This privacy statement applies to RSG Specialty, LLC, USA (in California: RSG Specialty Insurance Services, LLC) and Ryan Specialty Underwriting Managers, LLC, USA (in California: RSG Insurance Services, LLC) and all their subsidiaries and affiliates operating in the United States.

This section supplements our Privacy Statement and provides specific information for residents of California (“consumers” in this section) and is intended to satisfy the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (collectively, referred to as “CPRA”).  The CPRA requires that we provide certain information to California consumers about how we handle your Personal Information that we have collected, whether online or offline.  Under the CPRA, “Personal Information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household, including the categories of Personal Information identified in a table below to the extent they identify, relate to, describe, are reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.

In some circumstances, we act as a service provider under the CPRA and collect and use Personal Information on behalf of another unaffiliated company.  Where your Personal Information is processed by us when acting as a service provider, the other company’s privacy policy will apply, and requests to exercise CPRA rights should be submitted directly to that company. In other circumstances, we act as a service provider for one of our own affiliated companies, and in that situation this section of the Policy will apply.  If you make a request to exercise CPRA rights to us where we are acting as a service provider under the CPRA, we may be required to disclose your request to the company for which we are acting as a service provider.

For purposes of this Additional Privacy Statement for California residents, the following Personal Information is not covered by the CPRA and does not include:

• Public information lawfully made available from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CPRA’s scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Further, this privacy statement does not apply to our current employees. Employees should refer to Ryan Specialty’s Employee Handbook for the applicable privacy statement.  For a copy of the Employee Handbook, please contact HR@ryansg.com.

If you are a California resident, you have specific rights, which are described in detail below.  For all requests to exercise your privacy rights or for further information, please email RegulatoryCompliance@ryansg.com, or contact us at 888-291-0045 or visit Data Subject Request in order to make such a request.

Our CPRA Notice at Collection is found below.

California Notice at Collection:

Categories of Personal Information Collected, Disclosed, Sources and Whether Sold or Shared

The type of information we collect from you depends on how you interact with us. The information below lists the categories of Personal Information that we have collected from California residents and have disclosed to others for a business purpose in the preceding twelve (12) months, the categories of sources of Personal Information from which the Personal Information is collected, and whether we sell or share each collected category of Personal Information. Some Personal Information included in the categories below may overlap with other categories.

WHAT CATEGORIES OF PERSONAL INFORMATION DO WE COLLECT?

We may collect, and have collected in the past 12 months, the following categories of personal information about you and/or your dependents:

• • PERSONAL IDENTIFICATION
    Name; date of birth; gender; race/national origin; physical traits; contact details (home and work address, telephone numbers, email addresses); and username, password, password reminder questions and answers for Ryan Specialty Online Services.
  • GOVERNMENT-ISSUED IDENTIFICATION
    Identification numbers include but are not limited to Social Security number, other tax identification number, Medicare number, passport number, military identification number, and driver’s or other license numbers.
  • BACKGROUND DATA
    Marital status; family history; educational history; employment history and job titles; professional licenses and affiliations; and relationship to the policyholder, insured or claimant.
  • HEALTH AND MEDICAL DATA
    Current or former physical or mental or medical condition; biometric and genetic data; history of medical procedures or surgeries; date and cause of injury, disability, or death; medication information; medical insurance information; and relevant personal habits such as smoking or drug and/or alcohol consumption.
  • FINANCIAL DATA
    Bank account number; other account numbers and details for financial institutions or credit cards or payment cards; income; assets (real and personal property); liabilities; credit history and credit score; history of insolvency; and other financial information.
  • DATA THAT ALLOWS RYAN SPECIALTY TO PROVIDE YOU WITH INSURANCE SERVICES OR PRODUCTS
    Details about your business and status as an insurance agent or broker; your status as owner, director, shareholder, member or partner, or other ownership or management interest in an organization; policy and claim numbers; prior or present insurance policies, coverage and claims; photographs or video recordings received in the course of business such as claims processing; location and identification of insured property such as property address, vehicle license plate, identification number, registration number, or safe deposit box location and number; other insurance you hold; and other data in activity notes and emails based on our previous communications with you.
  • YOUR PREFERENCES
    We may note your preferred form of communication and marketing and record the interest you show in our services and products.
  • SOCIAL MEDIA ACCOUNT INFORMATION
    When you use our Portals or follow our social media pages, Ryan Specialty may receive additional personal information from you, including personal information that is part of your profile relating to those accounts or your friends’ profiles. Please review the applicable privacy policies for your social media accounts. We are not responsible for the data collection or the privacy practices of any social media accounts.
  • OTHER PERSONAL INFORMATION
    In the course of doing business with you, we may obtain personal information about you, such as your history of civil claims and lawsuits, criminal record, job performance, data regarding sexual life or sexual orientation, religious or philosophical beliefs, ethnic origin, or preferences for medical treatment.
  • INFORMATION FROM OTHER SOURCES
    We may also collect personal information about you from other sources, including commercially available sources and our business affiliates or partners.

WHERE DO WE COLLECT PERSONAL INFORMATION FROM?

In general, we may collect personal information about you, directly and indirectly, depending on your relationship with us—whether as an individual client, agent, broker, a policyholder, claimant, employee of our corporate and association clients, family member of any such person, or other person who we employ or with whom we do business.

