Privacy Notice
What is the purpose of this Privacy Notice?
Lloyd’s Register takes the security of your personal information very seriously and is committed to ensuring that your personal information is protected at all times. The purpose of this Privacy Notice is to provide you with a clear explanation about how your personal information is collected and used by us during your interaction with our services and products, as appropriate, and your rights in relation to your personal information.
Who is Lloyd’s Register?
“Lloyd’s Register” refers to an international group of companies owned by Lloyd’s Register Group Limited (UK company number 08126909) and its subsidiaries, which is itself owned by Lloyd’s Register Foundation (UK charity number 1145988 and UK company number 07905861). In this instance this privacy notice specifically refers to those business and administrative activities carried out by the Marine and Offshore Business, which includes Lloyd’s register EMEA, Lloyd’s Register Asia, Lloyd’s Register Group Services Ltd and Lloyd’s Register North America, Inc. and their respective relevant subsidiary companies.
What personal information does Lloyd’s Register collect for what purposes?
Lloyd’s Register collects your personal data in a number of contexts, but typically in the process of providing our professional commercial services to you or your organisation which in general will mean the processing of your business contact information to facilitate communications, arrange meetings, enter into tender bids, provide deliverables, ongoing subscriptions, manage invoices etc.. Lloyd’s Register processes this information for its Legitimate Interests, as provided for under the law and/or, where appropriate, by request under service contract with you or your organisation. The below gives a good indication of the typical personal data processed in relation to routine purposes but is not intended to represent an exhaustive listing.
- Provision of Marine Classification services (including surveys, certification of class & certification of approved individuals) and interaction with our Technical Committees.
Names, job titles, employers’ details, office location, work contact numbers & email addresses.
In some situations where individual’s identity needs to be confirmed then other data such as passport / national ID or personal photographs may as examples also be retained
- Provision of Advisory services ( including FOBAS, Private Yacht surveys, Training Services, Ship Emergency Response Services etc )
Details as above but in some cases other personal data may need to be held for identification or regulatory purposes., including tax & other government reference numbers
- Administrative support of the above services and products,
Including the management of any bought subscriptions of digital software such as Rulesfinder, RulesCalc, issuance of invoices, deliverable reports and certificates and corporate events management. Work contact details including email and telephone number processed as part of the correspondence entered into our case management tool; Name, Job title, telephone number and email address for corporate events,
- For Marketing and client relationship purposes, Lloyd’s Register uses its legitimate business interests in processing your personal details in order to maintain and enhance existing and ongoing client relationships it has with you and your organisation, this may include approaching you for real-time feedback on our services, research/surveys on current offering.
Unless you have provided your indication to accept and receive marketing materials from us, LR will not send out electronic based marketing to you. Our marketing system allows you to configure your preferences and opt out of receiving marketing materials at any time.
We will not generally ask for, and do not intend to collect as part of our routine business commercial product or service provisions, any sensitive (Special Category) personal information about you.
In respect of processing information in relation to recruitment, please see and acknowledge the separate Privacy Notice available on the LR Careers recruitment system.
With whom does Lloyd’s Register share personal information?
In order to perform the services you or your organisation have engaged Lloyd’s Register to deliver, there may well be a need to share your personal data within the Lloyd’s Register Group of companies as an internal transfer. Depending on the service we may need to share data with other organisations such as where LR acts as a Recognised Organisation on behalf of a Flag State, or Regulator/authorised Government body, as part of the general administration of our services and digital products LR will share data with our chosen and preferred system support third party businesses.
International Transfer of Data. If LR has to do so in order to satisfy the performance of a service contract, enquiry on your behalf or as part of the requirement of an organisation that LR acts on behalf of, LR will transfer data internationally. This can be down within the LR group of companies or to a third-party organisation. In all cases arrangements are in place to ensure comparable levels of security and compliance are in place in respect of data protection and privacy.
How is your personal information protected?
Lloyd’s Register will hold your personal information securely using appropriate technical and organisational measures and not disclose your personal information to anyone outside its own group, or to any person or entity outside the United Kingdom and/or the European Union, except and to the extent both: (i) necessary for the purposes stated in this Privacy Notice; and (ii) where it has first satisfied itself that appropriate safeguards are in place to ensure such information will continue to be held and used in accordance with this notice and compliance with the European Union’s General Data Protection Regulation (EU 2016/679).
Lloyd's Register may use third party service providers to enable it to provide its products and services, such as; external authentication service providers, external application hosting, enquiry functionality. Some of these service providers may process your personal information as part of the services they provide to us. We will ensure that those service providers also comply with this Privacy Notice.
How long does Lloyd’s Register keep personal information?
Your personal information will be kept by Lloyd’s Register for no longer than reasonably necessary for the purposes set out in this Privacy Notice, unless required to be kept longer by law.
In principle LR will consider retention periods based upon the purpose for which they collected, which for services performed is likely to be in connection to a large asset (such as vessel), and may have require LR to keep appropriate records during the active periods of the asset. In some situation you have control over the retention period of the data processed. Where a digital product is used, such as a CD Live account, you or your organisation are able to administer the personal data contained for your (company’s) profile. Where it is feasible to do so, systems will be configured to de-identify personal data where archives are needed but are not actively used.
What are your legal rights?
You have a number of legal rights surrounding your personal information, including: the right to access and copy your personal information, the right to obtain correction of any inaccurate or incomplete personal information, the right to have your personal information deleted, the right to restrict or object to Lloyd’s Register’s processing of your personal information, and the right to withdraw your consent to our processing at any time (i.e. including the right to opt-out of or unsubscribe from communications at any time, either by contacting us at the details provided in this Privacy Notice or clicking the unsubscribe link in the emails that you receive from us, if applicable).
Please contact us if you would like to exercise any of your legal rights. We will respond to any rights that you exercise within one month of receiving your request, unless the request is complex or involves a significant amount of data, in which case we will respond within three months.
How to contact Lloyd’s Register?
If you have any questions regarding this Privacy Notice or our use of your personal information, please contact your immediate business development manager, service manager or project contact, but your are welcome to also directly contact our Data Protection Officer by email: dataprotection@lr.org or by post: Data Protection Officer, Lloyd’s Register, 71 Fenchurch Street, London, EC3M 4BS or by phone: (+44) 020 7423 1724.
How do you lodge a complaint?
If you have a complaint regarding how your personal information has been handled by Lloyd’s Register, please contact Lloyd’s Register’s Data Protection Officer, using the details provided above.
You have a legal right to lodge a complaint with a supervisory authority. For Lloyd’s Register, the relevant supervisory is the UK Information Commissioner’s Office (to lodge a complaint or report a concern, please visit: https://ico.org.uk/concerns/).
Does Lloyd’s Register update the Privacy Notice?
Lloyd’s Register may change the content of this Privacy Notice from time to time without notice to you. You should check this Privacy Notice occasionally to ensure that you are aware of the most recent version that will apply each time you access our websites. This Privacy Notice was last updated February 2021.