Privacy Policy

This is our main Privacy Notice and it explains how we use Personal Information which we collect about individuals.

Yu Life Ltd. (YuLife) of 12 Mallow St, London EC1Y 8RQ is registered with the Information Commissioner’s Office (ZA312163) and are responsible for how we use information about you.

YuLife are also a joint data controller with AIG Life Limited for insurance benefits.

For more information or queries about how we use your data, you can contact us by writing to data@yulife.com or through the chat function on our website.

We use information about you (your ‘personal data’) for many reasons, which we will talk about below. Information about what to do if, for example, you want to make a complaint or ask us for your information is at the bottom of this policy.

We have categorised the information we use under the following headings:

1. When your employer signs you up to an insurance product or for processing claims

What are we doing? When your employer signs you up to an insurance product, or you or your employers submits a claim, we will collect certain information in order to address the query, or to provide a service. The information we ask for enables us to:

  • contact you or your employer about the product
  • generate an insurance policy
  • process claims.

What is the information? If your employer purchases an insurance product, either directly through YuLife, or through a third-party broker, we will need basic information such as your name and contact details. We will also need information about your life and circumstances. Some of this may be sensitive information, such as about your health, or details of beneficiaries. We will only ask for what we need.

Where do we keep it? We keep the information on our systems. We make sure the data we collect from you will be transferred to and stored in regions that are deemed adequate by the European Commission, including under the EU-US Privacy Shield.

How do we keep your information safe? We will only store your information on our own secure servers or with approved third-parties who meet our security standards. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our sites, you are responsible for keeping this password confidential. We ask you not to share your passwords with anyone.

How long do we keep it for? Once your employer has cancelled your policy, we are required by law to keep your name and contact details and the insurance type for a minimum of six years.

We will contact you to check if you still want to hear from us after the conclusion of your policy.

Specifically, we share with:

  • AIG Life Limited: the insurance benefits included with your YuLife membership are underwritten by American Insurance Group (AIG). In order for these insurance benefits to be administered it is required that your personal data is stored by AIG. AIG also requires policy details to administer any claims. You can find the full AIG privacy notice here: (https://www.aiglife.co.uk/privacy-policy)
  • RGA: the insurance benefits included with your YuLife or YuLife Light membership are reinsured by the Reinsurance Group of America (RGA). In order for these insurance benefits to be administered it is required that your personal data is processed by RGA. You can find the full RGA privacy notice here: (https://www.rgare.com/privacy-policy).
  • Insurance brokers: after receiving the personal data obtained by your or your company’s insurance broker, we will generate a quote and provide this to the broker. Once the quote is accepted an application form is generated and the policy schedule is written and passed back to the broker. Salary information updated by an employer is via a broker’s portal or directly on the YuLife website. That information is used to update premiums.
  • PTL Governance Limited: If your membership has been bought for you by your employer it will have been put in trust with PTL. PTL will require your name, email, home address and payment details to fulfil any claims whilst the insurance benefit is in trust. You can find the full PTL privacy notice here: (https://www.ptluk.com/glmt-data-protection-policy).
  • Third Party Suppliers: We  work with other business partners, suppliers, and subcontractors:
  • Third-party marketing companies: LinkedIn, Facebook, Google Ads.
  • Data and Analytics providers: these assist us in the improvement and optimisation of products and services.
  • Credit reference agencies: It may be necessary to assess your credit score where this is a condition of us entering into a contract with you.
  • Secure payment gateways: we use Stripe and GoCardless to handle our payments.

We may also disclose your personal information to third-parties in the following circumstances:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If Yu Life Ltd. or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we have a legal obligation to disclose the data, in order to enforce or apply any other agreement between Yu Life Ltd. and our customers.
  • If we have a legal obligation to disclose the data, in order to protect the rights, property or safety of YuLife, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

What is our legal basis for doing this? We rely on the lawful basis of Contract to process this insurance premiums and claims.

Do we carry out automated decision making? We input factors such as: salary, location, historical medical conditions, and age, into a risk table to determine eligibility for insurance products.

2. Correspondence

What are we doing? Information is collected when you correspond with us via email, phone or chat, or when you report any problems with our services, or any of our services’ sites. We use this information to resolve your query and to improve our products and services.

What is the information? This can be whatever information you provide. At minimum, we collect your name and contact details; however, this may also be sensitive information if that is relevant to your query.

Where do we keep it? We keep the information on our systems. We make sure the data we collect from you will be transferred to and stored in regions that are deemed adequate by the European Commission, including under the EU-US Privacy Shield.

How do we keep your information safe? We will only store your information on our own secure servers or with approved third-parties who adhere to our security standards. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our sites, you are responsible for keeping this password confidential. We ask you not to share your passwords with anyone.

