This demo is not mobile optimised, please browse on desktop.

Best,
Odin IR team
We have initiateed a new stock emission. Read more here

Privacy & Cookie Policy

Last updated: February 2026

1. Introduction

SFL Corporation Ltd. ("SFL", "we", "us", or "our"), a Bermudian limited liability company headquartered at Par-la-Ville Place, 14 Par-la-Ville Road, Hamilton HM 08, Bermuda, is committed to protecting the privacy of visitors to our website www.sflcorp.com (the "Website").

This Privacy & Cookie Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Website, subscribe to our investor relations communications, or otherwise interact with us. It also describes the cookies and similar technologies we use on the Website and your choices regarding these technologies.

SFL is an international ship-owning and chartering company listed on the New York Stock Exchange (NYSE: SFL). We operate across multiple jurisdictions including Bermuda, Norway, the United Kingdom, Singapore, Cyprus, and other countries. This policy applies to all data processing activities relating to our Website, regardless of where you access it from.

2. Data Controller

The data controller responsible for the processing of your personal data is:

SFL Corporation Ltd.
Par-la-Ville Place, 14 Par-la-Ville Road
PO Box HM 1593
Hamilton HM 08, Bermuda
Phone: +1 441 295 9500
Investor Relations Email: ir@sflcorp.com

Our management services are provided by SFL Management AS, Bryggegata 3, P.O. Box 1327 Vika, 0112 Oslo, Norway (Phone: +47 23 11 40 00). For data protection inquiries related to visitors in the European Economic Area (EEA) or United Kingdom, you may also contact SFL Management AS or SFL UK Management Ltd at the addresses listed on our Contact page.

3. Personal Data We Collect

3.1 Information You Provide to Us

We may collect personal data that you voluntarily provide when you interact with our Website, including:

  • Contact form submissions: name, email address, phone number, company name, and message content when you use the contact form on our Website.
  • Investor relations inquiries: name, email address, and any details you provide when contacting our investor relations team.
  • Email alert subscriptions: email address when you subscribe to receive press releases, financial reports, or other investor communications.
  • Webcast registrations: name, email address, and company affiliation when you register for quarterly earnings webcasts or other events.

3.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies and similar technologies:

  • Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
  • Usage data: pages viewed, time spent on pages, click-through data, referring URL, and navigation paths.
  • Location data: approximate geographic location based on your IP address.
  • Cookie and tracking data: information collected through cookies, web beacons, and similar technologies as described in Section 8 of this policy.

4. How We Use Your Personal Data

We process your personal data for the following purposes:

  • Responding to inquiries: To process and respond to your contact form submissions and investor relations questions.
  • Investor communications: To send you press releases, financial reports, dividend announcements, and other investor-related communications you have subscribed to.
  • Website operation and improvement: To ensure the proper functioning, security, and performance of our Website, and to analyze usage patterns to improve user experience.
  • Compliance with legal obligations: To comply with applicable laws, regulations, and reporting requirements, including those of the U.S. Securities and Exchange Commission (SEC) and the NYSE.
  • Security and fraud prevention: To detect, prevent, and address technical issues, security threats, and fraudulent activity.

5. Legal Basis for Processing

If you are located in the EEA, the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following grounds:

  • Consent: Where you have given us explicit consent for specific processing activities, such as subscribing to email alerts or accepting non-essential cookies.
  • Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our Website, analyzing visitor behavior, and managing investor relations, provided these interests do not override your fundamental rights and freedoms.
  • Legal obligation: Where processing is required to comply with applicable laws and regulations.
  • Performance of a contract: Where processing is necessary to fulfill a contractual obligation with you.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your personal data with the following categories of recipients:

  • Affiliated companies: SFL Management AS (Norway), SFL UK Management Ltd (United Kingdom), SFL Management (Singapore) Pte. Ltd., and LH Rig Management (Cyprus) for operational and administrative purposes.
  • Service providers: Third-party vendors who provide website hosting, analytics, email distribution, investor relations platform services, and IT support on our behalf. These providers are contractually obligated to protect your data and use it only as directed.
  • Transfer agent: Computershare, our share transfer agent, for shareholder-related communications and services.
  • Regulatory and legal authorities: Government bodies, law enforcement agencies, regulatory authorities (including the SEC), or courts when required by law or to protect our legal rights.
  • Professional advisors: Auditors, legal counsel, and financial advisors who are bound by professional obligations of confidentiality.