Specifically, we may collect your personal information from the following sources:

• • You or your family member orally or in paper and/or online applications or other documents for insurance, employment, or other services.
  • Claimants submitting information relating to an insurance claim.
  • Third parties, such as insurance or reinsurance companies, prospective or actual brokers, reinsurance intermediaries, adjusters, third party administrators, investigators or agents, third party data providers; corporations or other legal entities or their agents seeking insurance or seeking servicing of their insurance, medical professionals, financial institutions, motor vehicle and driver licensing authorities, others with information about the risk that we are servicing or obtaining insurance for or about a claim; prospective or actual business partners, vendors, contractors and service providers; ; and sources of publicly available information.
  • Affiliates, subsidiaries, insurers, intermediaries, third party providers and others in connection with providing or responding to a request for services.
  • Consumer or credit reporting agencies.
  • In some instances, we automatically collect certain types of information when you visit our websites and through e-mails that we may exchange. Automated technologies may include the use of web server logs to collect IP addresses, “cookies” and web beacons. Further information about our use of cookies can be found in our Cookie Notice and Cookie Preference Center at the footer of our page (where applicable).

HOW DO WE USE PERSONAL INFORMATION?

We use and disclose, and have used and disclosed in the past 12 months, your personal information to operate our business:

Communications.

We use your personal information to communicate with you and others for reasons such as:

• • to give you information that you requested from us about our services or products;
  • to communicate with you regarding your account or your business or employment relationship with us;
  • to advise you of changes to any of the Ryan Specialty Online Services or any service or product we provide.

Business purposes.

We use and disclose your personal information in running our business such as:

• • to determine eligibility and process applications for insurance services and products;
  • to handle transactions such as payments and claims handling;
  • to perform general business operations including audit; accounting and finance; billing and collection; data storage; website hosting; information technology functions; product development; records and information retention; fraud and risk management, detection, and prevention;
  • to permit you to use the interactive features of the Ryan Specialty Online Services;
  • to conduct data analytics in order to evaluate and improve existing business operations, services, and products and develop new or improved features, services or products;
  • to confirm an individual’s identity and handle a request to know or delete personal information, as permitted by law;
  • in any other way we disclose when you provide the information; and
  • for any other purpose for which you give consent.

Legal.

We use and disclose your personal information for legal purposes such as:

• • to fulfill our obligations and enforce our rights under any contract between you and us;
  • to comply with legal and regulatory obligations and legal process such as court orders and subpoenas;
  • to respond to lawful inquiries from governmental, regulatory and other authorities;
  • for diversity, equity, and inclusion purposes; and
  • to obey all applicable laws.

Promotional Marketing.

Ryan Specialty uses and discloses your personal information to provide you with information relating to new or improved service or product such as:

• • to deliver marketing content or promotional communications that may be of interest to you; and
  • to transmit direct marketing, including newsletters, emails or other information that you have requested.

Unsubscribe.

Ryan Specialty uses and discloses your personal information to maintain a list of individuals who have unsubscribed from our mailings or electronic communications.

TO WHOM DO WE DISCLOSE PERSONAL INFORMATION?

Ryan Specialty may disclose personal information among its affiliated businesses and with third-party service providers acting on Ryan Specialty’s behalf. To provide you and others with insurance services and products, we may disclose your non-public personal information to:

• • Our subsidiaries, operating companies, and affiliates;
  • Consultants, vendors, and other service providers, who (i) process or complete the transaction for which the information was provided or (ii) provide services for Ryan Specialty such as payment and application processing, marketing, technical support, webhosting, data storage, or data analysis and need your personal information to perform said work services and are contractually restricted from using or disclosing the personal information except as necessary to perform services on our behalf or to comply with legal requirements;
  • Agents, brokers, auditors, counsel, consultants, insurers, reinsurers, retrocessionaires, advisors, representatives, business partners, banks, operating systems or platforms, advertising networks.
  • Any entity that is needed to protect the rights and property of Ryan Specialty and our employees, agents, users and other third parties or to prevent physical harm or financial loss of Ryan Specialty, our users or any third party;
  • Law enforcement, governmental entities, courts, and regulatory, governmental, or other legal authorities to respond to lawful requests for information;
  • A third party in order to comply with a court order, subpoena, search warrant, other legal process or law;
  • An interested buyer (in the course of due diligence), actual buyer or successor of some or all the assets of Ryan Specialty; and
  • Any third party with your authorization or for any other purpose disclosed by us when you provided your information.

SALES OR SHARING OF PERSONAL INFORMATION

Ryan Specialty collects information during your visit to a Ryan Specialty website through cookies and other tracking technologies, which are used to help compile aggregate statistics about usage of its websites, analyze performance and traffic on our website, improve content and enhance and personalize the user experience.  We also share information about your use of our site with social media, advertising, and analytics vendors.  These may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites.  They do not store directly personal information, but are based on uniquely identifying your browser and internet device.  If we have detected an opt out preference signal, then it will be honored.  You may opt out of this collection and usage of information through our, Do Not Sell or Share button below, which will take you to our Cookie Preference Center: Cookie Settings.

HOW LONG DOES RYAN SPECIALTY KEEP YOUR PERSONAL INFORMATION?

We will retain your personal information for as long as it is reasonably necessary, pursuant to our records retention guidelines. Our records retention guidelines are based on our legal or business needs including but not limited to the following criteria: operational, fiscal, administrative or historical value to business operations; legal and regulatory obligations; contractual requirements owed to third parties; the statutory or regulatory requirement to retain files for a certain period of time; the duration of our business relationship with you, your employer, or another related entity; the possibility of future complaints; whether the record is part of an insurance or reinsurance transaction or claim file; audits, investigations or litigation or the likelihood of these; the possibility of future insurance or reinsurance claim activity; whether the documentation is needed for processing or financial records; statutes of limitations; health and safety requirements; tax requirements; personnel requirements; corporate governance requirements; and record-keeping requirements.

