Data Privacy Notice

Your personal privacy is of paramount importance to us at NorthStandard^[1].

This privacy notice is intended to provide you with details of how we collect and use your personal data, as well as explaining your rights as a data subject,  in accordance with the Data Protection Laws.^[2]

Except where expressly stated this privacy notice applies to the Standard Club Group and the North Group (collectively referred to as NorthStandard, or the NorthStandard Group).

Who is our Data Protection Officer?

We have a Data Protection Team which forms part of the NorthStandard Compliance team and the NorthStandard Legal team.

Our Data Protection Team oversees compliance with data protection law and its contact details are: dataprotection@north-standard.com.

For the Standard Club Group, we have the following relevant local registrations:

1. The UK and EU Data Protection Officer: dataprotection@north-standard.com; and
2. The Singapore Data Protection Officer: dataprotection@north-standard.com.

All persons can be contacted at dataprotection@north-standard.com.

In the UK and EEA, Personal data is defined as:

‘Any information relating to an identified or identifiable natural person’

1. What information do we collect about you?

As part of providing services to you we may collect personal data and special category data.

As a broker, intermediary or agent

For individuals who are employed or associated with a broker, intermediary, or agent

Personal data:

• Names and titles
• Address
• Email address
• Business contact details
• Passport details
• Bank account details

We need to collect this personal data from you to help in the administration of insurance contracts underwritten by us. In some cases we need to collect this personal data for relationship management purposes, to make payment of invoices and in the legitimate interests of our business.

In accordance with the Data Protection Laws we have established the following lawful reasons for the processing of this data.

• Necessary for the performance of a contract which you are a party to; or
• Necessary for the compliance with a legal or regulatory obligation to which NorthStandard is subject; or
• Necessary for the purposes of the legitimate interests pursued by us in relation to the performance of insurance business, business development, relationship management purposes and keeping our records up to date; or
• Necessary for the initial interests of the individual or another natural person.

We may also collect information from credit reference and fraud prevention agencies, and via insurance industry fraud prevention and detection databases and sanctions screening tools.

We may combine this with the information provided by you.

As a current and prospective member, or policyholder, or an individual associated with a member or policyholder; such as a skipper, crew member or ship owner

For current and prospective members, policyholders or individuals associated with a member or policyholder such as a skipper, crew member or vessel owner we may collect the following information:

Personal data:

• Names and titles
• Address
• Email address
• Date of birth
• Bank account details
• Passport details
• Visa details
• Identification number
• Identity of beneficial owners or individuals with significant control of your organisation

Special category data

• Details of illnesses or injuries, medical reports
• Details of criminal convictions and offences

We may need to collect this personal data from you, including information about your health or criminal records, to enable us to enter into or perform insurance contracts underwritten by us or otherwise to comply with legal obligations in relation to our insurance business. In some cases we need to collect this personal data for relationship management purposes, to make payment of invoices and in the legitimate interests of our business.

In accordance with the Data Protection Laws we have established the following reasons for the processing of this data.

• In some instances, you will have provided your consent to the collection and sharing of this information;
• Necessary for the performance of a contract which you are a party to;
• Necessary for the compliance with a legal obligation to which NorthStandard is subject;
• Necessary to protect the vital interests of the data subject or of another natural person; or
• Necessary for the purposes of the legitimate interests pursued by us in relation to fully assessing the insurance cover being provided, relationship management purposes, and keeping our records up to date.

Where we are required to collect and process personal data about you in relation to an insurance contract under which you are being provided with insurance cover, but you are not a party to the insurance contract, (for example an accident and sickness policy) we are able to do this as necessary to enable us to perform insurance contracts we have entered into in the legitimate interests of our business.

Special category and criminal conviction data

The Data Protection Laws allow for the processing of special category and criminal conviction data where necessary for the following purposes:

• The processing of such data for advising on arranging, underwriting or administering of an insurance contract;
• Administering a claim under an insurance contract; or
• Exercising a right, or complying with an obligation, arising in connection with an insurance contract, including a right or obligation arising under an enactment or rule of law.

This is to the extent that the processing is not carried out for the purposes of measures or decisions with respect to the data subject and the data subject does not have and is not expected to acquire:

• Rights against, or obligations in relation to, a person who is an insured person under an insurance contract to which the insurance purpose relates, or
• other rights or obligations in connection with such a contract.