7. International Data Transfers

As a global maritime company with operations and offices in Bermuda, Norway, the United Kingdom, Singapore, Cyprus, and other jurisdictions, your personal data may be transferred to and processed in countries outside of your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

When we transfer personal data from the EEA or the United Kingdom to countries that have not been deemed to provide an adequate level of protection, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or rely on other legally recognized transfer mechanisms to ensure your data is protected in accordance with this policy and applicable law.

8. Cookies and Similar Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the website recognize your device and store certain information about your preferences or past actions. We use cookies and similar technologies (such as web beacons and pixel tags) to enhance your experience on our Website.

8.2 Types of Cookies We Use

Strictly Necessary Cookies
These cookies are essential for the Website to function properly. They enable basic features such as page navigation, secure access, and cookie consent management. These cookies do not collect personally identifiable information and cannot be disabled without affecting the functionality of the Website.

Analytical / Performance Cookies
We use analytics cookies, including Google Analytics, to collect anonymized information about how visitors use our Website. This helps us understand which pages are most popular, how visitors navigate between pages, and whether visitors encounter any errors. The information collected is aggregated and used to improve the Website's performance and user experience. These cookies may transfer data to servers in the United States.

Functional Cookies
Functional cookies allow the Website to remember choices you have made, such as your language preference or region, and to provide enhanced, more personalized features. These cookies may also be used to provide services you have requested, such as watching a video or accessing our webcasts.

Marketing / Targeting Cookies
We may use marketing cookies to deliver relevant advertisements and to track the effectiveness of our communications. These cookies may be set through our Website by our advertising partners to build a profile of your interests and show you relevant content on other websites. If you do not allow these cookies, you will experience less targeted advertising.

8.3 Third-Party Cookies

Some cookies on our Website are placed by third-party services that appear on our pages. These third parties may include:

  • Google Analytics: For website usage analysis and reporting. Google's privacy policy is available at policies.google.com/privacy.
  • Video hosting platforms: For embedded webcast and video content (e.g., quarterly earnings presentations).
  • Social media platforms: If we embed social media sharing features or content feeds (e.g., LinkedIn).
  • Newsletter and distribution services: For managing email subscriptions and delivering investor communications.

8.4 Managing Your Cookie Preferences

When you first visit our Website, you will be presented with a cookie consent banner that allows you to accept or customize your cookie preferences. You can choose to accept all cookies, reject non-essential cookies, or customize your settings by category.

You can change your cookie preferences at any time by:

  • Clicking the cookie settings link in the footer of our Website.
  • Adjusting your browser settings to block or delete cookies. Note that blocking all cookies may affect the functionality of the Website.
  • Using browser plug-ins or extensions designed to manage cookie preferences.
  • Opting out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

8.5 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to be tracked. There is currently no uniform standard for handling DNT signals. Our Website does not currently respond to DNT signals, but we honor your cookie consent choices as described above.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Specific retention periods include:

  • Contact form submissions: Retained for up to 2 years after your last interaction with us, unless a longer period is required for legal or regulatory purposes.
  • Email subscriptions: Retained until you unsubscribe or request removal.
  • Website analytics data: Aggregated and anonymized data may be retained indefinitely. Identifiable data collected through cookies is retained in accordance with the cookie lifespan settings described in Section 8.
  • Regulatory records: Retained as required by applicable securities laws and regulations, including SEC requirements.

10. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request that we correct inaccurate or incomplete personal data.
  • Right to erasure: You may request that we delete your personal data, subject to certain legal exceptions.
  • Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object: You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at ir@sflcorp.com or at the addresses listed in Section 2 above. We will respond to your request within the timeframe required by applicable law.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), access controls, regular security assessments, and employee training on data protection.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

12. Children's Privacy

Our Website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at ir@sflcorp.com.

13. Third-Party Links

Our Website may contain links to third-party websites, including the New York Stock Exchange, the U.S. Securities and Exchange Commission (SEC), financial data providers, and social media platforms. This Privacy & Cookie Policy does not apply to those external websites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through a prominent notice on our Website.

We encourage you to review this policy periodically to stay informed about how we protect your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy & Cookie Policy or our data processing practices, please contact us:

SFL Management AS
Bryggegata 3, P.O. Box 1327 Vika
0112 Oslo, Norway
Phone: +47 23 11 40 00

SFL Corporation Ltd.
Par-la-Ville Place, 14 Par-la-Ville Road
PO Box HM 1593, Hamilton HM 08, Bermuda
Phone: +1 441 295 9500
Email: ir@sflcorp.com

SFL UK Management Ltd
10 Eastcheap, 4th Floor
London EC3M 1AJ, United Kingdom
Phone: +44 20 75 43 66 85

© 2026 SFL Corporation Ltd. All rights reserved.