Sedgwick Global Privacy Policy

General identification and contact information

• Your name, address, e-mail and telephone details, gender, marital status, family status, date and place of birth, educational background, physical attributes, activity records, driving records, photos and video images, employment history, skills and experience, professional licenses and affiliations, relationship to the policyholder, insured or claimant, and date and cause of death, injury or disability.
• Identification numbers issued by government bodies or agencies – Social Security or national insurance number, passport number, tax identification number, military identification number, national resident number, or driver’s or other license number.

Financial information and account details

• Bank account number and account details, credit history and credit score.

Medical condition and health status

• In certain cases, we may receive information about your current or former physical or mental or medical condition, health status, injury or disability information, medical procedures performed, personal habits (for example, smoking or consumption of alcohol), prescription information and medical history.

Other potentially sensitive information

• In certain cases, we may receive sensitive information about your trade union membership, religious beliefs, political opinions, family medical history or genetic information (for example, if you apply for insurance through a third-party marketing partner that is a trade, religious or political organization). In addition, we may obtain information about your criminal record or civil litigation history in the process of preventing, detecting and investigating fraud.
• We may also obtain sensitive information if you voluntarily provide it to us (for example, if you express preferences regarding medical treatment based on your religious beliefs).

Telephone recordings

• Recordings of telephone calls to our staff and offices.
• Information to investigate crime, including fraud and money laundering: For example, insurers commonly share information about their previous dealings with policyholders and claimants for this purpose.

Information enabling us to provide our services

• Location and identification of property insured (for example, property address, vehicle license plate or identification number);
• Travel arrangements including reservation numbers, destination and hotel details;
• Policy details and claim numbers, details of policy coverage and cause of loss; and
• Prior accident or loss history, your status as director or partner or other ownership or management interest in an organization and other insurance policies you hold.

Cookies contain small amounts of information which are downloaded to your device when you visit our website. Cookies are sent back to our website to allow us to recognize your device.

We use the following cookies:

• CraftSessionId to maintain sessions across web requests. For GDPR purposes, please note that Craft’s default cookies do not collect any personal or sensitive information. Craft’s default cookies do not collect IP addresses. The information they store is not sent to any 3rd parties. The default cookies are only used to communicate for the purposes of user authentication, form validation/security, and basic web application operations.
• Google Analytics _gat, _ga These two cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

We use the personal data that we collect to:

• Communicate with you and other interested parties to manage your claim.
• Send you important information regarding your claim and other administrative information.
• Make decisions about claim assessment, processing and settlement.
• Use with data analytics, modeling (such as predictive modeling), and the deployment of automated tools not creating a significant legal impact to you, and to use the results of such analysis, models, and tools for the purposes otherwise outlined in this Policy.
• Manage claim disputes, where applicable.
• Provide improved quality, training and security (for example, with respect to recorded or monitored phone calls to our contact numbers).
• Prevent, detect and investigate crime, including fraud and money laundering, and analyze and manage other commercial risks.
• Conduct satisfaction surveys.
• Use during the normal course of pre-employment contracting during the recruitment process.
• For our legitimate interests while conducting the recruitment process.
• Manage our business operations to comply with internal policies and procedures, including those relating to auditing finance, accounting and billing, IT systems, data and website hosting, business continuity, document and print management.
• Resolve complaints, and handle requests for data access or correction.
• Comply with applicable laws and regulatory obligations (including laws outside your country of residence), such as those relating to anti-money laundering and comply with legal process and respond to requests from public and government authorities (including those outside your country of residence).
• Establish and defend legal rights, protect our business operations (including our group companies), our rights, privacy, safety of employees and property, you or others related to the claim and pursue available remedies to limit our damages

We use data during the recruitment and employment process, including:

• to decide whether to employ (or engage) you;
• to decide how much to pay you, and the other terms of your contract with us;
• to check you have the legal right to work for us;
• to determine whether we need to make reasonable adjustments to your workplace or role because of your disability;
• to monitor diversity and equal opportunities;
• to comply with employment law, immigration law, health and safety law, tax law and other laws which affect us;
• the prevention and detection of fraud or other criminal offences; and
• for any other reason which we may notify you of from time to time.
• Completion of background checks.

We may process special or sensitive personal data when we are processing it for the following purposes, which we may do:

• where it is necessary for carrying out rights and obligations under law;
• where it is necessary to protect your vital interests or those of another person where you/they are physically or legally incapable of giving consent;
• where you have made the data public;
• where processing is necessary for the establishment, exercise or defense of legal claims; and
• where processing is necessary for the purposes of occupational medicine or for the assessment of your working capacity.

