Privacy Policy

Spectrum Life Ltd. (“SLL”, “us”, “our” or “we”) is a global benefits insurance company whose senior team has more than 100 years’ experience providing group benefit insurance products. SLL is committed to protecting the privacy, security and confidentiality of personal data the company processes in connection with the services we provide to group clients and their employees.

This Privacy Statement (“Statement”) explains SLL’s information processing practices. It applies to any personal information you provide to SLL and any personal information we collect from other sources. This Statement is a statement of our practices and of your rights regarding your personal information. This is not a contractual document, and it does not create any rights or obligations on either party, beyond those which already exist under data protection laws.

This Statement does not apply to your use of a third-party site linked to this website.

The Data Protection Officer at SLL.

SLL collects personal information in the following ways:

When we perform services for our clients including risk assessment, underwriting, onboarding, enrollment, invoicing, medical evaluation, claims adjudication and other benefit administration services. In these cases, your personal information will normally be provided to us or by our clients (or brokers/introducers acting on behalf of our clients), or sometimes our clients may ask us to contact you directly. We may also need to obtain information from third parties such as independent vetting agencies to assist us with our statutorily required due diligence vetting along with publicly available sources.

When you request a service from us. For example, if you enquire about a proposal or professional services you would like us to offer your company. When you register with or use any of our websites or applications. When you submit a claim or application for review.

If you contact us with a complaint or query.

Information you provide to us
When you request services, we ask that you provide accurate and necessary information that enables us to respond to your request. When a visitor provides personal information to us, we use it for the purposes for which it was intended as stated at the point of collection or as obvious from the context of collection.

Information we collect from clients or third parties shareholders, directors and control persons when we provide the services listed above for our clients, shareholders, directors and control persons we may collect personal information such as your name, contact details (phone numbers and email addresses), date of birth, gender, marital status, financial details, employment details, social security details, proof of address, photo identification (usually passport and/or driver’s license), bank information, anti-money laundering information and benefit details.

We will not collect any sensitive information through our website unless this is required. Sensitive information includes several types of data relating to race or ethnic origin; political opinions; religious or other similar beliefs; trade union membership; physical or mental health; sexual life or criminal record. We suggest that you do not provide sensitive information of this nature unless we specifically request this information.

If you provide us with sensitive personal information, you understand and give your explicit consent that we may collect, use, and disclose this information to appropriate third parties for the purposes described in this Statement. If you provide personal information about other individuals such as employees or dependents, you must obtain their consent prior to your disclosure to us.

Information we collect over the SLL website, mobile applications and social media.
For the purposes of this Statement, “website” includes our mobile applications and any affiliated websites.

We may ask you for some or all the following types of information when you register for events, request services, manage accounts, transfer files, access various content and features or directly visit our websites. This includes, but is not limited to:

• Contact information, such as name, e-mail address, postal address, phone number and mobile number;
• Communication preferences
• Search queries;
• Information posted in community discussions and other interactive online features.

In some instances, we automatically collect certain types of information when you visit our websites and through e-mails that we may exchange. Automated technologies may include the use of web server logs to collect IP addresses, “cookies” and web beacons. Further information about our use of cookies can be found in our Cookie Notice.

If you access our websites on your mobile telephone or mobile device, we may also collect your unique device identifier and mobile device IP address, as well as information about your device’s operating system, mobile carrier, and your location information.

The following is a summary of the purposes for which we use personal information collected for each of our services, together with the purpose and legal basis for collecting the information.

Performing services for our clients
We process personal information which our clients provide to us to perform our responsibilities in the management of SLL, a global benefits insurance company. The precise purposes for which your personal information is processed will be determined by the scope and specification of our client engagement, policy type, and by applicable laws, regulatory guidance, and professional standards. It is the obligation of our client to ensure that you understand that your personal information will be disclosed to SLL, Regulatory Bodies, Insurance Brokers and Insurance and Reinsurance companies.

Administering our client engagements
We process personal information about our clients and the individual representatives of our corporate clients to perform “Know Your Client” checks and screening prior to issuing any new policy; to carry out client communication, service, billing and administration; to deal with client complaints; and to administer claims. It may also be utilized for contacting and marketing our clients and prospective clients.

Other uses:

• Provide information and services as requested by you.

• Provide information and services as requested by you.

• Determine eligibility and process applications for products and services.

• Provide information and services as requested by clients.

• Understand and assess clients’ ongoing needs and offer solutions.

• Conduct data analysis.

• Execute monitoring and training.

• Develop new services.

• Market products and services subject to appropriate consent.

• Conduct processing necessary to fulfill other contractual obligations for the individual.

If we wish to use your personal information for a purpose which is not compatible with the purpose for which it was collected for, we will request your consent. In all cases, we balance our legal use of your personal information with your interests, rights, and freedoms in accordance with applicable laws and regulations to make sure that your personal information is not subject to unnecessary risk.

All processing (i.e., use) of your personal information is justified by a “lawful basis” for processing. In most cases, processing will be justified on the basis that:

• The processing is necessary for the performance of a contract to which you are a party.

• The processing is necessary for the performance of a contract to which you are a party.