Deidentification of Personal Information

We may deidentify Personal Information and use it for our internal purposes. We commit to maintaining and using this information in deidentified form and will not attempt to reidentify the information, except to determine whether our deidentification process satisfies the CPRA.

Your Rights and Choices Regarding Your Personal Information

This section describes the specific rights California consumers have regarding their Personal Information under the CPRA, subject to certain exceptions, and how to exercise those rights:

As a California resident, you have the following rights:

Right to Know: You have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.  You also have the right to know the business or commercial purpose for selling or sharing your personal information.

Once we receive and verify your request, we will disclose to you as required:

• the categories of personal information we collected about you;
• the categories of sources from which we collected personal information about you;
• categories of personal information we have disclosed for a business purpose;
• the categories of third parties to whom we have disclosed that personal information;
• our business or commercial purposes for collecting that personal information; and the specific pieces of personal information we collected from you.

Right to Correct:  You have the right to correct inaccurate personal information that we maintain about you.

Right to Delete: You have the right to request that we delete the personal information that we have collected and retained (without charge) unless an exemption applies. Once we receive and verify your request, we will delete (and, if applicable, direct our service providers to delete) your personal information from our records, unless an exemption applies.

Right to opt out of sale or sharing or personal information: If a business “sells” or “shares” Personal Information as those terms are defined under the CPRA, you have the right to opt-out of the sale or sharing of your Personal Information.   Ryan Specialty collects information during your visit to a Ryan Specialty website through cookies and other tracking technologies, which are used to help compile aggregate statistics about usage of its websites, analyze performance and traffic on our website, improve content and enhance and personalize the user experience.  We also share information about your use of our site with social media, advertising, and analytics vendors.  If we have detected an opt out preference signal then it will be honored.  You may opt out of this collection and usage of information through our, Do Not Sell or Share button below, which will take you to our Cookie Preference Center: .

Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose sensitive Personal Information other than for limited purposes permitted under the CPRA and, as such, are not required to offer consumers a right to limit its use.

Right to Non-Discrimination.  We will not discriminate against you for exercising any of your privacy rights under the CPRA.

How to Exercise your rights: For all requests to exercise your privacy rights or for further information, please email  RegulatoryCompliance@ryansg.com, or contact us at 888-291-0045, or visit Data Subject Request in order to make such a request.

You can submit a correction, deletion or right to know request as instructed above.   We will respond to verifiable requests received from California residents as required by law. When you submit a request to know or a request to delete, we will take steps to verify your request by matching the information that you provide with the information we have in our records and/or requiring authentication through your usual log-in credentials if you are an accountholder.

You or your authorized agent must complete all required fields on our Data Subject Request web page (such as your name, email address, and physical address) or otherwise provide us with this information via the above toll-free number. In some cases, we may request additional information to verify your request or where necessary to process your request. We may also carry out checks, including with third party identity verification services, to verify your identity before taking any action with your personal information. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents may initiate a request on behalf of another individual by contacting us at the number above or through our Data Subject Request web page; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

PRIVACY OF CHILDREN

Ryan Specialty Online Services are not intended for children. We do not knowingly collect or solicit personal information from anyone under the age of 13 without parental consent. We do not knowingly allow anyone under the age of 13 to register for any services. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal information, please contact us at the email address or telephone number below. We expect all information provided by online users to be truthful and correct regarding age and other information provided.

CHANGES TO THIS PRIVACY STATEMENT

From time to time, Ryan Specialty may update this Privacy Statement. Please note that the Effective Date below shows when this Privacy Statement was last revised. We encourage you to review this Privacy Statement periodically so that you are informed of our current practices. By continuing to use any of the Ryan Specialty Online Services after we post a newly updated Privacy Statement on the Sites, you consent to any changes we make to this Privacy Statement.

Effective as of March 4, 2025.

 

Under the California Insurance Information and Privacy Protection Act, California residents who are our insurance consumers have the right to submit a written request to access, correct, amend, or delete your personal information.

You may exercise your rights by calling 1-888-291-0045, emailing a written request to us at regulatorycompliance@ryansg.com or completing a webform request at https://ryanspecialty.com/data-subject-request.

If you contact us to exercise these rights, you have the right to receive a response within 30 business days of submitting your submission.

If we refuse your request, we will notify you and you have the right to file a statement regarding what you believe to be accurate and fair information and why you disagree with our refusal.

The rights set out above are not limited by any other Privacy Notice that we may send to you.

How to Contact Us

If you have any questions or comments about these California Notices please contact us at:

Toll-free phone number:  1-888-291-0045
Email:  regulatorycompliance@ryansg.com

Who does this statement apply to?

This Privacy Policy applies to all collection, use, sharing and disclosure of personal information by Ryan Specialty Canada Limited (“Ryan Canada”), a Canadian corporation, including all of its trade names used in Canada and various provinces, in the course of providing insurance services. Ryan Canada is an insurance broker that works directly with brokers, agents and insurance carriers. Ryan Canada is an affiliate of Ryan Specialty, LLC (“Ryan Specialty”)

What is “personal information”?

“Personal Information” is information about an identifiable individual. However, it generally does not include business contact information when used to contact a person in respect of their business role or function.

