Privacy Policy

This privacy notice describes how Supplemental Benefits Exchange Agency (SBEA) its affiliates and subsidiaries (‘Brad and Mike’, ‘we’, ‘us’) may collect, handle and process personal information in relation to your access to or use of the services. This privacy notice applies to all of the services, websites and apps offered by Supplemental Benefits Exchange Agency (SBEA), (collectively, the “Services”), but excludes Services which have separate privacy notices that do not incorporate this privacy notice. Supplemental Benefits Exchange Agency (SBEA) company which provides each Service is primarily responsible for the personal information collected and held in relation to that Service. A description of Supplemental Benefits Exchange Agency’s Services available and contact details for us is available on our website Contact page

We may collect personal information about you from a variety of sources, including information we collect from you directly (e.g., when you contact us) and from other sources, described below.

Note that we may be required by law to collect certain personal information about you, or as a consequence of any contractual relationship we may have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations. We will inform you at the time your information is collected if the provision of certain personal information is compulsory and the consequences of the failure to provide such personal information. 

A. Information We Collect Directly From You
Depending on the service, website or app that you are using, the categories of information that we may collect directly from you include:
1. personal details (e.g., first name, middle name, last name, date of birth);
2. contact details (e.g., phone number, email address, postal address or mobile number);
3. government issued identification details (e.g., driver’s license number, social security and national insurance numbers, passport details);
4. health and medical details (e.g., health history, health certificates);
5. policy details (e.g., policy numbers and types);
6. bank details (e.g., payment details, account numbers and sort codes);
7. driving license details;
8. online log-in information (e.g., username, password, answers to security questions);
9. information relating to any claims;
10. other information we receive from you on applications or required questionnaires (e.g., occupation, current employer); and
11. information we collect automatically from you (e.g., click stream data, personal information and other data collected using cookies and other device identifying technologies (‘Cookies’)). 

We do collect personal information about your online activities over time and across third party websites or online services. When we see a browser set to “do not track”, signals transmitted from web browsers do not apply to our sites, and we do not alter any of our data collection and use practices upon receipt of such a signal.

B. Information We Collect From Other Sources:
The categories of information that we may collect about you from other sources are:
1. personal details (e.g., first name, middle name, last name, date of birth);
2. contact details (e.g., phone number, email address, postal address or mobile number);
3. bank details (e.g., account numbers and sort codes);
4. financial information from consumer-reporting agencies for the purpose of ascertaining credit history; and
5. policy details (e.g., policy numbers and types).
We may receive such information via other insurers, consumer-reporting agencies, our affiliated companies, or other third parties in the course of conducting our business.

C. Sensitive Personal Information
We may also collect certain information about you which is considered more sensitive under local applicable laws, such as:
1. information about your race, ethnic origin, religious views and philosophical beliefs, membership of professional or trade associations, gender identity or sexual orientation for diversity and statutory monitoring purposes where appropriate; and
2. health, biometric or disability information required to administer policies or process claims.

We do not knowingly collect online information from children under the age of 13. Our services are marketed towards adults. If we are notified that we have collected personal information, as defined by the Children’s Online Privacy Protection Act (“COPPA”), of a child under the age of 13, we will delete the information as expeditiously as possible.

We may use your personal information to:
1. provide, maintain, protect and personalize our services including our insurance
products, consulting and broking services;
2. deal with your enquiries and requests;
3. perform system administration and to report aggregate statistical information to our advertisers;
4. cooperate with regulators and law enforcement bodies;
5. contact you with marketing and offers relating to products and services offered by us (unless you have opted out of marketing, or we are otherwise prevented by law from doing so);
6. personalize the marketing messages we send you to make them more relevant and interesting and to customize and enhance your website or app experience;
7. resolve complaints, as well as handle requests for data access or correction;
8. protect your, our or others’ rights and interests; and
9. communicate with you regarding your account or changes to our policies, terms and conditions.

Some jurisdictions require a legal basis to use or process your personal information. In most cases the legal basis will be one of the following:
1. to fulfill our contractual obligations to you in connection with your policy or contract with us, for example using your contact details to reply to your requests. Failure to provide this information may prevent or delay the fulfillment of these contractual obligations;
2. in order to comply with our legal obligations, for example to keep records of the services we provide you with as required by applicable law or regulation, or to comply with any governmental, quasi-governmental or court orders or subpoenas;
3. where there is a public interest in the processing, for example where it is necessary in order to prevent and detect fraud; and
4. to meet our or a third party’s legitimate interests, for example to understand how you use our services and to enable us to derive knowledge from that to develop new services, to protect our rights or the rights of third parties, or to resolve any disputes. When we process personal information to meet our legitimate interests, we put in place robust safeguards to help ensure that your privacy is protected and that our legitimate interests are not overridden by your interests or fundamental rights and freedoms.

We may also obtain your consent to collect and use certain types of personal information, including when we are required to do so by law (for example, in certain jurisdictions where consent is always required to collect personal information, or in relation to our direct marketing activities or use of Cookies and Tracking Technologies, or when we process sensitive personal information about you). If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this privacy notice.

