Skip to main content

Privacy Notice – Non-US based individuals

UnitedHealthcare Global Medical (UK) Limited all trading as UnitedHealthcare Global Medical, and its subsidiaries and affiliated companies (collectively, the “Company”, “We”, or “Us”) strives to properly address applicable data protection requirements. 

Scope

This Privacy Notice (“Notice”) provides the individuals who receive our services, including but not limited to, Patients including employees and sub-contractors of clients, Clients, Prospective Clients and Suppliers (collectively, “Business Partners’’) with certain important information about how the Company handles your Personal Data. UnitedHealthcare Global Medical (UK) Limited trading as UnitedHealthcare Global is the primary data controller for processing of Personal Data.

Types of data processed for patients 

Personal Data processed includes the following types of data:

  • Name
  • Date of Birth
  • Home Address
  • Assignment Address
  • Email Address
  • Telephone Number (landline and mobile)
  • Dependent/Spouse/Partner/Family
  • Employment Details
  • Work Permit
  • Visa Details
  • Passport Number
  • Gender
  • Nationality
  • Marital Status
  • Health Data

Types of data processed for business partners

  • Name
  • Postal Address
  • Email Address
  • Telephone Number (landline and mobile)
  • Banking Data

Purpose of data processing, legal bases, and disclosures of personal data

The Company will use and otherwise process Personal Data:

  • To assess your health as well as diagnose, provide treatment and dispense medication to you as well as in some cases, evacuate you from your place of work to a more appropriate medical centre to receive care for your condition. We may share your data with a third-party medical provider and we may provide occupational health assessments and/or fitness for work recommendations to your employer or a third party acting on their behalf.  We may also use Personal Data to develop reports (including anonymizing your Personal Data); to communicate with you, including information about the quality of our services; and to conduct analysis on our operations.
  • To provide our Services to you, our Business Partner, or to consider doing so for you and your employees and sub-contractors. Additionally, we will use and otherwise process Personal Data to manage our relationship with you, including communicating with you about our services and satisfaction with such services. We will process your Personal Data to deliver or request the delivery of services, and to manage and administer our contract with your company.

Legal Basis

  • For Patients, the Company’s legal basis to process Personal Data is necessary for: (1) preventive or occupational medicine; (2) the assessment of the working capacity of employees; (3) medical diagnosis; (4) provision of health care or treatment; or (5) to protect the vital interests of the data subject or other natural person. Where we require explicit consent we will let you know.  Additionally, it is in the Company's legitimate interest as described above to carry out our services. Any consent you provide can subsequently be withdrawn at any time by contacting us at the address listed below in the “Contact Information” section without affecting the lawfulness of processing based on consent before its withdrawal.
  • For Business Partners, the Company’s legal basis to process Personal Data is necessary to perform activities in the Company’s legitimate interest as described above to carry out our services. Where we require explicit consent, we will let you know. Any consent you provide can subsequently be withdrawn at any time by contacting us at the address listed below in the “Contact Information” section without affecting the lawfulness of processing based on consent before its withdrawal.

Disclosures of Personal Data

We may not be able to provide some of our services to you without your Personal Data. We may therefore require you to provide us with Personal Data for processing as previously described as a prerequisite to providing certain services.

  • If we are providing services to you as a Patient, we may share your Personal Data with authorized third-party suppliers such as service providers, medical clinics, hospitals and other medical facilities, assistance providers, sub-contractors and third-party administrators.
  • If we are providing services to you as a Business Partner, we may share your Personal Data with authorized third-party suppliers such as sub-contractors and third-party administrators to fulfill our contractual obligations. 
  • Some of these authorized third-party suppliers may be located outside of the European Economic Area and United Kingdom, including in countries that may not provide the same level of data protection as your home country. The Company takes appropriate steps to ensure that such personnel and third-party suppliers are bound to duties of confidentiality and the Company implements measures such as standard data protection contractual clauses to ensure that any transferred Personal Data remains protected and secure. A copy of these clauses can be obtained by contacting us at the address listed below in the “Contact Information” section. 

Retention of Personal Data

Personal Data will be retained only for so long as reasonably necessary for the purposes set out above, in accordance with applicable laws. 

Data Security and Data Integrity

The Company maintains reasonable security measures to safeguard Personal Data from loss, interference, misuse, unauthorized access, disclosure, alteration or destruction. The Company also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.

Rights

You may contact us, at the address listed below in the “Contact Information” section, to request access to the Personal Data we hold about you, to correct any mistakes, or to request deletion of this data or to withdraw consent to the processing of Personal Data, in accordance with applicable law.

The Company may be unable to comply with a data deletion request where doing so would place us in breach of our obligations under applicable laws, regulation or codes of practice. However, in some circumstances, you may be able to request that your data be blocked from further processing. You may also have a right to data portability to another Data Controller under certain circumstances. Where we rely on consent to process Personal Data, your consent may be withdrawn at any time, although the withdrawal may impact or disrupt the services we provide. 

If you are aware of changes or inaccuracies in your Personal Data, you should inform us of such changes so that the Personal Data may be updated or corrected.  

You may lodge a complaint with a supervisory authority if you consider that the Company’s processing of your Personal Data infringes applicable law.

Disclosures Required or Permitted by Law

Regardless of any other provisions in this Notice, the Company may disclose or otherwise process Personal Data in the context of any sale or transaction involving all or a portion of the business, or as may be required or permitted by law or required for the purposes of any regulatory audit to which the Company may be subject from time to time. 