Personal information also does not include anonymized or aggregated information.  Sometimes we will anonymize information in order to use and share that information for our business purposes in a way that does not identify you. For example, we may aggregate your personal information with other individuals to prepare claims statistics.

Why we collect, use and disclose personal information?

Collecting and processing personal information about you is essential to our being able to provide products and services to you (including individuals associated with you, all of whom we refer to as “Client” in this Privacy Policy). While the personal information we collect may come directly from you, it will often come to us through your insurance broker or agent, and may also be provided by our affiliates or other third parties (such as employers, insurance companies, adjusters, insurance brokers or agents, credit organizations, motor vehicle and driver licensing authorities, financial institutions, medical professionals, etc.).

Personal information may be used for the following purposes that are integral to our services:

• To determine eligibility and process applications for products and services and to provide information and services;
• To understand and assess ongoing needs of Clients and potential Clients and offer products and services to meet those needs;
• For communication, service, marketing, billing and administration;
• For claims administration and data analysis;
• For fraud detection and prevention;
• To comply with sanctions and anti-money laundering laws and regulations;
• To obtain and update credit information with appropriate third parties, such as credit reporting agencies, where transactions are made on credit;
• To conduct data analytics in order to evaluate and improve existing, business operations, services, and products and develop new or improved features, services or products;
• To confirm an individual’s identity and handle a request to know or delete personal information, as permitted by law;
• In any other way we disclose when you provide the information; and
• Other purposes disclosed in our terms of business or disclosed to you at the time of collection, use or disclosure.

Personal information may also be used for additional purposes including:

• For analytics purposes;
• If you apply to a position with us, to assess and process your application, including verifying qualifications, conducting background checks where permitted, and evaluating your suitability for employment;
• To comply with legal, audit, security and regulatory requirements;

• To fulfill our obligations and enforce our rights under any contract between you and us;
• To otherwise protect or enforce our rights or those of other brokers, agents, insurance carriers or Clients;
• To comply with legal and regulatory obligations and legal process such as court orders and subpoenas;
• To respond to lawful inquiries from governmental, regulatory, and other authorities; and
• To obey all applicable laws.

We may also use personal information that has been aggregated or anonymized for purposes such as developing proprietary tools and databases, and providing consulting or analytical services to third‑party administrators, insurance companies, and other participants in the insurance industry. These activities do not involve the use of identifiable personal information.

We will not collect, use or disclose your personal information for any other purpose without your consent.

What information we collect?

Depending on the products or services you request or your dealings with us, we may collect information that you provide on applications for products and services to us or to your insurance broker or agent, such as your contact information, gender, age and birthdate, health conditions, financial information, employment history, income information, and other relevant and necessary information and documents relating to the services we provide or your interactions with us, which could include:

• Driver’s license number;
• Credit card numbers;
• Social insurance number, passport number or other national identification number;
• Information relating to marital and family status including court orders and domestic agreements;
• Wills and estate documentation;
• Pension and benefits information; and
• Any additional information you decide to provide to us.

To assess risk or if you make a claim, we may collect additional information from insurers, industry associations, claims adjusters, and consumer reporting agencies.

In addition to the information you or your insurance broker or agent may provide, Ryan Canada may collect information from commercially available sources that it deems credible. Such information may include your name, address, email address and demographic data, and it may be stored in internal systems, such as sales management applications. These systems permit Ryan Canada employees to access and process such data solely for the purposes of customer fulfillment, business administration, business reporting, and statistical analysis.

Finally, if you apply for a position with us, we may collect the personal information necessary to assess and process your application, including your résumé, employment history, educational background, professional qualifications, references, and any other information you choose to submit as part of the recruitment process.

Consent to use personal information

We may obtain your express consent or we may determine that consent has been implied by the circumstances. Express consent can be verbal (in person or over the telephone), written or by electronic application (including email or through an online portal). Implied consent occurs when we can assume you have given consent by some other action you take or decide not to take. For example, if you request a specific product or service from us or your agent or broker, and you provide us or your broker or agent with personal information in that regard, we infer that you consent to us using that personal information reasonably to provide our insurance related services as set out above.

If you need to provide personal information about other individuals (such as employees, dependents, etc.), you must obtain their consent for these purposes prior to your disclosure to us.

When you request services from us, we ask that you provide information that enables us to respond to your request. In doing so, you consent to our collection, use and disclosure of such personal information to third party service providers that assist us in providing our services. You also authorize us to use and retain this personal information for as long as it is required for the purposes described above. Your consent remains valid even after the termination of our relationship with you, unless you provide us with written notice that such consent is withdrawn.

Generally, you may refuse or withdraw your consent to the collection, use or disclosure of your personal information at any time except in some circumstances. Your ability to withdraw consent may be limited by legal or contractual restrictions.  You should note that by withdrawing your consent, or not providing it in the first place, you may limit or even prevent us from being able to provide you or an authorized third party (such as an employer) with the products or services desired. In certain circumstances, refusing to provide personal information or withdrawing consent will mean that you will not be entitled to insurance policy issuance or renewal, insurance underwriting or claims administration of existing policies. To withdraw your consent to the continued use, retention and disclosure of your personal information, please contact us using the contact information set out below.

Additionally, in certain circumstances we will not need to obtain consent or explain the purposes for the collection, use or disclosure of personal information. For example, this exception would apply if there is an emergency that threatens the life, health or security of an individual, for fraud detection or prevention, or if we must comply with a court order.