You may have certain rights regarding your personal information, subject to local law. These include rights in certain circumstances to:
• access your personal information;
• request proof of the authorization or previous consent given to us to perform the collection and processing of the personal information;
• rectify the information we hold about you;
• erase your personal information;
• restrict our use or disclosure of your personal information;
• object to our use or disclosure of your personal information;
• request information about the use and processing of your personal information by email
• receive your personal information in a usable electronic format and transmit it to a third party (right to data portability);
• revoke the consent given by you for the processing of your personal information; or
• lodge a complaint with your local data protection authority.

If you would like to discuss or exercise such rights, as applicable under local law, please contact us at the details below. We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate. We will contact you if we need additional information from you in order to honor your requests.

We may share your personal information with third parties for the purposes described in this privacy notice under the following circumstances:
• Service providers and business partners. We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us. For example, we may partner with other companies to process secure payments, fulfill orders, optimize our services, send newsletters and marketing emails, support email and messaging services and analyze information.
• Our group companies. We work closely with other businesses and companies that fall under Supplemental Benefits Exchange Agency (SBEA), its affiliates and subsidiaries. We may share your personal information with other Supplemental Benefits Exchange Agency, companies for marketing purposes (subject to applicable laws or regulations), internal reporting and other purposes as described in this privacy notice.
• Law enforcement agency, court, regulator, government or quasi-governmental authority or other third party. We may share your personal information with these parties where we believe this is necessary to comply with a legal or regulatory obligation, to enforce or apply any agreements between us and you, to resolve any disputes, or otherwise to protect our rights or the rights of any third party.
• Asset purchasers. We will not sell your personal information to third parties other than to the extent reasonably necessary to proceed with the consideration, negotiation, or completion of a merger, reorganization, or acquisition of our business, or a sale, liquidation, or transfer of some or all of our assets. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this privacy notice.
• Online ad technology firms. We may transfer information about you to ad technology firms so that they may recognize your devices and deliver interest-based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form These firms may collect additional information from you, such as your IP address and information about your browser or operating system; may combine information about you with information from other companies in data sharing cooperatives in which we participate; and may place or recognize their own unique cookie on your browser.

When required by applicable law, when we share personal information with corporate third parties, we will ensure that such third parties maintain a comparable level of protection of the personal information as set out in this privacy notice by using contractual or other means. To the fullest extent permitted by applicable law, we exclude all liability arising from the use of your personal information by third parties. When required by applicable law, data transfers will be logged and documented, identifying the recipient of the data, the purpose of the transmission, and the type of data that was transmitted. Where required by law to do so, we can on request confirm the name of each third party that personal information is, or will be, transferred to.

We implement technical, organizational, administrative and physical measures to help ensure a level of security appropriate to the risk to the personal information we collect, use, disclose and process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information. We evaluate these measures on a regular basis to help ensure the security of the processing. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable. We restrict access to your personal information to those who require access to such information for legitimate, relevant business purposes.

We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:
• maintain business records for analysis and/or audit purposes;
• comply with record retention requirements under the law;
• defend or bring any existing or potential legal claims; and
• deal with any complaints regarding the Services.

We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the personal information.

A. Secure Communications
Web chat sessions on our site are encrypted to encode information that you share with our operators. By contrast, be aware that e-mail messages sent in clear text over the public internet can be observed by an unintended third party. Non-encrypted Internet e-mail communications may be accessed and viewed by other internet users without your knowledge and permission while in transit to us. If you wish to keep your information private, please do not use electronic mail to communicate information to us or request information from us that you consider to be confidential and/or proprietary. If you wish, you may contact us instead via telephone at the phone number provided on our website.

B. Third-party Vendors
For certain services on our website, such as web chat or webcasts, we will ask for information about you such as your name, business, and e-mail address. In cases where we use a third-party vendor to provide online services, the vendor has agreed to keep your information confidential. For example, transcripts of live chat sessions may be archived in a database by our vendor for review by our operators.

We may provide links to other websites not owned or controlled by us that we think might be useful or of interest to you. We are not, however, responsible for the privacy practices used by other website owners or the content or accuracy contained on those other websites. Links to other websites do not constitute or imply endorsement by us of those web sites, any products or services described on those websites or any other material contained in them. We advise that you contact any third-party websites directly for their individual privacy policies.

Supplemental Benefits Exchange Agency (SBEA), company which provides each Service is primarily responsible for the personal information collected in relation to that Service. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to make a complaint to the data protection authority in your country of residence.

You may request a copy of this privacy notice from us using the contact details set out above. Where changes to this privacy notice will have a fundamental impact on the nature of our processing of your personal information or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under applicable law (e.g. to object to the processing).

We reserve the right to make changes to our Privacy Policy at any time consistent with applicable local laws. Such changes, as long as they do not have a fundamental impact on the nature of our processing of your personal information or otherwise have a substantial impact on you, will be posted on this page. We encourage you to review the Web site and the Privacy Policy in particular periodically for any updates or changes.