Aon plc (NYSE: AON) is a leading global professional services firm providing a broad range of risk, retirement and health solutions. Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance.
Aon is committed to protecting your privacy. This commitment reflects the value we place on earning and keeping the trust of our employees, customers, clients, business partners and others who share their personal information with us.
What does this Privacy Notice do?
This Privacy Notice (“Notice”) explains Aon’s information processing practices. This Notice applies to any personal information you provide to Aon and any personal information we collect from other sources unless you are provided a more specific privacy statement at the time of data collection. This Notice does not apply to your use of any third-party sites linked to from this website or any websites which have their own privacy notices.
This Notice aims to help you understand our personal data collection, usage and disclosure practices by explaining:
Aon UK Privacy Notice
- Who is responsible for your information?
- How do we collect your information and what information do we collect?
- How do we use your personal information?
- Legal basis
- Do we collect information from children?
- How long do we retain your personal information?
- How do we disclose your personal information?
- Do we transfer your personal information across geographies?
- Do we have security measures in place to protect your information?
- Other rights regarding your data
- Automated Decisions
- Contact Us
- Changes to this Notice
1. Who is responsible for your information?
Throughout this Notice, “Aon” refers to Aon plc, including its affiliated companies and subsidiaries (also referred to as “we,” “us,” or “our”). Personal information is collected by each member of the Aon group who is responsible for its processing in their capacity as a controller. A full list of our group entities is available here. These entities may provide separate privacy notices when your personal information is first collected by that Aon entity, for example, when you or the business you work for engages us to provide a service.
Aon entities also provide services to our clients as a processor. Where this is the case, we will process your personal information in line with our legal obligations and contractual commitments with our clients.
In the context of providing the Services, we and other insurance market participants need to collect, use and share personal information. To help you understand how insurance market participants may process personal information across the insurance lifecycle, please see the Insurance Market Core Uses Information Notice available on the website of the UK insurance industry association, Lloyd’s Market Association (“LMA”).
2. How do we collect your information and what information do we collect?
The personal information we collect varies depending upon the nature of our services. This Notice provides an overview of the categories of personal information we collect and the purposes for which we use it. More information about the personal information collected for each of our services, together with the purpose and legal basis for collecting the information, may be provided to you in separate privacy notices relevant to the applicable services.
a. Aon collects personal information in the following ways:
Information you provide to us
Aon collects information directly from you when you:
- Request a service from us;
- Visit an Aon site or attend an Aon event;
- Apply for a position at Aon;
- Contact us with a complaint or query;
- Engage with us over social media; or
- Register with or use any of our websites or applications.
You are required to provide any personal information we reasonably require (in a form acceptable to us) to meet our obligations in connection with the services we provide to you, including any legal and regulatory obligations. Where you fail to provide or delay in providing information, we reasonably require to fulfil these obligations, we may be unable to offer the services to you and/or we may terminate the services provided with immediate effect.
Where you provide personal information to Aon about third-party individuals (e.g., information about your spouse, civil partner, child(ren), dependents or emergency contacts), where appropriate, you should provide these individuals with a copy of this Notice beforehand or ensure they are otherwise made aware of how their information will be used by Aon. Where you provide information to us about your beneficiaries, we may require you to provide explicit consent on their behalf.
Information we automatically collect
In some instances, we automatically collect certain types of information when you visit our websites and through e-mails that we may exchange. Automated technologies may include the use of web server logs to collect IP addresses, "cookies" and web beacons. Further information about our use of cookies can be found in our Cookie Notice and Cookie Preference Center at the footer of our page (where applicable).