Sharing personal information with others

Ryan Canada only shares or discloses personal information as is required and described in this Privacy Policy or as otherwise required or permitted by law. In providing our services, we may need to share the personal information we collect to affiliates, including Ryan Specialty, subsidiaries, successors and other service providers or agents performing functions for us, including:

• Brokers which may or may not be affiliates of Ryan Canada that must be utilized to access certain insurance markets or that have come to Ryan Canada for help in procuring insurance;
• Motor vehicle licensing authorities, for license verification purposes and to check driving records for underwriting purposes;
• Document printing services;
• Data hosting and other IT services;
• Insurance, actuarial, and benefits consultants;
• Administrative support providers; and
• Any third parties providing services to Ryan Canada or on our behalf to assist us in providing insurance related services.

Such parties may be located in Canada, or in other jurisdictions outside of Canada, including the United States. While your personal information is always subject to confidentiality obligations, while stored in another jurisdiction, it may be subject to the laws of that jurisdiction. As a result, the information may be accessed by the courts, government, law enforcement, and regulatory authorities of that country.

Depending on the products or services that we provide to you, we may disclose personal information to insurance companies and/or their managing general agents or underwriters, reinsurers and other parties who have a need for the information in order to make available insurance coverage and other products and services. We also share information with claims adjusters and insurers to settle claims. If we are legally entitled to do so, we may disclose information to consumer reporting agencies, insurance reporting agencies and governmental authorities when requested to do so or to protect our business. We may also be required by law or by rules of arbitration or rules of court to disclose information to certain third parties.

As Ryan Canada continues to develop and grow, we may buy or sell parts of a business. As our businesses consist primarily of Client relationships, information regarding the particular accounts or services being purchased or sold could include personal information and be one of the transferred business assets.

We may also use personal information to assess your future needs and, with your consent or as otherwise permitted by law, to offer the products and services that may best meet those needs, from ourselves, our affiliates or reputable organizations selected by us. If you do not wish to receive these offers or such information, please contact our Privacy Officer as outlined below in the Contact Information section.

Keeping your information accurate

It is important that your personal information is accurate and complete. Having accurate information about you enables us to give you the best possible service. You have the right to access, verify and amend the information we have about you. If you identify any personal information that is out-of-date, incorrect or incomplete, let us know by contacting our Privacy Officer as outlined below in the Contact Information section and we will make the corrections promptly. To keep personal information up-to-date, please inform us of any changes, such as a change of address, telephone number or any other circumstances by contacting your agent or broker.

How we safeguard personal information

At Ryan Canada, we employ physical, electronic and administrative safeguards designed to protect our systems and all personal information under our control against unauthorized access and use. All safety and security measures are designed to be appropriate to the sensitivity level of the information collected.

Our service providers and agents are bound to maintain the confidentiality of your personal information and may not use the information for any unauthorized purpose.

Employees are governed by strict standards and policies to ensure that personal information is secure and treated with the utmost care and respect.  Employees have access to systems containing personal information only where required to fulfill their job function.

While Ryan Specialty makes every effort to secure all communications within our control and on our premises, you should be aware that no method of delivery is absolutely secure, and any communication of personal information may be accidentally or deliberately intercepted by third parties.

Online privacy

Ryan Specialty also may collect information during your visit to a Ryan Specialty website through the use of cookies, which are small text files used to help compile aggregate statistics about usage of our websites. This information is used to improve content and personalize your user experience. However, by modifying your Internet browser preferences, you have the ability to accept all cookies, to be notified when a cookie is set or to reject all cookies. Please note that if you choose to reject all cookies, you will be unable to use those services or engage in activities that require the placement of cookies.

Ryan Canada and its affiliates may send you commercial electronic messages (i.e. marketing and promotional messages) to an email address or other electronic address that you have provided to us. We may ask for your express consent or we may rely on implied consent if you have made an inquiry, purchased a product or service from us, entered into a written agreement with us, or in other limited circumstances. If you do not wish to receive commercial electronic messages from us, you may withdraw your consent at any time using the unsubscribe link in the message or by contacting our Privacy Officer as indicated on the main page. Please note that you will still receive commercial electronic messages that we are required to send to you by law or for which consent is not required, such as confirmations of transactions or information about your account.

Ryan Canada websites may contain links to other third party sites that are not governed by this Privacy Policy. Although we endeavor to link only to sites with high privacy standards, our Privacy Policy will no longer apply once you leave this website. We are not responsible for privacy policies employed by other third parties or any foreign affiliates since they would be governed by privacy legislation applicable in their country of residence. We suggest, therefore, that you examine the privacy statements of those sites to learn how personal information may be collected, used and/or disclosed.

Access to your personal information

Individuals have a right to access their own personal information in a record that is in the custody or under the control of Ryan Canada, subject to some exceptions. For example, organizations are required under applicable law to refuse to provide access to information that would reveal personal information about another individual.

If we refuse a request in whole or in part, we will provide the reasons for the refusal. In some cases where exceptions to access apply, we may withhold that information and provide you with the remainder of the record.

You may make a request for access to your personal information by writing to the Privacy Officer at the email address, phone number or hyperlink designated below. You must provide sufficient information in your request to allow us to identify the information you are seeking.  We will need to verify the identity of anyone making such a request to ensure that we do not provide your information to anyone who does not have the right to such information and may request additional personal information from you to carry out this verification.

You may also request information about our use of your personal information and any disclosure of that information to persons outside our organization. In addition, you may request a correction of an error or omission in your personal information.

We will respond to your request as soon as reasonably possible.  The more complete the information you provide, the more promptly we will be able to respond.

