Privacy Policy
Last Updated and Effective Date: June 18th, 2026
This Privacy Notice (“Notice”) describes how Statera Managing Agency Limited, its affiliates, subsidiaries, and managed Lloyd’s syndicates (“Statera”), collects, uses and shares personal information in connection with any websites, communications, or services that link to this Notice (“Statera Services”).
This notice serves as our Notice at Collection under the California Privacy Rights Act and provides required disclosures regarding personal information and your rights under applicable U.S. state privacy laws, the UK General Data Protection Regulation (Retained Regulation (EU) 2016/679), the UK Data Protection Act (2018), the Bermuda Personal Information Protection Act 2016, and other applicable global data protection laws.
I. PERSONAL INFORMATION COLLECTED THROUGH THE STATERA SERVICES
When you interact with the Statera Services, we may collect, and we may have collected in the twelve (12) months prior to the date of this Privacy Notice, certain personal information from you, as described below. The types of personal information we collect from you will depend on your interaction with us.
| Category of Personal Information Collected | Categories of Source(s) from which Personal Information is Collected | Business or Commercial Purpose(s) for which Personal Information is Collected, Used or Disclosed | Categories of Recipients to whom Personal Information is Disclosed |
| Identifiers, such as your name, Internet Protocol (“IP”) address, unique personal identifier, address, email address and telephone number. | From you providing this information directly through the Statera Services (e.g., when you fill out a form to request information from us or when you sign up for alerts). | · To communicate with you and respond to your questions.
· To provide you with the information, service, or media that you requested. |
We may disclose this information to our service providers or contractors who are performing services on our behalf, such as webpage hosting provider, other webpage related services providers, communications, and cloud storage. |
| Internet or other electronic network activity information, such as your IP address, cookies, browser type, browser language, operating system, referral sources, pages viewed on the Statera websites, and your | From your use of the Statera Services — this information is automatically collected when you visit the Statera Services through the use of browser information and log files. | · To provide you with the Statera Services.
· To improve the Statera Services, including statistical analysis of the Statera websites. |
We may disclose this information to our service providers who are performing services on our behalf, such as website hosting provider, other website related services providers, communications, and cloud storage. |
| usage of the Statera Services. |
II. PERSONAL INFORMATION COLLECTED THROUGH BUSINESS COMMUNICATIONS
When you contact Statera, such as by email or telephone, we may collect, and we may have collected in the twelve (12) months prior to the date of this Privacy Notice, certain personal information from you in connection with business communications related to the Statera Services, other communications related to other business initiatives, and other related communications, as described below. The types of personal information we collect from you will depend on your interaction with us.
| Category of Personal Information Collected | Categories of Source(s) from which Personal Information is Collected | Business or Commercial Purpose(s) for which Personal Information is Collected, Used or Disclosed | Categories of Recipients to whom Personal Information is Disclosed |
| Identifiers, such as your name, alias, postal address, email address, telephone number, and other similar identifiers.
Audio, electronic, visual, or similar information, such as recorded audio calls made to our corporate headquarters or staff, recorded Microsoft Teams and Zoom meetings, and from emails received by or sent to Statera.
Professional related Information and Identifiers, such as name, business title or position, business address, business emails, business telephone numbers, personnel email, telephone number and other business contact information. |
From you providing this information directly to Statera staff by emails or telephone calls to individuals at Statera or calls or emails sent by Statera for business related purposes, or electronic meetings. | · To communicate with you and respond to your questions.
· To provide you with the information or service that you requested.
· To consider your application for employment · For financial reporting and audit purposes.
· To communicate with vendors, contractors, service providers and third parties about business related products and services.
· To communicate about new and existing business opportunities.
