"We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy. We may disclose your personal information to any member of our group of companies this means our subsidiaries, our ultimate holding company and all its subsidiaries insofar as reasonably necessary for the purposes set out in this policy."
Personal information can be shared with a broad and undefined set of entities including all subsidiaries, agents, suppliers, and subcontractors, with only a vague 'reasonably necessary' limitation.