Contact information

Please contact our Privacy Officer to obtain further information about our policies and procedures, or if you have any unresolved inquiries or concerns, or if you wish to access or correct your personal information as set out above. We will respond to you promptly and do our utmost to resolve your concerns. In addition, you can make other inquiries, such as withdrawing consent, or asking for a copy of our Privacy Policy.

Our Privacy Officer can be contacted as follows:

For a request to access or correct personal information, or to withdraw consent, you may use this hyperlink.

You may also email: regulatorycompliance@ryansg.com or you call at 888-291-0045.

Filing a complaint

Please write to us at the email address above or contact us by telephone to file a privacy complaint.

Changes to this Privacy Policy

Ryan Canada may revise this Privacy Policy from time to time as our business evolves, in response to legal developments, as new technologies become available, or as we introduce new features, products or services.  When we make such changes, we will revise the effective date indicated at the end of this document. You should check back here periodically to find out if any changes have been made.  If we make substantial changes we will, as appropriate, prominently post these changes to our website or notify Clients directly.

Effective as of  March 2, 2026

Introduction

This Website and Client Privacy Notice (“Notice“) applies to our website visitors, former, current and prospective clients, suppliers, service providers, insureds, insurers, insurance brokers and agents, syndicate representatives and any other individuals who communicate or engage with us in respect of our products and services in the UK, EMEA and APAC. Note that we have separate privacy notices for our employees and job candidates and this notice is not intended to cover our processing of the personal data of our employees and job candidates.

This Notice is issued on behalf of the Ryan Specialty companies listed in the Annex to this Notice.  When we refer to “Ryan Specialty“, “the Company“, “we“, “us” or “our” in this Notice, we are referring to the Ryan Specialty entity with which you have engaged or have dealings.  This Notice does not form part of any contract to provide services or any other contract we have entered or may enter into with you.

This Notice underlines our commitment to protect and respect your privacy and your data rights, as required by relevant law (in the EEA, the General Data Protection Regulation (the “GDPR”) and in the UK, the UK GDPR), as well as under other applicable data protection law in your country). If there is anything you do not understand after reading this Notice, please contact us on Legalinternational@ryansg.com.

What does this Notice cover?

This Notice sets out our processing of your personal data when you visit our website, or you otherwise engage with us in relation to our business, including what personal data we may collect and how we may collect it, how and why we may use it, how we keep it secure and your rights in respect of personal data.

It covers the following:

• The types of personal data we may collect
• Why we collect the personal data
• Data sharing
• For how long we keep your personal data?
• Sending Personal Data outside the UK/EEA
• How does the Company protect your personal data?
• Your rights
• Complaints
• Annex A

This policy will be periodically updated. New versions will be made available on our

Please also refer to any other privacy notice(s) we may provide to you from time to time. In particular, please see The London Market Core Uses Information Notice available here which provides further information on how personal data is used within the insurance market, and our cookies notice available here.

The types of personal data we may collect

In order to operate our business and comply with our legal obligations, we collect different categories of personal data. We gather some of this data directly from you when you visit our website or otherwise engage with us. Data may also be provided from third party sources (such as third party service providers, government agencies, HMRC, regulatory bodies, fraud prevention and credit reference agencies, financial advisers, insurers, insurance brokers, agents, your bank, medical professionals, loss adjusters, other individuals (e.g. if you are beneficiary under an insurance policy) and publicly-available online resources, such as public registers and social media (e.g. LinkedIn)).

These categories of personal data include:

• technical and security information, such as details of your access to and use of our website, including IP addresses, login data, browsing and search history and cookies information. Please see our separate cookies notice [HERE] for details of our use of cookies;
• identity and contact data, such as name, former name (if applicable), title, address, email, telephone number and occupation/job title;
• identification data, such as your signature, date of birth, gender, marital/relationship status, national identity card/national insurance/social security number, utility bill, nationality/citizenship and country of residence;
• communication data, such as your correspondence with us (including emails) and your interests in relation to our products and services;
• financial data, such as bank or payment card details, payment history information, financial history (including county court judgments);
• application, account and claims data, such as account name, employment and education details, health insurance information, policy details, details of the property to be insured, details of any insurance claim and beneficiary details;
• medical information, such as medical records relating to personal injury claims and other health information;
• security information (if you attend our offices for meetings), such as video and CCTV recordings, security pass and building entry/exit details; and
• any other personal data you voluntarily you provide to us.

If you do not provide the personal data required, in some circumstances we may be unable to provide our services to you, comply with our obligations or administer your business relationship with us. We will advise you about the implications of not providing personal data to us. Where we don’t need your personal data, we will make this clear, for instance we will explain if any data fields in our forms are optional and can be left blank.

Please note that the categories of personal data we process about you, and the purposes for which we process them will vary depending on your business relationship with us.

Why we collect the personal data

We ensure that we have a lawful basis or bases for processing your personal data. Our lawful bases (which are based on applicable data protection law requirements) and purposes for processing your personal data are:

Lawful Basis: To manage your contract with us or to take steps at your request prior to entering into a contract with you.
Purpose of Processing (for example):

• Setting you up on our systems as our supplier and in order to pay you.
• Fulfilling, or taking steps to fulfil, any other contractual obligations to you.

Lawful Basis: To comply with legal obligations to which we are subject.
Purpose of Processing (for example):

• Complying with our records and financial accounting obligations.
• Taking steps to comply with the law, including in respect of warrants or similar binding requests by law enforcement, courts or other official authorities.
• Dealing with disclosure orders in civil proceedings.
• Complying with other legal obligations which may arise in respect of our relationship with you.

