Privacy Notice: Lloyd’s Communications(including Media Enquiries)
Effective date:

11 November 2021

Introduction

This notice describes how Lloyd’s, as a data controller, collects, uses, shares and retains the personal
information you provide and informs you about your choices regarding use, access and correction ofyour personal information. Lloyd’s is committed to ensuring that any personal data it receives is protected
and handled in accordance with applicable data protection laws.
For the purposes of this Privacy Notice, references to “we”, “us” or “our” shall refer to Lloyd’s.
2Who we are

The Society of Lloyd’s (Lloyd’s) is incorporated by Lloyd’s Acts 1871 to 1982 whose principal place ofbusiness is at One Lime Street, EC3M 7HA.
3

What personal information we process about you

The personal information we hold is restricted to your name, correspondence address, email address,
contact number, employer name, job title and country of residence.
We will also record past communication data with you and your communication preferences.
4

Why we collect your personal information and the lawful basis for processing

Business Communications: We will contact you with business communications. The lawful basis forthis process is legal obligation.
Regulatory information: Lloyd’s will provide you with information regarding the regulation of the market,including updates. The lawful basis for this process is legal obligation.
Marketing and information: We may occasionally provide you with information regarding products;
services; and/or research and insight provided by Lloyd’s. The lawful basis which allows us to process
your data is legitimate interest.
Briefings and Training: Information regarding training courses will be sent to you periodically. The
lawful basis which allows us to process your data is legitimate interest.

5Who we are sharing your data withFor our general business administration, efficiency and accuracy purposes your personal information1

might be shared among Lloyd’s offices (including overseas subsidiaries) connected with the event or
briefing management purposes.
To help manage our briefings or events, we may share your personal information with third party service
providers such as IT software suppliers, event organisers and others who are co-hosting or sponsoring
the event. We require all our service providers to respect the confidentiality and security of personal
data. We may be under legal or regulatory obligations to share your personal data with courts, regulatorsand law enforcement bodies.
6How long we keep your data

We will retain your personal information for as long as is reasonably necessary to fulfil the relevant
purposes set out in this Privacy Notice. The retention period will primarily be determined by relevant
legal and regulatory obligation and/or duration of our business relationship with you, your employer oranother associated party. We maintain and update regularly our data retention policy with a detailed
retention schedule. We will securely delete or erase your personal information if there is no valid
business reason for retaining your data. In exceptional circumstances, we may retain your personal
information for longer periods of time if we reasonably believe there is a prospect of litigation, in theevent of any complaints or there is another valid business reason the data will be needed in the future.
7International transfers

From time to time we may need to share your personal information with Lloyd’s subsidiaries who may
be based outside of the European Union. We may also allow our service providers, who may also belocated outside the EU, access to your personal information. In addition, we may also make otherdisclosures of your personal information overseas, for example if we receive a legal or regulatory requestfrom a foreign law enforcement body.
We will always take steps to ensure that any international transfer of information is carefully managed toprotect your rights and interests:
••

•
•

8

We will only transfer your personal information to countries which are recognised as providing
an adequate level of legal protection, or where we can be satisfied that alternative arrangements
are in place to protect your privacy rights.
Transfers to Lloyd’s overseas offices will be covered by standard contractual clauses, adopted
by the European Commission which gives specific contractual protections designed to ensurethat your personal information receives an adequate and consistent level of protection.
Transfers to service providers and other third parties will always be protected by contractual
commitments and where appropriate further assurances.
Any requests for information we receive from law enforcement or regulators is carefully checkedbefore personal information is disclosed.
Your rights

You have certain rights as an individual which you can exercise in relation to the information we holdabout you. If you make a request to exercise any of your rights we reserve the right to ask you for a proofof your identity. We aim to acknowledge your request as soon as possible and will address your querywithin one month from your request.
You have the following rights:
The right to access
You are entitled to a confirmation whether we are processing your data, a copy of your data, and2

information about purposes of processing, who do we disclose it to, whether we transfer it abroad andhow we protect it, how long we keep it for, what rights you have, where we got your data from and how
you can make a complaint.
The right to rectification
If you believe the personal information we hold about you is inaccurate or incomplete you can request
for it to be rectified.
The right to erasure
If you withdraw your consent, terminate a contract with us or you believe the personal information is nolonger necessary for the purposes for which it was collected, you may request your data to be deleted.
However, this will need to be balanced against other factors, for example there may be certain regulatory
obligations which mean we cannot comply with your request.
The right to restriction of processing
You can ask us to restrict (i.e. keep but not use) your personal data, but only where:• Its accuracy is contested, to allow us to verify its accuracy; or• The processing is unlawful, but you do not want it erased; or• It is no longer needed for the purposes for which it was collected, but we still need it to establish,
exercise or defend legal claims; or• You have exercised the right to object, and verification of overriding grounds is pending.
We can continue to use your personal data following a request for restriction, where we have yourconsent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legalperson.
The right to data portability
If we collected your information under a contract or your consent, you can request from us to transfer
your personal information to provide it to another third party of your choice.
The right to object
You have the right to object at any time to processing of your personal data where processing isnecessary for the performance of a task carried out in the public interest, or in the exercise of an official
authority vested in the controller. You may also object where the processing is necessary for thepurposes of the legitimate interests, except where such interests are overridden by your interests or
fundamental rights and freedoms, in particular where you are a child.
9Contact details of the Data Protection Officer

If you have any questions relating to data protection, please contact our Data Protection Officer:
Data Protection Officer
Lloyd’s
1 Lime Street, EC3M 7HA, London
Email: data.protection@lloyds.com
10Complaints

If you are not satisfied with our response or believe we are not processing your personal data inaccordance with legal requirements you can make a complaint to relevant Data Protection Authority. Our

3

Lead Authority is the UK Information Commissioner’s Office (https://ico.org.uk/concerns/).

4