Seek2Insure Privacy Notice

This Notice of Privacy Practices (the “Notice”) applies to any processing of personal data conducted in connection with services offered by Seek 2 Group Co.,Ltd (“Seek2Insure”). Additionally, this Notice applies where the insurance plan was offered or sold by Seek2Insure in Thailand.

This Notice covers processing during the entire insurance process, from quotation through any period of claims and processing after the termination of any policy.

Seek2Group Co., Ltd  is considered the controller for personal data processed in relation to health plans written via our partners.

Who does this Notice apply to?

This Notice applies to the following individuals:

  • Plan members,
  • Individuals members,
  • Beneficiaries,
  • Next of Kin,
  • Other individuals whose personal data Seek2Insure processes under the terms of its providers plans.

This Notice describes how personal data about you may be used, disclosed and how you can exercise your rights in relation to your personal data. Please review it carefully.

Seek2Insure considers personal data or personal ‘information’ to be confidential (personal data and personal information are considered to mean the same for the purposes of this Privacy Notice). We protect the privacy of that information in accordance with applicable privacy laws and regulations, as well as our own company privacy policies.

These laws and regulations may include but are not limited to Thailand’s Personal Data Protection Act 2019, and any other applicable national, state or federal laws, legislation and derogations.

This Notice describes how we may use and disclose information about you and your eligible dependents, as applicable, in administering your benefits and also explains your legal rights regarding the information.

When we use the term “personal data”, we mean information that can directly or indirectly identify you as an individual.

What is a definition of Personal Data?

Personal data is any information relating to a living person, which enables the identification of such person, whether directly or indirectly, but not including the information of a deceased person.

What personal data will be collected?

  • Personal data that the Company obtained from you on applications, forms, or any other documents when you request for our services through all channels, including electronic channels, such as
    • Basic personal data such as name, surname, title, identification card number, passport number or other identification card number, addresses, gender, phone number or mobile phone number, email address, date of birth, username or marital status;
    • Financial information such as source of income, credit/debit card number, bank account number, details of premium payment, or tax information;
    • Employment information such as position, workplace, work experience, name and address of employer. 
  • Any transactions relating to insurance policy such as premium payment history, insurance policy loan, claim, execution of rights or the use of our services including conversation records from all communication channels of the Company;
  • Sensitive personal data such as health data, disabilities, race or ethnicity, genetic data, biometric data, sexual behavior, criminal records, trade union membership, health records, claim history;
  • Information on the social media platforms that we receive from other social media providers or from the subscription for our services, usage of our website 
  • IP address, the type of browser software used, and the date, time and duration of your usage of our website or application, where such details are automatically recorded.

Please also be advised that the personal data given to the Company is related to other people (e.g. family member premium payer or beneficiary), you acknowledge and affirm that you have the authority to act on their behalf regarding the processing of their personal data and provide this Privacy Notice for their acknowledgement.

Why do we process your personal data?

Group Plans: we use your personal data for the following purposes:

  • providing a quotation to a plan sponsor (e.g. the organization who has taken out insurance under which you will be provided insurance cover as part of a group plan, for example your employer),
  • fraud prevention together with any other required regulatory checks,
  • onboarding you onto the group plan to which you belong and registering you for its benefits,
  • managing, administering and updating the policy of which you are a member,
  • managing our information technology and to ensure the security of our systems,
  • investigating, responding to and dealing with complaints or incidents relating to us or our business and maintaining service quality and training staff,
  • contacting you with information about your plan,
  • processing and completing any claims you make under the policy,
  • establishing, exercising and/or defending legal claims or rights and protecting, exercising and enforcing our rights, property or safety,
  • marketing purposes e.g. contacting to offer benefits/privileges including communicating marketing information/promotion/activities that do not override your fundamental rights and freedoms,
  • processing personal data to the Office of Insurance Commission (“OIC”) for the purpose of supervision on insurance businesses in accordance with insurance laws according to OIC privacy notice as shown on www.oic.or.th

Before we process (use) your personal data we need to have a legal basis for doing so. This is often referred to as ‘the lawful basis for processing’ and there are specific grounds on which we can rely. We explain the lawful basis on which we process your personal data in the paragraphs below.