Contact Information

You can raise any issues regarding the processing of your Personal Data by contacting us, our EU Representative or our Data Protection Officer:

UnitedHealthcare Global Medical Services (UK) Limited

EU Representative: UHCG Services (Ireland) Limited

Data Protection Officer

Updates

We reserve the right to amend this privacy statement at any time; you should regularly check this privacy statement for any amendments.

Last updated: May 27, 2021

State Consumer Privacy Notice – US Residents

This State Consumer Privacy Notice applies to residents of certain states (including California) and sets forth their rights under their respective state’s comprehensive privacy laws.

This State Consumer Privacy Notice supplements our Online Services Privacy Policy (OSPP). Our OSPP provides you with additional information under the “How We Use Your Information,” “What Information We Collect About You,” and “How We Share Your Information” sections. It explains what personal information we collect about you, where and from whom we obtain it, why we collect it, and your respective state rights regarding it.

Our processing of your personal information 

Depending on the online service with which you interact, we may have collected the following personal information and have disclosed/shared it as described in the chart below:

Retention

We will retain your information for the period necessary to fulfill the purposes outlined in our Privacy Policy, consistent with our internal record-retention policies, and in accordance with applicable law.  When assessing retention periods, we first examine whether it is necessary to retain information, and if retention is required, work to the retain the information for the shortest period permissible under applicable law.

Personal Information does not include:

  • De-identified or aggregated consumer information
  • Publicly available information from government records
  • Personal Information covered by certain state laws and federal laws, including: Health Insurance Portability and Accountability Act of 1996 (HIPAA), Fair Credit Reporting Act (FCRA), and the Gramm-Leach-Bliley Act (GLBA)

Categories of Sources of Personal Information

We obtain the categories of personal information listed above from:

  • You or your authorized agent,
  • Service providers,
  • Affiliates,
  • Publicly available information,
  • Organizations with which you are employed or affiliated, or
  • Activity on our apps and websites

Collection from these sources may occur online, in person, via paper or other electronic means, and may occur automatically where state law permits such profiling absent an explicit request to opt-out.

Why We Collect Personal Information

We collect your personal information for one or more of the following business purposes:

  • To respond to an email or particular request from you
  • To communicate with you
  • To personalize services for you
  • To process an application as requested by you
  • To administer surveys and promotions
  • To provide you with information that we believe may be useful to you, such as information about products or services provided by us or other businesses
  • To perform analytics and to improve our products, websites, and advertising
  • To comply with applicable laws, regulations, and legal processes
  • To protect someone's health, safety, or welfare
  • To protect our rights, the rights of affiliates or related third parties, or take appropriate legal action
  • To keep a record of our transactions and communications
  • To detect and protect against security incidents
  • To debug to identify and repair errors
  • As otherwise necessary or useful for us to conduct our business, so long as such use is permitted by law

Sharing or Selling Your Personal Information

At times, we may “share” or “sell” your personal information (as defined under applicable law) with third parties to display advertisements to you based on your activities, preferences, or interests. You may opt-out of this activity on your device by using our cookie management tool on our website and by submitting a request via the Do Not Share or Sell My Personal Information link on the website. You may also opt-out of our “sharing” or “selling” of your personal information through privacy preference signals recognized under applicable local law, such as the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only.

We do not knowingly “share” or “sell” the personal information of children under the age of 16. 

Your Rights

Depending on the jurisdiction in which you live, you may have the following rights under applicable law:

  • Right to request access and a copy of your personal information and information relating to how it is processed;
  • Right to request deletion of your personal information;  
  • Right to request the correction or update of the personal information we hold about you;
  • Right to opt-out of “sales” of your personal information and “sharing” of your personal information for cross-context behavioral advertising purposes (as these terms are defined under applicable law)
  • Right to opt-out of targeted advertising; 
  • Right to limit our use of your Sensitive Personal Data;
  • Right to opt-out of certain profiling activities;
  • Right to not be unlawfully discriminated against for exercising your rights;
  • Right to portability of your personal information;

These rights may be limited or denied in some circumstances. For example, we may retain your personal information where required or permitted under applicable law. 

How to Exercise Your Rights

  • You or your authorized agent may exercise your rights under applicable law by:
    • Calling us at 800-503-5814; or 
    • Submitting a webform here.
  • You may opt-out of the sharing or selling of your personal information collected on your device by using our cookie management tool on our website and by submitting a request via the Do Not Share or Sell My Personal Information link on the website.
  • You or your authorized agent may be required to submit proof of your identity for these requests to be processed.
  • We will not be able to comply with your request if we are unable to confirm your identity.
  • You may designate an authorized agent to make a request on your behalf subject to proof of identity and authorization.

Appeals

Applicable law may require or permit us to decline your request. If the business declines your request, we will tell you why and you may appeal this decision.

  • You may appeal by:
    • Calling us at 800-503-5814; or
    • Submitting a webform here.

If you remain concerned about the result of that appeal, you may contact the attorney general in your state of residency. Visit your State’s Attorney General website to learn more.

Changes

We will review this notice annually and update it from time to time. Any changes will be posted on this page and will become effective as of the “Last Revised” date. We encourage you to review this notice periodically to be sure you are aware of those changes.

Last Revised: July 1, 2025