Where necessary, the above information may also be provided to us from brokers, agents, intermediaries, correspondents, surveyors and professional advisors.

We may also collect information from publicly available sources, such as Companies House, credit reference and fraud prevention agencies, and via insurance industry fraud prevention and detection databases and sanctions screening tools.

We may combine this with the information provided by you.

As an individual involved in a claim, either as a member, policyholder, or an individual benefitting from a member or policyholder’s policy and any other interested party

In relation to an individual involved in a claim, either as a member, policyholder, interested party or an individual benefitting from a member or policyholder’s policy we may collect the following information:

Personal data:

• Name
• Address
• Date of birth
• Identification number
• Bank account details
• Passport details
• Visa details
• Wedding and birth certificates
• Travel documentation
• Identity of beneficial owners or individuals with significant control of your organisation

Special category data

• Medical reports
• Details of criminal convictions and offences

We need to collect this personal data from you, including information about your health or criminal records, to enable us to deal with the administration, processing, handling and settlement of claims made in respect of an insurance contract underwritten by us, and or to comply with legal obligations in relation to our insurance business. This personal data may also in some instances be necessary for the establishment, exercise or defence of legal claims.

In accordance with the Data Protection Laws we have established the following lawful reasons for the processing of this data.

• In some instances you will have provided your consent to the collection and sharing of this information.
• Necessary for the performance of a contract which you are a party to;
• Necessary for the compliance with a legal obligation to which NorthStandard are subject;
• Necessary to protect the vital interest of you or another person;
• Necessary for the establishment, exercise or defence of a legal claim; or
• Necessary for the purposes of the legitimate interests pursued by us in relation to the performance of insurance business, in particular the handling of claims.

Special category and criminal conviction data

The Data Protection Laws allow for the processing of special category and criminal conviction data where this is necessary for an insurance purpose.  This includes:

• The processing of such data for advising on, arranging, underwriting or administering of an insurance contract;
• Administering a claim under an insurance contract; or
• Exercising a right, or complying with an obligation, arising in connection with an insurance contract, including a right or obligation arising under an enactment or rule of law.

This is to the extent that the processing is not carried out for the purposes of measures or decisions with respect to the data subject and the data subject does not have and is not expected to acquire

• Rights against, or obligations in relation to, a person who is an insured person under an insurance contract to which the insurance purpose relates, or
• other rights or obligations in connection with such a contract.

We may process special category data where the purpose of the processing is to either prevent fraud or report suspicions of terrorist financing or money laundering.

The above information may also be provided to us by brokers, agents, intermediaries, correspondents, surveyors and professional advisors.

We may also collect information from credit reference and fraud prevention agencies, and via insurance industry fraud prevention and detection databases and sanctions screening tools.

We may combine this with the information provided by you.

As an individual who currently receives or wishes to receive communications and updates from us

In relation to individuals who currently receive or wish to receive communications and updates from NorthStandard we may collect the following information:

• Name
• Address
• Email address
• Contact details

We need to collect this personal data from you to enable us to provide statutory communications to NorthStandard members, to provide you with relevant industry information and in other cases for the purposes of business development and on-going management and development of business relationships.

In accordance with the Data Protection Laws we have established the following reasons for the processing of this data:

• Necessary for the compliance with a legal obligation to provide statutory communications; or
• Necessary for the purposes of the legitimate interests pursued by us for relationship management, business development, providing information and best practice in relation to loss prevention and ensuring that our communications are appropriately targeted to our audience.

As an individual undertaking training and associated loss prevention activities organised or provided by us

In relation to individuals who wish to receive training organised by us we may collect the following information:

• Name
• Address
• Date of birth
• Email address
• Contact details
• Passport details

We need to collect this personal data from you to be able to arrange the training event and to be able to provide the learning and development you have requested.

In accordance with the Data Protection Laws we have established the following lawful reasons for the processing of this data.

• Necessary for the performance of a contract which you are a party to; or
• Necessary for the purposes of the legitimate interests pursued by us for relationship management, business development, providing information and best practice in relation to loss prevention and ensuring that our communications are appropriately targeted to our audience.