How long do we keep it for? If the information is about a policy, we will keep this for six years after the policy is cancelled. If it does not relate to a specific policy, we will keep this for 12 months.

Who do we share it with? Sometimes we work with third-parties and will tell you when we receive information about you from any other third-party and the purposes for which we intend to use that information.

Specifically, we share with:

AIG Life Limited: the insurance benefits included with your YuLife membership are underwritten by American Insurance Group (AIG). In order for these insurance benefits to be administered it is required that your personal data is stored by AIG. AIG also requires policy details to administer any claims. You can find the full AIG privacy notice here: (https://www.aiglife.co.uk/privacy-policy)

RGA: the insurance benefits included with your YuLife or YuLife light membership are reinsured by the Reinsurance Group of America (RGA). In order for these insurance benefits to be administered it is required that your personal data is processed by RGA. You can find the full RGA privacy notice here: (https://www.rgare.com/privacy-policy).

Insurance brokers: after receiving the personal data obtained by your or your company’s insurance broker, we will generate a quote and provide this to the broker. Once the quote is accepted an application form is generated and the policy schedule is written and passed back to the broker. Salary information updated by an employer is via a broker’s portal or directly on the YuLife website. That information is used to update premiums.

PTL Governance Limited: If your membership has been bought for you by your employer it will have been put in trust with PTL. PTL will require your name, email, home address and payment details to fulfil any claims whilst the insurance benefit is in trust. You can find the full PTL privacy notice here: (https://www.ptluk.com/glmt-data-protection-policy).

Third Party Suppliers: We  work with other business partners, suppliers, and subcontractors:

  • Third-party marketing companies: LinkedIn, Facebook, Google Ads.
  • Data and Analytics providers that assist us in the improvement and optimisation of products and services.
  • Credit reference agencies: It may be necessary to assess your credit score where this is a condition of us entering into a contract with you.
  • Secure payment gateways: we use Stripe and GoCardless to handle our payments.

We may also disclose your personal information to third-parties in the following circumstances:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If Yu Life Ltd. or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If the law tells us to.
  • In order to:
  • Enforce or apply any other agreement between Yu Life Ltd. and our customers.
  • Protect the rights, property or safety of YuLife, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

What is our legal basis for doing this? If you have a contract with us, we process the information to ensure we can carry out the contract between us. If you do not have a contract, or are not discussing how to enter a contract, we will not collect sensitive personal data and process through our legitimate interests, which are commercial interests and providing communication services to individuals.

Do we carry out automated decision making? We do not undertake automated decision making unless you have a contract with us, or in relation to using our app.

3. App and website information

What are we doing? We collect the information you provide when you register to use the App or any of our websites, download or register the App, subscribe to any of our services and use our App or any of our services. We collect this information to track your use of our services (including progression and engagement with the App) to enable us to create better, more engaging services and help us create a more personal experience or to give you location-based information or challenges.

What is the information?

  • Information about the type of mobile device you use, unique device identifiers, mobile network information, your mobile operating system, the type of mobile browser you use, time zone settings.
  • Information stored on your device, for example: contact information, friends list, login information, photos or other digital content. You will be notified and asked to authorise our use of this data.
  • Error logs, details of your use of any of YuLife's Apps or your visits to any of YuLife's sites including, but not limited to traffic data, other communication data, error data and interactions with our rewards service.
  • Information we access and store through integrations and connectivity through our app with: Google Fit Services and/or Garmin and/or Fitbit and/or Apple Health kit. You will be notified and asked for consent before connections are made.
  • We may also use location-based services to determine your current location.

Please be aware that if you design an avatar that this will be visible to YuLife and other users. If you design an avatar that is true to life, this may mean that you will be identifiable from this avatar.

Where do we keep it? The information is kept on our secure servers, or on those of our trusted partners and service providers.

How do we keep your information safe? We use certain services, including social networking, chat room, or forum features. Please ensure when using these features that you do not submit any personal data that you do not want to be seen, collected, or used by other users.  We will only store your information on our own secure servers, or with approved third-parties who adhere to our security standards. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our sites, you are responsible for keeping this password confidential. We ask you not to share your passwords with anyone.

How long do we keep it for? If you do not use the app and other digital products for a period of 12 months after you cease to hold insurance with us, we will remove your personal data from our systems.

Who do we share it with? On occasion, we work with third-parties (for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, fitconnect data aggregation services). We will notify you when we receive information about you from any other third-party and the purposes for which we intend to use that information.

We work with other business partners, suppliers, and subcontractors:, for the performance of any contract we enter into with them or you:

  • Third-party marketing companies: such companies require data to select and serve relevant adverts to you and others.  We do not disclose any personally identifiable information to our advertisers, but we will provide them with anonymised, aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisements on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1), and to display targeted advertising to this effect.
  • Data and Analytics and search engine providers that assist us in the improvement and optimisation of products and services on  our site.

We may disclose your personal information to third-parties in the following circumstances:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If Yu Life Ltd. or substantially all of its assets are acquired by a third-party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligations or requests.
  • In order to:
  • enforce or apply any other agreement between Yu Life Ltd. and our customers.
  • protect the rights, property or safety of YuLife, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Our sites or App may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates (including, but not limited to, websites on which the app or the services are advertised). If you follow a link to any of these websites, please note that these websites have their own privacy policies, and that we do not accept any responsibility or liability for these policies, or for any personal data that may be collected through these websites or services, such as contact and location data. Please check these policies before you submit any personal data to these websites or use these services.

What is our legal basis for doing this? Access to locally stored data and information on your location is with your consent. Otherwise, we collect through our legitimate interests, or, where this is part of the service that we provide, under the legal basis of contract.

Do we carry out automated decision-making?

We use automated decision-making to send personalised messaging based on your engagement; for example, if you are using an element of the app we may prompt you to engage with other elements; or, if you are not using a certain element of the app we may prompt you to start using it.

4. Rewards Programme

What are we doing? We process some data to enable you to receive the benefits of our rewards program and achieve lower monthly subscription fees in the future.

We want to understand which promotions and content are most relevant to you and at an aggregate level our customer base to better serve more engaging and relevant material, to assess what types of rewards are most valuable to you so to ensure we continue to onboard more relevant rewards partners.

What is the information? We analyse your holistic wellbeing and offer additional rewards, or potentially lower prices on insurance, to encourage you to engage with healthy activities, and to create large anonymised sample sets of data for research to better understand how a populous can improve their overall health by engaging with our product.

We also process information about your in-App purchases, or rewards redemptions, information about competitions you have entered, promotions you have engaged with, surveys you have taken, content relating to YuLife that you have shared through the App’s social media functions. This allows us to customise your in-App experience.

Where do we keep it? The information is kept on our secure servers, or on those of our trusted partners and service providers.

How do we keep your information safe? We will only store your information on our own secure servers, or with approved third-parties who adhere to our security standards. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our sites, you are responsible for keeping this password confidential. We ask you not to share your passwords with anyone.

How long do we keep it for? If you do not use the app and other digital products for a period of 12 months after you cease to hold insurance with us, we will remove your personal data from our systems, with the exception of the data processed in relation to an insurance product.

Who do we share it with?

Third Party Suppliers: We work with other business partners, suppliers, and subcontractors, for the performance of any contract we enter into with them or you:

  • Third-party marketing companies: such companies require data to select and serve relevant adverts to you and others.  We do not disclose any personal data to our advertisers, but we will provide them with anonymised, aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisements on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1), and to display targeted advertising to this effect.
  • Data and Analytics and search engine providers that assist us in the improvement and optimisation of products and services.

We may disclose your personal information to third-parties in the following circumstances:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If Yu Life Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligations or requests.
  • In order to:
  • enforce or apply any other agreement between Yu Life Ltd. and our customers.
  • protect the rights, property or safety of YuLife, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

What is our legal basis for doing this? Where this forms part of our service agreement with you, we process under contract. Otherwise, we rely on the lawful basis of legitimate interests, which are commercial interests and offering individuals access to our rewards programme, and where those legitimate interests do not override your rights and freedoms in relation to your personal data.

Do we do automatic decision-making?

We may combine any category of information with any other category of information, and will treat the combined information as personal data, in accordance with this policy for as long as it is combined.

We may additionally use any of the above categories of information to perform automated decision-making for rewards.

Your rights

You have several rights over your data. If you want to do any of these things, please contact us. Please note that some of these rights are not guaranteed. For example, you can always ask for a copy of your data, but if you ask us to delete something that we have a legal obligation to hold (such as information about a donation), then we may not be able to comply.

  1. The right to be informed We will tell you what we are doing with your information
  2. The right of access You can ask us for a copy of your data.
  3. The right to rectification If you think that our records on you are wrong, please let us know. We will correct any factually incorrect information.
  4. The right to erasure In some cases you can ask us to delete your information.
  5. The right to restrict processing You can ask us to stop using your data for certain purposes.
  6. The right to data portability You can ask us for a copy of your data in a format that is machine-readable
  7. The right to object You can object to some of our processing
  8. Rights in relation to automated decision making and profiling You can ask us to review any automated decision we have made.

Marketing

We will only market to you with your consent, or when we can use the ‘soft opt-in’ if you have shown an interest in our products and services. This means that you will have either explicitly agreed to receive marketing communications, or that you have engaged with us in a significant way, which allows us to send you some limited marketing messages related to services or products you are interested in.

You have the absolute right to object to direct marketing and you can opt out at any time.