Privacy Policy
Andrew Bough & Associates Ltd
Your Privacy Matters
We respect your privacy and are committed to protecting the information you provide to us. This policy explains what information we may collect, why we need it and how we use and protect it.
When you ask us for a Private Medical Insurance quotation, we need some information about you and your requirements so that we can understand what type of cover may be suitable and provide you with appropriate advice.
Who we are
About Us Andrew Bough & Associates Ltd is an FCA-authorised and regulated health insurance broker offering independent advice to individuals, families and businesses across the UK. --------------------------------------------- Company Details Registered Office: 50 Princes Street, Ipswich, Suffolk, IP1 1RJ Phone: 01473 356100 Email: info@andrewbough.uk Website: www.andrewbough.uk FCA Firm Reference Number: 586834 --------------------------------------------- Our Commitment We believe in transparency, fairness, and delivering good outcomes. Whether you're seeking comprehensive medical insurance, mental health support, or family health insurance, your personal data is handled securely and ethically. We design our services to meet your needs and provide full visibility over how your information is used. --------------------------------------------- Andrew Bough & Associates Ltd has been successfully meeting the Health Insurance needs of our clients in the UK since the year 2000. We simply don’t believe in the “one-size-fits-all” approach. We offer impartial, independent advice and we work with you to create individualised solutions. We are here to help our clients identify their specific insurance requirements and to ensure that they always have appropriate cover with the most cost effective solution.
What information do we collect?
When providing a health insurance quote or managing your insurance policy, we may collect the following information: Full name and contact details (email, phone, address) Date of birth and age Employment and income details Information about family members (for joint or family policies) Details of your existing or previous health insurance plans Payment or financial data (e.g. card details, premium records) Communications (phone calls, emails, online messages) We only collect what is necessary to provide an appropriate health insurance plan tailored to your circumstances.
How do we collect your information?
We collect personal data in several ways: Directly from you when you complete a form, request a quote, or contact us Through your use of our website or digital tools From insurers, medical professionals, or other parties where this is necessary and lawful Via cookies and analytics tools used to improve our website performance --------------------------------------------- Information we receive from third parties In addition to the information you provide to us directly, we may obtain personal data about you from carefully selected third-party sources where this is lawful. These sources may include: Data providers and marketing partners Publicly available sources, such as Companies House or the open electoral register, where applicable Partner organisations where you have engaged with their services Insurers, introducers, or administrators involved in arranging or servicing your policy We only work with third parties who can demonstrate that personal data has been collected and shared in compliance with applicable data protection laws, including the UK GDPR. --------------------------------------------- Categories of personal data we may receive from third parties The categories of personal data we may receive from third parties include: Title First name and surname Date of birth Postal address Telephone number (landline and/or mobile) Email address Basic policy or enquiry information relevant to the services you have requested If we obtain your personal data from a source other than you, UK GDPR transparency rules require us to tell you both the source of the data and the categories of personal data obtained.
Why do we use your information?
We use your personal data lawfully, based on one or more of the following: To perform a contract, for example to arrange, manage, or renew your insurance cover To comply with legal obligations, for example anti-money laundering checks or regulatory record-keeping For our legitimate interests, for example improving services, fraud prevention, internal training, and contacting individuals about relevant insurance services where permitted by law With your consent, for example marketing communications or where special category data requires explicit consent Where necessary for reasons of substantial public interest or to respond to regulators or authorities, where applicable --------------------------------------------- Your data is used to: Compare and arrange suitable health insurance policies Provide advice on your insurance options and explain policy features Support claims handling and policy amendments Carry out customer service and respond to your enquiries Send you relevant offers, news, or renewal reminders where lawful Improve our website and services Comply with the rules set by the FCA and other authorities We do not use your data for purposes that are incompatible with these purposes.
Who might we share your information with?