As an individual who has applied or is considering applying for a role with NorthStandard

In relation to individuals who have applied or are considering applying for a role with NorthStandard we may collect the following:

• Name
• Address
• National Insurance number
• Proof of identity
• Email address
• Contact details
• Curriculum vitae
• Gender (for the purposes of gender pay gap reporting)

Special category data

• Diversity and inclusion (D&I)
• Details of criminal convictions and offences

We need to collect this personal data from you to enable us to progress your application for a role with us and for us to meet our legal obligations under applicable employment, health and safety and financial services laws and regulations. This may include sharing personal data with credit and background checking agencies.  As part of a new employee’s onboarding, we may be required to process data relating to your criminal convictions and offences in relation to the NorthStandard Group. If this is required, we will seek your consent.

In accordance with the Data Protection Laws we have established the following lawful reasons for the processing of this data:

• In some instances you will have provided your consent to the collection and sharing of this information;
• Necessary for the performance of a contract which you are a party to;
• Necessary for the compliance with a legal obligation to which NorthStandard, or any Group entity, is subject;
• Necessary for the purposes of carrying out the obligations and exercising specific rights of NorthStandard or yourself in the field of employment.

The processing of personal data relating to criminal convictions and offences is required to meet our regulatory obligations in respect of the employment of staff within a financial services organisation and is authorised by applicable law.

We may also collect information from publicly available sources, such as Companies House, credit reference and fraud prevention agencies. We may combine this with information provided by you.

If you do not provide us with such personal data, we may not be able to progress your application for a role with us.

There is currently no specific legal obligation to obtain Diversity and Inclusion (D&I) data, but NorthStandard’s financial services regulators have issued expectations that firms ensure D&I is appropriately dealt with.  As a result, D&I data may be collected on a strictly voluntary basis to help NorthStandard meet financial service regulators’ expectations (but not prescribed requirements) and consider its own stance on D&I. As some of the data is special category data, consent is the lawful basis.

We use some automated screening tools as part of the application process.  This technology is used to help us manage the high volume of applications we receive and is intended to achieve the same outcome as would occur if we manually reviewed your application.  The answers you provide to one or more of the questions (excluding any special categories/equal opportunity questions) may result in your application being automatically declined.  The reason for this will be made available to you. 

Visitors to NorthStandard's offices

In relation to individuals who visit the NorthStandard Group offices, we may collect some or all the following information:

• Name
• Contact details
• Address
• Identification document details
• Email address

Right to work information (if you will be temporarily employed by or providing services to the NorthStandard Group during your visit).

We operate CCTV in the reception area of NorthStandard’s Newcastle upon Tyne office and Piraeus office, as well as in certain staff areas. We need to do this for security and safety reasons.

Under the data protection laws, we are permitted to do this when necessary for the purposes of our legitimate interests.

Visitors to the Standard Club Group’s offices

In relation to individuals who visit the Standard Club Group offices, we may collect some or all the following information:

• Name; and
• Contact details

We or the office management company operate CCTV. We need to do this for security and safety reasons.

Under the data protection laws, we are permitted to do this when necessary for the purposes of our legitimate interests.

In the UK and EEA offices, the legal bases we rely on to process your data for this purposes is Article 9(2)(b) and (i) of the GDPR and the UK GDPR, along with Schedule 1 condition 1 and 3 of the DPA 2018 respectively.  These relate to NorthStandard’s obligations in the field of employment, including its obligation to provide a safe working environment, and public health.

2. Who do we share information about you with?

The sharing of personal data is required to support our business activities and to provide a service to you, along with ensuring that we meet applicable statutory or regulatory requirements.

We have detailed below a list of the type of recipients we may share information about you with as the specific recipients may change from time to time.

We do not share all information for all individuals with every third party and the list is subject to constant review and change. We will also not disclose your personal data to a third party unless we are satisfied that we either have your consent or there is a lawful reason for doing so.

If required a full list of the names of all parties that we share information is available from the Data Protection Officer (see details above).

