guernsey Financial Services Commission and The Channel Islands Financial Ombudsman
• Fraud prevention agencies
• Law enforcement agencies

We may transfer your personal data outside of the EEA. If we do so, we will ensure that your personal information is protected in the same way as within the EEA and in accordance with this Privacy Policy.

Marketing

We may use your personal information to contact you to keep you informed about our products, services, and offers that may be relevant to you. This is called Marketing communications.

We decide what might be relevant to you based on what information you have requested from us previously, for example, an insurance quote.

We will only use your personal information for marketing purposes if we have either your consent or a legitimate interest to both you and us. If you do not wish to be contacted for marketing purposes, you are given an option to opt-out in every marketing communication sent to you.

You can also contact our Data Protection Officer by phone, email, or post.

Your Rights

You may request access to a copy of your personal data we hold about you by making a Subject Access Request.

You may request to correct any inaccurate data we hold about you, providing it can be proved to be inaccurate.

You have the right to request access to and rectification or erasure of your personal data or restriction of processing your personal data or to object to processing. However, we reserve the right to reject this request, if there is a legal or regulatory reason for us to keep or process your data.

If you have a complaint, please contact us and we will do everything we can to resolve it. If you are not satisfied with our response, you also have the right to send your complaint to the Information Commissioner’s Office (ICO). Find out more how to report a concern at https://ico.org.uk/concerns/

If you have any questions or concerns about how we collect and use your data please contact our Data Protection Officer on 01733 233200 or compliance@generalandmedical.com

How long we keep records for

We will only keep your personal data for as long as necessary to fulfil our contractual obligation and in order to comply with our legal and regulatory obligations.

Privacy Policy Changes

We may change our Privacy Policy from time to time. We encourage you to frequently check this page for any changes to its Privacy Policy. If we make any significant changes, we will make it clear on our website (such as adding a statement to our website) or by contacting you directly via email or via your online secure area.

How to contact us

For any questions or concerns relating to our Privacy Policy or our data protection practices, or to make a Subject Access Request, please contact us at:

Data Protection Officer,
General & Medical Finance Ltd,
General & Medical House,
Napier Place,
Peterborough,
PE2 6XN,
UK

Alternatively, please send us an email to compliance@generalandmedical.com