Privacy and Cookies


Privacy and Cookies

XL Group Ltd, together with other members of its group, including but not limited to those listed at and (XL Group or we or us) are committed to compliance with data protection laws. This policy (Privacy Policy) sets out XL Group’s personal information collection and sharing practices in relation to the personal information relating to policyholders, beneficiaries or claimants and their agents and relatives (you) that we collect and use for the administration of insurance policies and reinsurance contracts. This Policy also covers any personal information collected through a users’ use of ay of XL Group’s websites (the Site).

This website may contain links to other third party websites. If you follow a link to any of those third party websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or processing of your personal information.

This Privacy Policy is intended to explain our privacy practices and covers the following areas:


    1. Personal information about you we may hold or collect
    2. How we may use your personal information
    3. Who we may disclose your personal information to
    4. How we protect your personal information
    5. Contacting us & your rights to access and update your personal information
    6. Our Cookies Policy 
    7. Changes to this Privacy Policy and the Cookies Policy
    8. XL Catlin Early Careers Recruitment - Your Personal Profile 

1    Information we may collect about you

1.1    We may collect and process the following personal information about you:
    (a) Information that you provide by filling in forms or upload to us.

    (b) Information including your name, address, contact details, details relating to a proposal or a claim (which depending on the nature of the claim may include medical reports and reports of criminal convictions or crime) that you, your employer or organisation whom we insure or reinsure or a third party claimant provide to us in relation to the administration of an insurance policy that we insure or re-insure.
    (c) Information relating to any criminal or fraudulent activities provided to us by you or third parties (such as law enforcement, anti-fraud agencies or other insurers).

    (d) If you contact us, we may keep a record of that correspondence or details of any conversation we may have with you.

    (e) Details of your visits to our website and information collected through cookies and other tracking technologies including, but not limited to, your IP address and domain name, your browser version and operating system, traffic data, location data, web logs and other communication data, and the resources that you access.

2    Uses made of your personal information

2.1    We may use your personal information in the following ways:

    (a) to decide whether to enter into any proposed transaction with you or your employer or organisation that we insure or reinsure and to administer insurance or reinsurance products where you are the beneficiary or a person involved in any claim, including in certain circumstances, disclosing such information to third party anti-fraud and money laundering agencies for the purposes of detecting and preventing fraud and crime (as further set out in paragraph 3 below);

    (b) to identify you and to carry out any identity checks as may be required by applicable law and regulation and best practice at any given time;

    (c) to recover any payments due to us and where necessary to enforce such recovery through the engagement of debt collection agencies or taking other legal action (including the commencement and carrying out of legal and court proceedings);

    (d) to analyse it in order to understand the service we provide and in order to improve our business.

    (e) to monitor calls and transactions to ensure service quality, compliance with procedures and to combat fraud.

2.2    We may also use your information for marketing our own and selected third parties’ products and services to you by post, email, SMS, phone and fax and, where required by law, we will ask for your consent at the time we collect your data to conduct any of these types of marketing.

3    Disclosures to third parties

3.1    We may also permit selected third parties and agents to access your personal information, for the purposes set out in paragraph 2 above. Specific examples are set out in paragraphs 3.2 to 3.6 below. All such exchanges will be made in accordance with applicable laws.

3.2    If false or inaccurate information is provided and/or fraud is identified or suspected, details may be passed to fraud prevention and anti-money laundering agencies, law enforcement agencies or other insurers and may be recorded by us or by them.

3.3    We and other organisations may also access and use this information to prevent fraud and other crime, for example when:
    (a) reviewing applications for products (as outlined in paragraph 2 above); 

    (b) deciding whether to make a payment to you under an insurance or reinsurance policy; 

    (c) taking steps to recover payments due and 

    (d) checking details of job applicants and employees.

3.4    We, and other organisations that may access and use information recorded by fraud prevention agencies, may do so from other countries including outside the EEA.

3.5    We can provide the names and addresses of the agencies we may use to counter fraud or money laundering upon request.

3.6    We may disclose your personal information to third parties, the courts and/or regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or in order to enable XL Group to comply with its regulatory requirements or dialogue with its regulators as applicable.
3.7    In the event that XL Group (or a part thereof) is (i) subject to negotiations for the sale of its business or (ii) is sold to a third party or undergoes a re-organisation, you agree that any of your personal information which it holds may be disclosed to such party (or its advisors) as part of any due diligence process or transferred to that re-organised entity or third party and used for the same purposes or for the purpose of analysing any proposed sale or re-organisation.

4 Transmission, storage and security of your personal information

4.1    No data transmission over the Internet or website can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal information in accordance with applicable data protection legislative requirements.

4.2    All information within our control is stored on our secure servers (or secure hard copies) and accessed and used subject to our security policies and standards. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site or any other portal we operate, you are responsible for keeping this password confidential and for complying with any other security procedures that we notify you of. We ask you not to share a password with anyone.

