Privacy Policy | Right Health Insurance

Privacy Policy

Right Health Insurance  |  Operated by Ulist Pty Ltd T/A Uleads Digital
Last updated: June 2026

This policy applies to users in Australia and the United Kingdom.

1. Who We Are

Right Health Insurance is operated by Ulist Pty Ltd T/A Uleads Digital ("we", "us", "our"), a company registered in Australia. We operate a lead generation and referral platform that connects individuals with licensed third-party health insurance brokers and providers. We do not provide health insurance, financial advice, or comparisons ourselves.

We operate across Australia and the United Kingdom. Applicable privacy laws apply depending on your location. See Section 16 for your rights.

2. Definitions

  • Service: The Right Health Insurance website and platform operated by Ulist Pty Ltd T/A Uleads Digital.
  • Personal Data / Personal Information: Any information relating to an identified or identifiable individual.
  • Sensitive Information: A subset of personal information including health information, which is subject to higher privacy protections under applicable law.
  • Usage Data: Data collected automatically from your use of the Service.
  • Cookies: Small files stored on your device to help us operate and improve our Service.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor / Service Provider: A third party that processes data on our behalf under our instructions.
  • Lead: A record created when you submit an enquiry through our platform.
  • Provider / Third Party Partner: A licensed health insurance broker or provider to whom we may pass your enquiry details.

3. Our Services

Right Health Insurance is a referral and lead generation platform. We connect individuals with licensed health insurance brokers and providers. Our services include:

  • Connecting users with licensed third-party health insurance brokers and providers for quotes and consultations
  • Providing general editorial content and information about health insurance
  • Sending relevant offers, updates, and information about health insurance and related products and services
  • Facilitating participation in surveys, promotions, or market research

We do not provide health insurance, act as a health insurance broker, offer financial product advice, or compare products across the market. All enquiries are referred to our Third Party Partners who are licensed to provide their respective products and services.

4. How Our Services Work (IMPORTANT)

Our platform is designed to connect you with relevant licensed health insurance providers quickly. We use automated systems to score and prioritise enquiries and to match requests with suitable Third Party Partners.

If an automated decision has a legal or similarly significant effect on you, you have the right to request a human review, to obtain an explanation of the decision, and to contest the outcome. To request a review contact [email protected]. We will acknowledge requests within 5 business days and respond substantively within 30 calendar days.

When you submit a form:

  • You provide your details and health insurance requirements
  • We assess your request (including automated processing where applicable)
  • We refer your enquiry to relevant licensed Third Party Partners
  • Your details are shared with those providers
  • Providers may contact you directly by:
    • Phone
    • Email
    • SMS or messaging apps (e.g. WhatsApp)

By submitting your details, you consent to be contacted by us and our Third Party Partners in accordance with this policy and applicable law.

5. What Personal Information We Collect

a) Information you provide

  • Name, email address, phone number
  • Address or postcode
  • Age and date of birth
  • Health insurance requirements and preferences
  • Number of people to be covered (individual, couple, family)
  • Any additional information submitted relevant to your health insurance enquiry
Sensitive Information — Health Data In the course of submitting a health insurance enquiry, you may provide information that constitutes sensitive information under applicable privacy law, including health-related details such as existing medical conditions, smoker status, or age-related health factors. We collect this information only where you voluntarily provide it and only to the extent necessary to refer your enquiry to appropriate Third Party Partners. We handle all sensitive information with a higher standard of care and will not use it for any purpose beyond facilitating your referral and, where applicable, communicating with you about related products and services you have consented to receive.

b) Automatically collected data

  • IP address
  • Device and browser information
  • Usage behaviour and pages visited
  • Cookies and tracking data

c) Additional data sources

  • Marketing partners
  • Data enrichment providers
  • Publicly available data

d) Lead generation-specific data

  • Partially completed form data
  • Lead scoring and profiling data
  • Disposition data (e.g. whether you engaged with a Third Party Partner)

e) Call Recording

Some Third Party Partners you are connected with through our platform may record calls for quality assurance, training, fraud prevention, and dispute resolution purposes. Please refer to the relevant provider's privacy policy for details.

