For Business Privacy policy

Benenden Health provides healthcare and wellbeing services to other businesses as well as directly to individuals. This Privacy Notice applies only to individuals we contact in the course of marketing our products and services to other businesses. 

This privacy notice tells you what to expect when Benenden Health collects, uses, retains and discloses your personal information. Personal information is information that (on its own or together with other information) identifies you and is about you. This notice was last updated in November 2024.

Who we are 

'Benenden Health' and 'Benenden' are trading names of The Benenden Healthcare Society Ltd.

When we refer to Benenden Health or to Benenden (or to ‘we’, ‘us’, or ‘our’), we mean The Benenden Healthcare Society Ltd which is registered at Holgate Park Drive, York, YO26 4GG.

Our commitment to your privacy

Benenden Health recognises the importance of protecting personal and confidential information in all that we do. We take care to meet our legal duties, and we put in place all reasonable technical, security and procedural controls required to protect your personal information for the whole of its life, in whatever format we hold that information in.

How the law protects you

Your privacy is protected by law, which says that we can use your personal information only if we have a proper reason to do so. This includes sharing it outside of Benenden Health. The reasons why we may process your personal information are:

• When it is our legal duty;
• When it is in our legitimate interest; or
• When you consent to it.

Below is a list of the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.

What types of personal information do we handle?

We process personal information to enable us to run Benenden Health, to support the provision of services to members and customers, to maintain our own accounts and to promote our services.

The types of personal information we use include:

• Name
• Contact details (such as name, company, role, telephone number and email address);
• Details of how you use our website, and where you have accessed it from;
• Details of when you contact us and when we contact you (including voice recordings of telephone calls and copies of written communications such as emails or letters);

Where we collect personal information from

We may collect your personal information from the following sources:

Personal information you give to us:

• When you contact us (for example by phone, email or letter);

Personal information gathered from our website www.benenden.co.uk:

• When you use or access our website (please see www.benenden.co.uk/cookies for further information)

Personal information from third parties that we work with:

• Details obtained from social media;
• Details obtained from cookies on third party websites (please see www.benenden.co.uk/cookies for further information)
• Supply of licensed business data from Market Location Ltd and DataHQ Ltd who are providers of B2B marketing campaign and lead generation data.
• We use providers of business contact details to obtain the details of individuals who may be interested in providing our products or services to their employees.
• Details obtained from events such as trade fairs, or from enquiries made directly to us through our website.

Who we share your personal information with

We may share your personal information between Benenden Healthcare Society Ltd, Benenden Charitable Trust, and Benenden Wellbeing Ltd for these reasons:

• Developing, testing, researching and improving products and services;
• Marketing products and services we believe may be appropriate to you;
• Legal and regulatory compliance;
• Preventing or detecting financial crime;
• Complaints handling; or
• Improving customer service.

In the usual course of our business, we may use other third party organisations known as ‘data processors’ under data protection law to support the essential delivery of our services. These organisations process your personal information on our behalf. 

These types of organisations are:

• Mailing, email, SMS messaging, and/or print fulfilment organisations (to enable us to communicate with you efficiently);
• Providers of business services such as auditors, consultants, solicitors and/or insurers (to enable us to run Benenden efficiently);
• Providers of records management services such as secure disposal suppliers, and IT storage providers (to enable us to secure data efficiently);
• Providers of IT systems or services (to enable us to run Benenden efficiently);
• Market researchers (to help us to improve the services we offer);
• Providers of information management services (to help us learn about our customers);
• Companies you ask us to share your personal information with (upon request).

When we share your information with our approved third party providers, our contractual relationship with them prevents them from using your information for any other purpose outside of our instructions to them. They may use their own third party data processors, but are always required to meet the same legal requirements as Benenden does.

Benenden Health will never sell your information, or share it with external companies for their own marketing purposes.

Sending personal information outside of the UK

The UK GDPR and DPA 2018 hold the UK to high standards of data protection. If we transfer information outside of the UK, we will make sure that it is protected to these standards.

We will only send your personal information to countries outside of the UK to:

• Follow your instructions
• Comply with a legal duty, or
• Work with other third-party organisations (as detailed above) who we use to help provide our services to you

We will always use one or more of these safeguards:

• Transfer it to a country with privacy laws that give the same protection as the UK as deemed by the UK to provide an adequate level of protection for personal information.    
• Make use of Model Clause Contracts , where suitable, to facilitate the transfer of personal and special category data between ourselves and an international organisation.

How long we keep your personal information

We may keep your business contact information for up to 7 years, to enable us to respond to questions or complaints and to maintain records according to legal requirements and documented business need.

Marketing

We may use your personal information to tell you about relevant products offered by The Benenden Healthcare Society Ltd, and its subsidiaries Benenden Wellbeing Ltd, and Benenden Hospital. This is what we mean when we talk about 'marketing'.

We use your personal information to send you marketing messages under the lawful basis of 'legitimate interest'. Legitimate interest is when we have a business reason to use your information for marketing purposes (which will not unfairly go against your rights and freedoms). In other words, we will not market to you based on legitimate interest if you have told us that you do not want to receive such marketing.

We have a legitimate interest to send you marketing messages about Benenden Healthcare or other products offered by Benenden Health (such as Travel Insurance, Health Cash Plan, Health Assessments, and self-pay services at Benenden Hospital).

You can ask us to stop sending you marketing messages at any time. If you want to do so, please contact us by:

• Following the unsubscribe link on the relevant email.
• Emailing: b2bmarketingmail@benenden.co.uk.
• Writing to us at: B2B Marketing Team, The Benenden Healthcare Society Ltd, Holgate Park Drive, York, YO26 4GG.

We use automated systems to manage our business marketing activities. This means that we make automated decisions based upon aspects of your behaviour such as opening an email which we have sent to you, or navigating to links within our communications with you. These decisions will only affect the kinds of communications we send to you, and when.

You have the right to ask that we do not use your personal information in this type of automated decision making. If you want to do so, please contact us by:

• Writing to us at: B2B Marketing Team, The Benenden Healthcare Society Ltd, Holgate Park Drive, York, YO26 4GG.

Your rights

In order to exercise your rights under data protection law, we will need to verify your identity for your security. 

You can contact us by emailing data.protection@benenden.co.uk, writing to Data Protection Officer, The Benenden Healthcare Society, Holgate Park Drive, York, YO26 4GG or telephoning Member Services on 0800 414 8100.

Your right of access - You can request a copy of your personal information.  

Letting us know if your personal information needs updating - You have the right to ask us to rectify any information we hold on you that you think is wrong, out of date or incomplete. 

If you want us to erase your personal information - You have the right to request that we erase your personal information in certain circumstances. 

If you want us to restrict processing – You have the right to restrict the processing of your information in certain circumstances. 

If you object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Obtaining your personal information in a portable format - You have the right to get copies of your personal information transferred to another organisation or to you in certain circumstances. 

Your right to complain

If you are not satisfied with our response or believe that we are not processing your personal information in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) by emailing casework@ico.org.uk or telephoning 0303 123 1113. Additional contact methods are detailed on their website: https://ico.org.uk/global/contact-us. 

Changes to this privacy notice

We regularly review our privacy notice. We will publish any updates on the Benenden website and inform members and customers of any changes within our regular communications. You can request a copy of our privacy notice by us using the details below.