Our Commitment to Protecting Your Data

We are a leading business support solutions provider and trusted partner, offering business support solutions, compliance management, intra-group services and other insurance-related solutions.

This Privacy Notice covers AUKR. This Privacy Notice applies to personal information that we collect through our website at www.acrisure.co.uk (“Site”), from your use of the Site, applications, and services (except where we are acting as a processor/service provider as described below), from you at sales or promotional events or from third parties for marketing or other purposes (the “Services”). If you have any Questions or concerns about our use of your personal information, please contact us using the contact details provided at the bottom of this Privacy Notice.

For the purposes of this Privacy Notice, we are a controller (i.e., responsible party) for the personal information practices described in this Privacy Notice. Additionally, this Privacy Notice does not apply to the extent we process personal information in the role of a processor or service provider (as applicable) on behalf of our business customers. [or detailed privacy information about where an AUKR business customer or a customer a`liate who uses the Services is the controller or business (as applicable), please contact the respective business customer directly. Je are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Privacy Notice.

Please read this Privacy Notice carefully. Providing your personal information is voluntary, and by accessing or using the Site and/or the Services, you: (i) acknowledge that you have read and understood this Privacy Notice; and (ii) agree that your access to and use of the Services are sub:ect to the Privacy Notice and related Terms of Use (including any applicable limitations on damages and the resolution of disputes).

Personal information (i.e., Personal Data or similar term(s) under applicable law) generally refers to any information that can be linked to an identified or identifiable person.

The personal information that we may collect about you, or have collected about you in the past 12 months, varies depending on the context of our interactions with you. This broadly falls into the following categories:

1. Information that you provide voluntarily

2. We may collect the following information directly from you [acting in your professional capacity]:

• Basic Information: name and contact information (e.g., mailing address, email address, telephone number), date of birth, job title and responsibilities, company, trade association information, and any other personal information that you submit to us during the course of conducting business with us.
• Registration Information: information required to fulfill requests to receive newsletters, download or subscribe to content, and register for conferences.
• Marketing Information: information gathered from your participation in trade shows, seminars, and conferences, as well as credentials, product or service interests, and preferences or other information submitted to us for marketing purposes.
• Compliance Information: government identifiers and eligibility data.
• Financial Information: billing and account information.
• Insurance information: any information you have provided to AUKR subsidiaries directly (or indirectly) in relation to insurance business.

3. Information that we collect automatically

When you visit our Site or use our Services, we may collect certain information automatically from your device. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, geographic location, and other technical information. We may also collect information about how your device has interacted with our Site or our Services, including the pages accessed and links clicked.

Collecting this information enables us to better understand the visitors who come to our Site or use our Services, where they come from, and what content on our Site or connected to our Services is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Site and our Services to our visitors and customers.

Some of this information may be collected using cookies and similar tracking technology, as explained in the Cookies Section below.

4. Information that we obtain from third party sources

From time to time, we may receive personal information about you from third party sources (including from companies that also provide marketing lead information and/or your employer to the extent your organisation is acting as our customer).

The information listed above is collected for the following purposes, as applicable:

• For everyday business purposes, such as account management, contract management, website administration, corporate governance, and reporting obligations.
• To respond to your requests or provide you with information about our Services.
• To communicate with you about the Services.
• To provide support, personalise, maintain and enhance the Services and the Site.
• To comply with and enforce applicable legal requirements, agreements and policies.
• To develop and improve our marketing activities including identifying new customer opportunities, sending marketing communications and displaying personalized advertisements and content.
• To prevent, detect, identify, investigate, respond and protect against potential or actual claims, liabilities, prohibited behavior and criminal activity.
• For other business purposes such as data analysis, identifying usage trends, determining the effectiveness of our Services and to enhance, customize and improve our features, products and Services.
• To perform other activities consistent with this Privacy Notice

We may disclose, or in the past 12 months have disclosed, your personal information to the following categories of recipients:

• Affiliated Companies. We may disclose personal information with companies that are affiliated with us (for example companies that control, are controlled by, or are under common control with us). We may also disclose information that is collected between websites that we, or our affiliates, control.
• Organisations that Provide Services. We may disclose your personal information with companies that perform services for us, such as fulfilling orders, delivering packages, sending postal mail and e-mails, facilitating electronic communication with you, analysing customer data, providing marketing assistance, investigating fraudulent activity, conducting customer surveys, and providing customer service. We may also disclose your personal information with third parties described below in the Cookies Section.
• Potential Buyers. We may transfer your personal information to a successor entity upon a merger, consolidation or other corporate reorganisation, to a purchaser of all or a portion of our assets, or pursuant to a financing arrangement or co-promotional agreement. Any successor entity shall be bound by terms and conditions reasonably similar to this Privacy Notice.
• Other Parties. We may disclose your personal information with other parties to comply with a legal obligation; to protect the legal rights of (or otherwise participate in a legal process pertaining to) our company, our employees, our agents, our clients, our affiliates, and third parties including but not limited to insurers, managing general agents, sub brokers and regulators, to protect the safety and security of our visitors, or to protect against fraud; or with your consent.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, in most instances we collect personal information from you based on the following legal grounds:

• With Your Consent: If we request your specific consent to process personal information (such as when you provide your personal information to join our mailing list), provision of your consent is voluntary, and you have the right to withdraw your consent at any time.
• When Pursuing Legitimate Interests: We process your personal information for our legitimate interests and those of third parties as further described in this Privacy Notice. As a Business-to-Business organisation, we typically collect and process limited personal information about customer contacts and individuals acting in their professional capacity as part of our overall effort to reduce the privacy impact on individuals.
• To Perform a Contract With You: We will process your personal information when processing of your personal information is necessary for the execution or performance of a contract with you (such as when you provide your personal information to acquire one of our solutions or services).
• When We Have Legal Obligations: We will process your personal information when we have a legal obligation to do so, for example, if we are responding to a legal process or an enforceable government request.

You are not required to provide all of the personal information defined in this Privacy Notice in order to use our website or to interact with us offline. If you do not provide certain personal information, however, certain functionality will not be available to you, and we may not be able to respond to your requests, perform a transaction with you, or provide you with marketing that we believe you would find valuable. If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the How to Contact Us Section below.

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

Your personal information may be transferred to, and processed in, countries other than the country in which you live. These countries may have data protection laws that are different to the laws of your country. However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice.

If we transmit personal information across national boundaries, we take reasonable steps to do so in compliance with any national laws that govern the cross-border transfer of information, including laws in the EU and/or the UK. For example, we have taken steps to facilitate the transfer of personal information that we receive about residents of the European Union, Switzerland and the United Kingdom. These steps include implementing the European Commissions’ Standard Contractual Clauses and the UK Standard Contractual Clauses for the transfer of personal information.

Depending on your location, our standard contractual clauses can be provided to you on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.

How long we retain your personal information depends on the context in which, and purposes for which, we collected it. We generally retain personal information for as long as necessary for achieving the purposes for which it was collected or processed, unless a different retention period is required by applicable law, including the retention periods required under the GDPR.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Depending on where you live and the types of personal information at issue, you may have certain rights with respect to your personal information. For example, under local applicable laws, including those in the European Union/European Economic Area and United Kingdom, you may have the rights listed below. Please note that many of these rights are subject to exceptions and limitations.

• Right to rectification: You have the right to request that we correct or supplement any inaccurate or incomplete personal information we process about you.
• Right to erasure/deletion (i.e., right to be forgotten): You have the right to request that we delete your personal information or as applicable anonymise your personal information.
• Right of access: You have the right to know whether your personal information is being processed, and, where that is the case, to request access to, including a copy of, the personal information undergoing processing.
• Right to data portability: You have the right to request that we provide the personal information which you provided to us in a structured, commonly used and machine-readable format; and you have the right to transmit such personal information to another entity.
• Right to withdraw your consent: Where our processing is based on your consent, you have the right to withdraw such consent at any time. Withdrawing your consent will not affect the lawfulness of the processing we conducted prior to your withdrawal.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal information.
• Right to object: You have the right to object to our processing of your personal information.
• Email marketing: You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us at the link provided below.

You may learn more about these rights or exercise these rights by contacting us as set out in the How to Contact Us Section below.

You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. This information can be found under the How to Contact Us Section below.

If you choose to assert any of these rights under applicable laws, we will respond within the time period prescribed by applicable law. Please note that many of the above rights are subject to exceptions and limitations. If we are not able to provide the requested information or make the change you requested, you will be provided with the reasons for such decisions. Under local law, you may be entitled to lodge a complaint with your local data protection authority.

