What is the purpose of this Privacy notice?
Lloyd’s Register takes the security of your personal information very seriously and is committed to ensuring that your personal information is protected at all times.
The purpose of this Privacy Notice is to provide you with a clear explanation about how your personal information is collected and used by us during your interaction with our websites, online contacts, online chat features and direct communications via telephone/email as well during your interactions with our commercial services and products and your rights in relation to your personal infomation.
Who is Lloyd's Register?
“Lloyd’s Register” refers to an international group of companies owned by Lloyd’s Register Group Limited (UK company number 08126909), which is itself owned by Lloyd’s Register Foundation (UK charity number 1145988 and UK company number 07905861). Including but not limited to Lloyd’s Register EMEA, Lloyds Register Asia, Lloyd’s Register Group Services Limited, Lloyd’s Register Americas Inc., and their subsidiary companies covering core administrative services within the LR group or professional services though LR’s business operations.
How to contact Lloyd’s Register?
If you have any questions regarding this Privacy Notice or our use of your personal information, please contact our Data Protection Officer by email: dataprotection@lr.org or by post: Data Protection Officer, Lloyd’s Register, 71 Fenchurch Street, London, EC3M 4BS or by phone: (+44) 020 7423 1724.
What personal information does Lloyd’s Register collect?
For General Requests and Interactions through our websites Lloyd’s Register collects basic personal information about you (such as name, email address and contact details (private or work related) and only in the following ways:
- Information that you yourself provide through our website and other interactions as above; or
- Information that we obtain from your use of our websites and / or services (please see our Cookies Policy for detail about how this works).
Our professional commercial services to you or your organisation which in general will mean the processing of your business contact information to facilitate communications, arrange meetings, enter into tender bids, provide deliverables, ongoing subscriptions, manage invoices etc.. Lloyd’s Register processes this information initally for its Legitimate Interests, as provided for under the law and/or, where appropriate, by request under service contract with you or your organisation which will have provided permission for Lloyd’s Register to use your data for the relevant services. The below gives a good indication of the typical personal data processed in relation to routine purposes but is not intended to represent an exhaustive listing.
- Provision of Marine Classification services (including surveys, certification of class & certification of approved individuals) and interaction with our Technical Committees
Names, job titles, employers’ details, office location, work contact numbers & email addresses. In some situations where individual’s identity needs to be confirmed then other data such as passport / national ID or personal photographs may as examples also be retained. - Provision of Advisory services (including FOBAS, Private Yacht surveys, Training Services, Ship Emergency Response Services etc)
Details as above but in some cases other personal data may need to be held for identification or regulatory purposes., including tax, payment information & other government reference numbers. - Administrative support of the above services and products
Including the management of any bought subscriptions of digital software such as Rulesfinder, RulesCalc, issuance of invoices, deliverable reports and certificates and corporate events management. Work contact details including email and telephone number processed as part of the correspondence entered into our case management tool; Name, Job title, telephone number and email address for corporate events.
For Client Training Services Lloyd’s Register collects personal information about you (such as name, email address, contact details (private or work related), choice of course, attendance, completion level attained:
- Information that you yourself provide through our designated course portal and other interactions as above and will be processed either with your consent, permission of your company under a service contract or a contract direct with yourself.
For Marketing and client relationship purposes, Lloyd’s Register uses its legitimate business interests in processing your personal details in order to maintain and enhance existing and ongoing client relationships it has with you and your organisation, this may include approaching you for real-time feedback on our services, research/surveys on current offering. Unless you have provided your indication to accept and receive marketing materials from us, LR will not send out electronic based marketing to you. Our marketing system allows you to configure your preferences and opt out of receiving marketing materials at any time.
Why does Lloyd’s Register collect personal information?
Lloyd’s Register needs to know basic personal information about you in order to respond to general requests you make to us through our websites and interactions, and to provide you with communications and material (including marketing materials) which either you have consented to receive or which relate to Lloyd’s Register products or services which we believe may be of interest to you. We will not use your personal information for any other purpose unless you engage with LR for services or make a request to us. Information provided to us will be stored in our standard internal operating systems which may include third party hosted systems such as SalesForce or Pardot, or in the case of Training Services through an ilearning platform provided by Seertech, to manage your profile and content.
Where your data is used in the performance of professional services data may need to be shared with third parties on behalf of whom LR operate, for example accreditation agencies (such as UKAS); or where LR represents a Recognised Organisation to government agencies, or other business partners like BAE Systems.
How is your personal information protected?
Lloyd’s Register will hold your personal information securely using appropriate technical and organisational measures and not disclose your personal information to anyone outside its own group, or to any person or entity outside the United Kingdom and/or the European Union, except and to the extent both: (i) necessary for the purposes stated in this Privacy Notice; and (ii) where it has first satisfied itself that appropriate safeguards are in place to ensure such information will continue to be held and used in accordance with this notice and compliance with the European Union’s General Data Protection Regulation (EU 2016/679). We use service providers to operate our websites, such as website hosting and enquiry functionality, and some of these service providers will process your personal information as part of the services they provide to us. We will ensure that those service providers also comply with this Privacy Notice.
How long does Lloyd’s Register keep personal information?
Your personal information will be kept by Lloyd’s Register for no longer than reasonably necessary for the purposes set out in this notice, unless required to be kept longer by law. This retention period will be determined by the nature of your interaction with LR, your request and ongoing provision of services through our business.
In principle LR will consider retention periods based upon the purpose for which they are collected, which for services performed is likely to be in connection to a large asset (such as vessel), and may require LR to keep appropriate records during the active periods of the asset. In some situation you have control over the retention period of the data processed. Where a digital product is used, such as a CD Live account, you or your organisation are able to administer the personal data contained for your (company’s) profile. Where it is feasible to do so, systems will be configured to de-identify personal data where archives are needed but are not actively used.
What are your legal rights?
You have a number of legal rights surrounding your personal information, including: the right to access and copy your personal information, the right to obtain correction of any inaccurate or incomplete personal information, the right to have your personal information deleted, the right to restrict or object to Lloyd’s Register’s processing of your personal information, and the right to withdraw your consent to our processing at any time (i.e. including the right to opt-out of or unsubscribe from communications).
How do you lodge a complaint?
If you have a complaint regarding how your personal information has been handled by Lloyd’s Register, please contact Lloyd’s Register’s Data Protection Officer, using the details provided above.
You have a legal right to lodge a complaint with a supervisory authority. For Lloyd’s Register, the relevant supervisory is the UK Information Commissioner’s Office (to lodge a complaint or report a concern, please visit: https://ico.org.uk/concerns/).
Does Lloyd’s Register update the Privacy Notice?
Lloyd’s Register may change the content of this Privacy Notice from time to time without notice to you. This Privacy Notice was last updated on 30 January 2023.