Where we receive personal data from a plan sponsor (i.e. the company applying to cover you under a group insurance plan), we will process your personal data as we have a performance of a contract with you, legitimate interest, your consent or legal obligation in processing it. Our legitimate interest includes processing for the purposes of providing the plan sponsor with a quotation for cover and, where that quotation is accepted, for the purposes of onboarding and administering the group insurance plan. In any processing on this basis we have considered and balanced any potential impact on you and your rights and will only process the minimal personal data necessary for carrying out those actions. 

It will be necessary to receive and hold your health information for dealing with your insurance, for example:

  • arranging, underwriting and administering the insurance contract under which you benefit,
  • administering a claim under the insurance contract, or
  • exercising a right or complying with an obligation.

Where your health data is used for any of the above we rely on the necessity to comply with legal obligations, to achieve the purpose relating to substantial public interest, following the insurance exemption provided under the Office of Insurance Commission PDPA Guidelines. This means we do not need to acquire your consent for the processing of your health information.

As certain personal information set out above relates to compliance with the laws or performance of contracts, your personal information is necessary for us to accomplish such purpose. If you do not provide such personal data to us, there may be implications or we may not be able to enter into or perform our duties under the contract (as the case may be).  In such event, it may be necessary for us to decline to enter into a contract with you or to cancel the transaction, or the provision of any relevant services to you, whether in whole or in part. 

Individuals Plans: we use your personal data for the following purposes:

  • determining eligibility and providing a quotation to you,
  • fraud prevention together with any other required regulatory checks,
  • onboarding you onto the individual plan which you have requested and registering you for its benefits,
  • managing, administering and updating the policy of which are a member,
  • managing our information technology and to ensure the security of our systems
  • investigating, responding to and dealing with complaints or incidents relating to us or our business, to maintaining service quality and training staff,
  • contacting you with information about your plan,
  • processing and completing any claims you make under the policy,
  • establishing, exercising and/or defending legal claims or rights and protecting, exercising and enforcing our rights, property or safety.
  • marketing purposes e.g.  contacting to offer benefits/privileges including marketing information/promotion/activities that do not override your fundamental rights and freedoms,
  • processing personal data to the Office of Insurance Commission (“OIC”) for the purpose of supervision on insurance businesses in accordance with insurance laws according to OIC privacy notice as shown on www.oic.or.th

Before we process (use) your personal data we need to have a legal basis for doing so. This is often referred to as ‘the lawful basis for processing’ and there are specific grounds on which we can rely. We explain the lawful basis on which we process your personal data in the paragraphs below.

Where we receive personal data from you, we will process your personal data for the performance of a contract with you including pre-contractual discussions with either you, and subsequent contractual performance of the insurance plan together with processing any benefits to which you are contractually entitled including our legitimate interest, your consent and legal obligation.

It will be necessary to receive and hold your health information for dealing with your insurance, for example:

  • arranging, underwriting and administering the insurance contract under which you benefit,
  • administering a claim under the insurance contract, or
  • exercising a right or complying with an obligation.

Where your health data is used for any of the above we rely on the necessity to comply with legal obligations, to achieve the purpose relating to substantial public interest, following the insurance exemption provided under the Office of Insurance Commission PDPA Guidelines. This means we do not need to acquire your consent for the processing of your health information.

As certain personal information set out above relates to compliance with the laws or performance of contracts, your personal information is necessary for us to accomplish such purpose. If you do not provide such personal data to us, there may be implications or we may not be able to enter into or perform our duties under the contract (as the case may be).  In such event, it may be necessary for us to decline to enter into a contract with you or to cancel the transaction, or the provision of any relevant services to you, whether in whole or in part. 

How do we obtain your personal data?

Group Plans: we get some personal data from your plan sponsor when they request an insurance quote from us, and we retain that information after any quote has been accepted and they start the group plan with us. This information includes your, and your associated member (if any), name, surname, date of birth, national identification number/passport number, nationality, and country of residence. We do not process your information for any other purpose unless you submit a claim under the policy (see above). 

Individual Plans: where you have taken out an individual insurance plan with us, we will have received your personal data either directly from you or from your representative in the event that you are a minor. This information includes name, surname, date of birth, national identification number/ passport number, nationality, address, contact information, and banking information (to process a claim payment). We may also receive some personal data from your authorized representative, authorized lead generators, other insurers, agents, brokers, third-party administrators (TPAs), and health care providers.