Lawful Basis: For the purposes of our or a third party’s legitimate interests.
Purpose of Processing (for example):

• Operating our website.
• Providing our products and services.
• Negotiating, providing, maintaining and administering the performance of the insurance contract with you (including reviewing your application, carrying out our ‘Know Your Client’ procedures and risk reviews, setting you up as a policyholder, processing your claims and keeping records).
• Responding to any enquiries or complaints we may receive from you, including investigating any complaints received from you or from others or about our website, our insurance product or services.
• Providing technical and other support to you in respect of our goods and services.
• Seeking, evaluating and responding to your feedback and conducting research or surveys and analysing the effectiveness of our marketing campaigns.
• Gathering market intelligence in order to develop and improve our products and services.
• Developing new products and services, enhancing, improving or modifying our website, products and services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
• Hosting or organising events.
• Recording images, audio and video at our in-person or online events or meetings to enable us to keep accurate records, create meeting minutes, to share details with those who were unable to attend and for know-how, learning and marketing purposes.
• Operating our business through the management of our financial position, business capability, planning, communications, corporate governance and audit.
• Ensuring compliance with Ryan Specialty’s terms and conditions of service, our policies and procedures and ensuring good governance.
• Ensuring and monitoring the security of our business operations, premises, facilities, people, property, systems and platforms and monitoring and preventing situations involving potential threats to the rights or safety of any person.
• Monitoring and protecting against fraud, unauthorised IT access and other unauthorised activities or misconduct.
• Aiding investigations if crime is identified.
• Defending Ryan Specialty or taking action on Ryan Specialty’s behalf in respect of any investigation or litigation, including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties.
• Facilitating or managing the actual or potential (a) sale, merger or reorganisation of our business or assets or any part of our business or assets or (b) purchase of another business or the assets of another business or any part of such business or assets.
• Protecting the rights of our business, employees, clients or other third parties.
• Dealing with any non-binding requests by law enforcement, courts or other official authorities.
• Performing data and statistical analysis and audits.
• Where we rely on legitimate interests, we have balanced our rights against your interests, fundamental rights and freedoms and determined that our legitimate interests are not overridden in those circumstances.

Lawful Basis: To protect your vital interests.
Purpose of Processing (for example):

• To obtain medical assistance in the event of a risk to your life or the life of another person.

Lawful Basis: With your consent.
Purpose of Processing (for example):

• To send direct marketing messages to you.

Anonymous data

We may create anonymous and aggregated data sets and reports in order to assess, improve and develop our business, products and services, prepare benchmarking reports on our industry and for other research, marketing and analytics purposes. We may also share this anonymised data with third parties. Since this data will not identify you or make you identifiable, it will not constitute personal data.

Special categories of personal data

When we process particularly sensitive personal data (also known as special categories of personal data) – e.g., health/disability data– we have an additional lawful basis for the processing of such personal data based on data protection law requirements in the UK and EEA. In the limited circumstances where we process such personal data, we do so where it is necessary:

• in the substantial public interest, such as for insurance purposes; or
• for the establishment, exercise or defence of legal claims.

We may also request your explicit consent to process sensitive personal data.

In limited circumstances, we may process special categories of your personal data:

• where you have already made the information public; or
• it is needed to protect your vital interests (i.e. your life) or those of another person where you/they are not physically or legally capable of giving consent.

Our uses of special categories of personal data include the following:

• dealing with your application for insurance and your insurance claims (including processing of medical personal data in respect of personal injury claims); and
• dealing with any legal claims or requests from courts, governmental or regulatory authorities.

Criminal conviction and offence data

We process limited criminal convictions and offence data (e.g. in respect of our “Know Your Client” procedures, when assessing claims payments and/or in cases of fraud or suspected fraud) and do so in accordance with the law. Our purposes of processing such data include the following:

• for insurance purposes;
• for the purpose of, or in connection with, any actual or prospective legal proceedings, as part of seeking legal advice or as necessary to establish, exercise or defend legal rights; and
• for the purpose of preventing or detecting any unlawful act.

Data sharing

We may share your personal data with the following categories of third parties:

• other Ryan Specialty group companies;
• Lloyd’s syndicates, other insurers and their representatives;
• insurers, reinsurers, insurance brokers, financial advisers, loss adjusters, claims handlers, experts, debt advisors, private investigators and sanction checking providers;
• third party suppliers and service providers, such as IT support, maintenance, back up and hosting (including website) providers, payment card service providers and marketing services providers;
• our professional advisers and consultants (e.g. lawyers, auditors, actuaries, bankers, insurers, brokers and accountants);
• our landlords and their managing agents;
• our business partners;
• trade associations and professional bodies;
• credit reference agencies and fraud prevention agencies;
• financial regulation authorities, government tax departments and other government departments and agencies, data protection regulators and any other applicable regulators (such as in the UK, the Financial Ombudsman Service, the Financial Conduct Authority and the Information Commissioner’s Office);
• law enforcement agencies, fraud prevention agencies, anti-money laundering agencies, courts and court-appointed persons or entities. As a financial services company, we are required to have certain processes in place with regards to anti-bribery and corruption, money laundering and fraud;
• third parties with which you ask us to share your personal data, such as your bank or landlord; and
• purchasers or potential purchasers of any Ryan Specialty group company and the management of companies that we acquire or may acquire, and their advisers.