· To communicate with counsel, regulators and law enforcement. |
We may disclose this information to:
(i) affiliated entities in the Statera group for internal reporting and the conduct of our business, and other purposes disclosed in this Privacy Notice;
(ii) our operations service providers, advisors, and business partners that perform business operations services for us and assist us in carrying out our business activities, such as accountants, actuaries, auditors, lawyers and other advisors; IT systems, support and hosting service providers; internet service providers, printing, advertising, marketing and market research and analysis service providers; banks and financial institutions that service our accounts; document and records management providers; examiners; litigation consultants; and similar outsourced service providers;
(iii) governmental or other public authorities (including, but not limited to, courts, law enforcement, tax authorities and criminal investigations agencies); and third- party civil legal process participants |
| and their accountants, auditors, lawyers and other advisors and representatives, to comply with applicable laws, rules and regulations, including outside the United States, respond to public and government authorities, regulators, and legal inquires, and enforce our rights and defend legal claims;
(iv) insurance related businesses, and their related accountants, auditors, lawyers and other advisors and representatives, in connection with any actual or proposed business relationship or merger, sale, joint venture, assignment, transfer or other transaction relating to acquisition of all or any portion of an unaffiliated business; and
(v) purchasers and prospective purchasers or other parties in any actual or proposed reorganization, merger, sale, joint venture, assignment, transfer or other transaction relating to all or any portion of our business, assets or stock, or those of our affiliated companies. |
III. OTHER USE AND DISCLOSURE OF PERSONAL INFORMATION
In addition to the uses described above with respect to the Statera Services and business communications, Statera may also use or disclose your personal information (and may have done so in the twelve (12) months prior to the date of this Privacy Notice):
- to comply with applicable laws and regulatory requirements, or as requested by government or regulatory authorities
- in connection with pending litigation
- in connection with a merger, divestiture, acquisition, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred
- to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity
- to debug to identify and repair errors that impair existing intended functionality in the Statera websites or information systems
We may have also used or disclosed your personal information for other purposes with your consent and at your direction.
IV. RETENTION
We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations, and to comply with document preservation requirements relating to litigation.
V. NO SALE OF PERSONAL INFORMATION
Statera has not sold your personal information to third parties in the twelve (12) months prior to the date of this Privacy Notice. In addition, Statera will not sell your personal information to third parties (including for their own direct marketing purposes). If you are entitled to any disclosure rights in your jurisdiction regarding our sale of your personal information to third parties or our disclosure of your personal information to third parties for their own direct marketing purposes, this disclosure satisfies those requirements. If we change our practices in the future for any new information that we collect from you, we will update this Privacy Notice accordingly. If you still wish to learn more about our compliance with this requirement, please contact us using the information provided in the “Contact Us” section below.
VI. NO SHARING OF PERSONAL INFORMATION
Statera has not shared your personal information with third parties for cross-context behavioral advertising in the twelve (12) months prior to the date of this Privacy Notice. In addition, Statera has no intention of sharing your personal information with third parties for cross-context behavioral advertising. If you are entitled to any disclosure rights in your jurisdiction regarding our sharing of your personal information to third parties for cross-context behavioral advertising, this disclosure satisfies those requirements. If we change our practices in the future for any new information that we collect from you, we will update this Privacy Notice accordingly. If you still wish to learn more about our compliance with this requirement, please contact us using the information provided in the “Contact Us” section below.
VII. COOKIES AND OTHER DATA COLLECTION TOOLS
When you use websites operated by Statera, one or more cookies or other digital trackers may be placed on your computer or other electronic device to maintain continuity during a user session, gather data about the usage of its websites, for analytical purposes and other purposes, and to store your preferences for certain kinds of information. The cookies used on the Statera website will track only your online activity on the Statera websites while you are visiting the site and will not track your other Internet activity, such as activity on a non-Statera website. The cookies used by the Statera websites do not gather other personally identifiable information and the cookies are anonymized.
At any time, you may adjust the settings on your browser to refuse cookies according to the instructions related to your browser. However, if you choose to disable cookies, many of the features on the Statera websites will not operate properly. Lastly, Statera may use other companies
to set analytical cookies on its websites and gather information on our behalf. Statera has implemented analytics and impression reporting on its websites, which track and manage cookie information so that Statera can collect anonymized site analytics data. This information is not used for advertising purposes. Statera uses the cookie information gathered by these companies in the same manner as stated above.
VIII. DO NOT TRACK
Certain web browsers may provide a do-not-track (“DNT”) option, where you may be able to set your browser to inform websites that you do not wish your activities to be tracked. The Statera websites do not engage any third parties that collect personal information about an individual consumer’s online activities over time and across different websites when the consumer uses the Statera websites. Accordingly, the Statera websites currently do not respond to DNT signals.
IX. EXCLUSIONS
The Statera websites may contain links to websites owned by other companies. Because Statera has no control over the privacy practices or content of these linked sites, we recommend that you carefully review the privacy policy of each website you visit. Statera is not responsible for the content or privacy practices of websites owned by other companies.