We will only process personal data for the specific purposes set out above or for any other purposes specifically permitted by the data protection legislation. We will notify you of those purposes when we first collect the data or as soon as possible thereafter.

We may, as a matter of law, and without requiring notice or consent, use your information for crime and fraud prevention, or systems administration within Sedgwick and to monitor and/or enforce Sedgwick’s compliance with any regulatory rules and codes.

You may let us know how you want to be contacted (e.g. by email, phone or post).

For personal data to be processed lawfully in most countries, they must be processed on one of basis as set forth by applicable law. These include, among other things, the data subject’s consent to the processing, or that the processing is necessary for the performance of a contract with the data subject, for the compliance with a legal obligation to which the data controller is subject, or for the legitimate interest of the data controller or the party to whom the data is disclosed. When sensitive Personal Data is being processed additional conditions must be met. When processing Personal Data as data controllers in the course of our business, we will ensure that those requirements are met.

Depending on your relationship with us, the legal basis for us processing your Personal Data is one of the following:

• You have given consent to us or the party for whom we are acting
• The processing is necessary for the performance of a contract or legal duty
• Processing is necessary for a legitimate interest pursued by us or a third party.

Where processing is based on legitimate interest only, it will be in relation to one of the following:

• Claim handling on behalf of another party
• Establishing, exercise or defense of legal claims
• Prevention, detection of crime

Where we use legitimate interest as our grounds for processing your data you have the right to object at any time.

Sedgwick may make personal data available to the following parties for the purposes of claim assessment or as required by law:

Other insurance and distribution parties

In the course of processing claims, we may make Personal Data available to third parties such as reinsurance brokers, appointed representatives, distributors, financial institutions, securities firms, employers as applicable, and other business partners.

Our service providers

External third-party service providers, such as medical professionals, accountants, actuaries, auditors, experts, lawyers and other outside professional advisors; travel, background checks and medical assistance providers.

IT systems, support and hosting service providers, document and records management providers and outsourced service providers that assist us in carrying out business activities.

Banks and financial institutions that service our accounts, third-party claim administrators, claim investigators, construction consultants, engineers, examiners, jury consultants, translators and similar third-party vendors.

Authorities and third parties involved in court action

We may share personal data with government or other public authorities (including, but not limited to, workers’ compensation boards, courts, law enforcement, tax authorities and criminal investigations agencies); and third-party civil legal process participants and their accountants, auditors, lawyers and other advisors and representatives as we believe to be necessary or appropriate:

• to comply with applicable law and regulations, including those outside your country of residence;
• to comply with legal process;
• to respond to requests from public and government authorities including public and government authorities outside your country of residence;
• to protect our operations or those of any of our group companies;
• to protect our rights, privacy, safety or property, and/or that of our group companies, you or others; and
• to allow us to pursue available remedies or limit our damages.

Other third parties

We may share personal data with emergency providers (fire, police and medical emergency services); retailers; medical organizations and providers; travel carriers; credit bureaus; credit reporting agencies; and other people involved in an incident that is the subject of a claim; as well as purchasers and prospective purchasers or other parties in any actual or proposed reorganization, merger, sale, joint venture, assignment, transfer or other transaction relating to all or any portion of our business. To check information provided, and to detect and prevent fraudulent claims, personal data (including details of injuries) may be put on registers of claims and shared with other insurers. We may search these registers when dealing with claims to detect, prevent and investigate fraud.

Due to the global nature of our business, for the purposes set forth above we may transfer personal data to parties located in other countries (including the United States and other countries that have a different data protection regime than is found in the country where you are based). For example, we may transfer Personal Data in order to process international travel insurance claims and provide emergency medical assistance services when you are abroad. We may transfer information internationally to our group companies, service providers, business partners and governmental or public authorities in order to perform our services.

We will rely on legally-provided mechanisms to lawfully transfer personal data across borders. In many cases, we will use European Commission-approved Standard Contractual Clauses as a legal mechanism for data transfers from the EU. You can find more information about Standard Contractual Clauses here on the European Commission website. These clauses are contractual commitments between companies transferring Personal Data, binding them to protect the privacy and security of the data.

EU-US Data Privacy Framework and UK Bridge 

Sedgwick Claims Management Service Inc., CareWorks Managed Care Services Inc., York Risk Services Group and EFI Global Inc. adheres to the principles of the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. The Sedgwick entities listed above may rely on the EU-U.S. DPF as a lawful basis for transfers of personal information. To learn more, visit our ‘Data Privacy Framework Notice’.

