Privacy Policy

Last updated: 26 July 2026. This notice explains how we handle the personal information you share with us when you request an NLV health insurance quote or otherwise contact us.

1. Who we are

NLV Health Insurance Spain ("we", "us", "our") is a specialist service helping applicants arrange private health insurance suitable for Spain's Non-Lucrative Visa. The website www.nlvhealthinsurancespain.com is operated by Stephen Paul Gregory, a registered insurance agent in Spain (see our Legal Notice for full regulatory details). For data-protection purposes, the data controller is:

This Policy is provided in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD), Law 34/2002 on Information Society Services (LSSICE), and applicable insurance-distribution regulation.

2. Data we collect

Depending on how you interact with us, we may collect: your name; email address; phone or WhatsApp number; nationality; the number of applicants and each applicant's date of birth and relationship; your situation and the visa you are applying for; the Spanish consulate or visa centre you will use; any Spanish location details you provide (province, town, postcode); your intended policy start date and any visa appointment date; and anything you include in the message field, which may contain health-related details. We also collect website-usage data such as IP address, browser and device information and pages viewed, via cookies (see section 10).

You confirm that the information you provide is accurate and that, where you supply details about other people (for example family members to be insured), you have a basis to do so and have made them aware of this Policy.

3. Health data & special categories

Health data is a "special category" under Article 9 GDPR. Where you provide it, we process it on the basis of your explicit consent (Art. 9(2)(a)), for pre-contractual measures and performance of a contract (Art. 6(1)(b)), and to comply with legal obligations under Spanish insurance law. Health information you provide is transmitted to the relevant insurer for underwriting, protected by access controls and encryption, and is never used for marketing.

4. How we use your data

We use your personal data to prepare NLV health insurance quotes and compare suitable options; to respond to enquiries and provide guidance; to submit applications to the insurer and manage communication between you and them; to help issue certificates and documentation for your visa application; to manage renewals, changes and cancellations; to send you marketing communications where you have consented; to provide real-time support via our chat widget; to improve our website and services; and to meet legal, regulatory and tax obligations.

5. Legal bases

Purpose	Legal basis
Quotes & arranging a policy	Pre-contractual measures / performance of a contract (Art. 6(1)(b)); explicit consent for health data (Art. 9(2)(a))
Enquiry handling & support	Legitimate interest in responding to your request (Art. 6(1)(f))
Marketing emails	Consent (Art. 6(1)(a))
Legal, tax & AML compliance	Legal obligation (Art. 6(1)(c))
Analytics & advertising cookies	Consent (Art. 6(1)(a)) — see our Cookie Policy

6. Sharing & disclosure

We share your data only where necessary, with: the insurer(s) able to offer suitable cover for your situation (who act as independent controllers for data processed in connection with a quote, policy or claim); trusted service providers who help us operate (including form-handling, CRM, email, hosting and analytics providers), bound by data-processing agreements; advertising and measurement platforms where you have consented; and public authorities, courts or regulators where legally required. We do not sell your personal data.

7. International transfers

Your data is primarily processed within the European Economic Area. Where a provider is located outside the EEA (for example some analytics or advertising platforms in the United States), transfers are protected by European Commission adequacy decisions (including the EU–US Data Privacy Framework where applicable), Standard Contractual Clauses, and additional safeguards where required.

8. Retention

We keep personal data only as long as needed for the purposes above or as required by law — for example, quote enquiries with no policy issued for up to 12 months from last contact; records relating to a policy for its duration plus the applicable limitation period; and tax and anti-money-laundering records for the periods required by Spanish law. When no longer needed, data is securely deleted or anonymised.

9. Data security

We apply appropriate technical and organisational measures — including encryption in transit, access controls and provider vetting — to protect your data. No online service is entirely risk-free, but we will notify you and the supervisory authority of any breach meeting the thresholds in Articles 33–34 GDPR.

10. Cookies

Our website uses cookies and similar technologies for essential functionality, analytics and, where you consent, advertising. Full details and controls are in our Cookie Policy.

11. Your rights

Subject to law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior processing. To exercise any right, email hello@nlvhealthinsurancespain.com; we respond within one month. You may also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or the authority in your country of residence.

12. Children

Our services are not directed at children under 14. We process a minor's data only where a parent or legal guardian includes them as a dependant on a family application, on that adult's instruction.

13. Changes

We may update this Policy to reflect changes in our practices or the law. The "Last updated" date above shows the current version. Material changes will be notified by a prominent notice on the website.

14. Contact