Statera does not seek to, nor do we knowingly collect, information directly from children under the age of 18. If a child has directly provided us with personal information, a parent or guardian of that child may contact us to have the information deleted from our records. To do so, contact Statera through the information provided below in the “Contact Us” section.
X. INTERNATIONAL TRANSFER
To facilitate Statera’s global operations, Statera may store, transfer and access the personal information that you submit to or from Statera’s offices or service providers or contractors around the world, including in the United States and the United Kingdom. This Privacy Notice shall apply even if Statera transfers such information to other countries. By using the Statera Services and providing any information through the Statera Services, you consent to the transfer of your information and personal information to the facilities in these countries, including those located outside your home country. Do not use the Statera Services if you do not want your personal information to be transferred to the United States or to other countries, or if the laws in your country restrict these types of transfers. Please note that the Statera Services are intended for visitors in the United States and Statera does not target any of its activities or services specifically to other countries, including the United Kingdom or countries in the European Economic Area.
XI. PRIVACY RIGHTS FOR CONSUMERS UNDER U.S. STATE LAWS
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”) provided California consumers with certain rights with regard to their personal information. Since the CCPA’s passage, similar privacy rights have been extended to consumers in other states under their respective privacy laws.
This Section explains those rights and how to exercise them. If you are a consumer and would like to exercise your privacy rights under applicable state laws, please see subsections H, I and J of this Section below for more information on how to submit a request.
A. RIGHT TO KNOW ABOUT AND ACCESS YOUR PERSONAL INFORMATION
You may have the right to request that Statera provide you with information regarding what personal information about you we have collected, used, disclosed, sold or shared. Once we receive your request and verify your identity, we will disclose to you the following as applicable:
- The categories of personal information we have collected about
- The categories of sources from which we collected your personal
- The business or commercial purposes for collecting, selling or sharing your personal
- The categories of third parties to whom we disclose your personal
- The categories of personal information that we have sold, shared or disclosed for a business purpose, and for each category identified, the categories of third parties to whom we sold, shared or disclosed for a business purpose that particular category of personal information.
- The specific pieces of personal information we collected about
B. RIGHT TO DELETE YOUR PERSONAL INFORMATION
You may have the right to request that Statera delete certain of your personal information that we have collected from you, subject to the exceptions below. Once we receive your request and verify your identity, we will delete (and notify our service providers and contractors to delete), unless the deletion is impossible or involves a disproportionate effort, your personal information in our records that is not subject to any of the allowable exceptions.
Exceptions
We may deny your deletion request where your personal information is required for any of the following reasons, which we will identify in our response to you if we deny your request:
- Complete the transaction for which we collected the personal information, fulfill terms of a written warranty or product recall, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Help to ensure security and integrity, when the use of personal information is reasonably necessary and proportionate.
- Debug to identify and repair errors that impair existing intended
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us and compatible with the context in which information was
- Comply with a legal
- Deletion is impossible or involves a disproportionate
C. RIGHT TO CORRECT YOUR PERSONAL INFORMATION
You may have the right to request that Statera correct inaccurate personal information that we maintain about you. Once we receive your request to correct inaccurate personal information and verify your identity, we will use commercially reasonable efforts to correct (and direct our service providers and contractors to correct) your personal information in our records as you have directed.
D. RIGHT TO OPT-OUT OF THE SALE OF YOUR PERSONAL INFORMATION
You may have the right to opt-out of the sale of your personal information. However, as indicated in Section V above, we have not sold personal information about you to third parties in the twelve (12) months prior to the date of this Privacy Notice, and we will not sell personal information about you without further notice. If we change our practices in the future for any new information that we collect from you, we will update this Privacy Notice accordingly. As such, we do not offer a right to opt-out of sale.
E. RIGHT TO OPT-OUT OF THE SHARING OF YOUR PERSONAL INFORMATION
You may have the right to opt-out of the sharing of your personal information for cross-context behavioral advertising. However, as indicated in Section VI above, we have not shared personal information about you for cross-context behavioral advertising with third parties in the twelve (12) months prior to the date of this Privacy Notice, and we will not share personal information about you for cross-context behavioral advertising without further notice. If we change our practices in the future for any new information that we collect from you, we will update this Privacy Notice accordingly. As such, we do not offer a right to opt-out of sharing.