Sedgwick will also continue to rely on the SCCs for the purposes of transfers of personal data from the EU and UK to the US, where applicable. For further information please see International Data Transfers section above.

We will take all appropriate reasonable technical, legal and organizational measures, which are consistent with applicable privacy and data security laws to safeguard your Personal Data. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any personal data you might have with us has been compromised), please immediately notify us.

Where we provide personal data to a vendor, the vendor will be selected carefully and required to use appropriate measures to protect the confidentiality and security of your Personal Data.

We will retain Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

Your account can be used to view sensitive information for applications where a PIN is required. It is, therefore, important that you keep your PIN private, as you would your banking PIN. If your PIN is compromised, contact Sedgwick immediately.

From time to time we alter our Privacy Notice as we introduce new services or change existing ones. Changes to this notice are effective as soon as they are posted on the Site and a notice has been placed on the login screens of the self-service applications. We from time to time also communicate this change via e-mail. The effective date of this version of the Privacy Notice appears at the top of the notice.

You from time to time have the option to enter third party web site through the Site, or you from time to time have the option to enter our web site from another third-party web site. Since we cannot be assured that such third-party web site follow our privacy policies, we encourage you to ask questions and review the privacy policies of these third parties. We have no responsibility or liability for the actions or policies of these independent sites, do not endorse any product or service mentioned or offered in such sites, and are not responsible for the content or privacy practices of such sites.

Ours are general purpose and professional websites that do not knowingly collect any information from children under age 18 at any time. We also strive to be fully compliant with the Children’s Online Privacy Protection Act (COPPA). We strongly encourage parents and guardians to regularly monitor and supervise their children’s online activities. If a child under the age of 18 has provided Personally Identifiable Information on one of our web site without the consent of his or her parent or guardian, we ask that a parent or guardian send an e-mail to [email protected], and we will delete the child’s Personally Identifiable Information from our files.

• Brazil
• Dutch
• French
• French Canadian
• German
• LatAm
• Spain

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Argentina, you may request further information about processing, access your Personal Data, and request that we stop processing or correct Personal Data related to you. To access your Personal Data, please contact us as described above. Sometimes, however, we may need access to your Personal Data to complete then Services. We may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. If you have any complaints regarding how we handle your Personal Data, please contact our [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Australia, you may request access to or correction of the Personal Data that we have collected about you. To access your Personal Data, please contact us described above. We may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. If you have any complaints regarding how we handle your Personal Data, please contact us at the address above or email us: [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

We will not process your data for direct marketing without making additional disclosures. Further, if you are located in Bahrain please contact us at the address provided above if you would like the correction of any Personal Data related to you, want to opt-out of automated decision making, and/or want to access any data related to you held by us. If you have any complaints regarding how we handle your Personal Data, please contact us at [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

We process personal data primarily to manage and process your claim, as well as for the purposes listed in the “How we use your personal data” section above. We process that personal data according to our legitimate interest and the legitimate interest of third parties. Please contact us as provided above if you would like to know more about how we process your personal data, or to access, correct, or delete any personal data related to you that we control. Further, in some cases, you may need us to anonymize your personal data or transfer it to another entity (the right to portability). We will use our best efforts to respond to your request. We will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. We will retain Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

Click here to view our policy in English.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Chile, you may have a right to access, correction, or deletion of the Personal Data that we have related to you. To access your Personal Data, please contact us as described above. We may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. If you have any complaints regarding how we handle your Personal Data, please contact our [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

Principally, Personal Data collected in China will be stored within China. However, we provide Services through resources and servers located globally (including the United States), which means your Personal Data may be transferred to or accessed within another country/region outside of China. The data protection and privacy laws and principles in those countries/regions may not offer the same level of protection as those in China. Under those circumstances, Sedgwick will continue to protect your Personal Data in a manner consistent with what is expected under Chinese law (e.g., we will obtain your consent to transfer your Personal Data, or de-identify the Personal Data before transfer).

We take steps to keep your Personal Data accurate and up to date. If you are residing in Colombia, please contact us if as provided above you would like to correct, receive proof that we process your data, or to object to processing, where applicable. If you have any complaints regarding how we handle your Personal Data, please contact us at [email protected]. Further, we remind you that you can lodge a complaint with the applicable Superintendent if you believe that an entity which processes your data has violated your related rights.

