Privacy and Data Protection — Australia

Arch Underwriting at Lloyd’s (Australia) Pty Ltd — Privacy Policy

We value the privacy of your personal information and are bound by the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles (APPs). This Privacy Policy of Arch Underwriting at Lloyd’s (Australia) Pty Ltd ABN: 27 139 250 and its authorised representatives, related companies, and third parties who provide services to us or on our behalf (we, our and us) provides information about our collection, use, and disclosure of your personal information by us. Arch Underwriting at Lloyd’s (Australia) Pty Ltd is part of the Arch Capital Group, which is a group of companies which writes and services insurance, reinsurance and mortgage insurance products on a worldwide basis.

All references to “personal information”, “sensitive information” and “health information” in this Privacy Policy have the meanings given to these terms under the Privacy Act. Unless otherwise specified, all references to “personal information” in this Privacy Policy includes “sensitive information”.

The specific types of personal information and sensitive information we collect about you depend on which of our products and services are being provided to you. For some specific products or services or where additional personal information or sensitive information not detailed in this Privacy Policy is to be collected, we will provide you with a separate privacy collection statement (PCS) for that service or collection. The PCS is to be read together with this Privacy Policy in relation to that service.

By providing us with any of your sensitive information identified in this Privacy Policy or any PCS provided to you at the time of collection of your sensitive information or using our products or services, you acknowledge and consent to us collecting, using and disclosing that the sensitive information (i.e. as detailed in this Policy and any relevant PCS) in accordance with this Privacy Policy and/or PCS, as applicable.

You are not required to provide us with the personal information requested and can withdraw your consent to us processing your sensitive information at any time (by using the details in the “Contact Us” section below). However, if we have not received your personal information or you withdraw your consent to us processing your sensitive information for the relevant purposes, for example to provide you with a product or service you are applying for, we may not be able to offer you the product or service or continue to respond to your requests or queries.

What Personal Information Do We Collect?

The kinds of personal information that we collect depend on the nature of our engagement with you.

For our customers, prospective customers and brokers we collect your:

Name and contact information such as address, phone number, and email address

Also, for our customers and prospective customers we may collect your:

Gender and date of birth
Identity information such as driver’s licence details and passport details including nationality
Government related identifiers such as driver’s licence number, passport number, Medicare number, Centrelink number and, where authorised by law, your Tax File Number
Current and previous insurance and claims details
Financial information such as bank account information, insurance details, financial hardship information, and bankruptcy details (if any)
Employment information such as your employer, job title, salary details, payroll details, compensation details and employment history
Family information such as marital status, dependents and beneficiaries
Travel details
Subscription and marketing preferences
Participation of and responses to our research

For visitors to our websites,we collect the following types of personal information:

Information relating to your interactions with our websites that can reasonably ascertain your identity
Subscription and marketing preferences
Other information you provide to us or submit when visiting our website that can reasonably ascertain your identity

Depending on the type of engagement we have with you, for example, if you are our customer or prospective customer and we are assessing your applications, policies, terms and claims, we also collect the following types of sensitive information about you:

Health information such as medical history including medication, medical treatments and records, injuries, medical visits, and health insurance details
Membership of professional associations

In addition, depending on the type of engagement we have with you, we may collect vulnerability hardship information including about bullying, harassment, and domestic violence.

Any personal information in respect of job applicants and potential candidates for employment is collected and processed in accordance with the Arch Capital Group’s Global Applicant Data Privacy Notice, available at: https://www.archgroup.com/applicant-data-privacy-policy/

How Do We Collect Your Personal Information?

We collect your personal information directly from you through email, by telephone, in writing, or through websites (from data input directly or through cookies and other web analytic tools).

We may also collect your personal information indirectly from other parties relevant to our services or a claim. We may collect your personal information from your representatives or your agents. We may also collect your personal information from an organisation of which you are a shareholder, director, employee, contractor, or family member of them.

We collect your personal information indirectly by these means for the purposes set out in the “How Do We Use the Personal Information Collected” section below.

In addition, we collect your personal information from other parties where it is unreasonable or impracticable for us to collect that information from you or the law permits us to do so.

We collect your sensitive information directly from you through email, by telephone or in writing, for the purposes set out in the “How Do We Use the Personal Information Collected” section below.

We collect your sensitive information from your representatives or your agents for the purposes set out in the “How Do We Use the Personal Information Collected” section below. We may also collect your sensitive information from other parties where it is unreasonable or impracticable for us to collect that information from you or the law permits us to.

How Do We Use the Personal Information Collected?

We collect your personal information to provide you with insurance and insurance related services including assessing applications, relevant individual circumstances and risks, determining competitive and appropriate premiums, policies and terms, assessing and processing claims, determining the recipients, beneficiaries and their entitlement to benefits, and processing and making payments.

We collect sensitive information to provide you with insurance and insurance related services, including when assessing applications, relevant individual circumstances and risks, determining competitive and appropriate premiums, policies and terms, and assessing and processing claims.

We also collect your personal information to respond to queries on policies, resolve complaints, conduct investigations, initiate and process recovery from other parties, prevent fraud or material misrepresentations and comply with our obligations, including sanctions and reporting requirements, as required or authorised by law.