4.3    Your personal information may be accessed by staff or authorized third parties and, transferred to, and/or stored at, a destination outside the European Economic Area (EEA) where the data protection laws may be of a lower standard than in the EEA. Regardless of location or whether the person is an employee or contractor we will impose the same data protection safeguards that we deploy inside the EEA.

5 Your rights & contacting us

5.1    Applicable data protection laws may give you the right to access certain personal information held about you. We will comply with our obligations to provide you with access to your personal information and to rectify any inaccuracies we are informed of in accordance with applicable data protection laws. Where permitted to do so, complying with your request may be subject to a fee to meet our associated costs.

5.2    We will use reasonable endeavours to ensure that your personal information is accurate. In order to assist us with this, you should notify us of any changes to the personal information that you have provided to us by updating your details by contacting us at the address below.

5.3    We can be contacted in relation to your rights or any questions you may have in respect of this Privacy Policy or our processing of your personal information by the following means: 

    Post: Geraldine Henbest 
    Chief Privacy Officer 
    XL Group Ltd 
    XL House, 70 Gracechurch Street, London EC3V 0XL, United Kingdom
    Office: +44 20 7933 7000
    Fax: +44 20 7469 1000

6 Our Cookies Policy

6.1    When you visit this website, we may collect usage information to help us understand how our website is navigated and used. This data does not include any personal information about you and is used only to measure and improve the effectiveness of our website.

6.2    This website uses "cookies" to enhance your viewing experience. A cookie is a tiny element of data that is sent to your browser to be stored on your hard drive so that we can recognize you when you return. You may set your browser to notify you when you receive a cookie or refuse cookies from all websites, if you wish. Please note, however, that if you reject cookies it is possible that some web pages may not properly load or load at all, and your access to certain information might be denied or you might have to enter information about you more than once.

6.3    We use session cookies, persistent cookies and Google Analytics.

6.4    Session cookies: Session cookies allow this website to link the various actions of a user during a browser session, including which pages the user visited before visiting this one. Session cookies expire when the browser session ends.

6.5    Persistent cookies: Persistent cookies are stored on a user's device in between browser sessions, storing information about the preferences or actions of the user across a site (or possibly across different XL Group websites).

6.6    Google Analytics: Google Analytics is a popular web analytics service that uses cookies to count the number of people that visit and help analyze how they use it (e.g., we can determine which pages on our site are visited most frequently). The information generated by the cookies (including your IP address) is transmitted to and stored by Google on its servers. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Google uses this information to evaluate the way visitors use our website, compiling reports to us on website activity and providing other services relating to website activity and internet usage. The information also helps us improve this website. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google undertakes not to associate your IP address with any other data held by Google.

6.7    In addition to the above cookies used by our website, cookies and other similar technologies may be deployed on websites hosted by third parties which this website provides links e.g. for published webcasts or written material. We cannot be held responsible for the use by those sites of cookies or similar technology.

6.8    We do not add your name to mailing lists unless you specifically request that we do so. We do not share, sell, lease or rent our mailing or customer lists to third parties. We may, however, use third parties to help us administer email alerts. If personally identifiable information (e.g., name, address, email address or telephone number) is provided to any of these third parties, we will require that such information be maintained by them in strictest confidence. We also continually assess new technology for protecting customer information.

6.9    We take the security of your personal information seriously and use secure servers and various other technological means to protect it.

6.10    XL Group Ltd respects your right to verify, amend and challenge the veracity of your personal data. If you have any concerns about this privacy statement or wish to review your personal data, please contact us.

7 Changes to our Privacy Policy and/or Cookies Policy

7.1    We may change the content of our website or services without notice, and consequently our Privacy Policy and/or Cookies Policy may change at any time in the future. We therefore encourage you to review it from time to time to stay informed of how we are using personal information.

8 XL Catlin Early Careers Recruitment - Your Personal Profile

The information you provide as part of your early careers recruitment (personal) profile, including information in attachments, will be used to administer a global recruitment service for XL Catlin.  This will include notifying you of vacancies as and when they match with your profile and planning and monitoring recruitment campaigns such as XL Catlin’s group-wide early career programs.  It is therefore your responsibility to ensure your information is kept accurate and up to date.  This can be done during early career programs open periods via the following link:
If you are applying for a position within the XL Catlin Development Program, XL Catlin Summer Internship Program, or XL Catlin Apprenticeship Program, please be aware that employees and associates of GradWeb Limited, a limited company whose registered office is at Mill Reef House, Cheap Street, Newbury, Berkshire RG14 5DD, will have access to your personal profile, via the Early Careers Recruitment Platform, in order to facilitate web site services required for XL Catlin.
If you have any questions regarding XL Catlin’s early career programs or the relationship with GradWeb please contact

XL uses two forms of cookies on this site:

  1. to enable the site to operate and retain any preferences you set; and
  2. for analytics to make the site more relevant and easy to use.

These cookies do not collect personal information. For more information about our cookie usage, please click here. To comply with EU privacy laws you must consent to our use of cookies.

By using this site, you agree that we can place these types of cookies on your device. If you choose to change your cookie settings you will be presented with this message the next time you visit.