List of recipients

• Employees and directors of NorthStandard who need access to the personal data to perform their role within NorthStandard.
• Financial services regulators who oversee the activities of authorised insurance businesses.
• Government agencies, public bodies or authorities who deal with taxation, such as HMRC.
• Public bodies or law enforcement agencies who are concerned with anti- money laundering, anti-bribery, financial sanctions activity and disclosure and barring services.
• Third parties as required under the relevant Insolvency Act requirements.
• Corporate registrars who are legally required to hold certain company information.
• Credit referencing, screening and background checking agencies who provide credit, background and financial service checks.
• Reinsurers involved with the reinsurance of NorthStandard business.
• Our corporate insurers if required under the terms of the policy placed with them.
• NorthStandard auditors and internal auditors.
• Professional advisors such as lawyers, arbitrators, accounting firms, tax advisers and actuaries, who provide support in operating our business.
• Brokers, intermediaries, agents, surveyors and correspondents who may provide initial and on-going support with our insurance business.
• Our company bankers, custodians and investment managers who hold funds and/or make and receive payments on our behalf.
• Website and internet service providers who provide support and hosting for our internet and intranet services.
• Information technology (IT) support companies who provide day to day maintenance and support for our IT and database services.
• Digital agencies who provide marketing and communication support.
• Workflow management service providers.
• Recruitment agencies and platforms we may deal with during the recruitment process.
• Printers and publishers who provide electronic and paper-based solutions for company publications.
• Learning, development and training service providers.
• Embassies who provide visa processing services for overseas travel or work abroad.
• Current or prospective NorthStandard members or policyholders.
• International Group of Protection and Indemnity Clubs.
• Software application and IT service providers who provide services to NorthStandard.
• Facilities and corporate travel suppliers.

Any company within NorthStandard. For further information please click here.

3. Where do we send information about you to?

NorthStandard operates a number of branches and subsidiaries worldwide.  We may transfer information we hold about you to one or more of these locations (overseas transfer) if required to fulfil the purposes set out above.  We will only do this if one of the following conditions applies to the overseas transfer:-

• • it is necessary in order for us to perform a contract between you and us;
  • it is necessary in order for us to take measures to enter into a contract with you where you have requested us to do so;
  • it is necessary for us to establish, exercise or defend legal claims; or

If none of the conditions listed above apply, you have explicitly consented to the overseas transfer.

Cross-Border Data Transfers

Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country.

If you are located in the United Kingdom or the European Economic Area, we have implemented the relevant data transfer mechanism from article 46 of the GDPR to secure the transfer of your personal data to the United States and other jurisdictions.

We will always keep records of where your data has been sent outside of the United Kingdom or the European Economic Area.

If you are not located in the United Kingdom or the European Economic Area, please refer to section 6 below.

4. How long do we store information about you for?

We are a regulated financial services entity and as such we are subject to prescribed retention periods in relation to personal data. We are also required to retain personal data to comply with limitation periods prescribed by law.

We operate a data retention policy for each jurisdiction in which we operate which sets out the specific periods we will hold information for and when we need to destroy information that we no longer require for legal, regulatory or commercial reasons.

Generally, our retention period will be up to six years. However, this may be longer in some instances for example dealing with a claim, or for other jurisdictions.

Overall the criteria used to establish the period for which personal data will be stored is determined by regulatory or legal requirements. This is also supported by NorthStandard's Group's data retention policies which provides that such information must not be kept for any longer than necessary to fulfil the purposes for which it was collected.

Further details are available from dataprotection@north-standard.com

5. What are your rights?

Under the GDPR, you have the following rights:

• Right of information– Controller must advise the data subject of how personal data is processed;
• Right of access– request access to any personal data we hold about you;
• Right of rectification-have any personal data which we hold about you which is inaccurate or incomplete rectified;
• Right to be forgotten– have personal data erased in certain circumstances. This right does not apply, for example, where the processing is necessary (i) to comply with a legal obligation or (ii) for the establishment, exercise or defence of legal claims;
• Right to restriction of processing– have the processing of your personal data restricted in certain circumstances. This right does not apply, for example, where we continue to use your personal data (i) for the establishment, exercise or defence of legal claims or (ii) to protect the rights of another;
• Right of portability– to be provided with the personal data that you have supplied to us in a portable format that can be transmitted to another organisation without hindrance but in each case where (i) the processing is carried out by automated means and (ii) the processing is based on your consent or on the performance of a contract with you;
• Right to object– object to certain types of processing, including processing based on legitimate interests, automated processing (which includes profiling) and processing for direct marketing purposes; and
• Right to object to automated processing , including profiling-not be subject to a decision that is based solely on automated processing which produces a legal effect or which has a similar significant effect for you.

