Privacy Policy

Effective Date: 1st Setptember 2025

This Privacy Policy explains how ES Risks Ltd (UK) and ES Risks Europe Ltd (EU) (“ES Risks”, “we”, “us”, “our”) collect, use, store, and protect your personal information when you use our websites, communicate with us, or engage with our services.

We are committed to safeguarding your personal data and ensuring that your privacy is protected in line with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and other applicable data protection laws.

1. Who We Are

ES Risks Ltd – a Lloyd’s broker and Coverholder based in the UK.
ES Risks Europe Ltd – our European entity operating within the EU.

Both companies act as Data Controllers for the personal information collected through their respective websites.

2. What Information We Collect

We may collect and process the following types of personal data when you visit our websites, make enquiries, or work with us:

Contact details (name, email address, phone number, company details).
Information you provide via forms, emails, or phone calls.
Business information relevant to enquiries, applications, or services.
Website usage information (IP address, browser type, pages visited, cookies – see Section 7).

We do not collect sensitive personal data unless it is necessary for a specific purpose and you have provided it to us voluntarily.

3. How We Use Your Information

We process your data only where we have a lawful basis, such as:

Responding to enquiries and requests for information.
Connecting you with the appropriate ES Risks specialist or partner broker.
Managing relationships with regulated insurance businesses.
Carrying out compliance, regulatory, and legal obligations.
Improving our website and services.
Marketing and communications (only where you have consented or where we have a legitimate interest).

4. Sharing Your Information

We may share your data with:

Our group entities (ES Risks Ltd and ES Risks Europe Ltd).
Partner brokers, insurers, or specialists—where it is necessary to connect you with appropriate services.
Professional advisers, regulators, or authorities where required by law.
Service providers who support our website, IT, and communications systems.

We do not sell your personal data to third parties.

5. International Transfers

Where personal data is transferred outside the UK or EU, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent protections) to protect your information.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal, regulatory, and contractual obligations. After this period, data will be securely deleted or anonymised.

7. Cookies & Website Analytics

Our websites use cookies and analytics tools to improve functionality and user experience. Cookies may collect information such as IP addresses, browser type, and pages visited. You can control or disable cookies through your browser settings. For more details, please see our Cookie Policy.

8. Your Data Protection Rights

Depending on whether you are in the UK or EU, you have the following rights under data protection law:

Access – request a copy of your personal data.
Rectification – correct inaccurate or incomplete data.
Erasure – request deletion of your personal data where appropriate.
Restriction – limit how we process your data.
Portability – request transfer of your data to another organisation.
Objection – object to processing based on legitimate interests or direct marketing.
Withdraw Consent – where processing is based on consent.

To exercise your rights, please contact us (see Section 10).

9. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or disclosure.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the information at the bottom of this page.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with:

UK: Information Commissioner’s Office (ICO) – ico.org.uk
EU: Your local Data Protection Authority

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices. The latest version will always be available on our websites.