We may share your personal information with: Leading health insurance providers such as Bupa, AXA Health, WPA, Aviva, Vitality, The Exeter and others Reinsurers and policy administrators Regulatory bodies including the FCA Anti-fraud and crime prevention agencies IT, web, hosting, and software service providers Our business partners where necessary to deliver your cover Legal advisers and professional consultants --------------------------------------------- Third party processors To deliver our services, your personal data may be processed on our behalf by carefully selected third-party providers, including: CRM providers Cloud storage providers Email service providers Website hosting providers Analytics providers Insurers Underwriting platforms Compliance and regulatory service providers These providers act on our instructions under written agreements and may only process your personal data where necessary to provide our services.
Important
We do not sell your personal data to third parties.
How do we protect your information?
We use appropriate technical and organisational safeguards, including: Encryption during storage and transfer Access controls for sensitive health or payment data Cyber-security tools to monitor for unauthorised access Your information is stored on secure systems and trusted service platforms.
How long do we keep your information?
We only keep your data for as long as necessary. Factors that determine this include: The duration of your insurance policy Claims handling or renewal requirements FCA, HMRC, or other legal and regulatory obligations Internal audits, complaint handling, or reporting needs Once your data is no longer needed, we delete or anonymise it securely.
Website security & data protection
We maintain appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse, disclosure, alteration and destruction. Although we take security seriously, no internet transmission, website, software platform or electronic communication method can be guaranteed to be completely secure. Any information submitted through our website is transmitted at the user's own risk, although we employ appropriate safeguards to reduce that risk. In the event of a personal data breach, we will investigate and respond in accordance with UK GDPR requirements and will notify affected individuals and the Information Commissioner's Office where legally required. --------------------------------------------- Website availability Whilst we aim to keep our website available and up to date, we do not guarantee uninterrupted access and reserve the right to suspend, amend or withdraw content without notice. --------------------------------------------- Website content Information provided on this website is for general information purposes only and does not constitute regulated financial advice or a personal recommendation. Recommendations can only be provided following an assessment of an individual's circumstances.
How we use AI responsibly
Andrew Bough & Associates Ltd sometimes uses AI-assisted tools to support our advice process, including fact extraction and the generation of suitability reports and client documents. We take the protection of your personal data seriously at every stage of this process. --------------------------------------------- AI document generation - data minimisation Where AI is used to extract facts or generate documents the system is instructed to minimise personal data further, using age bands rather than exact ages, and geographic regions rather than full addresses. No bank details, card numbers, or sensitive financial account information are present in data submitted to AI providers. --------------------------------------------- Third-party AI providers We sometimes use the Anthropic Claude API to assist with document generation. Data submitted to Anthropic consists only of redacted transcripts and minimised facts. --------------------------------------------- Audit trails & access controls All AI-assisted processing is subject to role-based access controls, session authentication, and a comprehensive audit log recording the identity, timestamp, and nature of every action taken within the system. This supports traceability in line with FCA record-keeping requirements and our obligations under UK GDPR.
Your rights
Your rights under UK GDPR You have the right to: Access the personal data we hold about you Correct inaccurate or incomplete data Request deletion where appropriate Restrict or object to certain types of processing Withdraw consent at any time where processing relies on consent Request portability of certain data Lodge a complaint with the Information Commissioner's Office (ICO) To exercise any of your rights, please contact us at info@andrewbough.uk --------------------------------------------- Your right to complain If you are unhappy with how we handle your personal data, we would appreciate the chance to address your concerns first. Please contact us at info@andrewbough.uk or on 01473 356100. You also have the right to lodge a complaint with the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: www.ico.org.uk
Contact us
If you have any questions about how we use your personal data or wish to exercise your rights, contact: Data Protection Contact Andrew Bough & Associates Ltd 50 Princes Street, Ipswich, Suffolk, IP1 2RJ 📧 info@andrewbough.uk 📞 01473 356100
Updates to this privacy notice
We review this notice regularly and update it where necessary to reflect changes in legislation, best practice or our business.