If you wish to exercise any of the rights set out above, you must make the request in writing to the Data Protection Officer (Details above). Please note some of these rights are restricted in some circumstances.

If you have provided your consent to any of the processing of your personal data, you have the right to withdraw your consent to that processing at any time. Please contact the Data Protection Officer if you wish to do so.

Some aspects of processing personal data in insurance may also fall within the 'public interest' lawful basis. Where we rely on our legitimate interests, we will always balance them against the rights and freedoms of the people whose personal data we process. If their rights override our legitimate interests we will cease to process personal data where we are relying solely on this to process personal data.

6. For individuals located outside of the EU

Singapore

For the purposes of the Privacy Notice, “Personal Data” and “Special Category Data” relates to data, whether true or not, about an individual (whether living or who has been deceased for less than ten years) who can be identified:

• From that data; or
• From that data and other information to which the organisation has or is likely to have access.

In accordance with the Singapore Act we have established the following lawful bases for the processing of this data:

• Express consent has been received;
• Contractual necessity (deemed consent);
• Deemed consent by notification in accordance with s.15A(2) of the Act;
• Processing is required to respond to an emergency that threatens the life, health or safety of the data subject (vital interests);
• Necessary for the purposes of the legitimate interests pursued by NorthStandard Group; or
• Business improvement purposes.

If you are in Singapore, you may submit ,questions , issues or withdraw consent requests to the UK Data Protection Officer at dataprotection@north-standard.com  who will respond within 30 days.

If we have not responded within 30 days or you are unhappy with the response you may submit a complaint to the Personal Data Protection Commission at www.pdpc.gov.sg

Japan

For the purposes of the Privacy Notice, “Personal Data” is information about a living individual which can identify a specific individual by name, date of birth or other description contained in such information.

“Special Category Data” includes information about a person’s race, creed, social status, medical history, criminal record, any crimes a person has been a victim of, and any other information that might cause the person to be discriminated against.

If you are in Japan, you may submit any questions or issues to the UK Data Protection Officer at dataprotection@north-standard.com  who will respond within 30 days.

If we have not responded within 30 days or you are unhappy with the response you may submit a complaint to the Personal Information Protection Commission at www.ppc.go.jp

Hong Kong

For the purposes of the Privacy Notice, “Personal Data” and “Special Category” data is defined as:

• Relating directly or indirectly to a living individual
• From which it is practical for the identity of the individual to be directly or indirectly ascertained, and
• In a form in which access to or processing of the data is practicable

Please note that the provision of such data is voluntary however the refusal to provide the data may limit NorthStandard’s ability to provide the services requested.

If you are in Hong Kong, you may submit any questions or issues to the UK Data Protection Leads at dataprotection@north-standard.com who will respond within 30 days.

If we have not responded within 30 days or you are unhappy with the response you may submit a complaint to The Office of the Privacy Commissioner for Personal Data at www.pcpd.org.hk

Australia

NorthStandard Group is aware of and always seeks to comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 as amended by the Privacy Amendment (Enhancing Privacy Protections) Act 2012 (the Privacy Act) when managing and maintaining personal information in the course of its Australian business.

For the purposes of the Privacy Notice, “Personal Data” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in material form or not.

“Sensitive Data” means information or an opinion about:

• Racial or ethnic origin
• Political opinions
• Membership of political association
• Religious beliefs or affiliations
• Philosophical beliefs
• Membership of a professional or a trade association
• Membership of a trade union
• Sexual orientation or practices
• Criminal record that is also personal information
• Health information about an individual
• Genetic information about an individual that is not otherwise health information
• Biometric information that is to be used for the purposes of automated biometric identification or verification, or
• Biometric templates

If you have any specific questions regarding the manner in which NorthStandard Group manages and maintains your Personal Information please contact us directly.

NorthStandard Group will only use and share the data we collect from you for the reasons described in “1. What information do we collect about you?” and “2. Who do we share information about you with?” We will not use your personal information for any other purpose without your consent, unless compelled to do so by an Australian Law, court or tribunal order, or enforcement body.

You may submit any questions or issues to the UK Data Protection Leads at dataprotection@north-standard.com  who will respond within 15 days.

If we have not responded within 15 days or you are unhappy with the response you may submit a complaint to the Office of the Australian Information Commissioner at www.oaic.gov.au. NorthStandard Group will deal with the complaint in accordance with the requirements of the Privacy Act and the APPs.