Where we have previously collected your personal data before the effective date of the Thai Personal Data Protection Act 2019, we will continue to collect and/or use your personal data in accordance with the purposes for which the personal data was originally collected and/or used in accordance with the Thai Personal Data Protection Act 2019. In this respect, you have the right to withdraw your consent by contacting our Data Protection Officer (DPO) (see the ‘Contact Us’ section below) or download Data Subject Request Form from our website  

However, we reserve the right to consider your request and proceed in accordance with the Thai Personal Data Protection Act 2019 and such withdrawal will not affect the validity of our previous collection, use, or disclosure of personal data

For how long do we retain your personal data?

We retain your personal data for as long as necessary to provide you the benefits under your insurance plan, until such time as any claim under the insurance policy is concluded, until the limitation for exercising any legal rights has expired or for compliance with any legal or regulatory requirements.

In this regard, we will generally retain your personal data for at least 10 years from the date where your legal relations and/or transactions with us cease to have effect. However, we may retain your personal data for a longer period if applicable laws permit or such retention is necessary to the establishment, compliance, or exercise of our legal claim.

Please note that we do not automatically destroy information about you when you terminate your coverage with us. It may be necessary to use and disclose this information, for legal and regulatory reasons, even after your coverage terminates, although policies and procedures will remain in place to protect against inappropriate use or disclosure.

All personal data that we retain is subject to this Privacy Notice together with our internal Retention Policy and guidelines. We will not retain your personal data for longer than is necessary and we will hold it only for the purposes for which it is obtained and required by law.

Do we share your personal data with other organisations?

Group and Individual Plans:

We may disclose personal data about you in various ways, including, but not limited to:

Treatment: We may disclose personal data to doctors, dentists, pharmacies, hospitals and other health care providers who take care of you. For example, doctors may request medical information from us to supplement their own records. We also may use personal data in providing mail order pharmacy services and by sending certain information to doctors for patient safety or other treatment-related reasons.

Disclosures to Other Covered Entities: We may disclose personal data to insurers, reinsurers, healthcare providers, third-party administrators (TPAs), or business associates of those entities for treatment, payment and certain health care operations purposes. 

Additional Reasons for Disclosure: We may use or disclose personal information about you in providing you with treatment alternatives, treatment reminders, or other health-related benefits and services. We also may disclose such personal data in support of:

  • Plan Administration (Group Plans)– to your employer, as applicable, when we have been informed that appropriate language has been included in your plan documents, or when summary data is disclosed to assist in bidding or amending a group health plan.
  • Business Associates – to persons who provide services to us and assure us they will protect the information; including third parties, creditors and/or debtors in the event of a sale, merger or acquisition of the Seek2Insure business.
  • Industry Regulation – to Government agencies that regulate us, such as but not limited to the Office of Insurance Commission and Anti-Money Laundering Office.
  • Law Enforcement – to Government law enforcement officials, such as but not limited to Bank of Thailand, National Anti-Corruption Commission, Thailand Securities and Exchange Commission, and Royal Thai Police.
  • Legal Proceedings – in response to a court order or other lawful process.
  • Public Welfare – to address matters of public interest as required or permitted by law (e.g., child abuse and neglect, threats to public health and safety, and national security).

Disclosure to Others Involved in Your Health Care: We may disclose health information about you to your spouse, a relative, a friend, the employer, the subscriber of your health benefits plan, beneficiary, statutory heir, attorney, or any other person you identify, provided the Information is directly relevant to that person’s involvement with your health care or payment for that care. For example, if a family member or a caregiver calls us with prior knowledge of a claim, we may confirm whether or not the claim has been received and paid. You have the right to stop or limit this kind of disclosure by calling our Member Customer Services number on your Membership ID card. On occasion your agent or broker requests personal data, including your health data, to assess the effectiveness of your plan and consider appropriate cover on your behalf. We will only share/ disclose your health information when you have given your consent for us to do so.

Uses and Disclosures Requiring Your Written Authorization: In all situations other than those described above, we will ask for your written authorization before using or disclosing Information about you. For example, we will get your authorization:

  • For marketing purposes that are beyond your expectation and unrelated to your benefit plan(s), and
  • For other reasons as required by law.

