The purpose of this Privacy Policy is to explain what personal data MHG Insurance may collect, store, or process that has been provided by individuals or third parties; the ways in which we protect and secure your data; and what rights you have to access the data we store about you.
We take your privacy very seriously and are fully committed to securing and protecting your privacy in any way that we can. If, however, after reading this policy you believe that it could be improved, we would very much welcome your thoughts and feedback.
The personal data that we collect
We are a general insurance broker and offer products from a range of insurers, including the Lloyd’s market, to authorized and registered intermediaries and, when required, directly to customers.
We therefore receive personal data through completed forms submitted by email, post, or our web portal. This data is processed to apply for insurance coverage, renew coverage, or support a claim against an existing policy. The information may be provided directly by the individual or on their behalf by a third party.
The personal information that we collect about individuals may include, but is not limited to:
| Name | Height | Employer |
| Date of birth | Weight | Job title |
| Nationality | Details of other insurance policies | Date employment started |
| Correspondence address | Details of medical history | Bank details |
| Residential address | Present state of health | Credit card details |
| Country of residence | Details of medical treatment received | Date married |
| Mobile phone number | Details of planned future medical treatment | Signature |
| Other phone number | Information relating to accidents | |
| Email address | Details of medical practitioner |
The lawful basis on which we collect personal data
In most circumstances, a company will apply for insurance coverage on behalf of its employees. However, it is not uncommon for an individual to apply for insurance or make a claim against their policy. Where we engage directly with an individual, the lawful basis on which we process personal data is by way of contract. However, if the information is supplied by a third party on behalf of the individual, the lawful basis on which we process personal data is legitimate interest.
Due to the nature of our business, it is necessary from time to time to collect medical information relating to individuals, whether to support an application or a claim. We classify this information as Special Category Data for the purposes of the General Data Protection Regulation (‘GDPR’). It is supplied only with the consent of the individual concerned or for the provision of healthcare.
Other data we might collect
When you visit a website, you disclose certain information about yourself, such as your Internet Protocol (IP) address, the time of your visit, and the referring location. Like many other websites, we record this basic information about visits to our site.
Whenever you voluntarily disclose personal information online, your information may be collected and used by others. Although we try to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us. Therefore, you do so at your own risk. You are solely responsible for maintaining the confidentiality of any passwords you create and any associated account information.
Obtaining this information helps us understand how many people visit our website and which pages they visit. Because the information is collected in aggregate, personally identifiable information is not stored.
Cookies are small text files placed on your computer by the websites you visit.
They are widely used to make websites function or operate more efficiently, as well as to provide information to website owners.
The use of cookies is now standard for most websites. If you are uncomfortable with the use of cookies, you can manage and control them through your browser. This includes removing cookies by deleting them from your browser history or cache when you leave the site.
Who we might share information with
The process of obtaining and managing an insurance policy involves several parties. Therefore, there are circumstances in which it is necessary for us to share your personal data.
The parties with whom we may share your data include, but are not limited to:
- Other MHG Insurance offices;
- Wholesale brokers through whom we access certain underwriters;
- Underwriters and insurance companies;
- Medical practitioners;
- Assistance companies appointed by underwriters to provide claims services; and
- Your employer.
Whenever information is shared, particularly medical information, we ensure to the best of our ability that it is transmitted securely using measures such as encryption, passwords, or secure networks.
We do not sell the data that we collect.
How we use your information
Your information is stored within secure software that can be accessed only by authorized personnel.
We operate a paperless office and maintain a clear desk policy. However, from time to time, we may hold personal information in paper format. To prevent access by unauthorized persons, these documents are locked away when not in use. When they are no longer required, they are securely shredded and destroyed by industry professionals.
How long we retain your information
It is our intention not to retain your information for longer than necessary, particularly once our working relationship with you has ended. However, we reserve the right to retain anonymized information for statistical research purposes.
This allows our in-house analysts and third-party underwriters to use the information, together with data from other customers, to assist in calculating future insurance premiums. In these circumstances, we ensure that your information is anonymized so that you cannot be identified.
How can I access the information you hold about me?
You have the right to request the information we hold about you. If you wish to make a request, please contact us.
In your request, please describe the information you wish to access. Where possible, we will provide the requested information within one month. If we are unable to process your request, we will also respond within one month and explain why we cannot provide the information.
In the event that the information we provide is incorrect, please inform us immediately so that we can ensure the information we store about you is accurate and up to date.
It is our intention to restrict the processing of incorrect information until it has been corrected and to inform you once this has occurred.
How can I make a complaint about the information you hold about me?
Our lead data protection supervisory authority is the Isle of Man. Therefore, if you wish to make a complaint, please contact the Isle of Man Information Commissioner’s Office. You can find its full contact details at www.inforights.im.