Privacy Policy

We may collect the following categories of personal information:

• Identity data — full name, date of birth, nationality, passport or government ID number.
• Contact data — email address, phone number, mailing address.
• Health and insurance data — medical history, pre-existing conditions, claims information, policy details, and beneficiary information, collected solely for the purpose of administering your health insurance plan.
• Financial data — payment method details processed securely through our payment processor. We do not store full card numbers on our servers.
• Technical data — IP address, browser type, device identifiers, pages visited, and time spent on pages, collected automatically via server logs and analytics tools.
• Usage data — information about how you use our website, member portal, and services.

We use the information we collect to:

• Process and administer your international health insurance policy.
• Verify your identity and eligibility for coverage.
• Process claims, pre-authorisation requests, and payments.
• Communicate with you about your policy, renewals, and important updates.
• Respond to your enquiries and provide customer support.
• Comply with legal and regulatory obligations.
• Improve our website, products, and services through aggregated analytics.
• Detect and prevent fraud or unauthorised access.

We do not sell your personal information to third parties.

Where applicable under data protection law (including GDPR), we process your personal data on the following legal bases:

• Contract performance — processing necessary to fulfil your insurance policy.
• Legal obligation — processing required to comply with applicable laws and regulations.
• Legitimate interests — fraud prevention, network security, and service improvement.
• Consent — where you have given explicit consent, such as for marketing communications.

We may share your information with:

• Medical providers in our network, to facilitate cashless treatment and claims processing.
• Reinsurers and underwriters as required to administer your policy.
• Payment processors to handle premium payments and provider reimbursements.
• Intermediaries and brokers who referred your policy, to the extent necessary for policy administration.
• Regulatory and government authorities when required by law.
• Service providers (e.g. IT, email, analytics) who process data on our behalf under strict data processing agreements.

All third parties are required to respect the security of your data and to treat it in accordance with applicable law.

As an international health insurance provider operating in 190+ countries, your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including for the duration of your policy and for a period thereafter as required by law or legitimate business needs (typically 7 years for insurance records). Health data is retained in accordance with applicable medical records legislation.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand user behaviour. You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our site.

Types of cookies we use:

• Essential cookies — required for the website and member portal to function.
• Analytics cookies — help us understand how visitors interact with our site (e.g. page views, session duration).
• Functional cookies — remember your preferences and settings.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Restriction — request that we limit processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS/HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: