Last updated: 01/08/2026
Who we are
This website and the Private Rescue membership services are operated by 1st Insurance, trading as Private Rescue (“we”, “us”, “our”). [Registered office address. Regulatory status line.] For anything in this policy, contact [PRIVACY EMAIL]. [If a Data Protection Officer or EU/UK representative is appointed, name them here.]
The short version
We collect what we need to run your membership and respond when you call, and little else. Health and location information is used for one purpose only: getting you help. We never sell personal information, we never share it for advertising, and card numbers never touch our servers.
What we collect and why
When you buy a membership. Name, email, phone, date of birth, postal address, country, and emergency contact details for each person covered, plus a username and password for your member account. We use this to create and administer the membership, verify eligibility, communicate with you about it, and populate the record our operations team relies on if you ever call. Legal basis: performance of our contract with you.
When you pay. Card details are entered directly into secure fields provided by CyberSource, our payment processor, and do not pass through or get stored on our servers. If you enable automatic renewal, CyberSource stores your card in tokenized form and we hold only the token reference, the card type, and the last four digits. We keep records of payments made. Legal basis: performance of contract and our legal obligations regarding financial records.
When you use your member account. Membership status, term dates, add-ons, renewal settings, and payment history. Legal basis: performance of contract.
During an emergency or when you use member services. This is the part that makes us different from an ordinary website, so we state it plainly. When you or someone on your behalf calls the operations line, we collect what the situation requires: your location, the nature of the emergency, medical information including symptoms, conditions, medications and treatment details, and information from people assisting you on the ground. If your membership includes telehealth, consultations involve health information by nature. We use this information for exactly one purpose: assessing, coordinating and delivering advisory, rescue, evacuation and medical services to you. Legal bases: protecting vital interests, performance of contract, and, where required, your explicit consent to processing health data; by requesting services you consent to the processing needed to deliver them.
When you browse this website. Technical data such as IP address, browser type and pages visited, and cookie data as described in our Cookie Policy. If analytics cookies are enabled with your consent, aggregated usage statistics. Legal bases: legitimate interest in running and securing the website, and consent for non-essential cookies.
When you contact us or apply. Whatever you include in enquiries to our membership, enterprise, press or partnership addresses, and CVs sent to our careers address. Legal bases: legitimate interest in responding, and steps prior to entering a contract.
People you add to a membership
Family memberships cover people other than the purchaser, including children. The purchaser is responsible for having their agreement (or parental authority) to share their details with us. We use covered persons’ information only to administer the membership and respond to emergencies involving them. We do not market to children and this website is not directed at them.
Who ever sees your information
We share personal information only where delivering the service or the law requires it, with: response network partners such as medical teams, air ambulance and ground transport providers, hospitals and security personnel, strictly to the extent needed to help you in an operation; CyberSource, for payment processing and tokenized card storage; service providers who host our website, store our data and send our emails, under contracts that restrict their use of it; the underwriter of the Travel Insurance Add-On, where you purchase it and where claims require; your emergency contacts and next of kin, where an emergency involving you makes that necessary; and regulators, law enforcement or courts where the law compels disclosure, including sanctions compliance screening. We do not sell personal information and we do not share it with third parties for their own marketing or advertising.
International transfers
Emergency response is international by nature. If you need help abroad, the information required to help you moves to where you are: to the medical and response teams involved in your case, in whatever country that is. Outside emergencies, our data is stored with providers in [HOSTING LOCATION(S)] and accessed by our operations team in [OPERATIONS LOCATION(S)]. Where information about people in the EU, UK or similar jurisdictions is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses, and, in emergencies, on the transfer being necessary to protect vital interests or perform the contract.
How long we keep it
Membership and account records: for the life of the membership and [X years] afterwards, to handle renewals, disputes and our legal obligations. Payment records: [X years] as required for financial and tax compliance. Operational and medical records from emergencies: [X years], reflecting medical record-keeping and liability requirements. Website enquiries and CVs: up to [X months] unless they lead to a relationship. When retention ends, records are deleted or irreversibly anonymised.
Security
Personal information is held on access-controlled systems, transmitted over encrypted connections, and available to staff only on a need-to-know basis. Card data is handled entirely by CyberSource under PCI DSS. Medical and operational records are restricted to the operations and medical personnel involved. No system is perfectly secure, and if a breach ever creates risk to you we will notify you and the relevant authority as the law requires.
Your rights
Depending on where you live, you have the right to access the personal information we hold about you, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where processing rests on consent. Exercising these rights costs nothing. Some information we must keep despite a deletion request, such as payment records the law requires or operational records we need to defend legal claims, and we will tell you when that applies. To exercise any right, email [PRIVACY EMAIL]; we respond within [30 days / one month]. If you are unhappy with our answer, you can complain to your local data protection authority [and to SUPERVISORY AUTHORITY for our entity].
Marketing communications
We send transactional messages about your membership regardless of preferences: purchase confirmations, renewal notices, changes to legal documents, and safety information relevant to an active trip. Marketing emails, such as travel intelligence updates or new services, are sent only with your consent or where the law otherwise permits, and every one contains a working unsubscribe link. Opting out of marketing never affects your membership or emergency services.
Automated decisions
We do not make decisions with legal or similarly significant effects about you by purely automated means. Membership pricing shown by our estimate tool is a published rate lookup, not profiling.
Changes to this policy
We update this page when our practices or the law change, and the date at the top shows the current version. Material changes will be notified to members by email before they take effect.