F. RIGHT TO LIMIT THE USE OR DISCLOSURE OF YOUR SENSITIVE PERSONAL INFORMATION
You may have the right to limit the use or disclosure of your sensitive personal information, which is a type of data that receives heightened protection under the law (e.g., certain demographic information, government-issued identification numbers, biometric or health data, etc.). However, we do not offer this right because Statera does not collect sensitive personal information of consumers. If we change our practices in the future for any new information that we collect from you, we will update this Privacy Notice accordingly.
G. RIGHT TO NON-DISCRIMINATION
You may have the right to not receive discriminatory treatment for exercising your privacy rights. Statera will not discriminate or retaliate against any consumer who exercises any of the rights described above. Specifically, except as permitted by applicable law, we will not deny you goods or services; charge you different prices or rates, including through granting discounts or other benefits, or imposing penalties; provide you with a different level of service or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
H. HOW TO SUBMIT A REQUEST
If you are a consumer and would like to exercise any of the privacy rights identified above, you may submit a request by contacting info@statera-uw.com and legalnotices-ventures@octavegroup.com.
Requests to exercise your rights which are set out above (relative to any Statera group company domiciled in the UK) please contact Statera’s Legal Department at:
Statera Managing Agency Limited
The Hallmark Building, 2nd Floor
52-56 Leadenhall Street, London, EC3A 2BJ
E-mail: info@statera-uw.com; legalnotices-ventures@octavegroup.com
COMPLAINTS
If you have any concerns about the way in which an Statera group company is using your personal information, please contact Statera’s Legal Department in the first instance and we will try to resolve your concern. However, you do also have the right to complain about how we treat your personal information to the Information Commissioner’s Office (“ICO”). The ICO can be contacted at: https://ico.org.uk/.
I. SUBMITTING A REQUEST THROUGH YOUR AUTHORIZED AGENT
If you are a consumer, you may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please reach out to us through the “Contact Us” below section.
J. HOW WE VERIFY YOUR REQUEST
We cannot fulfill your request or provide you with your personal information if we cannot, using commercially reasonable methods, verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us.
Once you have provided the required information to Statera, we will confirm your identity by conducting a commercially reasonable electronic search of our internal systems (which may include business applications, digital files, and corporate emails) to ensure the information provided by you in your request matches what we have in our systems.
In addition, for a request for specific pieces of information, you (or your authorized agent) must provide to Statera a copy of a signed declaration under penalty of perjury that you are the individual whose information is the subject of the request.
To verify your identity, we will ask that you provide the following information when you submit your request:
- Your first and last name
- Your full address
- State of your primary residence
- Your telephone number
- Your email address
Depending on your type of request or the information requested by you, we may require additional information in order to verify your identity and fulfill your request. If we cannot successfully verify your identity, we will inform you of that fact.
We will initially confirm receipt of your request within ten (10) business days. We will then respond to your request within forty-five (45) calendar days. However, in certain circumstances, we may require additional time to process your request, as permitted by the CCPA or other applicable law. We will advise you within forty-five (45) calendar days after receiving your request if such an extension is necessary and why it is needed. If we cannot fulfill your request, our response to you will also explain the reason why we cannot fulfill your request.
We do not charge a fee to process or respond to your consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee (only if permitted by law), we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may only make a consumer request to know about or access your personal information twice within a twelve (12)-month period.
XII. CONTACT US
For questions or comments regarding this Privacy Notice, or to request this Privacy Notice in another format, please contact us at:
Attn: Statera Managing Agency Limited
The Hallmark Building, 2nd Floor, 52 – 56 Leadenhall Street, London, EC3A 2BJ
By E-mail:
info@statera-uw.com; legalnotices-ventures@octavegroup.com
XIII. UPDATES TO PRIVACY NOTICE
From time to time, we may update this Privacy Notice. If we do, we will note the date of the revision at the top of this Privacy Notice the date that any changes are made and/or when they become effective. If the changes being made are material, we may alert you to the changes in a more prominent way. By using the Statera Website after these changes are made, you agree to the revised version of the Privacy Notice.
Statera Managing Agency Limited is committed to protecting the privacy and security of your personal information, providing clear information about how your personal information is processed and complying with data protection laws. This Privacy Notice tells you what we do with information we collect about you.
