Authorised & regulated office · English-speaking team (+34) 952 835 600

Legal & Regulatory Information

Who we are, how we are regulated as an insurance distributor in Spain, how we handle your personal data, and the terms that apply to this website.

Last updated: October 2026

This website, www.healthplanspain.com ("the website"), is operated in accordance with Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (Ley de Servicios de la Sociedad de la Informacion y de Comercio Electronico, "LSSI-CE"). The identifying details of the service provider are:

  • Trading name: HealthPlan Spain
  • Operated by: Sean Guy (self-employed / autonomo)
  • Tax identification (NIE/NIF): X5769518Z
  • Registered office: Calle Valentuñana, No. 2, 29601 Marbella, Málaga, Spain
  • Telephone: (+34) 952 835 600
  • Email: via our contact page
  • DGSFP registration: C0320X5769518Z (see section 2)

HealthPlan Spain is an independent business that distributes the health insurance products of Sanitas, S.A. de Seguros. It is not the insurer. Insurance cover is provided by Sanitas under the terms of the relevant policy.

2. Insurance distribution & regulatory status

Insurance distribution in Spain is governed by Royal Decree-Law 3/2020, of 4 February (Real Decreto-ley 3/2020), which transposes the EU Insurance Distribution Directive (Directive (EU) 2016/97, "IDD") into Spanish law, together with its implementing regulations. The competent supervisory authority is the Direccion General de Seguros y Fondos de Pensiones ("DGSFP"), part of the Spanish Ministry of Economy.

In line with the information duties set out in that legislation, we disclose the following:

  • Status: HealthPlan Spain acts as an exclusive insurance agent (agente de seguros exclusivo) of Sanitas, S.A. de Seguros.
  • Register: We are entered in the DGSFP's special administrative register of insurance distributors under code C0320X5769518Z (the prefix C0320 corresponds to Sanitas, S.A. de Seguros).
  • How to verify our registration: Our entry can be checked free of charge in the DGSFP register at dgsfp.mineco.gob.es.
  • Basis of advice: As an exclusive agent, any information or recommendation we provide is based on the range of insurance products of Sanitas. We do not provide advice on the basis of a fair and personal analysis of the wider market.
  • Holdings: HealthPlan Spain does not hold, directly or indirectly, a holding of 10% or more of the voting rights or capital of Sanitas, S.A. de Seguros. Likewise, neither Sanitas nor its parent undertaking holds 10% or more of the voting rights or capital of HealthPlan Spain.
  • Professional liability: As an exclusive agent, civil/professional liability arising from our activity is assumed by the insurer, Sanitas, S.A. de Seguros, as provided for under Royal Decree-Law 3/2020.
  • Remuneration: In connection with the policies we arrange we are remunerated by means of a commission that is included within the insurance premium. You may request further detail on the nature of our remuneration at any time.

3. Privacy & data protection

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights ("LOPDGDD").

Data controller

The controller of your personal data is Sean Guy (HealthPlan Spain), NIE X5769518Z, Calle Valentuñana, No. 2, 29601 Marbella, Málaga, Spain. You can contact us about data protection through our contact page or by telephone on (+34) 952 835 600.

What data we collect and why

We collect the information you provide when you request a quote, ask us to arrange or administer a Sanitas policy, request a callback, or otherwise contact us. Depending on the service, this may include your name, contact details, date of birth, postcode/province, and — where it is necessary to provide an insurance quote or policy — health-related information.

We use this data to:

  • prepare insurance quotes and arrange, manage and renew Sanitas policies on your behalf;
  • respond to your enquiries and requests for a callback;
  • comply with our legal, regulatory and tax obligations as an insurance distributor; and
  • where you have consented, send you information about products and services that may be of interest.