• The processing is necessary for us to comply with a relevant legal obligation (e.g., where we are required to collect certain information about our clients for accounting purposes, or where we are required to make disclosures to courts or regulators); or

• The processing is in our legitimate commercial interests, subject to your interests and fundamental rights (e.g., where we use personal information provided to us by our clients to deliver our services, and that processing is not necessary in relation to a contract to which you are a party).

In limited circumstances, we will use your consent as the basis for processing your personal information, for example, where we are required to obtain your prior consent to send you marketing communications.

Before collecting and/or using any special categories of data, we will establish a lawful exemption which will allow us to use that information. This exemption will typically be:

• Your explicit consent.• your explicit consent.

• The establishment, exercise or defense by us or third parties of legal claims; or

• A context specific exemption provided for under local laws of EU Member States and other countries implementing the GDPR, such as in relation to the processing of special category data for insurance purposes.

Our website is not directed to children, and we do not knowingly collect personal information from children on our website. Children are prohibited from using our website.

Where a child is a beneficiary may ask to see proof of their existence by means of a birth certificate of passport to satisfy regulatory requirements.

How long we retain your personal information depends on the purpose for which it was obtained and its nature. We will keep your personal information for the period necessary to fulfil the purposes described in this Statement unless a longer retention period is permitted by law.

In specific circumstances we may store your personal information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your personal information or dealings.

We may share your personal information with regulatory bodies and your registered broker, consultant or agent including for the activities listed above.

We do not rent, sell or otherwise disclose personal information about our online visitors with unaffiliated third parties for their own marketing use. We do not share your personal information with third parties except in the following circumstances discussed below.

We do not share your data with third parties except in the following instances and you should refer to their privacy notices for more information about their practices.

Examples include:

• Third-Party Service Providers: For claims processing, IT support, or administrative purposes.

• Regulatory Authorities: To comply with legal obligations.

• Reinsurers and Partners: For underwriting and risk management purposes.

We may disclose your information to service providers we have retained (as processors) to perform services on our behalf (either in relation to services performed for our clients, or information which SLL uses for its own purposes). These service providers are contractually restricted from using or disclosing the information except as necessary to perform services on our behalf or to comply with legal requirements. These activities could include any of the processing activities that we carry out as described in the above section, ‘How we use your personal information.’

These third parties appropriately safeguard your data, and their activities are limited to the purposes for which your data was provided.

a. In response to law enforcement authority or other government official requests; b. When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss;

We are an organization with personnel operating in various domiciles. We may transfer certain personal information across geographical borders to authorized service providers or business partners in other countries working on our behalf in accordance with applicable law.

When we do, we use a variety of legal mechanisms to help ensure your rights and protections travel with your data. If you would like further information about whether your information will be disclosed to overseas recipients, please contact us as noted below. You also have a right to contact us for more information about the safeguards we have put in place to ensure the adequate protection of your personal information when this is transferred as mentioned above.

The security of your personal information is important to us, and SLL has implemented reasonable physical, technical and administrative security standards to protect personal information from loss, misuse, alteration or destruction. We protect your personal information against unauthorized access, use or disclosure, using security technologies and procedures, such as encryption and limited access. Only authorized individuals access your personal information, and they receive training about the importance of protecting personal information.

Our service providers and agents are contractually bound to maintain the confidentiality of personal information and may not use the information for any unauthorized purpose.

We offer certain choices about how we communicate with our customers and what personal information we obtain about them and share with others. When you provide us with personal details, if we intend to use those details for marketing purposes, we will provide you with the option of whether you wish to receive promotional e-mail, SMS messages, telephone calls and postal mail from us. At any time, you may opt out from receiving interest-based advertising from us by contacting us.

You may also choose not to receive marketing communications from us by clicking on the unsubscribe link or other instructions in our marketing e-mails or contacting us as noted below.

E-mail – Contact us by e-mail at [email protected] Postal address – Spectrum Life Ltd., Hunkins Plaza, Charlestown, Nevis

Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information.

We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.

You can exercise your rights by contacting us. Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly or inform you if we require further information to fulfil your request.

We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

You have right to access personal information which SLL holds about you.

You have a right to request us to correct your personal information where it is inaccurate or out of date.

You have the right under certain circumstances to have your personal information erased. Your information can only be erased if your data is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the data.

• Its accuracy is contested, to allow us to verify its accuracy; or • The processing is unlawful, but you do not want it erased; or • It is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or • You have exercised the right to object, and verification of overriding grounds is pending.

1. consent; or 2. the performance of a contract to which you are a party.

You have the right to object the processing of your personal information at any time, but only where that processing has our legitimate interests as its legal basis. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

1. necessary for a contract to which you are a party; 2. authorized by law;3. based on your explicit consent.

As noted above, you can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.

If you have any questions, would like further information about our privacy and information handling practices, would like to discuss opt-outs or withdrawing consent, or would like to make a complaint about a breach of the Act or this Statement, please contact the Data Protection Officer either via email at [email protected] or via post to Spectrum Life Ltd., Hunkins Plaza, Charlestown, Nevis.

Alternatively, you have the right to contact your local Data Protection Authority.

We may update this Statement from time to time.

When we do, we will post the current version on this site, and we will revise the version date located at the bottom of this page.

We would encourage you to periodically review this Statement so that you will be aware of our privacy practices and any subsequent changes to those practices.

This Statement was last updated November 2024.