This Privacy Notice applies to any individual whose personal information we process in the course of providing insurance or related services or operating our business, including website users; employees of intermediaries, coverholders and third-party suppliers; policyholders; prospective policyholders and beneficiaries and claimants under our insurance policies.
Insurance involves the use and disclosure of your personal information by various insurance market participants. For Lloyd’s business, the London Market Group’s Data Protection Insurance Market Core Uses Information Notice describes how the insurance market participants process your personal information during the insurance lifecycle in the United Kingdom. We recommend you review this Core Uses Notice as well as this Privacy Notice.
WHO WE ARE
Statera Managing Agency Limited, or any of our group companies referred to on our website, is the controller and responsible for your personal data (collectively referred to as “we”, “us” or “our” in this Privacy Notice). Statera Managing Agency Limited is the managing agent of Syndicate 4242 and Syndicate 1416 at Lloyd’s. Statera Managing Agency Limited is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority (FRN 1032701) and the Prudential Regulation Authority.
YOUR DUTY TO INFORM US OF CHANGES
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU?
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Individual details
Name, address (including proof of address), other contact details (for example e-mail address and telephone numbers), gender, marital status, date and place of birth, nationality, employer, leisure activities and interests, family details including the relationship of family members to you.Identification details
Identification numbers issued by government bodies or agencies, including your national insurance number, passport number, tax identification number and driving licence number.Data from fraud prevention, law enforcement or government agencies
Other publicly available databases and data sources used to prevent or detect fraud or provide details to us about criminal convictions or offences.Data in relation to regulatory issues from HM Treasury, the IRS, OFAC and other authorities
For example, when someone is subject to a financial sanction they will appear on HM Treasury’s or OFAC’s asset freezing list.Information relating to underwriting insurance policies
Managing and processing insurance claims, such as previous insurance records and claims histories, and in some cases, surveillance reports.Usage Data
Information about how you use our website, products and services.The type of information we may collect and process about you will depend, in some circumstances, upon the type of insurance which we are offering or underwriting.
We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Notice.
Sensitive personal information
We may collect certain categories of personal information which are more sensitive. This information, which is known as special category personal data, has additional protection and includes: your health information (such as your medical records and history, test results, information and treatment, and reports on medical diagnoses) information about your personal characteristics and circumstances of a sensitive nature such as your racial or ethnic origin, religious beliefs, sexual orientation, sex life and genetic information your membership of a trade union We may also collect information about criminal convictions or offences where authorised by law.IF YOU FAIL TO PROVIDE PERSONAL DATA
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
WHERE DO WE COLLECT YOUR PERSONAL INFORMATION FROM?
Information collected from you and our Cookie Policy
Where we have collected the information directly from you it will usually be obvious what this is as you will have contacted us or given it to us. This might not be the case where we have used cookies to collect information from your computer or portable electronic devices.
Cookies and Google Analytics
When you visit our website, our web server collects some basic information such as your internet service provider’s domain name, which pages you accessed on our site, and when. We use this information only to analyse how visitors are using our website and to help guide improvement.
We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioural tracking). Please contact us for information on how you can opt out of behavioural tracking on this website and how we respond to web browser signals.
The information we collect automatically is only statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our website and to deliver a better and more personalized service.
This information is collected and analysed using cookies and Google Analytics.
You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this website may then be inaccessible or not function properly.
Information collected from others
We can collect information about you from others and from various sources. This includes information from:
Other insurance market participants which may include intermediaries who are involved in the arranging of insurance cover between us and policyholders (such as insurance brokers and coverholders); other insurers who are providing the insurance cover together with us; other insurers who we are providing reinsurance cover to in our capacity as a reinsurer.
In the event of a claim, third parties who are involved including claims handlers who assist us in investigating or processing claims, solicitors, loss adjustors, experts (including medical experts), witnesses, evidence providers, the other party to the claim (who may be either a claimant or a defendant).
Individuals or companies that you may be associated with (for example representatives acting on your behalf, your employer or your family members).
Anti-fraud databases, sanctions lists, court judgments and other available sources and databases.
Credit reference agencies and other financial institutions.
Which of the above sources apply will depend on your particular circumstances.