Click here to view our privacy policy.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Hong Kong, you may request access to or correction of the Personal Data that we have collected about you. To access your Personal Data, please contact us as described above. We may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Indonesia, Malaysia, Philippines or Singapore, you may request access to, and modification, opposition, and deletion of the Personal Data that we have collected about you. To access your Personal Data, please contact us as listed above. Subject to applicable law, we may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Israel, please contact us if you want more information on how we process your data, including accessing, correcting, deleting, or objecting to further processing, where applicable. If you have any complaints regarding how we handle your Personal Data, please contact our [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

Sedgwick may use your Personal Data for the following purposes:

In delivering most of our services, Sedgwick Arabia Company for Loss Inspection and Valuation and its subsidiaries “Sedgwick”, act as a claims management organisation on behalf of an insurer and/or insurance broker. In that situation the privacy policy of the insurer and/or insurance broker will apply as they will be the controller of the data that we process on their behalf. If you are uncertain, we will always be here to help you identify the party that controls your data.

Personal data collected and means of collection
The types of information we process are listed under the “Personal information we obtain” section of the Global Privacy notice above. The Personal Data we gather about you, your dependents and others will depend on the type and nature of the service we are providing.

The information we collect, and process is usually provided by you directly to us, such as during the claims process or through a customer satisfaction survey, and from business partners such as insurers. If we collect your personal data directly from you as a data controller, we will inform you about:

• The purpose, or purposes, for which we will be processing your personal data.
• The types of third parties, if any, with which we may share, or to which we will disclose, your personal data.
• The means, if any, by which you can limit our use and disclosure of your personal data.

If we receive personal data about you from other sources, and this source has not informed you in advance, we will provide you with this information as soon as possible thereafter.

Purpose of Processing
We process personal data primarily to; Manage your claim and related disputes; Make decisions about claim assessment, processing and settlement; Train employees; Prevent fraud; Conduct surveys; Manage our business operations including legal compliance; Resolve complaints; Statistical and analytic information; Establish and defend legal rights.

As well as for the purposes listed in the “How we use your personal data” section of the Global privacy notice above.

We will only use the personal data we collect for the purpose of delivering our Services and for no other purpose.

Legal basis of processing
For personal data to be processed lawfully, it must be processed by the Data Controller (usually your insurer) based on one of the lawful bases set out in the relevant local legislation. When processing personal data as data controllers, we will ensure that all regulatory and legislative requirements are met.

In accordance with the Personal Data Protection Law, the legal basis on which we rely on in processing such data is:

• Achieving legitimate interests or objectives, once these do not override or conflict with your Data subject Rights.
• In fulfilment of a contractual obligation which you are a party to.
• In compliance with a statutory obligation for example in the context of Employment legislation, Health and Safety or for Anti Money Laundering requirements.
• Your explicit consent. You can withdraw your consent at any time without affecting processing operations carried out based on other legal bases. To this end, see “How to contact us” section below.

Whether collection of personal data is mandatory or optional.
Some data that we collect is mandatory for us to provide our Services. On other occasions, you may have a choice regarding whether to provide data, and we will inform you of such choice at the point of our collection.

Sharing Personal data
The personal data processed when you interact with our Services will, in the normal course of our activities, be shared with the parties involved in providing the Services (e.g. our client, insurers, service providers and Sedgwick group companies) for the purposes set out in this Privacy Policy and will not be transferred to other individuals or businesses for their own use, unless required by law.

This Information is disclosed for a business or commercial purpose, personal data is shared with these categories of Third Parties (which does not include service providers): Partners in our industry such as reinsurance brokers, appointed representatives, distributors, financial institutions, and securities firms. We may also share your personal data with specific vendors, or other entities with whom we have a business relationship, to provide related products or services.

The sharing of Personal Data to these organizations may mean your Personal Data is transferred to third parties located outside of Saudi Arabia.

International Transfers of Personal Data
Due to the global nature of our business and for the purposes set forth above we may transfer personal data to parties located in other countries (including the European Union, United Kingdom and other countries that have a different data protection regime than is found in the country where you are based).

We will rely on legally provided mechanisms to lawfully transfer personal data across borders. In most cases, we will use Adequacy decisions, Model Contracts or Standard Contractual Clauses as a legal mechanism for data transfers from the Kingdom of Saudi Arabia to another country. These clauses are contractual commitments between companies transferring Personal Data, binding them to protect the privacy and security of the data.

Data Subject Rights
You shall have the following rights pursuant to local legislation and as set out in local Regulations subject to any exception, exemptions and restrictions which apply:

1. The right to be informed about the legal basis and the purpose of the collection of your Personal Data.
2. The right to access your Personal Data held by the Controller, in accordance with the rules and procedures set out in the local regulations.
3. The right to request obtaining your Personal Data held by the Controller in a readable and clear format, in accordance with the controls and procedures specified by the regulations.
4. Right to Request Correction of Your Personal Data: You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect or incomplete.
5. The right to request a Destruction of your Personal Data held by the Controller.
6. The right to Withdraw Consent.