A copy of the Australian Privacy Statement can be found at www.sunderlandmarine.com/australia/privacy-policy

New Zealand

NorthStandard Group seeks at all times to comply with the New Zealand Privacy Act 2020 and Privacy Principles, and applies the principles detailed in the Health Information Privacy Code 2020. NorthStandard’s New Zealand branch is an agency for the purposes of the Privacy Act 2020.  Its name, address and contact details are:

NorthStandard Limited (trading as Sunderland Marine)

Level 1,

4 Akersten Street.

Port Nelson

Nelson 7010

New Zealand

Tel: +64 3 546 8830For the purposes of the Privacy Notice, “Personal Data” and “Special Category Data” relate to any information about an identifiable individual.

Where personal data is not collected directly from the individual but a third party we will collect this data on the basis that we have reasonable grounds that the individual has authorised the third party to collect such information.

If you are in New Zealand, you may submit any questions or issues to the UK Data Protection Officer at dataprotection@north-standard.com who will respond within 20 working days.

If we have not responded within 20 working days or you are unhappy with the response you may submit a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.

People’s Republic of China (PRC)

NorthStandard Group will comply with Personal Information Protection Law (PIPL) when and to the extent applicable.  Its name, address and contact details are:

NorthStandard Marine Consultant (Shanghai) Ltd Co (Registered Number: 41000002201611180030)

Room 302, Building 7

18 Gongping Road,

Hongkou District,

Shanghai, 200082

Tel: + 86 21 3536 3002

For the purposes of this Privacy Notice, “Personal Information” refers to various information related to an identified or identifiable natural person recorded electronically or by other means but does not include anonymised information.

“Sensitive personal information” is personal information that once leaked or illegally used, may easily lead to the infringement of the personal dignity of a natural person or may endanger his personal safety or property, including information such as biometrics, religious belief, specific identity, medical health status, financial accounts, and the person’s whereabouts, as well as the personal information of a minor under the age of 14 years.

Our privacy notice sets out how the NorthStandard Group deals with personal data.  Specific requirements in respect of sensitive personal information are set out below.

Sensitive personal information: seafarer injury or illness claims

We may receive sensitive personal information in respect of seafarer injury or illness claims.  We do not have a contractual relationship with individual seafarers, and we receive this information from their shipowner or crew management employers and/or from correspondents acting on their behalf.  However, we will comply with our legal obligations in respect of processing personal data.  

The purpose of processing individual seafarer information is to enable us to deal with claims and in some cases, we may be required to take urgent measures to protect the life and health of individuals who are the subject of these claims.  If we cannot obtain consent prior to use, we will obtain the consent as soon as practicable and ensure processing is restricted to that reasonably required to protect your life/health.

Sensitive personal information: applicants for employment with NorthStandard Shanghai

We are required to obtain your consent to processing of sensitive personal information in China, and to sensitive personal information being transferred outside of China to the entities detailed in this privacy notice.

If you wish to withdraw consent or exercise any of your rights noted in section five, please contact our Data Protection Leads at dataprotection@north-standard.com  who will respond in a timely manner.

How do I make a complaint to a supervisory authority?

Any breach of the Data Protection Laws will be taken seriously and if you consider that the data protection principles have not been followed in respect of personal data about yourself or others you have the right to lodge a complaint with the relevant data protection supervisory authority.

If you are unsatisfied with our response to any issues that you raise, you have the right to make a complaint with the data protection authority in your jurisdiction. 

The United Kingdom’s data protection supervisory authority is the Information Commissioner’s Office.  If you have any issues with our processing of your personal data and would like to make a complaint, you may contact the Information Commissioner’s Office on 0303 123 1113 or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

NorthStandard Group’s EU data protection supervisory authority is the Office of the Data Protection Commissioner.  If you have any issues with our processing of your personal data and would like to make a complaint, you may contact the Office of the Data Protection Commissioner, Canal House, Station Road, Portarlington, Co. Laois or at info@dataprotection.ie.

Cookie Policy

A cookie is a small file which asks permission to be place on your computer’s hard drive. For full details of our cookie policy please refer to our main internet site or click here.

Changes to the Policy

This Policy was published on 30 January 2024. We reserve the right to make changes to this policy as required.