HOW WE USE YOUR PERSONAL INFORMATION AND WHY WE MAY DO THIS
We use your personal information in order to meet our obligations in our contracts of insurance and to operate our business. We must have a legal basis to process your personal information. We use your personal information in the following ways and for the following reasons:
To provide insurance services
We may use your personal information to issue quotes for, and administer, policies of insurance. We can use your information in this way to fulfil our contractual obligations or to take steps before entering into a contract.To do what we are required to do by law
We may use your personal information to comply with legal obligations and to cooperate with regulatory bodies to which we are subject. This includes the prevention and detection of fraud, money laundering, terrorism and other crimes; the carrying out of background checks where these are required and lawful; fulfilling due diligence and reporting obligations; and responding to binding requests from regulators.We can use your information in this way because we are obliged to comply with legal and regulatory requirements including the California Consumer Privacy Act of 2018 (“CCPA”), the Financial Services and Markets Act 2000 and the regulations of the Prudential Regulation Authority and the Financial Conduct Authority.
To review, process and manage insurance claims
We may use your personal information to manage the investigation and payment of claims made under our insurance policies, including conducting fraud, anti-money laundering and sanctions checks and bringing or defending legal claims which relate to the policy of insurance.We can use your information in this way to fulfil our contractual obligations, to comply with legal and regulatory requirements and because it is in our legitimate interests to exercise our rights and bring or defend claims made against us.
To operate and audit our business
We may use your personal information to fulfil our contractual obligations to third parties; to perform administrative activities in connection with our services; to conduct data analysis which helps us assess risks, price our insurance appropriately and improve our services; to research and develop new insurance products.We can use your information in this way because it is in our legitimate interests to improve our services and manage our business efficiently, to ensure we manage risk and price our insurance appropriately, and to maintain accurate records and perform audits. When we process your personal information on the basis that it is in our legitimate interests to do so we balance our interests with your rights and freedoms and keep the information used and the processing to the minimum required to meet those legitimate interests.
To exercise our legal rights
We may use your personal information to exercise, defend and protect our legal rights or the rights of third parties where it is necessary to do so. For example, we may bring or defend claims or recover debts which are due to us.We can use your information in this way because it is in our legitimate interests to exercise our rights to collect money which is owed to us and to bring or defend claims made against us.
Sensitive personal information
If it is necessary that we process your sensitive personal information (or special category personal data) for one or more of the purposes above we will only do so where one of the following lawful reasons applies:- we have obtained your explicit consent
- we need to process your sensitive personal information to establish, exercise or defend a legal claim
- we need to process your sensitive personal information for reasons of substantial public interest, for example an insurance purpose
- we are otherwise authorised by local law to process your sensitive personal information
CHANGE OF PURPOSE
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
We may share your personal information with third parties and other companies within our group in the following circumstances:
We operate as an international business so we may share your personal information with group companies who may use this information for the purposes described in this Privacy Notice.
Insurance market participants – including other insurance and reinsurance companies, coverholders, intermediaries, retrocessionaires and business partners. We may share your personal information with these third parties should they need to use your personal information in connection with the provision of insurance and processing of claims. For example, we may share your personal information with other reinsurers for the purposes of settling claims.
Service providers – we may share your personal information with service providers that perform services and other business operations for us, for example, software and analytics providers, professional advisors and auditors.
Potential purchasers – we may share your personal information with any third party that purchases, or to which we transfer, all or substantially all of our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Notice.
Companies who are our customers – we may share your personal information with your company or employer in certain circumstances, for example, if your company or employer has a corporate insurance policy with us and you make a claim under that policy.
Any law enforcement agency, court, regulator or government authority. We may share your personal information with these parties where this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.
We do not otherwise sell or share personal information with third parties.
WILL WE SEND YOUR PERSONAL INFORMATION OVERSEAS?
We may need to transfer your personal information to other insurance market participants, our group companies, and service providers, contractors and agents who perform services on our behalf and are located outside of the UK.
We will put agreements in place with the people we send information to so that these transfers will be made in compliance with the UK General Data Protection Regulation (“UK GDPR”) and other applicable data protection legislation and they will be required to treat your personal information with the same degree of protection that would apply within the UK, Bermuda, the US or any other jurisdiction in which we carry out our business. For more information on the appropriate safeguards in place, please contact us at the details below.
