LMA - Privacy and Cookies Notice

Privacy and Cookies Notice

1. Introduction

The Lloyd’s Market Association (LMA) is an insurance industry association which represents Lloyd’s Managing Agents and Members’ Agents. We enable the success of our members and of the Lloyd’s market by delivering expertise, education and connecting and synthesising market opinion. In order to provide services to our members and the Lloyd’s and London insurance market generally, the LMA needs to process (including collecting, storing and using) certain personal data, which would typically include names, job titles and contact details of relevant individuals. In doing so, the LMA acts as a data controller.

The relevant individuals include the employees of: LMA members, their associated companies and contractors, Lloyd’s corporation, market service providers and other market organisations. The individuals typically are members and attendees of LMA committees, working groups and other market groups (LMA committees); those who attend events, presentations, seminars and training programmes (LMA events); or those who are otherwise involved in LMA services and activities.

The personal data of relevant individuals would normally be provided by our members and other firms and organisations described above or by the individuals themselves but may on occasion be gathered by the LMA (e.g. recording of meetings).

2. What Data We Collect and How We Use It

We process personal data in order to provide services to our members and the Lloyd’s and London insurance market generally and in particular to organise and support LMA committees and LMA events.

We may collect and process the following types of personal data:

Meeting Recordings: We may record committee and other member meetings for the purpose of record keeping. These recordings are retained only as long as necessary.
Event Presentations: Presentations delivered at LMA-hosted events may be recorded and, where appropriate, published on our website to support wider member access. To safeguard the privacy of all participants, attendees are not permitted to make their own recordings.
Photography at Events: We may take photographs at LMA-hosted events. These images may be used in our communications, promotional materials, and on our website.
Membership Records: We maintain your name, company, job title, and email address in our membership database (IMIS) to manage your membership and communicate with you effectively.
Committee Participation: If you are a member of an LMA committee, your name and committee affiliation may be published on our website to reflect your involvement. We may also collect information about your qualifications as part of the selection process to become a member.
Committee Chairs: If you serve as a chair of a committee, we may also display your photograph alongside your name and role on our website to acknowledge your leadership. We will not do so without prior approval.
Marketing: The LMA also uses personal data to inform members and relevant individuals about LMA events. Should you not wish to receive emails or other communications from us, you can opt-out by emailing dataprotection@lmalloyds.com.
Third party service providers: We may use personal data with Third Party service providers, including AI providers, to enhance our service to the market. Any AI tools are operated under strict confidentiality and data protection protocols.
Cookies: Please see section on cookies below.

We do not envisage routinely processing special categories of personal data (such as health information) or personal data relating to criminal offences. However, from time to time, circumstances may arise where we consider it necessary and appropriate. For example, we may process health information where necessary for catering or access purposes at one of our events.

3. Legal Basis for Processing

We process personal data based on:

Our legitimate interests in managing the association and engaging with members;
Consent, where required (e.g. for publishing individual photos or recordings where individuals are identifiable or for processing of Special Category data);
Compliance with legal obligations (including processing of criminal offence data).

4. Cookies and Tracking Technologies

What are cookies?

Cookies are small text files stored on your device to help websites function properly and provide a better user experience. They allow us to:

remember your preferences and settings
analyse how our site is used
deliver personalised content and ads
improve site performance and functionality.

Some cookies are essential for the site to work, while others are optional and help us improve your experience. You can choose which types of cookies you allow at any time.

What cookies we use and why

The table below explains the cookies we use and why.

Cookie name	Purpose	Users	Session
wordpress_logged_in_[hash]	Indicates the user is logged in	Logged-in users	1 hour
wordpress_sec_[hash]	Security for logged-in session	Logged-in users	1 hour
wordpress_test_cookie	Checks if the browser accepts cookies	All visitors	1 hour
wp-settings-[UID]	Stores dashboard layout/preferences	Logged-in users	1 hour
wp-settings-time-[UID]	Stores dashboard time settings	Logged-in users	1 hour
_ga, _gid, _gclxxxx	We use Google Analytics to understand how visitors use our website. We use this information to compile reports and to help us improve the user experience.	All visitors	90 days
_gat_UA	We use Google Analytics to understand how visitors use our website. We use this information to compile reports and to help us improve the user experience.	All visitors	730 days
Security plugin	To authenticate user login requests and notifies admin of new device/ip.	All visitors	1 year
Performance plugin	Indicates whether cache is being used as well as CSRF (Cross Site Request Forgery) protection.	All visitors	1 day
__RequestVerificationToken	This cookie is essential for our site to stop cross-site request forgery.	Logged-in users	Session
login	This cookie stores your authentication status after login.	Logged-in users	Session
ASP.NET_SessionId	This cookie stores additional information about your authentication status	Logged-in users	Session
Asi.Web.Browser.CookiesEnabled	This cookie stores a value indicating whether or not your browser allows cookies.	Logged-in users	Session
cookieconsent_status	This cookie stores your response when you choose to accept or reject cookies.	Logged-in users	12 months
AnonymousCartId	This cookie stores cart information when you choose to add an item to the cart before logging in.	Logged-in users	14 days

