Effective Date: 12 August 2026
Table of Contents
Introduction
Data Protection Officer
Our EU representative
How we collect and use (process) your personal information
Use of the nolana.com website
Cookies and tracking technologies
Use of the Nolana services
When and how we share information with third parties
Transferring personal data to the U.S.
Data Subject rights
Security of your information
Data storage and retention
Questions, concerns, or complaints
Introduction
Nolana Limited is an agentic AI platform for insurance operations. Our AI agents help insurers, MGAs, and brokers — including Lloyd’s and London market participants — automate claims workflows end to end, from first notice of loss (FNOL) intake and triage, through claims document processing, to claims lifecycle management.
We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Notice describes the Nolana’s policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies.
Data Protection Officer
Nolana is headquartered in Leroy House, Unit G01, 436 Essex Rd, London N1 3QP, in the United Kingdom. Nolana has appointed an internal data protection officer for you to contact if you have any questions or concerns about Nolana’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to Nolana’s data protection officer.
Nolana’s data protection officer’s name and contact information are as follows:
Itay Aaron Quin Zamkow
Nolana Limited
Leroy House, Unit G01, 436 Essex Rd, London N1 3QP
Our EU representative:
Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is :
Instant EU GDPR Representative Ltd.
Adam Brogden
contact@gdprlocal.com
Tel +35315549700
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2, 12A Lower Main Street, Lucan Co. Dublin
K78 X5P8
How we collect and use (process) your personal information
Nolana collects personal information about its website visitors and customers. With a few exceptions, this information is generally limited to:
Name
Email
We use this information to provide prospects and customers with services.
We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.
From time to time, Nolana receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third party website (e.g. LinkedIn)
Use of Nolana Website
As is true of most other websites, Nolana’s website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Nolana’s website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.
Nolana has a legitimate interest in understanding how members, customers and potential customers use its website. This assists Nolana with providing more relevant products and services, with communicating value to our sponsors and corporate members, and with providing appropriate staffing to meet member and customer needs.
Cookies and tracking technologies
Nolana makes available a comprehensive cookie notice that describes the cookies and tracking technologies used on Nolana website and provides information on how users can accept or reject them. The cookie notice is available on our website.
Use of the Nolana services
When you use Nolana’s services, we collect and process personal data as necessary to deliver our core features: AI-powered claims intake and triage (first notice of loss), claims document processing, and claims lifecycle management for insurance carriers, MGAs, and brokers. In providing these services, we process information contained in claims submissions and related communications received through channels such as email, web forms, voice, live chat, and call centres. This may include the names and contact details of claimants, policyholders, brokers, coverholders, and other parties to a claim; policy numbers and policy information; and the contents of claim documents and correspondence submitted in connection with a claim. Depending on the class of business, claim files may contain sensitive (special category) personal data, such as health information in bodily injury or travel claims. We process this information on behalf of and under the instructions of our insurance customers, who act as data controllers, and only as necessary to provide our services. We may also infer approximate geolocation from IP addresses for security and service-delivery purposes. All data is handled in accordance with applicable data protection laws and is accessible only to authorized users. Individuals may contact us at privacy@nolana.ai to request access to, correction of, or deletion of their personal data.
Sharing information with third parties
The personal information Nolana collects from you is stored in one or more databases hosted by third parties located in the United States. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval. On occasion, Nolana engages third parties to send information to you, including information about our products, services, and events.
A list of our third party sub processors can be found here: OpenAI, Google, Posthog, AWS, Anthropic, Fireworks AI, ElevenLabs, and other comparable infrastructure or AI providers.
We do not otherwise reveal your personal data to non-Nolana persons or businesses for their independent use unless: (1) you request or authorize it; (2) it’s in connection with Nolana-hosted and Nolana co-sponsored conferences as described above; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.
The Nolana website connects with third party services such as LinkedIn and others. If you choose to share information from the Nolana website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.
Transferring personal data to the U.S.
Nolana is headquartered in the United Kingdom and operates an office in the United States. Some of the personal data we collect is processed in the United States by us and by our service providers. By using Nolana’s services, you acknowledge that your personal information may be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, Nolana is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved.
Depending on the circumstance, Nolana also collects and transfers to the U.S. personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Nolana in a manner that does not outweigh your rights and freedoms. Nolana endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Nolana and the practices described in this Privacy Statement. Nolana also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, Nolana has received zero government requests for information.
For more information or if you have any questions, please contact us at privacy@Nolana.com
Data Subject Rights
The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:
Right to be informed
Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right of data portability
Right to object
Rights related to automated decision making including profiling
