PRIVACY NOTICE

This Privacy Notice provides information on your use of this Website and governs how Bridgehaven Specialty UK Limited (BHVN) collects, uses, and protects your personal data. This privacy notice does not extend to any third-party websites, applications or portals that can be accessed from this website including, but not limited to, any links we may provide to social media websites.

Please read this Privacy Notice carefully.

DEFINITION AND INTERPRETATIONS

In this Privacy Notice, the following terms have the meanings set out below:

Data	all information submitted to Bridgehaven Specialty UK Limited via the Website, email, telephone etc. including, where applicable, definitions provided in the Data protection Laws.
Cookies	small text files placed on your device when you visit certain parts of the Website and/or use certain Website features.
Data Protection Laws	all applicable laws relating to the processing of personal data, including the UK GDPR and all national implementing and supplementary laws, regulations, and secondary legislation.
GDPR	the UK General Data Protection Regulation.
Bridgehaven Specialty limited “we” or “us”	Bridgehaven Specialty UK Limited is a company incorporated in England and Wales, registered number 12782688. BHVN’s registered office is at 70 Gracechurch Street, London EC3V 0HR, England.
UK and EU Cookie Law	the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by subsequent regulations in 2011 and 2018.
User or “you”	any third party accessing the Website who is not (i) employed by Bridgehaven Specialty UK Limited and acting in the course of employment, or (ii) engaged as a consultant or otherwise providing services to Bridgehaven Specialty UK Limited and accessing the Website in that capacity.
Website	www.bhvn-ins.com and any sub-domains, unless expressly excluded by separate terms and conditions.

The following sections will guide you through our practices for collections, usage, disclosure, and retention of your (personal) data.

Controller

Bridgehaven Specialty Limited determines the purpose for which and the way in which your data is processed.

Personal data we collect

“Personal data” means any information that can be used to identify a natural person, directly or indirectly.

Individuals in scope of this Privacy Notice

This Privacy Notice applies to all individuals whose data we process, including (but not limited to)

Business contacts
Customers
Users of our websites and online services
Individuals who request or receive out marketing communications
Individuals who make general enquiries
Participants in competitions, promotions, or similar activities

We collect the following data depending on the purpose of your interaction with us and as allowed by applicable law:

General information such as, name, telephone number, email address, name of employee
Any other information you provide us with on your application form
In the event you attend events with us, we may collect relevant details e.g. your event preferences, dietary requirements etc.

How we collect your data

We collect Data in the following ways:

Data provided by you – such as when you provide your personal data to us, including from any of our Sites, surveys, live events, market research, and other direct communications (telephone, email etc.) and/or solicitations.
Data collected automatically – when you access the Website, certain Data is collected automatically, for example: information about your visit, including IP address, access dates and times, frequency of visits, and interactions with Website content.
Data collected via cookies, in line with your browser settings.

For more information about the cookies we use and how to change your cookie preferences, please see our cookies policy: https://www.bhvn-ins.com/cookies/.

How we use/process your data

We are legally required to have a valid basis for collecting and processing your personal data. The table below sets out the different ways in which we use your data, along with the legal grounds on which we rely for each activity.

The legal bases are:

Legitimate interest
Legal obligation
Consent
Contract
Public task
Vital interests

Purpose/use	Legal Basis
Business development: source new opportunities and prospective MGAs to support under delegated authority.	Legitimate interest Consent
Commercial Review: assessment of the commercial viability of the potential partnerships. It includes high level financial forecasting to confirm that all parties (MGA, BHVN and Reinsurers) can achieve sustainable and satisfactory ROI	Legitimate interest (perform service to you our client) Consent Legal obligation
Technical Review: compliance review, financial stability, and actuarial review	Legitimate interest Legal obligation Consent Contract
Fraud and crime prevention, sharing data with third party anti-fraud agencies such as the Motor Insurance Bureau, The Claims and Underwriting Exchange and law enforcement agencies	Legal obligation Legitimate interest Consent Contract
Communicate and market to you	Consent Legitimate interest (perform service to you our client) Contract
Improve our service (COOKIES)	Legitimate interest (perform service to you our client)

Who do we share your personal data with?

We will only share your personal data within Bridgehaven’s Group of companies and service providers and where necessary with certain third parties for the purposes set out in the table above. Third parties may include Business partners: such as MGAs, reinsurers, and brokers. Third party providers: actuary, IT software. Industry bodies such as the Motor Insurance Bureau.

Keeping data secure/Data security

We implement appropriate technical, organisational, and physical safeguards to protect the personal data we process, in line with client instructions and our legal and regulatory obligations.

Our website and computer systems are equipped with security measures to prevent the loss, misuse, or alteration of the information you provide. In addition, we have established procedures to respond to any suspected personal data breach and will notify you, as well as any relevant regulator, where legally required.

If you become aware of any actual or potential misuse of your information, please contact us immediately at [email protected].

For guidance on protecting your information, devices, and computers against fraud, identity theft, viruses, and other online risks, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Direct marketing

You will receive marketing communication from us if you subscribe to our newsletter8. You can opt out of receiving marketing communication from us at any time by contacting us using the details provided under contact information section.

Data retention

We keep your personal data only for as long as reasonably necessary for the purpose for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.

Your legal rights

You have the following rights in relation to your data…

Right to access (Subject Access Request) – to a copy of your personal data and information about its processing. You will not have to pay a fee to access your data unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request.
Right to correct – the right to have your Data rectified if it is inaccurate or incomplete.
Right to erase – the right to request that we delete or remove your Data from our systems.
Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it.
Right to data portability – the right to request that we move, copy or transfer your Data.
Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.

To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: [email protected].

If you are not satisfied with the way a complaint you make in relation to your Data is managed by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.

It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

CONTACT INFORMATION

If you have any questions about this Privacy Notice or about the use of your personal data. You may contact us in the following ways:

Email: [email protected]

Telephone: +44 2031 504 702

Updates to this privacy notice

We may update this Privacy Notice from time to time, for example, because of changes to law, technologies, or other developments. We encourage you to review this Privacy Notice periodically so that you will be aware of our current privacy practices.

This notice was last updated on 30^th September 2025.