For how long do we keep your personal data?

We will only keep your personal data for as long as is reasonably necessary for the relevant purposes set out in this Notice or when we are obliged to do so in order to comply with legal or regulatory requirements or professional indemnity obligations. The amount of time we retain your data for depends on the nature of the personal data and what we require it for. Once the data is no longer required, it will be securely deleted.

Sending Personal Data outside the UK/EEA

We may transfer your personal data outside the UK or EEA (including to our group companies in the US, which provide certain services to the Ryan Specialty group). If we make such transfers, we will ensure the confidentiality and protection of that information through compliance with applicable data protection legislation. Either the relevant country’s data protection laws will have been approved by the UK government or European Commission (as applicable) as being adequate to protect your personal data or we will ensure other appropriate safeguards are in place, such as (as applicable) the UK’s International Data Transfer Agreement or Addendum or the European Commission’s Standard Contractual Clauses. Please contact us at legalinternational@ryansg.com if you wish to receive a copy of any of these safeguards.

How does the Company protect your personal data?

The Company takes the security of your personal data very seriously. The Company has put in place security measures, policies and controls to protect your personal data from accidental or unlawful destruction, damage, loss, alteration or unauthorised disclosure or access.

All personal data processed by us is stored on secure servers and only accessed and used in line with our data protection policies and procedures. Your personal data will only be accessed by our employees or authorised third parties who require the information for their business purposes. In circumstances where it is necessary to share your personal data with a third party processor, there are contractual agreements in place to ensure the security and confidentiality of your personal data and they will only be authorised to use the information for the specific purpose for which it has been provided to them.

Please be aware that the security of the transmission of information via the Internet cannot always be guaranteed. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us using the details below.

Your Rights

You have rights in respect of how we use your personal information. These are as follows:

• You have the right to ask us to rectify any inaccuracies in your personal information;
• Subject to certain conditions, you have the right to object to, or ask us to restrict, the processing of your personal information;
• Subject to certain conditions, you are entitled to have your personal data erased, e.g. where your personal data is no longer needed for the purposes for which it was collected;
• You have the right (subject to certain conditions) to obtain a copy of any personal data we hold on you, as well as the right to information about the personal data we process, as set out in this Notice. This right is called the right of access.

Subject to certain conditions, you have the right to have the personal data you have provided to us transmitted to another controller. This right is called the right to data portability.

• If we ask for your consent to process your personal data, then we will explain our reasons for it. You do not need to give consent; it is entirely optional. If our processing of your personal data is on the basis of your consent, you have the right to withdraw consent at any time and require us to cease any data processing that we do relying on your consent. Please contact us at Legalinternational@ryansg.com if you wish to withdraw consent. Please be aware that if you do withdraw your consent, this will not invalidate our use of your personal data prior to the withdrawal;

If you would like to exercise any of these rights, or you have any questions about this Notice, please contact Ryan Specialty’s compliance officer via compliance – Legalinternational@ryansg.com.

Complaints

If you are dissatisfied about how we use or have used your personal data, you can contact us at Legalinternational@ryansg.com. If you believe that the Company has not complied with your data protection rights, you have the right to make a complaint to the data protection regulator in the country in which you are located. Please see Annex A for a list of these regulators and their contact details.

London, February 2026

ANNEX A

Company Name: Ryan Specialty Corporate Services Limited
Country: UK
Address: 6th Floor, 25 Fenchurch Avenue, London, England, EC3M 5AD
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Information Commissioner’s Office (ICO), https://ico.org.uk/

Company Name: Ryan Specialty Europe GmbH
Country: Germany
Address: Hohe Bleichen 8, 20354, Hamburg, Germany
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), https://datenschutz-hamburg.de/

Company Name: Ryan Specialty Europe GmbH – Danish Branch
Country: Denmark
Address: Rådhuspladsen 16, 1550 København V
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Danish Data Protection Agency (Datatilsynet), https://www.datatilsynet.dk

Company Name: Ryan Specialty Europe GmbH – Irish Branch
Country: Ireland
Address: Office 206, Hume Street House, 3-8 Hume Street, Dublin, D02 C624, Ireland
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Data Protection Commission (DPC), https://www.dataprotection.ie

Company Name: Ryan Specialty Europe GmbH – Dutch Branch
Country: Netherlands
Address: Wilhelminakade 149 A, 3072AP Rotterdam
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Dutch Data  Protection Authority (Autoriteit Persoonsgegevens), https://www.autoriteitpersoonsgegevens.nl

Company Name: Ryan Specialty Europe GmbH – Polish Branch
Country: Poland
Address: Aleje Jerozolimskie 93, 02-001 Warsaw, Mazowieckie
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Personal Data Protection Office (Urząd Ochrony Danych Osobowych – UODO), https://uodo.gov.pl/en

Company Name: Ryan Specialty Singapore (Pte) Ltd
Country: Singapore
Address: 77 Robinson Road, #13-00, Robinson 77, Singapore (068896)
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Personal Data Protection Commission – https://www.pdpc.gov.sg/

Company Name: Ryan Specialty Europe GmbH – Spanish Branch
Country: Spain
Address: Avenida del Doctor Arce 14, 28002, Madrid
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), https://www.aepd.es

Company Name: Ryan Specialty Europe GmbH – Swedish Branch
Country: Sweden
Address: Brahegatan 2, 114 37 Stockholm
Ryan Specialty Contact Details: legalinternational@ryansg.com
Data Protection Regulator Contact Details: Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY), https://www.imy.se/en