Updated May 2018

THIS PRIVACY NOTICE DESCRIBES HOW ARTHUR J. GALLAGHER & CO. , ITS AFFILIATES AND SUBSIDIARIES ('WE', 'US') MAY COLLECT, HANDLE AND PROCESS PERSONAL INFORMATION IN RELATION TO YOUR ACCESS TO OR USE OF THE SERVICES.

This privacy notice applies to all of the services, websites and apps offered by Arthur J. Gallagher & Co. (collectively, the "Services"), but excludes Services which have separate privacy notices that do not incorporate this privacy notice.

ARTHUR J. GALLAGHER & CO. company which provides each Service is primarily responsible for the personal information collected and held in relation to that Service. A description of ARTHUR J. GALLAGHER & CO. Services available and contact details for us is available here: https://www.ajg.com/us/contact-us/

1. PERSONAL INFORMATION WE USE

We may collect personal information about you from a variety of sources, including information we collect from you directly (e.g., when you contact us) and from other sources, described below.

Note that we may be required by law to collect certain personal information about you, or as a consequence of any contractual relationship we may have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations. We will inform you at the time your information is collected if the provision of certain personal information is compulsory and the consequences of the failure to provide such personal information.

  1. Information we collect directly from you

    Depending on the service, website or app that you are using, the categories of information that we may collect directly from you include:

    1. personal details (e.g., name, date of birth);
    2. contact details (e.g., phone number, email address, postal address or mobile number);
    3. government issued identification details (e.g., social security and national insurance numbers, passport details);
    4. health and medical details (e.g., health certificates);
    5. policy details (e.g., policy numbers and types);
    6. bank details (e.g., payment details, account numbers and sort codes);
    7. driving license details;
    8. online log-in information (e.g., username, password, answers to security questions);
    9. information relating to any claims;
    10. other information we receive from you on applications or required questionnaires (e.g., occupation, current employer); and
    11. information we collect automatically from you (e.g., click stream data, personal information and other data collected using cookies and other device identifying technologies ('Cookies')). Further information about our use of Cookies is available at Annex A below.

    We do collect personal information about your online activities over time and across third party websites or online services. When we see a browser set to "do not track", signals transmitted from web browsers do not apply to our sites, and we do not alter any of our data collection and use practices upon receipt of such a signal.

  2. Information we collect from other sources:

    The categories of information that we may collect about you from other sources are:

    1. personal details (e.g., name, date of birth);
    2. contact details (e.g., phone number, email address, postal address or mobile number);
    3. bank details (e.g., account numbers and sort codes);
    4. financial information from consumer-reporting agencies for the purpose of ascertaining credit history; and
    5. policy details (e.g., policy numbers and types).

    We may receive such information via other insurers, consumer-reporting agencies, our affiliated companies, or other third parties in the course of conducting our business.

  3. Sensitive personal information

    We may also collect certain information about you which is considered more sensitive under local applicable laws, such as:

    1. information about your race, ethnic origin, religious views and philosophical beliefs, membership of professional or trade associations, gender identity or sexual orientation for diversity and statutory monitoring purposes where appropriate; and
    2. health, biometric or disability information required to administer policies or process claims.

  4. COPPA

    We do not knowingly collect online information from children under the age of 13. Our services are marketed towards adults. If we are notified that we have collected personal information, as defined by the Children’s Online Privacy Protection Act ("COPPA"), of a child under the age of 13, we will delete the information as expeditiously as possible.

2. HOW WE USE YOUR PERSONAL INFORMATION AND THE BASIS ON WHICH WE USE IT

We may use your personal information to:

  1. provide, maintain, protect and personalize our services including our insurance products, consulting and broking services;
  2. deal with your enquiries and requests;
  3. perform system administration and to report aggregate statistical information to our advertisers;
  4. cooperate with regulators and law enforcement bodies;
  5. contact you with marketing and offers relating to products and services offered by us (unless you have opted out of marketing, or we are otherwise prevented by law from doing so);
  6. personalize the marketing messages we send you to make them more relevant and interesting and to customize and enhance your website or app experience;
  7. resolve complaints, as well as handle requests for data access or correction;
  8. protect your, our or others' rights and interests; and
  9. communicate with you regarding your account or changes to our policies, terms and conditions.

Some jurisdictions require a legal basis to use or process your personal information. In most cases the legal basis will be one of the following:

  1. to fulfill our contractual obligations to you in connection with your policy or contract with us, for example using your contact details to reply to your requests. Failure to provide this information may prevent or delay the fulfillment of these contractual obligations;
  2. in order to comply with our legal obligations, for example to keep records of the services we provide you with as required by applicable law or regulation, or to comply with any governmental, quasi-governmental or court orders or subpoenas;
  3. where there is a public interest in the processing, for example where it is necessary in order to prevent and detect fraud; and
  4. to meet our or a third party's legitimate interests, for example to understand how you use our services and to enable us to derive knowledge from that to develop new services, to protect our rights or the rights of third parties, or to resolve any disputes. When we process personal information to meet our legitimate interests, we put in place robust safeguards to help ensure that your privacy is protected and that our legitimate interests are not overridden by your interests or fundamental rights and freedoms.