Legal bases

  • Performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) — to provide quotes and arrange or administer your policy at your request;
  • Legal obligation (Art. 6(1)(c) GDPR) — to meet our obligations under insurance-distribution, tax and anti-money-laundering law;
  • Consent (Art. 6(1)(a) GDPR) — for optional marketing communications, which you may withdraw at any time;
  • Explicit consent for special-category data (Art. 9(2)(a) GDPR) — health data is processed only where you have given your explicit consent, and only to the extent necessary to obtain a quote or arrange your health insurance.

Who we share your data with

To provide a quote or arrange a policy we share the necessary data with Sanitas, S.A. de Seguros (part of the Bupa group). We may also use trusted service providers (for example website hosting and communications providers) who act on our instructions as data processors, and we may disclose data to public authorities where we are legally required to do so. We do not sell your personal data.

In plain words, these are the companies that may see something about you or your visit, and when. Sanitas receives your application when you send it to us. Google sees how the site is used through Google Analytics, but only after you press Accept on our cookie bar; Google may process this in the United States under the EU-US Data Privacy Framework. Google also sees the address of the page you are on when one of its maps or a YouTube video shows on that page (see section 4). Zoho provides the chat (which loads only when you press the Chat headset), our customer records and our e-mail, so it holds what you send us through our forms; Zoho keeps all of this in the European Union. The OpenStreetMap Foundation provides the maps with the pins in our medical directory: your browser fetches the map pictures from its servers, which see your IP address and the page you are on; it sets no cookie.

International transfers

Your data is processed within the European Economic Area wherever possible. Where any transfer outside the EEA is necessary, it will be protected by appropriate safeguards recognised under the GDPR (such as an adequacy decision or Standard Contractual Clauses).

How long we keep it

We keep your personal data for as long as it is needed to provide the service you have requested and to manage our relationship, and thereafter only for the periods required to meet legal, regulatory and tax obligations and to defend against any potential claims. After that it is securely deleted or anonymised.

Your rights

You have the right to access your personal data and to request its rectification or erasure, to restrict or object to its processing, to data portability, and to withdraw any consent you have given (without affecting the lawfulness of processing carried out before withdrawal). To exercise these rights, contact us using the details above.

If you believe your data protection rights have not been respected, you also have the right to lodge a complaint with the Spanish Data Protection Agency, the Agencia Espanola de Proteccion de Datos (www.aepd.es).

4. Cookies policy

In accordance with Article 22.2 of Spain's law on information society services (the LSSI-CE) and the guidance of the Spanish Data Protection Agency (AEPD), this section explains, in plain words, which cookies this website uses, what each one does, how long it stays and whether it needs your consent.

A cookie is a small text file that a website stores in your browser. When you first visit us, a small bar at the foot of the page asks you to choose. Google Analytics is not loaded until you press Accept; No thanks is just as easy and means it is never loaded. Your choice is kept for 12 months and then we ask again. You can change your choice at any time: that link, and the Cookies link at the foot of every page, bring the bar back.

Cookies set by this website (no consent needed)

  • hps_consent: remembers the choice you made on the cookie bar, yes or no. Set by this website when you press a button on the bar. Kept for 12 months. It is the record of your choice, so it needs no consent of its own.
  • hps_quote: keeps the details you type into the quote box (your province, the start date, the postcode band, the reason for cover, the dates of birth you enter and the plan you pick; never a name or an e-mail address) so that your prices follow you around the site and the application form opens already filled in. Set by this website only when you use the quote box. Kept for 6 months. It does only what you asked for, so it needs no consent.

Google Analytics (only after you press Accept)

When you press Accept, the page loads Google Analytics 4 (property G-G2BW8XLQNL), which sets Google's cookies _ga and _ga_G2BW8XLQNL. Set by Google; kept for up to 2 years (your browser may shorten this). They give us counts: which pages are read, how visitors move through the site, and which devices and browsers they use, so we can make the site better. We load the tag with Google's Consent Mode and the advertising signals switched off (ad_storage, ad_user_data and ad_personalization are denied; only analytics_storage is granted), and this website carries no advertising tags. If you later choose No thanks, the tag is switched off and those cookies are removed. Until you press Accept, Google Analytics is not loaded. Google describes these cookies at policies.google.com/technologies/cookies.