Your rights and our responses will vary based on your state or country of residency. Please note that you may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.

We do not discriminate against individuals who exercise any of their rights described in this Privacy Notice. However, we may require use of your personal information to provide access to the Services. Therefore, when you exercise your deletion right, in particular, you may lose access to certain aspects of the Services that require your personal information.

Cookies are small text files that are placed on your computer or mobile device when you visit a website. For purposes of this Notice, cookies also include similar technologies, such as pixels, web beacons and social network plugins (collectively, “cookies”). Cookies help the website remember information about your visit, which can make it easier to visit the site again and make the site more useful to you. Some cookies are deleted once you close your browser (session cookies), while other cookies are retained even after you close your browser so that you can be recognised when you return to a website (persistent cookies). More information about cookies and how they work is available at www.allaboutcookies.org.

• Essential Cookies: These are cookies that our Site needs in order to function and that enable you to move around and use the Site and features. Without these essential cookies, the Site will not perform as smoothly for you as we would like it to, and we may not be able to provide the Site or certain services or features you request. Examples of where these cookies are used include: to determine when you are signed in, to determine when your account has been inactive, and for other troubleshooting and security purposes.
• Analytics Cookies: Analytics cookies provide us with information regarding how visitors navigate and interact with our Site. Such cookies allow us to understand, for example, more about how many visitors we have to our Site, how many times they visit us and how many times a user viewed specific pages within our Site. Among other Analytics cookies, we use Google Analytics cookies for these purposes. For more information about Google Analytics, please refer to “How Google Uses Information From Sites or Apps that Use Our Services,” which can be found at www.google.com/policies/privacy/partners/, or any other URL Google may provide from time to time.
• Advertising Cookies: Advertising cookies may be placed by us or third parties to enable third party ad networks to recognise a unique cookie on your computer or mobile device. The information that is collected and shared by these types of cookies may also be linked to the device identifier of the device you are using to allow us to keep track of all the websites you have visited that are associated with the ad network. This information may be used for the purpose of targeting advertisements on our Site and third party sites based on those interests.

Additional information regarding the reasons we specifically use cookies is set out below in the next section. If the cookie lifespan is not disclosed in the cookie settings, we use a default life span of thirteen (13) months, unless a shorter period is required by law.

We may use the information collected through cookies and related tracking technologies for the following purposes:

• To make our Site easier to use and generally improve its performance.
• To gather metrics about how you interact with our Site.
• For security reasons.
• To provide personalised content. For example, we may store user preferences, your default language, device and browser information, your profile information, which includes the level of your usage of the Site, which you visit, so we can identify you across devices and personalise the content you see.
• To advertise to you via behavioural-based/targeted advertising and allow others to do the same.

Most web browsers automatically accept cookies, but you can usually change your browser settings to prevent this. If you disable cookies, your ability to use some features of the Site may be limited. For mobile devices, you may be able to manage certain cookies using your built-in mobile device settings and controls. Any choices concerning cookies are browser- and/or device-specific. If you clear your cookies from your browser on any of your devices, your choices will need to be reset. You should check how to do this on your device(s) and operating systems. Depending on your location and applicable laws, we may give you the option of adjusting your preferences with regard to the other categories of cookies we use. You may be able to allow or block certain types of cookies. Where this option is available, you can configure your personal settings on our Cookies Banner under “Settings” or via other options that may be available on the relevant Site in your specific locations.

Do Not Track (“DNT”) is a privacy preference that visitors can set in their web browsers. When a visitor turns on DNT, the browser sends a message to websites requesting that they do not track the visitor. At this time, we do not respond to these signals.

We do not knowingly collect or solicit personal information from anyone under the age of 18 or the applicable age of majority in the country in which you are located. If you are under 18, please do not use the Site or send any personal information about yourself to us. If we learn that we have collected personal information from a child under age 18, we will delete that information as quickly as possible. If you believe that a child under 18 may have provided us personal information, please contact [email protected].

We may provide links to other third party websites through the Services solely as a convenience to you. However, such linking does not mean, and should not be interpreted to mean, that we endorse, are affiliated with or make any representations concerning such third party websites. We neither review, control, nor are responsible for these third party sites or any content therein. By using such links, you will leave the Services. If you decide to access any of the third party sites linked to the Services, you do so entirely at your own risk. We shall not be liable for any consequences arising from use of any third party websites to which the Services link.

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.