Privacy Policy
Last updated: 8 October 2026
Who we are
Visa Health Insurance Experts (visahealthinsuranceexperts.com) is operated by Stephen Paul Gregory, an Exclusive Insurance Agent of Sanitas S.A. de Seguros. He is registered with the Dirección General de Seguros y Fondos de Pensiones (DGSFP) in the Administrative Register of Insurance and Reinsurance Distributors under number C0320Y2155969D.
This policy explains how we collect, use and protect your personal data when you use this website, ask us for a quote, or contact us by email, phone or WhatsApp. It follows Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD) and Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE).
Data controller
- Controller: Stephen Paul Gregory, Exclusive Insurance Agent of Sanitas S.A. de Seguros
- NIE: Y2155969D
- DGSFP register number: C0320Y2155969D
- Address: C/ Alcalde Clemente García 19, 5, 30169 San Ginés, Murcia, Spain
- Email: info@visahealthinsuranceexperts.com
What we collect
- Enquiry details you give us: your name, email address and phone or WhatsApp number; your visa or residency route; how many people need cover and the age band of the oldest; your appointment, filing or move date; where in Spain you plan to live; for students, the course start date and length; for renewals, whether you already hold a Sanitas policy and its number; a general nationality group (not your nationality); and your message.
- Application details: if you decide to apply, the identity and contact details Sanitas needs for each person to be insured, such as passport details and dates of birth.
- Health information: our quote form does not ask about your health. See "Health information" below.
- Correspondence: emails, phone calls and WhatsApp messages with us.
- How you reached the quote form: the address of the quote page, including any campaign tags in it, and the website that referred you, if any. These are sent with your quote request. Nothing is stored in your browser.
- Privacy acknowledgement: when you send the quote form, we record that you ticked "I have read the privacy policy", the time, and the version of this policy in force.
- Technical data: your IP address and browser information, processed by our website hosting provider to deliver the website and keep it secure.
If you give us details about other people to be insured, such as family members, please make sure they have seen this policy.
Health information
Health information is a special category of personal data under Article 9 GDPR.
Please do not put medical information in our quote form or in a first email or WhatsApp message. If you want to talk through your medical history with us privately before you apply, we will first ask for your explicit consent (Article 9(2)(a) GDPR). We will use the information only to help you with your application, and never for marketing. You can withdraw consent at any time by emailing info@visahealthinsuranceexperts.com.
Sanitas asks each applicant to complete its own health questionnaire. Sanitas assesses that information as the insurer.
How we use your data
- to answer your enquiry and prepare a quote for a suitable Sanitas plan;
- to help you apply to Sanitas and to check your visa insurance certificate against your application;
- to help with renewals, changes and questions about your policy;
- to keep the website secure and to understand which pages lead people to contact us; and
- to meet our legal, regulatory and tax obligations.
The quote form does not sign you up to marketing.
Legal bases
| Purpose | Legal basis |
|---|---|
| Preparing a quote, helping you apply, supporting your policy | Steps taken at your request before entering into a contract, and performance of a contract (Art. 6(1)(b) GDPR) |
| Answering general questions | Our legitimate interest in replying to you (Art. 6(1)(f) GDPR) |
| Health information you choose to discuss with us | Your explicit consent (Art. 9(2)(a) GDPR) |
| Website security and recording which page led to an enquiry | Our legitimate interest in running a secure website and understanding how people find our service (Art. 6(1)(f) GDPR) |
| Legal, tax and anti-money-laundering obligations | Legal obligation (Art. 6(1)(c) GDPR) |
Who receives your data
- Sanitas S.A. de Seguros (Calle Ribera del Loira 52, 28042 Madrid), when you ask us to obtain a quote or submit an application. Once your application is submitted, Sanitas becomes an independent data controller for the data processed in its systems. Its privacy policy is on the Sanitas website, and its Data Protection Officer can be contacted at dpo@sanitas.es.
- Service providers acting for us, under written data-processing agreements (Art. 28 GDPR): HubSpot, our customer-relationship system, which receives quote-form submissions; and our website hosting provider.
- WhatsApp: if you contact us on WhatsApp, WhatsApp Ireland Limited processes certain information under its own privacy policy. We process the messages you send us under this policy.
- Public bodies, courts and regulators, where the law requires it.
We do not sell your personal data.
International transfers
Some service providers, including HubSpot, may process data outside the European Economic Area. Where that happens, we rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework where it applies) or on the European Commission's Standard Contractual Clauses.
Cookies and similar technologies
This website does not set cookies and does not store information in your browser. Optional analytics and advertising technologies are currently disabled; if we introduce them, they will only run after you give consent. Details are in our Cookie Policy.
How long we keep your data
- enquiries that do not lead to a policy: up to 12 months from our last contact;
- records about a policy: for the life of the policy and the statutory limitation period after it;
- tax and accounting records: 6 years;
- anti-money-laundering records: 10 years, where Law 10/2010 applies.
Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and checks on our service providers. No internet service is completely secure. If a personal data breach meets the thresholds in Articles 33 and 34 GDPR, we will notify the supervisory authority and, where required, you.
Your rights
Under the GDPR and the LOPDGDD you can:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- erase your data, subject to legal retention duties;
- restrict processing in certain cases;
- receive your data in a portable format;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting processing that took place before; and
- complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.
To exercise a right, email info@visahealthinsuranceexperts.com with proof of identity. We will respond within one month, as Article 12 GDPR requires.
Children
This website is not aimed at children under 14. We process a child's data only when a parent or legal guardian includes the child on a policy, and on that person's instructions.
Changes to this policy
We may update this policy when our practices or the law change. The date at the top of this page shows the current version.
Contact
Visa Health Insurance Experts: Stephen Paul Gregory, Exclusive Insurance Agent of Sanitas S.A. de Seguros. DGSFP register number C0320Y2155969D. C/ Alcalde Clemente García 19, 5, 30169 San Ginés, Murcia, Spain. Email: info@visahealthinsuranceexperts.com.