Maps and videos on some pages

The directory's pages for a single clinic or doctor and our hospital pages show a Google Maps window with the address, and three of our articles hold a YouTube video. Each is a small window onto Google's own site: when the map or the video shows, Google sets its own cookies in your browser and sees the address of the page you are on, whatever you chose on our cookie bar. Google describes those cookies at the same page, policies.google.com/technologies/cookies. We are changing these pages so that the map or the video loads only when you press it. The maps with the pins in the directory itself come from OpenStreetMap, which sets no cookie.

The chat (only after you press the headset)

Nothing from the chat loads by itself. When you press the Chat headset in the header, the page loads Zoho SalesIQ, the chat service we use, and Zoho sets its own cookies to keep your conversation together while you move from page to page. They are set by Zoho (salesiq.zohopublic.eu), only when you start a chat, which is your request for that service, and Zoho describes them at zoho.com/privacy/cookie-policy.html. We also keep a small note in your browser's storage (hpsChatOpen, two hours) so the chat window comes back on the next page.

Browser storage that is not a cookie

  • hps_app_draft: on the application form, what you have typed so far (every answer on the form, so you can come back and carry on), kept in your browser for 7 days and removed when the application is sent. A form opened from a link we sent you keeps its own copy for 24 hours. No consent needed: it is your own form, saved as you go.
  • hps_blog_textsize: on blog articles, the text size you picked, so the next article opens the same way. Kept until you clear your browser's storage. No consent needed.
  • hps_consent in your browser's storage: used only when your browser refuses cookies, so that the bar does not come back on every page. It never loads Google Analytics.

Our office's sign-in cookie (hps_admin) and its editing notes are set only on the office's own administration pages, never on the pages visitors see. You can also block or delete cookies in your browser's settings at any time; if you delete hps_consent, the bar simply asks you again.

5. Terms of use

The content of this website is provided for general information only. It is intended to help you understand and compare Sanitas health insurance and does not constitute a binding offer of insurance, nor personalised financial, legal or medical advice. The cover, conditions, exclusions, waiting periods and prices that apply to you are those set out in the official Sanitas policy documentation and your personalised quote, which prevail over any general information shown here.

While we take care to keep the information on this website accurate and up to date, prices and product details can change; you should always confirm current terms with us before taking out a policy. We are not responsible for the content of any third-party websites that may be linked from this site.

All trademarks, logos and brand names referred to (including "Sanitas" and "Bupa") are the property of their respective owners and are used for identification purposes only. The design and original content of this website may not be reproduced without permission.

These terms, and any relationship arising from your use of this website, are governed by Spanish law.

6. Complaints & dispute resolution

If you are unhappy with any aspect of our service, please contact us first using the details above so that we can try to put things right.

Complaints relating to your policy or to the insurance itself may also be directed to Sanitas's customer-complaints service (Servicio de Atencion al Cliente / Departamento de Gestion de Reclamaciones), in writing to Sanitas, S.A. de Seguros, Calle Ribera del Loira 52, 28042 Madrid, or by email to reclamaciones@sanitas.es. Sanitas also has a Defensor del Cliente (customer ombudsman) for eligible complaints — broadly, those not exceeding €21,000 concerning the interpretation of the policy conditions. The procedure and eligibility are set out in Sanitas's Reglamento para la Defensa del Cliente, available at sanitas.es. Sanitas will acknowledge your complaint and reply within the legally established period.

If your complaint is not resolved to your satisfaction within that period, you may escalate it to the Complaints Service of the DGSFP (Servicio de Reclamaciones de la Direccion General de Seguros y Fondos de Pensiones), Paseo de la Castellana 44, 28046 Madrid — see dgsfp.mineco.gob.es. This does not affect your right to pursue any other legal remedy available to you.