1. Who we are
Speedwell Health is a trading style of Nesto Mortgages Ltd (company number 14964264), registered in England and Wales. Speedwell Health operates as an introducer: we match people looking for private health insurance with independent, FCA-authorised advisers. For the purposes of UK data protection law, Nesto Mortgages Ltd is the data controller for personal data collected through this website, and is registered with the Information Commissioner's Office (ICO).
2. Data we collect
- Identity and contact details — name, email address, phone number, date of birth, postcode.
- Enquiry details — who you want cover for, cover preferences, employment details where relevant to a business enquiry.
- Health information — only where you choose to provide it in an enquiry. Health data is special category data under UK GDPR, and we process it only with your explicit consent, solely to pass to the adviser you are introduced to.
- Technical and usage data — IP address, browser type, pages visited and interactions, collected via cookies and similar technologies.
We do not collect or store payment card details.
3. How we collect your data
Directly from you when you complete our quote form or contact us; automatically through cookies and similar technologies when you browse the site; and from advertising platforms, which may tell us which advert or search result brought you here.
4. How we use your data
- To introduce you to an independent, FCA-authorised health insurance adviser — the core purpose of the service.
- To contact you about your enquiry.
- To improve our website, guides and service.
- To comply with legal and regulatory obligations.
- To send marketing communications, only where you have consented, and you can opt out at any time.
- To detect and prevent fraud or misuse of the site.
5. Legal basis for processing
We rely on: performance of a contract (processing your enquiry and making the introduction you have requested); legitimate interests (improving and securing our service); legal obligation (where the law requires processing); and consent (marketing, non-essential cookies, and any health information you provide, which requires your explicit consent).
6. Sharing your data
We share your data with the FCA-authorised adviser you are introduced to — once introduced, that adviser is an independent data controller of your information and will provide you with their own privacy information. We also use trusted service providers (hosting, form processing, analytics) under contract, and may disclose data where required by law or regulation.
7. How long we keep your data
- Enquiry records: 2 years from your last interaction.
- Contact form messages: 1 year.
- Consent records: for as long as the consent stands, plus 1 year after withdrawal.
- Analytics data: 14–26 months, depending on the setting.
8. Your rights
Under UK GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict processing; data portability; object to processing (including direct marketing); not be subject to solely automated decisions with legal effect; and withdraw consent at any time. To exercise any of these rights, contact us using the details below — we respond within one month.
9. Cookies
We use essential, analytics and marketing cookies. Non-essential cookies are only set with your consent. Full details, including every cookie we set and how to manage them, are in our Cookies policy.
10. Data security
We protect your data with HTTPS encryption, access restrictions and secure hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take proportionate technical and organisational measures to protect your information.
11. International transfers
Some of our service providers may process data outside the UK. Where that happens, we ensure appropriate safeguards are in place, such as UK adequacy regulations or Standard Contractual Clauses.
12. Children's privacy
Our services are not directed at anyone under 18. We do not knowingly collect data from children; if we become aware that we have done so, we will delete it promptly.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Continued use of the site after changes indicates acceptance of the updated policy.
14. Contact us and complaints
Email: privacy@speedwellhealth.co.uk (placeholder — confirmed at launch)
Post: Nesto Mortgages Ltd, Grove Chambers, Basecamp, 36 Green Lane, Wilmslow, England, SK9 1LD
Company number: 14964264
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.