6. How We Use Your Information

Core services

  • Referring your enquiry to relevant licensed health insurance brokers and providers
  • Facilitating quotes and consultations

Lead distribution

  • Sharing your details with Third Party Partners so they can contact you directly

Verification and fraud prevention

  • Ensuring submissions are genuine
  • Preventing duplicate or fraudulent leads

Communications

  • Responding to enquiries
  • Customer support and feedback

Marketing and advertising

  • Sending relevant offers and information, including offers related to other products and services operated by Ulist Pty Ltd T/A Uleads Digital
  • Creating custom and lookalike audiences
  • Measuring campaign performance

Service improvement

  • Analytics and user behaviour insights
  • Lead scoring and platform optimisation

7. Legal Basis for Processing

Our legal basis for processing depends on your region:

  • Australia: We collect and use personal information where it is reasonably necessary for our functions (APP 3), where you would reasonably expect it, or where you have provided consent. For sensitive information (including health data), we rely on your express consent.
  • UK: We process personal data on the basis of contract performance, legitimate interests, consent, or legal obligation under UK GDPR. For special category data (including health data), we rely on explicit consent.
Processing ActivityPrimary APPs (AU)UK/GDPR BasisOther Laws
Collecting form data to fulfil enquiriesAPP 3; APP 5; APP 1Contract; Legitimate interestsConsumer law obligations
Collecting sensitive/health informationAPP 3; APP 6 (consent)Explicit consent (Art. 9 UK GDPR)Health Records Act
Sharing leads with Third Party PartnersAPP 6; APP 1Contract; Legitimate interestsContract law; consumer protection
Marketing communicationsAPP 6; APP 5Consent; Legitimate interestsSpam Act 2003; Do Not Call Register
Automated matching and lead scoringAPP 1; APP 3; APP 6Legitimate interestsOAIC guidance; ICO guidance
Fraud prevention and verificationAPP 3; APP 6; APP 11Legitimate interests; Legal obligationCriminal law interfaces
Analytics and advertisingAPP 6; APP 11; APP 1Consent; Legitimate interestsAd platform policies
Cross-border transfersAPP 8Art. 46 UK GDPR safeguardsInternational transfer rules
Data subject rightsAPP 12; APP 11Art. 15–22 UK GDPROAIC; ICO
Backups and disaster recoveryAPP 11; APP 1Art. 32 UK GDPRN/A
DPIAs and Records of Processing We perform Data Protection Impact Assessments (DPIAs) for high-risk processing activities including profiling, health data processing, and large-scale cross-border transfers. We maintain a Record of Processing Activities (RoPA). Summaries are available on request from [email protected].

8. Contacting You (Calls, SMS, AI)

When you provide your contact details, we or the Third Party Partners we connect you with may contact you via phone calls, SMS, messaging platforms (e.g. WhatsApp), and email. This may include manual contact by our team or automated and AI-assisted tools.

You can opt out at any time by following the unsubscribe instructions in any message or contacting us at [email protected].

We comply with applicable anti-spam and telemarketing laws including Australia's Spam Act 2003 and Do Not Call Register Act. All marketing messages will clearly identify us and include a functional unsubscribe mechanism.

9. Sharing Your Personal Information

a) Service providers

Hosting, CRM, analytics, data enrichment or validation partners who process data on our behalf under contract.

b) Third Party Partners (key function)

When you submit an enquiry, your data is referred to relevant licensed health insurance brokers and providers who may contact you directly. These providers act as independent controllers of your data and have their own privacy policies. You will be dealing directly with them, not with Right Health Insurance.

c) Advertising platforms

Google, Meta, TikTok. We may share pseudonymised data to measure campaign performance and build custom or lookalike audiences.

d) Business transactions

If Ulist Pty Ltd T/A Uleads Digital is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

e) Law enforcement

We may disclose your data where required by law or in response to valid requests by public authorities, or where we believe disclosure is necessary to protect rights, property, or safety.

Processor and controller roles We will clearly identify, on request, which third parties act as independent controllers and which act as processors. A current list of subprocessors is available on request from [email protected].

10. International Transfers

Your data may be transferred and processed outside your country of residence, including in Australia, the United Kingdom, and other countries where our service providers operate. We take appropriate steps to ensure your data is protected in accordance with applicable law, including standard contractual clauses and adequacy decisions. Contact [email protected] for information about safeguards used for a specific transfer.

11. Data Retention

We retain personal information only as long as necessary for the purposes collected and to meet legal obligations.

Data TypeRetention Period
Lead/enquiry dataUp to 4 years
Marketing contact dataUntil opt-out or 12 months inactivity
Partial form data24 hours (backups up to 30 days)
Research dataUp to 4 years
Web analytics dataUp to 26 months

We securely delete or de-identify data when it is no longer required.