Cookies set by Third Party websites

The LMA does sometimes embed photos and video Rich-Text-content from websites such as Vimeo. As a result, when you visit a page with Rich-Text-content embedded from, for example, Vimeo, you may be presented with cookies from those websites. The LMA does not control the dissemination of these cookies. You should check the relevant third-party website for more information about these.

The LMA website now carries embedded ‘share’ buttons to enable users to easily share articles and information with other people through a number of popular social networks. These social network sites may set a cookie when you are also logged into their service. The LMA does not control the dissemination of these cookies and you should check the relevant third-party website for more information about these.

Legal basis for using cookies

Under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR), we must obtain your consent before placing non-essential cookies on your device. Essential cookies do not require consent.

You can manage or withdraw your cookie preferences at any time by:

adjusting your browser settings to block or delete cookies
using our on-site cookie consent tool to customise your preferences.

Alternatively, you may wish to visit www.allaboutcookies.org which contains comprehensive information on how to do this on a wide variety of browsers. Please note that disabling certain cookies may affect the functionality of our website.

5. Retention Periods and Disclosure

We retain personal data in accordance with our data protection policy. Such records will only be kept for as long as is necessary and for the purposes for which the Personal Data was processed, or where required to be kept by law or regulation. For example, we will keep meeting recordings for a period of 60 days before deletion, unless they are posted on our website, where they will be hosted indefinitely. The usual recipients of personal data are LMA staff, committees, the organisers and presenters of LMA events, and our service providers.

We do not routinely transfer data internationally, however, if we need to do so, we will:

Only do so to countries that have been deemed to provide an adequate level of data protection by the UK Government; or
Implement appropriate safeguards, such as standard contractual clauses approved by the relevant authorities.

6. Your Rights

If you have any questions in relation to our use of your personal data, you should first contact our data protection contact (contact details below). Subject to certain exceptions, you have the following rights in respect of your personal data:

to receive a copy of the personal data that you have provided to us and certain information regarding our processing activities;
to correct any inaccuracies in the personal data we hold or to request erasure;
to object to any processing based on the legitimate interests ground and to object to our processing of your personal data for marketing purposes;
to withdraw consent where applicable;
to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller (right to data portability); and
to restrict how we use your personal data in certain circumstances.

In certain circumstances, we may need to restrict the above rights (e.g. to maintain legal privilege). We would only apply these where allowed by law and in line with our data protection obligations.

We take data protection seriously and will take all reasonable steps to safeguard personal data. Should you wish to exercise any of the above rights, or have a query about how we process personal data, please contact:

Data Protection Contact
Lloyd’s Market Association
Suite 426
One Lime Street
London EC3M 7DQ
Telephone: 020 7327 3333
Or you can email to dataprotection@lmalloyds.com

Your Right to Complain to the ICO

If you are not satisfied with our use of your personal data or our response to any request by you to exercise any of your rights, or if you think that we have breached the requirements of the GDPR, then you have the right to complain to the ICO. Please see below for contact details of the ICO.

England	Scotland	Wales	Northern Ireland
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF	Information Commissioner’s Office 45 Melville Street Edinburgh EH3 7HL	Information Commissioner’s Office 2nd floor Churchill House Churchill way Cardiff CF10 2HH	Information Commissioner’s Office 3rd Floor 14 Cromac Place Belfast BT7 2JB
Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)	Tel: 0131 244 9001	Tel:029 2067 8400	Tel: 0303 123 1114 (local rate) or 028 9027 8757 (national rate)
Email: casework@ico.org.uk	Email: scotland@ico.org.uk	Email: wales@ico.org.uk	Email: ni@ico.org.uk