Last updated: October 2026

This Privacy Notice explains how we collect, use, store and protect your personal information when we advise on and arrange private medical insurance and related protection cover (such as life insurance and critical illness cover). We handle your data fairly, lawfully and transparently, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the rules of the Financial Conduct Authority (FCA).

In this notice

1. Who we are
2. The personal information we collect
3. How we collect your information
4. Why we use your information
5. Who we share your information with
6. International transfers
7. Automated decisions and profiling
8. How we protect your information
9. How long we keep your information
10. Your rights
11. How to complain
12. Changes to this notice

1. Who we are

Parkway Mortgages Ltd, trading as Insure My Health (company number 6748364, FCA firm reference number 496104), is an Appointed Representative of The Right Mortgage Ltd, which is authorised and regulated by the Financial Conduct Authority.

We are the data controller for the personal information you give us. Because we are an Appointed Representative, The Right Mortgage Ltd oversees our regulated activities and may also be a data controller of your information for that purpose. You can read their privacy notice on their website.

Registered office: 78 Castle Lane West, Bournemouth, Dorset, BH9 3JU
Trading address: 8 Dudley Road, Bournemouth, BH10 6BS
Privacy and data protection queries: [email protected]
ICO registration number: ZA098523

2. The personal information we collect

We only collect information we need to give you regulated insurance advice and to look after your cover. Depending on what you ask us to do, that may include:

Personal and contact details

• Name, address and date of birth
• Email address and phone number
• Occupation and employer, where relevant to your cover
• Identity documents and proof of address, for our identity and anti-money-laundering checks

Health and medical information

• Relevant medical history and current conditions
• Lifestyle information that insurers ask about

This is “special category” data, so it gets extra care. We use it only for insurance advice, underwriting and managing your policy.

Information about other people

• If you are arranging cover for a partner, children or other family members, we will need their details too. Please make sure they know you are sharing them with us and where they can find this notice.
• For business clients, we may receive details of employees or directors who are to be covered.

Policy and communication records

• Details of your existing and previous cover, renewal dates and claims history
• Records of our conversations, such as emails, messages and notes of calls
• Your marketing preferences

Technical and website information

• IP address and browser type
• Cookies and similar tracking data (see our Cookie Policy for full details)

3. How we collect your information

From you

Most of what we hold comes directly from you when you:

• Ask for a quote or advice
• Complete a fact-find, form or assessment
• Get in touch by phone, email, post or through our website

From other people and organisations

With your knowledge or agreement, we may also receive information from:

• Insurers, to support applications, underwriting, renewals and servicing
• Your employer or business, if we arrange or manage a company scheme
• Someone arranging cover with you or for you, such as a partner or family member
• People who introduce you to us, such as professional contacts or networking partners
• Identity verification providers, for anti-money-laundering checks

4. Why we use your information

Data protection law says we must have a valid reason, called a “lawful basis”, for using your information. These are ours:

Health information

Health information needs an extra legal condition on top of those above. We will ask for your explicit consent before we use it, and in some situations we may rely on the “insurance purposes” condition in the Data Protection Act 2018. If you give consent you can withdraw it at any time, although we may then be unable to continue advising on or arranging your cover.

We do not use your data for unrelated marketing without your consent.

5. Who we share your information with

We only share what is needed, and only with:

Insurers and product providers

• The insurance companies we approach or arrange cover with on your behalf. We will tell you which ones during the advice process.

Our principal firm

• The Right Mortgage Ltd, which supervises our regulated activities and may review client files as part of its compliance monitoring.

Regulators and authorities

• The Financial Conduct Authority (FCA)
• The Information Commissioner’s Office (ICO)
• The National Crime Agency (NCA) and other law-enforcement bodies, where the law requires it

Technology and service providers

• Customer relationship management (CRM) and email systems
• Product comparison and sourcing tools
• Secure cloud storage providers
• Identity and anti-money-laundering check providers
• Website, analytics and email marketing providers

Professional advisers

• Compliance consultants, auditors, accountants and legal advisers, where needed to run our business or deal with a complaint or claim

We may also share information with someone else you ask us to, such as your accountant or a family member, but only with your agreement.

We never sell your data to third parties.

6. International transfers

Some of our technology providers may store or process data outside the UK. When that happens, we make sure it is properly protected by using one or more of the following:

• UK adequacy regulations, which recognise certain countries as offering an equivalent level of protection
• The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses
• Additional technical and organisational safeguards where needed

We only work with reputable providers who meet UK GDPR standards.

7. Automated decisions and profiling

We do not make decisions about you using solely automated processes.

We use comparison and sourcing tools to help identify suitable products, but every recommendation is reviewed and approved by a qualified adviser. Insurers may use their own automated systems when assessing applications and pricing cover. They will explain how in their own privacy notices.

8. How we protect your information

We keep your information secure using:

• Encrypted systems and secure cloud storage
• Access controls, so only the people who need to see your information can
• Secure CRM platforms
• Industry-standard cybersecurity measures

We take sensible steps to protect your data from loss, misuse and unauthorised access. If a data breach ever puts your rights at risk, we will tell you and the ICO as the law requires.

9. How long we keep your information

We keep your data only as long as we need it for the reasons above, and to meet our legal and regulatory duties. In practice:

After that, your information is securely and permanently deleted.

10. Your rights

Under UK GDPR you have the right to:

• Access: ask for a copy of the personal data we hold about you
• Rectification: have inaccurate or incomplete data corrected
• Erasure: ask us to delete your data in certain circumstances
• Restriction: ask us to limit how we use your data
• Objection: object to certain types of processing, including direct marketing
• Portability: ask for your data in a format you can pass to someone else
• Withdraw consent: where we rely on your consent, you can take it back at any time
• Human involvement: ask for a person to review any significant decision made solely by automated means

To use any of these rights, email [email protected] There is no charge. We may need to check your identity first, and we will respond within one month. If your request is particularly complex, we may need up to two further months, and we will tell you if so.

Some rights have exceptions. For example, we may not be able to delete records that we are legally required to keep.

11. How to complain

If you are unhappy with how we have used your personal information, please tell us first at [email protected] We will acknowledge your complaint within 30 days (usually much sooner), look into it without undue delay, and let you know the outcome.

If you are still not happy, you can complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: ico.org.uk

This section is about how we handle your data. If your complaint is about our advice or service, get in touch and we will explain how our complaints procedure works, including your right to refer the matter to the Financial Ombudsman Service.

12. Changes to this notice

We review this notice regularly and will update it if the law or the way we work changes. The latest version is always on this page, with the date at the top.