English-speaking supportVisa documentation supportHelp before your appointment
Visa Health InsuranceSPAIN
Privacy

Privacy Policy

This policy explains what personal information we collect, how we use it, and the choices you have.

Last updated: 12 July 2026

Who we are

Visa Health Insurance Spain ("we", "us", "our") operates the website www.visahealthinsurancespain.com. We are an English-language information and quote-request service. We help people understand and request private health insurance that is suitable for Spanish visa, residency and renewal applications. We are not an insurer, a law firm or an immigration consultancy, and any insurance contract is entered into between you and the relevant insurer, not with us.

This policy explains what personal data we collect through this website, how we use it, who we share it with and the choices and rights you have. It is designed to reflect the principles of the EU General Data Protection Regulation (GDPR), the Spanish Data Protection Act (LOPDGDD) and related law. If you have any questions, contact us at info@visahealthinsurancespain.com.

The data controller

The data controller for this website is Neil Peter Osborne, operating under the trading name Visa Health Insurance Spain. Contact: info@visahealthinsurancespain.com. Registered address: C. Alcalde Clemente García, 19, 5, 30169 San Ginés, Murcia, Spain. Tax number: NIE Y0339267P.

Where your enquiry is passed to an insurer, broker or partner so they can prepare a quote or documentation, that organisation acts as an independent controller for the data within its own systems, under its own privacy policy.

What information we collect

When you complete a quote or contact form, we collect the information you choose to give us. Depending on the form, this can include your name, email address, phone or WhatsApp number, nationality, the country you are applying from, your intended location in Spain, your visa or residency route, the number of applicants, applicant dates of birth, your intended arrival or appointment dates, whether you have an NIE, your preferred policy start date, and anything you add in the free-text message field.

Some forms include an optional field where you can add relevant medical history or current treatment. You do not have to complete this field to make an enquiry. Anything you enter there is treated as described in the next section.

We also collect limited technical information automatically, such as your IP address, browser and device type, and the pages you view, through cookies and similar technologies. See our Cookie Policy for detail.

Health and other sensitive information

Information about your health is a "special category" of personal data under Article 9 GDPR and receives extra protection. We only process health information where you choose to provide it, and only for the purpose of helping to obtain suitable private health insurance quotes or documentation for your situation. Our legal basis is your explicit consent (Article 9(2)(a) GDPR), given when you submit a form containing that information, together with the steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Please share only the health information that is necessary for your enquiry. Where relevant, health information you provide may be passed to an insurer or broker so they can assess and quote for cover — insurers normally need this to price a policy and decide acceptance. We do not use health information for marketing, and we apply access controls and encryption in transit to protect it.

How we use your information

We use the information you provide to respond to your enquiry, to help review suitable private health insurance options for your circumstances, and to request quotes or documentation on your behalf where relevant. We may use your contact details to follow up on your enquiry. We use technical information to operate, secure and improve the website and to understand how it is used.

Legal bases for processing

We rely on one or more of the following legal bases under Article 6 GDPR (and Article 9 for health data, as described above): your consent, given when you submit an enquiry (Article 6(1)(a)); steps taken at your request before entering into a contract, such as obtaining a quote (Article 6(1)(b)); our legitimate interest in responding to and following up on your enquiry and in operating a secure website (Article 6(1)(f)); and compliance with a legal obligation where one applies (Article 6(1)(c)). You can withdraw consent at any time by contacting us, without affecting processing carried out beforehand.

Who we share your data with

To help arrange suitable cover, we may share the details you provide with insurers, brokers or partners authorised to arrange or provide private health insurance in Spain, so they can prepare a quote or the documentation your application may need. We share only what is needed for that purpose, and once an organisation receives your data to prepare a quote or policy it becomes an independent controller of that data under its own privacy policy.

We also use trusted service providers who process data on our behalf under written agreements — for example our form and CRM provider (HubSpot), website hosting and, where enabled, analytics providers. We do not sell your personal data.

International data transfers

Your data is primarily processed within the European Economic Area (EEA). Some service providers (for example HubSpot and, where you consent to analytics or marketing cookies, Google and Meta) are based in, or transfer data to, the United States. Where data leaves the EEA, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable.

How long we keep your data

We keep enquiry information for as long as needed to deal with your request and for a reasonable period afterwards — generally up to 12 months from our last contact with you — unless a longer period is required by law or you ask us to delete it sooner. Records connected to a policy arranged through a partner are retained by that partner under its own retention rules.

Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encryption in transit and access controls. No internet-based service can be guaranteed to be completely secure, but we take these matters seriously and review our providers' standards.

Your rights

Depending on your circumstances, you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email info@visahealthinsurancespain.com; we may need to verify your identity and will respond within the time limits set by GDPR. You also have the right to complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es).

Children

This website and our service are not directed at children. We only process a minor's data where a parent or legal guardian includes them as a dependant on a family enquiry, on the guardian's instruction and under the legal bases described above.

Third-party links

Our website may link to third-party websites, such as government or consulate pages. We are not responsible for the content or privacy practices of those sites, and we encourage you to read their own policies.

Changes to this policy

We may update this privacy policy from time to time. The current version is always the one published on this page, with the "last updated" date shown above.

Contact

For any question about this policy or your personal data, contact Visa Health Insurance Spain at info@visahealthinsurancespain.com.

This page is general information about how we handle personal data and is not legal advice. Requirements and our providers may change; the current version is the one published here.