This Privacy Notice describes how M & M Underwriting Limited, XL Insurance Company SE, AXA XL Underwriting Agencies Limited (on behalf of the underwriting members of Lloyd’s Syndicates 2003, 3002 and Lloyd’s Insurance Company SA) and AXA XL Insurance Company (UK) Limited (together, “we”, “us” or the "Insurer") collect and use the personal information of insureds, claimants and other parties (“you”) when we are providing our insurance and reinsurance services.

The information provided to the Insurer, together with medical and any other information obtained from you or from other parties about you in connection with this policy, will be used by the Insurer for the purposes of determining your application, the operation of insurance (which includes the process of underwriting, administration, claims management, analytics relevant to insurance, rehabilitation and customer concerns handling) and fraud prevention and detection. We may be required by law to collect certain personal information about you, as a consequence of any contractual relationship we have with you. Failure to provide this information may prevent or delay the fulfilment of these obligations.

Information will be shared by the Insurer for these purposes with group companies and third party insurers, reinsurers, insurance intermediaries and service providers. Such parties may become data controllers in respect of your personal information. Because we operate as part of a global business, we may transfer your personal information outside the European Economic Area for these purposes.

You have the following rights regarding your personal information:

Right to request access

You are entitled to a confirmation whether we are processing your data, a copy of your data, and information about purposes of processing, who do we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it for, what rights you have, where we got your data from and how you can make a complaint.

Right to rectification

If you believe the personal information we hold about you is inaccurate or incomplete you can request for it to be rectified.

Right to erasure

If you withdraw your consent, terminate a contract with us or you believe the personal information is no longer necessary for the purposes for which it was collected, you may request your data to be deleted. However, this will need to be balanced against other factors, for example there may be certain regulatory obligations which mean we cannot comply with your request.

Right to restriction of processing

You can ask us to restrict (i.e. keep but not use) your personal data, but only where:

• Its accuracy is contested, to allow us to verify its accuracy; or

• The processing is unlawful, but you do not want it erased; or

• It is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or

• You have exercised the right to object, and verification of overriding grounds is pending.

We can continue to use your personal data following a request for restriction, where we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

Right to object

You have the right to object at any time to processing of your personal data where processing is necessary for the performance of a task carried out in the public interest, or in the exercise of an official authority vested in the controller. You may also object where the processing is necessary for the purposes of the legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms, in particular where you are a child.

Right to portability

You have the right to receipt of your personal information in a usable electronic format and to transmit it to a third party.

If you have questions or concerns regarding the way in which your personal information has been used, please contact: gary@mmunderwriting.co.uk or dataprivacy@axaxl.com

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the UK Information Commissioner's Office.

For more information about how XL Insurance Company SE, AXA XL Underwriting Agencies Limited (on behalf of the underwriting members of Lloyd’s Syndicates 2003, 3002 and Lloyd’s Insurance Company SA) and AXA XL Insurance Company (UK) Limited process your personal information, please see the full privacy notice at: http://axaxl.com/privacy-and-cookies