Privacy Notice

---

The policy of Carrick Group Limited and its subsidiaries (“Carrick Group” or “The Company” or “we”) is to respect and protect the privacy of policyholders, claimants, their agents, and relatives. This Privacy Notice sets out how the Carrick Group collects and uses personal data for the administration of (re)insurance policies.

We process your personal data for the following purposes:

• Policy administration.
• Claims insurance and reinsurance processing.
• Complaints.
• Claims payments and the recovery of payments.
• For fraud prevention, sanctions screening and anti-money laundering purposes.
• Customer service.

To enable Carrick Group to perform the above activities, Carrick Group may disclose your personal data to any member of the Carrick Group of Companies, as well as our affiliate shareholders and related parties, as reasonably necessary for the purposes set out in this Privacy Notice. Carrick Group may also disclose your Personal Data to any of our employees, officers, professional advisers, business partners, reinsurers, third party administrators, or subcontractors as reasonably necessary for the purposes set out above.

Carrick Group has companies located in Bermuda, the Cayman Islands, Ireland, the United Kingdom, and the USA. Carrick Group may transfer personal data to these additional regions. Each region has its own data protection regulation to safeguard all data elements, some of which may have lower data protection guidelines than others. Carrick Group applies the same data protection standards to all regions to remain as consistent as possible and to meet all applicable laws. 

You can contact the Carrick Data Protection Officer by e-mail (dpo@carrickholdings.com) to exercise your legal rights as a data subject as per the listed circumstances below:

• The right to access personal data held about them (the right of subject access).
• The right to be informed about how and why their data is used, and to receive privacy information.
• The right to have their data rectified.
• The right to have their data erased.
• The right to restrict processing.
• The right to object to processing.
• The right to data portability.
• The right not to be subject to a decision based solely on automated processing.

You can contact the Carrick Data Protection Officer by e-mail at dpo@carrickholdings.com.