Your information.
Handled with care.

1. Purpose and scope

BlueHarbor International Assurance Group (“BlueHarbor,” “we,” “us,” or “our”) is committed to handling personal information responsibly. This policy describes our approach to information that may identify, relate to, describe, or reasonably be associated with an individual.

It applies to website visitors, individuals who submit enquiries or request information, business contacts, brokers, clients, prospective clients, and other individuals who communicate with us through the website.

Where a particular BlueHarbor entity acts as a controller, business, processor, or service provider under applicable privacy law, the role and associated obligations will depend on the relevant activity and relationship.

2. Information we collect

The information collected depends on how you interact with the website and the services involved. Categories may include:

• Contact information: name, business email address, telephone number, job title, company, and business address.
• Enquiry information: the contents of messages, service interests, requested assistance, and information you choose to provide in a form or correspondence.
• Business and transaction information: details relevant to an insurance, reinsurance, surety, trade finance, risk advisory, or claims enquiry, where appropriate and lawfully provided.
• Technical information: IP address, browser type, device information, operating system, approximate location derived from technical data, referring pages, and website usage information, where collected.
• Cookie and preference information: information recorded by cookies or similar technologies, subject to the website’s actual configuration and your preferences.
• Information from other sources: business contact details or professional information obtained from organizations, public sources, referrals, or service providers, where lawful and relevant to the interaction.

Please do not submit sensitive personal information, payment card details, government identification numbers, medical records, or confidential claim documents through a general website enquiry unless specifically requested through an appropriate and authorized channel.

3. How we use information

Where permitted by applicable law, personal information may be used to:

• Respond to enquiries, requests, and communications.
• Provide information about our services and assess potential business relationships.
• Coordinate discussions with brokers, clients, insurers, reinsurers, professional advisers, and relevant service providers.
• Evaluate, administer, or support insurance, reinsurance, surety, trade finance, risk advisory, or claims-related activities when applicable.
• Operate, maintain, troubleshoot, and improve the website and its functionality.
• Protect the website, users, business operations, and systems against fraud, misuse, unauthorized access, and security incidents.
• Maintain business records and comply with legal, regulatory, contractual, accounting, or reporting obligations.
• Send relevant business communications where permitted, subject to applicable consent and opt-out requirements.
• Establish, exercise, or defend legal claims and enforce applicable terms.

We seek to use information only for purposes that are relevant to the relationship and consistent with applicable legal requirements.

4. Disclosure and sharing

BlueHarbor does not treat the submission of personal information as permission to disclose it indiscriminately. Information may be shared where necessary for a legitimate purpose and permitted by law, including with:

• Service providers: website hosting, information technology, communications, cybersecurity, analytics, and administrative providers supporting our operations.
• Business and insurance participants: brokers, clients, insurers, reinsurers, underwriting partners, claims professionals, surveyors, adjusters, and other parties relevant to a specific transaction or service.
• Professional advisers: lawyers, auditors, accountants, and other advisers acting in a professional capacity.
• Authorities and other parties: regulators, courts, law enforcement, or other recipients when required by law or reasonably necessary to protect rights, safety, or legitimate interests.
• Corporate transaction parties: relevant parties in connection with a proposed or completed restructuring, financing, merger, acquisition, or transfer of business, subject to applicable safeguards.

Where appropriate, we seek to limit access to information, use contractual confidentiality and data protection measures, and require service providers to handle information consistently with their assigned responsibilities.

We do not state that personal information is never shared or that every disclosure requires consent. The lawful basis and safeguards depend on the circumstances and applicable law.

5. Data retention and security

Personal information may be retained for as long as reasonably necessary for the purpose for which it was collected, including to respond to enquiries, maintain business records, perform contractual obligations, resolve disputes, meet legal or regulatory requirements, and protect legitimate interests.

Retention periods vary according to the type of information, the nature of the relationship, applicable limitation periods, and legal obligations. When information is no longer required, we seek to delete it, anonymize it, or securely dispose of it where appropriate and technically feasible.