If you require this privacy notice information to be provided to you in paper form please contact:

Our Data Protection Team, at dataprotection@north-standard.com 

_{[1]NorthStandard group incorporates entities, branches and offices worldwide and includes the insurance entities detailed below. To identify your insurer within NorthStandard please refer to your policy documents or please contact us.}

_{NorthStandard Limited (No. 505456) is registered in England and also trades as Sunderland Marine. Registered Office: 100 The Quayside, Newcastle upon Tyne, NE1 3DU, UK. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. North of England P&I Designated Activity Company is registered in Ireland (No. 628183) and also trades as Sunderland Marine. Registered Office: Regus House, Harcourt Centre, Block 4, Harcourt Road, Dublin 2, D02 HW77, Ireland. Regulated by the Central Bank of Ireland. The Standard Club Asia Ltd, is a company incorporated in Singapore with limited liability (No. 199703224R), authorised and regulated by the Monetary Authority of Singapore. Managers: Standard Club Management (Asia) PTE. Limited, incorporated in Singapore (No. 199703244C). Registered addresses: 140 Cecil Street, #16-03/04, Singapore 069540. The Standard Club Asia Ltd (Hong Kong Branch), registered in Hong Kong (No. F0024636), authorised and regulated by the Hong Kong Insurance Authority (F24636). Managers: Standard Club Management (Asia) PTE. Limited (Hong Kong Branch), registered in Hong Kong (No. F0024645). Registered addresses: Suite A, 29/F 633 Kings Road, Quarry Bay, Hong Kong. The Standard Club Ireland DAC, incorporated in Ireland (No. 631911), authorised and regulated by the Central Bank of Ireland (C182196). Managers: Standard Club Management (Europe) Limited, incorporated in Ireland (No. 630355), authorised and regulated by the Central Bank of Ireland (C184973). Registered addresses: Fitzwilliam Hall, Fitzwilliam Place, Dublin 2. The Standard Club Ireland DAC (UK Branch), registered in the UK (No. BR021960), deemed authorised by the Prudential Regulation Authority, subject to regulation by the Financial Conduct Authority and limited regulation by the Prudential Regulation Authority (FRN 833593). Managers: Standard Club Management (Europe) Limited (UK Branch), registered in the UK (No. BR021929), deemed authorised and regulated by the Financial Conduct Authority (FRN 848125). Registered addresses: The Minster Building, 21 Mincing Lane, London, EC3R 7AG. Details of the Temporary Permissions Regime, which allows EEA-based firms to operate in the UK for a limited period while seeking full authorisation, are available on the Financial Conduct Authority’s website. The Standard Club UK Ltd, incorporated in the UK (No. 00017864), authorised and regulated by the Prudential Regulation Authority & Financial Conduct Authority (FRN 202805). Registered address: The Minster Building, 21 Mincing Lane, London, EC3R 7AG. Managers: Standard Club Management (Europe) Limited (UK Branch), registered in the UK (No. BR021929), deemed authorised and regulated by the Financial Conduct Authority (FRN 848125). Registered addresses: The Minster Building, 21 Mincing Lane, London, EC3R 7AG. Details of the Temporary Permissions Regime, which allows EEA-based firms to operate in the UK for a limited period while seeking full authorisation, are available on the Financial Conduct Authority’s website. The following offices provide claims services for Standard Club: Standard Club Management (Americas), Inc., incorporated in the United States (Connecticut) (No. 4050326). Registered address: 180 Maiden Lane, Suite 6A, New York NY10038; Standard Club Management (Europe) Limited (Greek Branch), Law 27/1975 Branch Office, Status Building B, Areos 2A, 166 71 Vouliagmeni, Athens, Greece; and Standard Club Management (Bermuda) Limited (Japan Branch), registered in Japan (No: 0100-03-034516). Registered address: 6th Floor Takebashi Bldg, 2-1-8, Kanda Nishiki-cho, Chiyoda-ku, Tokyo 101-0054 Japan.} 

_{[2] The data protection laws include: the UK Data Protection Act 2018 , the UK GDPR (as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulation 2019, (UK GDPR)  Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (General Data Protection Regulation “GDPR”), the Irish Data Protection Act 2018 (Irish Act) and the  Singapore Personal Data Protection Act 2012, as amended by the Personal Data Protection (Amendment) Act 2020 (the Act) (the Singapore Act).}