Privacy Policy

1. Who is responsible for your data

Ionut Balan, operating the website AnyTravelInsurance.com, is the controller of personal data processed directly through this website. References to “AnyTravel Insurance”, “we”, “us” or “our” in this policy mean Ionut Balan in that capacity.

For privacy questions or to exercise a data protection right, email contact@anytravelinsurance.com. Please use the subject line Privacy request and do not send passport details, health information, payment information or policy documents unless specifically requested through a secure channel.

2. Scope and the external quotation platform

This policy applies to personal data processed on AnyTravelInsurance.com and in direct communications with its operator. It does not govern information you enter after following a link to a separate website.

Online quotations, applications and purchases are completed on SoEasyTravelInsurance.com or another clearly identified external page. SoEasyTravelInsurance.com is operated by SoEasy Insurance Brokers Ltd. When you enter information on that platform, its own privacy information and terms apply, and the entity identified there is responsible for that processing.

Before submitting insurance, travel, identity, health or payment details on an external platform, read the privacy notice displayed there. AnyTravelInsurance.com does not receive your card details or issue your policy.

3. Personal data we may process

If comments, subscriptions or similar features are made available, we may also process the information you deliberately submit through those features, together with reasonable anti-spam and security data. The relevant interface will explain any additional mandatory fields.

Please do not send special-category data, such as medical information, or identity, payment, visa or policy documents to AnyTravelInsurance.com. Insurance-related information should be entered only on the secure quotation platform when it is genuinely required.

4. Purposes and legal bases

Where processing relies on legitimate interests, we consider the necessity of the processing, its expected benefit and its impact on your rights. You may object to such processing in the circumstances described below.

Where processing relies on consent, refusing or withdrawing consent does not affect your access to essential website functions. Withdrawal does not affect processing that was lawful before withdrawal.

5. How data is collected

We collect data directly from you when you email us or use an optional feature, and automatically from your browser or device when the site is requested. Limited data may also be supplied by hosting, security, consent-management and analytics providers acting for us.

The current contact form is designed to open your own email application. The information is not submitted into a WordPress form database by that action, but your email provider and our email provider process the message in order to transmit and receive it.

Cookies and similar technologies are described in the Cookie Policy. Non-essential analytics or marketing technologies should not be activated until you have made the relevant consent choice.

6. Recipients, service providers and international transfers

Personal data may be available, only as reasonably necessary, to providers that support website hosting, security, caching, maintenance, consent management, email delivery and analytics. Current website technology may include WordPress, hosting and security services, Google measurement tools and Jetpack services. The exact services and cookies in use can change; the live cookie scan should be consulted for current details.

We may also disclose information to professional advisers, courts, regulators, law-enforcement bodies or other competent authorities where disclosure is required by law or reasonably necessary to protect legal rights.

We do not sell personal data. A link to SoEasyTravelInsurance.com does not by itself transfer the contents of your message to that platform. If you choose to open the external platform, its operator receives the technical request and any information you subsequently submit there.

Some technology providers may process data outside the European Economic Area. Where GDPR applies and a recipient is in a country without an adequacy decision, the transfer should rely on an appropriate safeguard, such as European Commission standard contractual clauses, together with supplementary measures where necessary. Further information may be requested by email.

7. How long information is kept

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, taking account of the nature of the information, security needs, legal obligations and potential claims.

• General enquiries: retained while the request is handled and then reviewed periodically; routine correspondence is normally deleted or anonymised when it is no longer useful, subject to any legal or dispute-related need.
• Technical and security logs: kept for short operational periods set by the hosting or security service, unless an incident requires longer retention.
• Consent records: retained for the period needed to remember and demonstrate your choice, then renewed, deleted or anonymised in line with the consent tool’s configuration.
• Analytics data: retained according to the configured analytics period and aggregated or deleted when no longer needed.
• Legal records: kept for any period required by applicable law or while a claim, investigation or dispute is reasonably anticipated or ongoing.

You may ask for the retention period applicable to a particular message or dataset.

8. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

• obtain confirmation that your personal data is processed and request access to it;
• correct inaccurate or incomplete personal data;
• request erasure of personal data;
• restrict processing;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain data in a structured, commonly used and machine-readable format, or request its transmission where technically feasible;
• withdraw consent at any time where consent is the legal basis; and
• lodge a complaint with a competent supervisory authority.

These rights are not absolute. For example, we may need to retain limited information to comply with law, protect another person’s rights or establish, exercise or defend a legal claim.

To make a request, email contact@anytravelinsurance.com. We may ask for proportionate information to verify your identity. We aim to respond without undue delay and within the period required by applicable law.

You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus or, where applicable, the supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred. We would appreciate the opportunity to address your concern first, but this does not limit your right to contact an authority.

9. Security, automated decisions and children

Reasonable technical and organisational measures are used to protect information against accidental or unlawful loss, alteration, disclosure or access. No internet transmission or storage system can be guaranteed completely secure, so please use care when deciding what to send by email.

AnyTravelInsurance.com does not use personal data collected on this website to make decisions that produce legal or similarly significant effects through solely automated processing. Automated underwriting or pricing on an external quotation platform, if applicable, is governed by that platform’s own notices.

This website is intended for adults researching travel insurance. We do not knowingly solicit personal data directly from children. A parent or guardian who believes a child has provided personal data should contact us so the matter can be reviewed.

10. Changes and contact

This policy may be updated when the website, providers or legal requirements change. The revised version will be published here and the “Last updated” date will be changed. Material changes may also be highlighted on the website where appropriate.