We may also collect sensitive information to, where the sensitive information is relevant to your complaint or a claim, resolve complaints, conduct investigations and initiate and process recovery from other parties. In addition, we may collect sensitive information to comply with our obligations, including sanctions and reporting requirements, as required or authorised by law.

In addition, we collect your personal information to conduct marketing activities, customer service research and related research permitted by law and develop better products and services (please see “Direct Marketing” section below).

For visitors to our websites, we collect your personal information to assess our website’s usage and, where you have indicated your subscription and marketing preferences or provided information for us to respond to you, conduct marketing activities and research.

Direct marketing

We may use or disclose your personal information to conduct direct marketing and send you communications about our products and services. If you do not wish to receive direct marketing communications, please follow the steps provided in the communications or contact us using the details in the “Contact Us” section below.

Who We Disclose Your Personal Information To

We disclose your personal information to our related companies and third parties including:

Your representatives, your agents, brokers, referrers, managing general agents, mercantile agents, and our representatives
Our professional advisers, consultants, service providers and contractors
Our claim management partners, third party administrators, loss assessors and adjusters, investigators, witnesses, and any person we appointed to process complaints and disputes
Your policyholders and employers related to the claim
Health professionals and medical examiners
Other insurers and reinsurers and parties against which we may be able to claim or recover
Any other parties permitted or required by law, including the Australian Taxation Office, regulators such as the Australian Financial Complaints Authority and the Council of Lloyd’s, and law enforcement bodies such as the Australian Federal Police.

We disclose your sensitive information to our related companies and third parties including:

Our professional advisers, consultants, service providers and contractors, where their provision of services require the sensitive information
Our claim management partners, third party administrators, loss assessors and adjusters, investigators, witnesses, and any person we appointed to process complaints and disputes, where the sensitive information is related to the claim
Your employers related to the claim, where the sensitive information is related to the claim
Health professionals and medical examiners, where the sensitive information is related to the claim
Other insurers and reinsurers and parties against which we may be able to claim or recover, where the sensitive information is related to the claim or recovery
Any other parties permitted or required by law and law enforcement bodies such as the Australian Federal Police.

Overseas disclosures

Some of our related companies, service providers and contractors, brokers, and other parties specified in the “Who We Disclose Your Personal Information To” section above are located overseas in countries such as the United Kingdom, Bermuda, New Zealand, the USA, the Pacific Islands, and the Philippines and we may need to disclose your personal information to them.

Some of our service providers and contractors specified in the “Who We Disclose Your Personal Information To” section above, are located overseas in the Philippines and we may need to disclose sensitive information to them.

Use of Automated Decision Making

For customers or prospective customers in our accident and health underwriting services we use a software application that determines your quote and terms of the applicable insurance policy based on your personal information of name, address, date of birth, and employment information of salary details and this is submitted by your brokers via the software application.

The software application will process your personal information and generate the documentation that will contain your quote and terms of the accident and health insurance policy. In circumstances where the output of the processing exceeds our pre-determined parameters for the policy, the documentation will be reviewed by our staff member before being provided to you.

Security of Personal Information

We will take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

Accuracy of and Access to Your Personal Information

You have a right to ask us for access to and to seek correction of personal information that we hold about you. To request this, please contact us using the details set out in the “Our Contact Details” section below.

You may ask us at any time to provide you with access to the personal information we hold about you. Once we have verified your identity, subject to any applicable exceptions, we will provide you with personal information about you as required under the Privacy Act.

If you believe that we are holding incorrect, out-of-date, incomplete, irrelevant or misleading personal information about you, you may request to us to correct it. Once we have verified your identity and subject to any exceptions, where we are satisfied that, having regard to the purpose for which your personal information is held, that your personal information is incorrect, out-of-date, incomplete, irrelevant or misleading, we will take steps that are reasonable in the circumstances to correct that personal information.

Complaints Regarding the Handling of Your Personal Information

If you have a complaint about how we manage your personal information or a breach by us of this privacy policy, the or the Privacy Act, please contact us using the details set out in the “Our Contact Details” section below and provide us with reasonable details for us to understand your complaint.

We will investigate your complaint and attempt to resolve it. If we cannot resolve your complaint to your satisfaction, you may contact the Office of the Australian Information Commissioner for consideration of your complaint online (here) or by phone at 1300-363-992 (from within Australia) or +61-2-9942-4099 (from outside Australia).

Contact Us

If the event that you wish to access or correct personal information that we hold about you, wish to withdraw your consent to our processing of your sensitive information or if you have a query or complaint about our privacy practices, please contact us using any of the following means:

By mail:
Arch Underwriting at Lloyd’s (Australia) Pty Ltd
Level 10, 155 Clarence Street
Sydney NSW 2000

By telephone: (02) 8284 8400

By email: [email protected]

Changes to Our Privacy Policy

In the event that this Privacy Policy is amended or modified in the future, the revised version will be available on our website. If any changes are significant or substantial we will let you know on our website or by email if you have provided us with your email address.

Your continued use of our services and your visit to our website or provision of personal information to us after our notice that the Privacy Policy has been revised will be deemed to be your notification of (and, in the case of sensitive information, consent to) the revised Privacy Policy.

This Privacy Policy was last updated on 5 November 2025.