In some cases we might need to share information to carry out the services we have promised to carry out, for example if you require urgent assistance abroad. In such an urgent situation we may not always have the time to put in place the type of agreement we would normally want to.
DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
CONSENT
In certain circumstances, in order to provide insurance cover and deal with claims, we may need to process your special category personal data, such as medical records and information relating to criminal convictions, for the purposes outlined above. We may need your consent to do this and if we do need your consent we will ask you for it separately.
You do not have to give your consent and you may withdraw your consent at any time. However, if you do not give your consent, or you withdraw your consent, this may affect our ability to provide the insurance cover from which you benefit or prevent us from providing cover or handling claims.
PROFILING AND AUTOMATIC DECISION MAKING
When we analyse personal information for the purposes of risk assessment or risk modelling this may involve profiling, which means that we may process your personal information using software that is able to evaluate behaviours and predict risks or outcomes.
It helps us to understand any risks associated with the insurance policy and to make decisions about how we can improve and develop our products and services, or our pricing and underwriting. It is in our legitimate interests to manage risk and ensure we are charging appropriate premiums.
HOW LONG WILL WE KEEP YOUR PERSONAL INFORMATION FOR?
We will keep your personal information only for so long as is necessary and for the purpose for which it was originally collected. In particular, for so long as there is any possibility that either you or we may wish to bring a legal claim or complaint under an insurance policy, or where we are required to keep your personal information for legal or regulatory reasons.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
YOUR RIGHTS
You may contact us for one or more of the following reasons:
-
- To ask us to correct information about you that is wrong or incomplete, or to delete personal information about you. To tell us you no longer agree to, that you object to, or that you wish to restrict us using information about you and ask us to stop.
- To exercise your right to access or know, which means you may ask us to provide you with a copy of all of the personal information that we have about you.
- To exercise your right to data portability, which means you may obtain and reuse the information that you have provided to us for your own purposes across different services. You may ask for this information to be provided directly to you or directly to another organisation. We will provide the information in a machine readable format so that another organisation’s software can understand that information.
Sometimes we will not be able to stop using your personal information when you ask us to (e.g. where we need to use it because the law requires us to do so or we need to retain the information for regulatory purposes).
In other cases, if we stop using your personal information, we will not be able to provide services to you, such as administering an insurance policy or servicing a claim.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We will tell you if we are unable to comply with your request, or how your request might impact you or others, when you contact us.
-
EXERCISING YOUR RIGHTS TO ACCESS/KNOW OR DELETE
To exercise your rights described above, please submit a request by emailing us.
Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information.
Your request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.
For US data subjects, you may only submit a request to know twice within a 12-month period.
RESPONSE TIMING AND FORMAT (US DATA SUBJECTS)
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us.
We endeavor to substantively respond to a verifiable requests within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
RESPONSE TIMING AND FORMAT (UK DATA SUBJECTS)
Data Subject Access Requests will be dealt with in accordance with UK GDPR. We will respond without undue delay and at the latest within one calendar month of receipt. If the request is complex or numerous, this deadline may be extended by a further two months.
US STATE PRIVACY RIGHTS
This Privacy Notice serves as our Notice at Collection under the CCPA, as amended, and provides required privacy disclosures under other applicable U.S. state privacy laws.
NON-DISCRIMINATION
We will not discriminate against you for exercising any of your privacy rights. Unless permitted by applicable law we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
CHANGES TO OUR PRIVACY POLICY
We keep our Privacy Notice under regular review. This version was last updated on 4th March 2026.
We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes to this Privacy Notice, we will post the updated notice on our website and update the Privacy Notice’s ‘last updated’ date above. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.
HOW TO CONTACT US
Our Legal Department is responsible for responding to questions about this Privacy Notice or to your requests to exercise your rights which are set out above. You can contact our Legal Department at:
Statera Managing Agency Limited
The Hallmark Building
2nd Floor, 52 56 Leadenhall Street
London, EC3A 2BJ
United KingdomTelephone: 0207 1234 5253
If you need to access this Privacy Notice in an alternative format due to having a disability, please contact: [].
COMPLAINTS
If you have any concerns about the way in which we are using your personal information, please contact our Legal Department in the first instance and we will try to resolve your concern. However, you do also have the right to complain about how we treat your personal information to the Information Commissioner’s Office (“ICO”). The ICO can be contacted at: https://ico.org.uk/