PRIVACY NOTICE

In this Privacy Notice, we identify the personal data that we collect about you and how we use that data. This Privacy Notice applies to any personal data you provide to us and any personal data we collect from other sources, unless you are provided a more specific privacy statement at the time of data collection.

1. Who we are

We are a global company providing a range of professional services including insurance, (re)insurance brokerage, risk and claims management, employee benefits and human resources consulting and administration, financial, pension administration and actuarial services through our various affiliates and subsidiaries.

2. How we process your personal data

2.1 Individuals in scope of this Privacy Notice

This Privacy Notice provides information for those individuals whose personal data we process, including:

• Business contacts, such as brokers, (re)insurers, managing agents (MGAs), loss adjusters, experts instructed in relation to claims, service providers, suppliers, professional advisors, conference attendees, visitors to our offices, government officials and authorities.
• Customers, claimants and plan beneficiaries, such as those in respect of insurance policies we place as part of our core insurance business activities (e.g., parties covered under the policies, potential beneficiaries of the policies, claimants and other parties involved in claims in respect of the policies), plan participants in relation to our various service offerings (e.g., employers sponsoring health and benefit plans, pension trustees, premium financing services, current, former and retired plan members, spouses and other beneficiaries entitled to payment from pension and/or benefit plans for whom we provide administrative services).
• Users of our Sites.
• Other individuals, such as those requesting or receiving our marketing information, making general inquiries, entering competitions or promotions, or whose images we use in marketing or are captured on CCTV.

2.2 How we collect your personal data

We collect your personal data in a number of ways, which vary based on how you interact with us and as allowed by applicable law. The following summarizes our various collection points:

• Directly from you or your authorized representative, such as when you provide your personal data to us, including from any of our Sites, surveys, live events, market research, and other direct communications and/or solicitations.
• Publicly available sources, such as social media platforms, property and assets registers, and claims and convictions records.
• Affiliate companies and partners.
• Government authorities, such as police and regulators.

2.3 Personal data we collect

We collect the following types of personal data depending on the purpose of your interaction with us:

• Basic personal and demographic information: Name, date of birth, age, gender, marital status.
• Unique identifiers: Identification numbers issued by government bodies or agencies (e.g., passport number, national identity number, tax ID, driver's license).
• Beneficiary information: Details of relationships, family members, and dependents.
• Employment information: Job title, employer, employment status, salary, employment benefits, and pensionable service periods.
• Financial information: Bank account numbers and statements, credit card numbers, transaction information, tax information, and details of income or assets.
• Policy and Claim information: Policy numbers, coverage details, underwriting history, claims history, and particulars of a claim.

2.4 How we use your personal data

Depending on the purpose of your interaction with us, we use your personal data to:

• Perform services for you or our clients and fulfill contractual obligations.
• Communicate and market to you regarding your account, changes to policies, or new service offerings.
• Monitor usage of our Sites and personalize your experience.
• Comply with legal, regulatory, and national security obligations.

3. How we protect your personal data

We maintain appropriate legal, organizational, and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Access to personal information is restricted to authorized personnel who need to know that information to operate, develop, or improve our services.

4. How we protect your personal data when sending it internationally

Because we operate globally, your personal data may be transferred to, stored, and processed in countries other than the country in which it was collected. We implement suitable safeguards, including standard contractual clauses approved by regulatory bodies, to ensure your personal data remains protected in accordance with applicable laws when transferred internationally.

5. Marketing activities

We may use your personal data to send you marketing communications, market research requests, or newsletters about our services. You can opt out of receiving promotional emails at any time by clicking the "unsubscribe" link provided in our emails or by contacting us directly.

6. Profiling and automated decision-making

In some circumstances, we may use profiling or automated decision-making to evaluate certain personal aspects relating to an individual, particularly to analyze risk, prevent fraud, or provide customized quotes. You have rights in relation to automated decision-making as set out in applicable data protection laws.

7. How long we keep your personal data

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements.

8. Your personal data rights

Subject to applicable local laws, you may have rights regarding your personal data, including:

• The right to access and request a copy of your personal data.
• The right to request rectification of inaccurate or incomplete data.
• The right to request erasure ("right to be forgotten").
• The right to restrict or object to our processing of your personal data.
• The right to data portability.

9. Contact us

If you have any questions, concerns, or requests regarding this Privacy Notice or the handling of your personal data, please contact our Data Protection Office through our designated contact forms or directly via email.

10. Updates to this Privacy Notice

We reserve the right to update or modify this Privacy Notice at any time to reflect changes in our legal obligations or data processing activities. Any changes will be posted on this page with an updated revision date.

11. View Regional Privacy Notices

Depending on your location, specific regional or country-specific privacy notices or addendums may apply to you in addition to this Global Privacy Notice. Please review the relevant regional addendum for your jurisdiction.