Information we collect from clients or third parties
When we provide the services to our clients, we may collect personal information from our clients about you, such as your name, contact details, date of birth, gender, marital status, financial details, employment details, and benefit coverage. We may also collect (in each case as strictly relevant to the services we provide) sensitive information about you, such as health information in relation to life, health, professional liability and workers compensation insurance or employee benefit programs sponsored by your employer. Most of the personal information we receive relates to your participation in the compensation and benefits programs offered by your employer. Where permitted by national law, and appropriate to do so, we may collect criminal records information; for example, where required as part of our business acceptance, finance, administration, recruitment, anti-money laundering and sanctions screening processes.
b. The information we collect about you may include the following:
|
a. |
Basic personal details, such as your name, address contact details, date of birth, age, gender and marital status; |
|
b. |
Unique identifierssuch as National Insurance Number or pension scheme reference number; |
|
c. |
Demographic details, such as information about your age, gender, race, marital status, lifestyle, and insurance requirements; |
|
d. |
Employment informationsuch as role, employment status (such as full/part time, contract), salary information, employment benefits, and employment history; |
|
e. |
Health informationsuch as information about your health status, medical records and medical assessment outcomes; |
|
f. |
Vulnerability information information about health, life events, resilience and capability that helps us identify if you might have additional support requirements in order that we can better meet your needs; |
|
g. |
Benefits informationsuch as benefit elections, pension entitlement information, date of retirement and any relevant matters impacting your benefits such as voluntary contributions, pension sharing orders, tax protections or other adjustments; |
|
h. |
Financial detailssuch as payment card and bank account details, details of your credit history and bankruptcy status, salary, tax code, third-party deductions, bonus payments, benefits and entitlement data, national insurance contributions details; |
|
i. |
Claims detailssuch as information about any claims concerning your or your employer’s insurance policy; |
|
j. |
Yourmarketing preferences; |
|
k. |
Online information:e.g., information about your visits to our websites; |
|
l. |
Events informationsuch as information about your interest in and attendance at our events, including provision of feedback forms; |
|
m. |
Social media informationsuch as interactions (e.g., likes and posts) with our social media presence; and |
|
n. |
Criminal records informationsuch as the existence of or alleged criminal offences, or confirmation of clean criminal records. |
3. How do we use your personal information?
The following is a summary of the purposes for which we use personal information. More information about the personal information collected for each of our services, together with the purpose and legal basis for collecting the information, may be provided to you in separate privacy notices which are relevant to the services which affect you.
Performing services for our clients
We process personal information which our clients provide to us to perform our commercial risk, reinsurance, retirement, health, and data and analytics services. The precise purposes for which your personal information is processed will be determined by the scope and specification of our client engagement, and by applicable laws, regulatory guidance and professional standards.
Administering our client engagements
We process personal information about our clients and the individual representatives of our corporate clients to:
- Carry out Aon’s regulatory and compliance obligations, including:
- "Know Your Customer" checks and screening;
- Anti-money laundering;
- Trade sanctions screening;
- Obtain and update credit information with appropriate third parties, such as credit reporting agencies, where transactions are made on credit;
- Communicate with our clients;
- Address client inquiries and complaints; and
- Administer claims.
Communications and marketing to our clients and prospective clients
We process personal information about our clients, prospective clients, and the individual representatives of our corporate clients to: send newsletters, know-how, promotional material and other marketing communications; and invite our clients to events, including arranging and administering those events.
Conducting data analytics, benchmarking and modelling
Aon is an innovative business, which relies on developing sophisticated products and services by drawing on our experience from prior engagements to analyse trends. Aon also uses data to perform analysis, modelling, benchmarking and research.
Crime Prevention
We process personal information to facilitate the prevention, detection and investigation of crime and the apprehension or prosecution of offenders and to comply with laws/regulations. For example, we do this as part of our business acceptance, finance, administration and recruitment processes, including anti-money laundering and sanctions screening checks.
Mergers and acquisitions
We process personal information in the event of a sale, acquisition or reorganisation. This includes processing personal information for planning and due diligence purposes both prior to closing and after a transaction has closed for reasons related to the sale, acquisition, or reorganisation and in order to transfer books of business to successors of the business.