This Privacy Policy has been written to explain to you, users of our websites and clients, what data we collect, how we use it, and our adherence to both local and international regulations such as the GDPR.

The terms ‘we’, ‘our’, and ‘us’ used in this Privacy page refer to Medstar Insurance Insurance Brokers Ltd; more commonly referred to as Medstar Insurance. Find our company contact details using this link.

Medstar Insurance's stance on data collection, processing, and protection

In all things related to data collection and protection, we strive to implement and follow modern best practices. Where possible we have adopted practices that ensure we are compliant across borders. The information contained within this privacy policy meet or exceed the following generally accepted data principles:

Personal data is processed fairly and legally - We do not collect or process any data unless it is contractually required or it is necessary by our partners.

Personal data shall be obtained only for one or more specified and lawful purposes - As noted above and explained through the document, Medstar Insurance only collects and processes data when we need to.

Personal data shall be relevant - Data collected by Medstar Insurance is only what is needed, and nothing else. Any requests made by clients or otherwise are followed through immediately, or within the next business day.

Personal data shall be accurate - All data collected by Medstar Insurance is deemed to be accurate and any changes are updated as soon as physically possible.

Personal data shall be kept only for as long as it serves a purpose - All data stored by Medstar Insurance is kept only as long as needed or legally required.

Personal data shall be processed only in accordance with local and international law - All data collection, processing, and storage is done in a way that it is compliant with local requirements where we have offices and international regulations such as the GDPR.

Appropriate technical and security measures must be taken to secure personal data - Medstar Insurance employs robust IT solutions and standard operating procedures that ensure all personal data is secure and only available to those who use it.

Personal data shall only be shared as necessary - Medstar Insurance does share data, only as necessary, with other Medstar Insurance offices. Any transfer of data is done utilizing secure methods. We will also only share data with third parties as is contractually necessary or legally required. We will not sell any of this data.

How we meet these policies is explained throughout this document.

What data is being collected?

As an insurance broker, Medstar Insurance is contractually obligated to collect and retain certain personal data of both potential and existing clients. The data collected reflects what is required by insurers in order for the insurer to offer quotes, fulfill applications, underwrite, and enable coverage.

The personal data collected can include some or all of the following:

Name (first, middle, and last) - All people to be covered by an insurance plan.

Address (work, or home) - Of the primary policy holder.

Contact details (Phone number, email) - Of the primary policy holder or spouses.

Age - All people to be covered by the plan

Gender - All people to be covered by the plan

Nationality - All people to be covered by the plan

Job title - Of the primary policy holder

Family structure - If a family is applying for cover

Medical history - Personal - Of the primary policy holder

Medical history - Family - Of all people to be covered by the plan

Insurance purchase, coverage and claims history - Primary policy holder.

Lifestyle information - Of All people covered by the plan.

Details related to method of payment (including credit card and bank account information) - Of the primary policy holder as well as any spouses.

Preferences related to the purchase of insurance products and services - This applies not only to potential or current clients that we deal with directly, but also family members that they act on the behalf of.

Collection of data from businesses

The above list also applies to businesses that Medstar Insurance sells to. For businesses additional data might also be requested by the insurer. This could include:

Employee data of all types listed above

Business registration and ownership information

Business tax registration record

Employee salary record - for life/disability plans only

Collection of data from children

Medstar Insurance sells insurance cover to families. This means that a child's data may need to be collected, as is contractually required by an insurer. With all data collected for children under 18, Medstar Insurance will contact the parents or guardian of the children to first gain consent and to explain what data is being collected and why.

In situations where we are dealing with a minor (any person under the age of 18) as the primary policy holder (e.g., a student going overseas contacts us looking for insurance) we will contact the parent or guardian of the minor and ensure that consent for requested data is provided. Parents or guardians will be involved in ALL communication and any decisions made.

Who collects data at Medstar Insurance?

Officially employed Medstar Insurance staff are the only persons approved to gather, handle, maintain, and use users’ personal data. Generally this will be handled by people on our sales staff, but such data can also be handled by staff in Medstar Insurance’s renewals, claims, administration, accounting, marketing, and client support departments, or by individuals among our principals and leadership.

How is data collected by Medstar Insurance?

All data gathered by Medstar Insurance is furnished by users of their own accord as long as their explicit consent is provided (see section below). You reserve the right to question what data is collected and why. User data may be collected across various mediums. Mediums where Medstar Insurance collects data include:

Insurance quote forms on our website - Certain data such as age of those to be covered, location, nationality, name, and phone or email are required in order to develop a personalized quote and enable our Sales team to contact you should you have questions or want to apply for insurance cover.

Email - This is the primary way application data is collected. Data collected by this medium will only be collected as necessary/required/requested by an insurer or as contractually required by law.

Application forms from the insurer, or ones created by Medstar Insurance on behalf of an insurer, and other written documents - Only data listed in these forms will be collected. Data that is not necessary will not be requested.

