Short answer
The site collects personal data only when you choose to contact it, by email or through the quote enquiry form. It never asks for medical information, sets no cookies and uses no trackers. Enquiry details are used only to answer you and, if you ask for quotes, are passed to one DGSFP-registered broker.
Data controller
Jon Grocott, NIE Y4585133M, Suite 228, Avda. del Pla 135, 03730 Jávea (Alicante), Spain. Email: jon@privatehealthinsurancespain.com.
What is collected and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Emails you send (name, email address, what you write) | To reply to you or process a correction | Legitimate interest in answering messages (GDPR art. 6.1.f) | Up to 2 years, then deleted |
| Quote enquiry form (name, email, nationality, ages, area, visa route, start date, cover type, notes) | To answer your enquiry and, where you ask for quotes, introduce you to a broker | Your consent (GDPR art. 6.1.a), given with the tick box | Up to 12 months after the enquiry, then deleted |
| Server logs (IP address, page, browser, time) | Delivering and securing the site | Legitimate interest (art. 6.1.f) | As set by the hosting provider, normally a few weeks |
The site does not ask for, and you should not send, health information, diagnoses, identity documents or passport numbers.
Who receives it
- A registered broker, only if you submit the quote enquiry form and tick the consent box. The broker will be named in the reply you receive and on the commercial disclosure page. It then becomes responsible for your data under its own privacy policy.
- Hosting and email providers that process data on the site's behalf to run the website and mailbox.
Data is not sold, and it isn't used for marketing unless you separately ask for it.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time, by emailing jon@privatehealthinsurancespain.com. If you're unhappy with the answer you can complain to the Agencia Española de Protección de Datos.
Changes
This policy was last updated on 21 October 2026.