We may also obtain your consent to collect and use certain types of personal information, including when we are required to do so by law (for example, in certain jurisdictions where consent is always required to collect personal information, or in relation to our direct marketing activities or use of Cookies and Tracking Technologies, or when we process sensitive personal information about you). If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this privacy notice.

3. YOUR RIGHTS OVER YOUR PERSONAL INFORMATION

You may have certain rights regarding your personal information, subject to local law. These include rights in certain circumstances to:

  • access your personal information;
  • request proof of the authorization or previous consent given to us to perform the collection and processing of the personal information;
  • rectify the information we hold about you;
  • erase your personal information;
  • restrict our use or disclosure of your personal information;
  • object to our use or disclosure of your personal information;
  • request information about the use and processing of your personal information by [Gallagher Group];
  • receive your personal information in a usable electronic format and transmit it to a third party (right to data portability);
  • revoke the consent given by you for the processing of your personal information; or
  • lodge a complaint with your local data protection authority.

If you would like to discuss or exercise such rights, as applicable under local law, please contact us at the details below.

We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate. We will contact you if we need additional information from you in order to honor your requests.

4. AUTOMATED DECISIONS ABOUT YOU

We may automatically process your personal information to make decisions or conduct 'profiling' about you. This may involve using software that is able to evaluate your personal aspects and predict risks or outcomes. We may carry out this automatic processing for general business purposes including, for example, advertising, risk assessment or fraud prevention. The processing may involve decisions about you that relate to products that we sponsor or your eligibility to use the Services. The significance of our actions in this connection is that is that it may have legal or similar effects for you, namely, availability of access to services. The logic involved may be related to our cookies policy, or it may be related to specific underwriting software, for example.

We will only make these kinds of automated decisions about you where:

  • such decisions are necessary for entering into a contract. For example, we may decide not to offer Services to you, or we may decide on the types or amount of Services that are suitable for you, or how much to charge you for our Services based on your credit history and other financial or related information we have collected about you;
  • such decisions are required or authorized by law, for example for fraud prevention purposes; or
  • you give your consent to us carrying out automated decision-making.

Subject to local legal requirements and limitations, you can contact us to request further information about automated decision-making, object to our use of automated decision-making, or request an automated decision to be reviewed by a human being.

We also may make automated decisions about you based on your personal information in the circumstances such as: to select personalized offers, discounts or recommendations to send you based on your shopping history or browsing history, subject to any applicable laws or regulations.

These types of decisions will not have legal or similar effects for you, but you can still contact us for further information.

5. INFORMATION SHARING

We may share your personal information with third parties for the purposes described in this privacy notice under the following circumstances:

  • Service providers and business partners. We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us. For example, we may partner with other companies to process secure payments, fulfill orders, optimize our services, send newsletters and marketing emails, support email and messaging services and analyze information.
  • Our group companies. We work closely with other businesses and companies that fall under Arthur J. Gallagher & Co., its affiliates and subsidiaries. We may share your personal information with other ARTHUR J. GALLAGHER & CO. companies for marketing purposes (subject to applicable laws or regulations), internal reporting and other purposes as described in this privacy notice. Click to view a general description of ARTHUR J. GALLAGHER & CO.
  • Law enforcement agency, court, regulator, government or quasi-governmental authority or other third party. We may share your personal information with these parties where we believe this is necessary to comply with a legal or regulatory obligation, to enforce or apply any agreements between us and you, to resolve any disputes, or otherwise to protect our rights or the rights of any third party.
  • Asset purchasers. We will not sell your personal information to third parties other than to the extent reasonably necessary to proceed with the consideration, negotiation, or completion of a merger, reorganization, or acquisition of our business, or a sale, liquidation, or transfer of some or all of our assets. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this privacy notice.
  • Online ad technology firms. We may transfer information about you to ad technology firms so that they may recognize your devices and deliver interest-based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form These firms may collect additional information from you, such as your IP address and information about your browser or operating system; may combine information about you with information from other companies in data sharing cooperatives in which we participate; and may place or recognize their own unique cookie on your browser.

Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the Services). See the section on "International Data Transfer" below for more information.

When required by applicable law, when we share personal information with corporate third parties we will ensure that such third parties maintain a comparable level of protection of the personal information as set out in this privacy notice by using contractual or other means. To the fullest extent permitted by applicable law, we exclude all liability arising from the use of your personal information by third parties. When required by applicable law, data transfers will be logged and documented, identifying the recipient of the data, the purpose of the transmission, and the type of data that was transmitted. Where required by law to do so, we can on request confirm the name of each third party that personal information is, or will be, transferred to.