Telephone calls and in-person verbal communication - Data that is not necessary will not be requested. Our advisors will plainly state what data they need and why it is necessary.

Text messages - This includes SMS, WeChat, WhatsApp, Facebook, and other chat/messaging apps. Data collected will only be what is necessary to furnish information requested by the client.

Smartphone applications - Data collected here will only be what is contractually necessary.

Online forms - Data collected here is for marketing purposes and will never be shared with third parties unless consent is provided by the data holder, or is legally requested by a government.

Consent to collect data

By using this website, you consent to the collection and use of your personal data as described in this document. This consent is deemed to be entirely voluntary with data only being collected when contractually necessary, as required by law, or for marketing purposes.

Where required by applicable law, we will seek your explicit consent to collect, process, and use the personal data described in this document. In all cases, data requested will only be what you freely give. You maintain the right to refuse to provide your data along with the right to request to view or delete the data we have collected from you at any time.

It is important to note however that refusal to provide data that is contractually necessary, or data that you are legally obligated to cover will result in our inability to offer you our products or services. The use of this website will also not be possible.

If you would like to change/modify your consent please follow the contact information in the What control do I have over data and how do I change my consent? section of this document.

Why does Medstar Insurance collect data?

Medstar Insurance gathers information from users for two purposes:

Contractually necessary purposes – In order to apply for an insurance policy with an insurance provider, a user will need to provide information as required by a particular insurance company’s application requirements. Any data not required by an insurer will not be requested.

Marketing purposes – Aside from information directly relevant to insurance providers and products, the only other information used by Medstar Insurance is purely for marketing purposes. This will only include contact details (email, and phone) and basic personal information (name), and will never include any type medical information.

How does Medstar Insurance use collected data?

Medstar Insurance uses data gathered from users to facilitate the sales, purchase, underwriting, payment, administration, use, and renewal of various insurance and financial products and services. We may also use personal data for marketing purposes related to the sale, purchase, underwriting, payment, administration, use, and renewal of various insurance and financial products.

In all cases, consent will be required. You can change your consent/Request to view your data that we have collected at any time by following the information in the What control do I have over data and how do I change my consent? section below

Does Medstar Insurance share data?

Any user data collected by Medstar Insurance is shared only internally within our offices, and with relevant licensed insurance companies, insurance agents, third party administrators, and third party service providers, as it directly applies to the wishes of the user. Any personal data regarding a particular user is also available to them upon request. We may also share requested user information with governmental authorities as required by law and local regulations.

Medstar Insurance does not share user data with any third parties outside of relevant insurance companies, insurance agents, third party administrators, third party service providers, or governmental bodies, and does not sell user data under any circumstances.

How long does Medstar Insurance store data?

Medstar Insurance stores data for as long as a user is a client or can reasonably be considered a potential customer without having notified us of their intention to opt out of any marketing communications. Beyond this, users that purchase products or services through Medstar Insurance will have their data stored for up to seven years following the end of their business with us, as such data may be needed for reasons related to taxation, governmental, and financial compliance.

What control do I have over data and how do I change my consent?

Users can be notified of and amend any of their data collected by us, as well as opt out of receiving any marketing promotions from us. You also maintain the right to be forgotten (request that Medstar Insurance delete all of your personal data) To do so, please send a notification to Medstar Insurance at the following address:

Medstar Insurance Data Protection Officer

Medstar Global Benefits
PO Box 113048,
Abu Dhabi, UAE

Alternatively, users can contact us at mail@medstarinsurance.com, or by using the page found at this link.

Failure to notify us of a desire to ‘opt out’ of marketing promotions will be interpreted as an agreement to allow Medstar Insurance to continue using your personal data for voluntary marketing purposes.

Is this likely to affect me negatively?

Medstar Insurance only collects data provided to us directly by users, and only shares said data internally and with relevant third parties as instructed by users. We also maintain cutting edge data protection practices to ensure the proper and safe handling of user data, both internally and externally.

Again, we do not sell user data, or share it with third parties not directly applicable to the sales, purchase, underwriting, payment, administration, use, and renewal of insurance products for the user.

As such, it is highly unlikely that our gathering, storage and sharing of user data will have any negative effect on users.

Is Medstar Insurance's data collection policy compliant?

All of Medstar Insurance’s data collection, protection, and usage policies are fully in line with international regulations, including the European Union’s General Data Protection Regulation and Hong Kong’s Personal Data (Privacy) Ordinance. Furthermore, all users have the ability to view and alter any submitted user data. Thus, the Medstar Insurance Privacy Policy is unlikely to cause objections or complaints.

Cookies on the Medstar Insurance website

We use cookies to help us understand the relevance of content and ease of use on our site. This ensures that you receive the best possible user experience. If you continue, it is assumed that you are okay with receiving cookies for this purpose.