12. Cookies and Tracking

We use cookies, event tracking technologies, and advertising identifiers for website functionality, analytics, and advertising attribution. Cookie types include:

  • Session Cookies — to operate our Service
  • Preference Cookies — to remember your preferences and settings
  • Security Cookies — for security and fraud prevention
  • Analytics Cookies — to understand how visitors interact with our website

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

13. Service Providers

We work with third-party service providers who process data on our behalf under contract and are obligated not to use it for any other purpose.

Analytics: We use Google Analytics. You can opt out via the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy for more.

Behavioural Remarketing: We use remarketing services including Google Ads and Meta (Facebook). You can opt out of personalised Google advertising at google.com/settings/ads and manage Facebook preferences at facebook.com/help.

14. Security

We implement appropriate technical, organisational, and physical measures to protect your data, including:

  • Encryption in transit (TLS 1.2 or higher) and at rest
  • Access controls and least-privilege authentication
  • Multi-factor authentication for administrative access
  • Firewall protections and anomalous access monitoring
  • Incident response procedures for detecting, reporting, and addressing data breaches

In the event of a data breach we will contain and remediate the incident promptly and notify affected individuals and relevant regulatory authorities as required by law. If you believe your interaction with us is no longer secure, please notify us at [email protected].

15. Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, contact [email protected] and we will take prompt steps to remove that information.

16. Your Rights by Region

Contact [email protected] to exercise any of the rights below. We will acknowledge requests within 5 business days and respond within 30 calendar days.

🇦🇺 Australia — Privacy Act 1988 (Cth) & Australian Privacy Principles

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Under Australian law you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate, incomplete, or outdated information
  • Opt out of direct marketing at any time
  • Make a complaint about how we handle your personal information

We are subject to the Notifiable Data Breaches (NDB) scheme. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC as soon as practicable.

If you are not satisfied with our response, you may contact the OAIC:

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • Mail: GPO Box 5218, Sydney NSW 2001

🇬🇧 United Kingdom — UK GDPR & Data Protection Act 2018

For users in the United Kingdom, we act as a Data Controller under the UK GDPR and the Data Protection Act 2018. You have the right to:

  • Access your personal data (Subject Access Request)
  • Rectification of inaccurate or incomplete data
  • Erasure ("right to be forgotten") in certain circumstances
  • Restriction of processing
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interests or direct marketing
  • Not be subject to solely automated decision-making with significant effects
  • Withdraw consent at any time where processing is based on consent

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

17. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be published at righthealthinsurance.com/privacy-policy with a revised effective date. We encourage you to review this policy periodically.

18. Contact Us

For any privacy-related queries or to exercise your rights:

  • Email: [email protected]
  • Mail: Ulist Pty Ltd T/A Uleads Digital, Level 2/89 McLachlan St, Fortitude Valley QLD 4006, Queensland, Australia

We will acknowledge all requests within 5 business days and respond substantively within 30 calendar days.

Right Health Insurance is not a health insurance provider, health services provider or financial services provider. We operate exclusively as referral service. 

By using our website at https://www.righthealthinsurance.com/ (Site) and submitting your information, you acknowledge and agree that Right Health Insurance will share your information with our third-party partners, who may contact you directly. All enquiries initiated on this Site are referred to our partners who are licensed health insurance brokers (Third Party Partners) who can compare selected products from their panel of insurers. They do not compare all providers or products in the market. We receive referral fees and commissions from these Third Party Partners for making these introductions. We do not provide comparisons between health insurance providers, provide insurance, financial or financial product advice, or act as a product issuer. We do not sell, recommend, or otherwise provide any opinion in relation to any insurance products or services, or provide financial or financial product advice. We make no representations that any insurance product or service is most suitable for your needs.

By clicking “SUBMIT,” you understand that you will be referred to and dealing directly with the Third Party Partner and/or its representatives, not with Right Health Insurance. You consent to receive notices, phone calls, and other communications from these third-party companies and/or their representatives at the contact information you provide.

Please note that the Site and its content (including tools, information, insights, or resources) are provided for general information purposes only, on an “as is” basis. Our content does not constitute advice of any nature (legal, financial, health insurance, or tax). We do not represent that any information provided is accurate, up-to-date, or more suitable than options not featured on our Site. You use our content at your own risk, and we assume no responsibility or liability for your use or reliance on it, to the extent permitted by law. It is your responsibility to determine the suitability, reliability, and usefulness of our Site and content. We recommend seeking advice from a licensed professional to address your specific objectives, financial situation, and needs before making any decision.

By submitting your details on this site, you agree to our terms and conditions.

Become A Partner | Terms & Conditions | Privacy Policy

Copyright 2023 - All Rights Reserved