Privacy Policy – Data
General Data Protection Regulations (GDPR) Privacy Notice
Health Claims Bureau Limited (HCB GROUP) provide a range of services to the Financial Services Industry and Employers and as Data Controllers or Data Processors collect, process, and store Personal Data in the UK and in Ireland.
- Data collected
The data HCB GROUP collects can include name, address, date of birth, contact details, information relating to health, employment history and related information, other personal information. - Purpose for processing of data
To provide services to Insures and Employers. - Legal Basis for processing of data
Processing is necessary in relation to a service provided to, or a contract HCB GROUP have with Insurers or Employers. - Who we share your data with
HCB GROUP shares your data where necessary, with your Insurer or Employer, and medical and related personnel. - Your personal data
HCB Group does not transfer you data outside the EEA/UK. - Period of data retention
Your data will be stored/retained by HCB Group for 6 years after which time it will be securely deleted from the HCB Group systems. - Your rights in relation to the data stored
You have the right to:- Access and receive copies of the relevant data and to have any inaccurate or incomplete information corrected and updated.
- Object to use of your personal data for our legitimate processing purposes.
- In certain circumstances, to have your information deleted or restricted.
- Have your information transferred to another provider (the right of “data portability”).
- Withdraw your consent to the processing of your data by HCB Group.
Data Access Requests and Complaints
Requests to access your data or in relation to other data queries or complaints should be made in writing to HCB GROUP Data Protection Officer (at the address below)
HCB Group, The Powerhouse, High Street, Ardington, Wantage, OX12 8PS. Tel: +44 1235 519924
Or email: enquiries@hcbgroup.co.uk – for the attention of the Data Protection Officer. You also have the right, at any time, to lodge a complaint about our processing of your data with HCB GROUP or your Data Protection Authority, in particular the UK or the EU member state where you live, where you work or where the alleged infringement took place.
Complaints can be made directly to the UK Information Commissioners Office at ico.org.uk/make a complaint
A list of EU data protection authorities is available at http://ec.europa.eu/newsroom/article29/item- detail.cfm?item_id=612080
Brexit
The UK left the EU in January 2021.
Data Transfers between the UK and the EU
In January 2021 an initial transition period was agreed by the EU whereby the EU granted equivalence to UK GDPR ( equivalence with EU GDPR) .This was termed an interim “Adequacy Decision” and it operated in relation to data transfers between the EU and the UK from January to June 2021.
In June 2021 this “adequacy decision” was confirmed and extended and will now operate for a further 4 years thus allowing the continuing flow of data between the UK and the EU bloc. However the decision can be revoked by the EU if in its view it sees a weakening of UK standards so that it feels that EU citizens data is not adequately protected.
Data Processing by HCB post Brexit
UK
HCB UK processes all UK client data in the UK and consequently Brexit has no Impact on HCB UK clients and data subjects.
Ireland
HCB processes Irish client data in the UK . Because of the adequacy decision detailed above Brexit has no impact on HCB Irish clients so long as the equivalence between EU GDPR and UK GDPR applies.
GDPR
- From January 2021 the UK maintains its UK GDPRs (which are currently aligned with EU GDPR)
- UK GDPR may be subject to change or divergence from EU GDPR after June 2021.
- HCB UK clients are subject to UK GDPR from January 2021 .
- HCB Ireland clients will continue to be subject to EU GDPR.
Reviews
HCB Group keeps its Privacy notice under regular review. This Privacy notice was last updated in October 2023 .