You can exercise any of these rights by contacting us using the information provided in the “How to Contact Us” section below.

How we store your Personal data
Sedgwick is committed to protecting the privacy of Personal Data we collect and process in conducting our business and we store your personal data securely.

We will retain Personal Data for the period necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required for tax or audit purposes or for other requirements permitted under law.

Consent to use Personal Data
We will inform you when we require your consent to process your personal data and/or Sensitive personal data and will request it from you as outlined in the Global Privacy Policy. If you do not provide that consent when requested, we may not be able to provide you with our Services. If necessary, please contact us as set out in the “How to Contact Us” section below for further information.

How to Contact Us
If you have any questions, comments, or concerns about how we collect, process or manage your Personal Data, then please contact us using the details below:

Sedgwick Arabia Company for Loss Inspection and Valuation
Data Protection Officer
Ground Floor,
Al Raashid Tower,
King Saud Street, Sulaimaniya
Riyadh 12621 (MPJ5+W6),
Kingdom of Saudi Arabia

Tel: +966 11 5128050
email: [email protected]
Alternatively, our Sedgwick International DPO can be contacted by email on: [email protected]

If you are not satisfied with how we process your complaint, you can file a complaint to the Competent Authority, the Saudi Data & AI Authority (SDAIA).

SDAIA, Kingdom of Saudi Arabia, Riyadh, Website: Saudi Data & AI Authority (sdaia.gov.sa)

By using the Services on this website, you consent to the collection, use and transfer of your Personal Data (including sensitive Personal Data pursuant to Mexican law) for processing in the United States as described in this policy. During our claims administration services, we will obtain your express consent for use of information.

Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in New Zealand, you may request access to or correction of the Personal Data that we have collected about you. To access your Personal Data, please contact us as described above. We may charge for this service and will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. If you have any complaints regarding how we handle your Personal Data, please contact our [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

Sometimes it is necessary that we process your data in order to provide the Services. Sedgwick takes steps to keep your Personal Data accurate and up to date. If you reside in Peru, please contact us as indicated above if you would like any information about the data we hold that relates to you, or if you would like to access, correct, delete, or opt-out of providing data, where applicable. If you have any complaints regarding how we handle your Personal Data, please contact our [email protected]. Sedgwick responds to complaints as soon as practicable, and in any event, within the time limits prescribed by law.

We take steps to keep your Personal Data accurate and up to date. If you reside in Russia, please contact us above if you would like any additional information or if you would like to access the Personal Data that relates to you. If you believe that any data is incorrect, you may request that we either correct or delete the data.

We take steps to keep your Personal Data accurate and up to date. If you reside in Qatar, please contact us above if you would like any information about the data we hold that relates to you, or if you would like to access, correct, delete, or opt-out of providing data, where applicable.

Sometimes we must process your Personal Data in order to provide the Services. Such processing may include transfer to a third country, such as the United States. Sedgwick takes steps to keep your Personal Data accurate and up to date.

Some data that we collect is mandatory for us to provide the Services. On other occasions, you may have a choice regarding whether to provide data, and we may inform you of such choice at the point of our collection.

If we process your data while you are located in Taiwan, you may have the right to:

We take steps to keep your Personal Data accurate and up to date. If you reside in Trinidad, you may request access to, deletion, or correction of the Personal Data that we have collected about you. To access your Personal Data, please contact us at the address listed above or email us at [email protected]. We respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. If you have further complaints, you can contact government agencies.

By using the Services you consent to the collection, use and transfer of your Personal Data as outlined in this Privacy Notice. Further, Personal Data collected will be shared as outlined in this Privacy Notice.

We take steps to keep your Personal Data accurate and up to date. If you reside in Ukraine, you may have various rights connected with the processing of your Personal Data. To access your Personal Data, please contact us at the address listed above. We respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. Rights related to the processing of your Personal Data may include the right to:

Click here to view our international privacy policy.

The list below summarizes our collection, use, and disclosure of personal data. To the extent that there is any conflict between this list and other sections of this Privacy Notice, this list shall prevail.

We take steps to keep your Personal Data accurate and up to date. If you reside in Vietnam, Please let us now if you would like to access, correct, update, or delete Personal Data that we hold about you. To access your Personal Data, please contact us at the address listed above or email us at [email protected]. We respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law.