If you have given us an authorization, you may revoke it at any time. However such revocation will not affect the validity of our previous collection, use, or disclosure of personal data. If you have questions regarding authorizations, please call our Customer Services number on your ID Membership card.

Sending your personal data abroad

There are occasions where we need to send your personal data, including health information, outside of Thailand. Organisations that we may send your personal or health data to include:

  • Providers of insurance not based in Thailand.
  • We will not send any personal data or health information outside Thailand unless we can ensure that the recipient country has a sufficient standard for the protection of personal data, or unless we are able to rely on an exemption available under applicable personal data protection laws.

Profiling and Automated Decisions

We do not conduct any profiling or automated decisions, other than in circumstances where you are expressly informed. 

Your rights in connection with personal information

You may (in accordance with applicable laws) have the right to:

  • Request of access to your personal information. This enables you to gain access to your personal information and receive a copy of the personal information we hold about you and to check if we are lawfully processing it.
  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete, remove, destroy or anonymize your personal information unless there are certain circumstances where we have the legal grounds to reject your request.
  • Request to withdraw consent which has been previously provided to us any time. This enables you to withdraw consent from our processing activity which relies on your consent as the lawful basis.
  • Request the transfer of personal information that you have provided to us in a commonly used electronic format, including to request that your Personal Data be transmitted to another data controller or to you, except where it is technically unfeasible, in accordance with the requirements of Personal Data Protection Laws.
  • Request restriction with respect to the processing of your personal information under certain circumstances prescribed under the applicable laws on personal data protection.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact our Data Protection Officer (DPO) (see the ‘Contact Us’ section below).

Right to object to us processing your personal data

In additional to your rights above, you also have the right to object to us processing your personal information in certain circumstances prescribed under the applicable laws on personal data protection (e.g. where data processing is based on a legitimate interest or those of a third party, etc.). To exercise your right to object you should write to the Data Protection Officer by using the contact details below.

Right to lodge a complaint

You have the right to make a complaint with the relevant data privacy authority, if you believe we do not comply with the applicable laws on personal data protection.

Contact Us:

If you would like to exercise any of your rights relating to your personal data or submit a completed Data Subject Right (DSR) Form, please contact our Customer service team:

     Email: info@seek2insure.com

     Tel: 095 204 8240

     Address: Seek 2 Group Co.,Ltd. Supalai Garden Ville, 22/25, Moo 8, Pa Klok, Thalang, Phuket.

If you would like to lodge a complaint relating to personal data protection, or require any further information, please contact our designated DPO:

     Email: pattrika@seek2insure.com

     Tel:  095 204 8240    

Address: Seek 2 Group Co.,Ltd. Supalai Garden Ville, 22/25, Moo 8, Pa Klok, Thalang, Phuket.

Seek2Insure’s Legal Obligations

Privacy regulations require us to keep Information about you private, confidential, secure, and to give you notice of our legal duties and privacy practices.

Safeguarding Your Information

We guard your information with administrative, technical, and physical safeguards to protect it against unauthorized access and against threats and hazards to its security and integrity.

This Notice is Subject to Change

We may change the terms of this Notice and our privacy policies at any time in accordance with applicable law or due to a change of circumstances. If we do, the new terms and policies will be effective for all of the Information that we already have about you, as well as any personal data that we may receive or hold in the future.

This Privacy Notice was last updated in May 2022.

7 September 2015 Update:

Seek 2 Insure (“us”, “we”, or “our”) operates https://www.seek2insure.com (the “Site”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site.

Seek 2 Insure is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Seek 2 Insure may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

What we collect

We may collect the following information:
• Name and telephone contact details if requiring a call back.
• Information on the type of insurance you are interested in and details on the level of product required.
• The number of people you wish to be included on a policy.
• Personal information on each said person to be covered under that policy limited to name, date of birth, occupation, and any further details which you deem to be relevant in the notes section.

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
• In order to pass this information on to our partner BSI Insurance Broker Limited in order for them to generate quote options for you.
• We may use the information to improve our servicing.
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:
• Call us instead of completing forms on our website, and state that you do not wish for your personal records to be recorded in any way.
• If you do not wish for your personal information to be used for direct marketing purposes, you may write or email us at info@seek2insure.com.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you. If you would like a copy of the information held on you please email info@seek2insure.com.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

E-mail:info@seek2insure.com