We seek to use reasonable administrative, organizational, and technical safeguards to protect information against unauthorized access, disclosure, alteration, loss, and misuse. No website, electronic transmission, or storage system can be guaranteed to be completely secure.

If you believe information has been submitted to the wrong recipient or that a security issue may affect your information, contact us promptly through the contact details on our website.

6. Cookies and analytics

Websites may use cookies, pixels, local storage, and similar technologies to support essential functions, remember preferences, understand website traffic, measure performance, and improve the user experience.

The technologies used on the BlueHarbor website, their providers, and their purposes must be confirmed against the website’s actual configuration. This policy does not itself enable or disable cookies or establish a cookie preference mechanism.

Where required by law, non-essential cookies or similar technologies should be used only after the necessary consent has been obtained. Depending on your browser and location, you may be able to manage cookies through browser settings or a website preference tool if one is provided. Blocking certain cookies may affect website functionality.

For additional information, please review our Cookie Policy.

7. International data transfers

BlueHarbor’s business activities may involve communications or service providers operating in different countries. Where personal information is transferred across national borders, the applicable legal requirements depend on the individuals concerned, the entities involved, and the destination of the transfer.

Where required, appropriate safeguards may include contractual protections, recognized transfer mechanisms, or other measures permitted by applicable law. Information may also be disclosed across borders when necessary for a requested service or otherwise permitted by law.

Contact us if you require further information about international processing relevant to a specific interaction.

8. Your privacy rights and choices

Depending on your location and the laws that apply, you may have rights concerning your personal information. These rights may include:

• Requesting access to personal information held about you.
• Requesting correction of inaccurate or incomplete information.
• Requesting deletion of information, subject to applicable exceptions.
• Requesting restriction of, or objecting to, certain processing.
• Requesting a copy of certain information in a portable format, where applicable.
• Withdrawing consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Opting out of certain marketing communications.
• Appealing a decision or submitting a complaint to a relevant privacy regulator, where such rights are provided by law.

These rights are not absolute and may be subject to identity verification, exemptions, legal obligations, and other conditions. The rights available to you depend on the law that applies to your circumstances.

How to submit a request

Contact us through the Contact page and identify your request as a privacy matter. Please describe the information or processing involved and provide a safe way to contact you. We may request reasonable information to verify your identity or authority before responding.

Please do not send passwords, full payment card numbers, or unnecessary identity documents in an initial enquiry. We will handle requests in accordance with applicable legal deadlines and requirements.

9. Children’s privacy

The BlueHarbor website is intended for business and professional audiences and is not designed to solicit personal information directly from children. We do not knowingly seek to collect children’s personal information through general website enquiries.

If you believe a child has provided personal information through the website, please contact us so the matter can be reviewed and appropriate action considered in accordance with applicable law.

10. Third-party websites and services

Our website may contain links to external websites, platforms, or services operated by other organizations. Those third parties may have their own privacy notices, security practices, and terms. BlueHarbor does not control their independent privacy practices.

Before providing personal information to a third-party website or service, review its applicable privacy notice and consider whether the information requested is necessary for your purpose.

11. Changes to this Privacy Policy

This policy may be revised to reflect changes in our website, business activities, information practices, or applicable legal requirements. When changes are made, the revised version will be published on this page with an updated review date where appropriate.

Unless otherwise stated, the updated policy applies from the date it is published. If a change requires additional notice or consent under applicable law, we will take the steps required by that law.

12. Frequently asked questions

13. Contact us about privacy

If you have a question about this policy, wish to make a privacy request, or have concerns about how your information may be handled, please contact BlueHarbor through our website.

Use the subject line “Privacy Request” where appropriate and provide enough information for us to understand your enquiry. Please do not include sensitive personal information unless it is necessary and an appropriate secure channel has been established.

This Privacy Policy is general website information and does not constitute legal advice. It should be reviewed and finalized against BlueHarbor’s actual legal entity structure, website technologies, data flows, service providers, and applicable privacy obligations before being relied upon as a complete legal notice.