6. INFORMATION SECURITY AND STORAGE

We implement technical, organizational, administrative and physical measures to help ensure a level of security appropriate to the risk to the personal information we collect, use, disclose and process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information. We evaluate these measures on a regular basis to help ensure the security of the processing. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable.

We restrict access to your personal information to those who require access to such information for legitimate, relevant business purposes.

We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:

  • maintain business records for analysis and/or audit purposes;
  • comply with record retention requirements under the law;
  • defend or bring any existing or potential legal claims; and
  • deal with any complaints regarding the Services.

We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the personal information.

  1. Secure communications

    Live chat sessions on our site are encrypted to encode information that you share with our operators. By contrast, be aware that e-mail messages sent in clear text over the public internet can be observed by an unintended third party. Non-encrypted Internet e-mail communications may be accessed and viewed by other internet users without your knowledge and permission while in transit to us. If you wish to keep your information private, please do not use electronic mail to communicate information to us or request information from us that you consider to be confidential and/or proprietary. If you wish, you may contact us instead via telephone at the phone number provided: https://www.ajg.com/contact-us/

  2. Third-party vendors

    For certain services on our website, such as live chat or webcasts, we will ask for information about you such as your name, business, and e-mail address. In cases where we use a third-party vendor to provide online services, the vendor has agreed to keep your information confidential. For example, transcripts of live chat sessions may be archived in a database by our vendor for review by our operators.

7. LINKS TO OTHER SITES

We may provide links to other websites not owned or controlled by us that we think might be useful or of interest to you. We are not, however, responsible for the privacy practices used by other website owners or the content or accuracy contained on those other websites. Links to other websites do not constitute or imply endorsement by us of those web sites, any products or services described on those websites or any other material contained in them. We advise that you contact any third party websites directly for their individual privacy policies.

8. INTERNATIONAL DATA TRANSFER

We may transfer certain personal information across geographical borders to our subsidiaries or service providers (working in conjunction with us or on our behalf) worldwide. Such transfers are made in accordance with applicable law.

Where you are based in the European Union you should be aware that your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information under European Union law.

Where you are based outside of the European Union, you should be aware that your personal information may be transferred to, stored, and processed in a jurisdiction that is not your home jurisdiction. You consent to the transfer, disclosure, storage and/or processing of your personal information outside the jurisdiction in which the information was originally collected.

We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your personal information is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.

9. CONTACT US

ARTHUR J. GALLAGHER & CO. company which provides each Service is primarily responsible for the personal information collected in relation to that Service. A general description of ARTHUR J. GALLAGHER & CO. capabilities and their contact information under About Us.

Our Chief Privacy Officer can be contacted at: GallagherEthicsandCompliance@AJG.com

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to make a complaint to the data protection authority in your country of residence.

10. CHANGES TO THE PRIVACY NOTICE

You may request a copy of this privacy notice from us using the contact details set out above.

Where changes to this privacy notice will have a fundamental impact on the nature of our processing of your personal information or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under applicable law (e.g. to object to the processing).

We reserve the right to make changes to our Privacy Policy at any time consistent with applicable local laws. Such changes, as long as they do not have a fundamental impact on the nature of our processing of your personal information or otherwise have a substantial impact on you, will be posted on this page. We encourage you to review the Web site and the Privacy Policy in particular periodically for any updates or changes.

ANNEX A—COOKIES POLICY

  1. We may obtain information about your general internet usage by using a cookie file or tags on the site which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalized service. They enable us to:

    1. estimate our audience size and usage pattern;
    2. store information about your preferences, and so allow us to customize our site according to your individual interests;
    3. speed up your searches; and
    4. recognize you when you return to our site.

  2. Cookies and tags used on this site may include but are not limited to:

    1. Google Analytics (“GA”) and Google Tag Manager: We use GA to better understand how customers are using our Sites and to assist in managing the performance and design. Google stores the information collected via the cookies. For more information about GA, please see Google’s Privacy Policy and Help Pages.
    2. Sitecore: We use content management systems to manage the website content and use cookies and tags to improve the website experience and provide customization and personalization capabilities. For more information about Sitecore see Sitecore’s Privacy Policy and Help Pages.
    3. Watson Campaign Automation: We use a marketing automation platform to assist with our marketing, and anonymous cross-site tracking. For more information about Watson Campaign Automation see IBM’s Privacy Policy and Help Pages.
    4. Lotame: We use a Data Management Platform to assist with marketing and targeted advertising. For more information about Lotame see Lotame’s Privacy Policy and Help Pages.

  3. You may refuse to accept cookies by activating the setting on your browser which may allow you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site unless otherwise prohibited by applicable law.

  4. We do not use cookies to track or report on activity when you are not on our website or to provide such information to other parties for their own marketing use. We do not use cookies to collect personal information such as your e-mail address, and we do not combine information collected through cookies with your personal information. We make no attempt to look at or examine other cookies or information that may be stored on your computer.


To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org, or www.aboutcookies.org.