We value your privacy. Our policy is to protect the confidentiality of the individually identifiable information that we collect, and to limit access to that information only to those with a need to know. This privacy statement addresses our privacy practices including the collection and use of personal information in offline, online and mobile environments. Specific information regarding online and mobile privacy provisions may also be found in this privacy statement.
Collection and Use of Personal Information
We may collect the following categories of personal information for the purposes identified below. Please note that the examples are not an exhaustive list and may fall into multiple categories. Categories and specific pieces of information collected may vary depending on the nature of your relationship with us.
Category |
Purpose of Use |
What may be included in this category |
Some examples |
Internal |
Authenticate your identity; create, maintain and secure your account with us; maintain your preferences. |
Knowledge and Belief,
Authenticating,
Preference |
Passwords, PIN, mother’s maiden name, individual
interests |
Historical |
Complete a transaction or provide a service for which the personal information was collected; conduct analytics and modeling. |
Personal history |
Past claims, prior insurance carriers, prior addresses, medical history, criminal history |
Financial |
Process your billing; make payments; complete a transaction or provide a service for which the personal information was collected. |
Account, Ownership, Transactional, Credit |
Credit card number, bank account, records of real or personal property, credit, income, loan records, taxes |
External |
Identify information to verify you; complete a transaction or provide a service for which the personal information was collected; deliver product offerings that may be relevant to you; conduct analytics. |
Gender, Demographic,
Physical Characteristics |
Name, username, government issued identification, social security number, gender, browsing behavior, age range, income bracket, physical and mental health, medical records |
Social |
Establish your communication preferences; complete a transaction or provide a service for which the personal information was collected; |
Email address and phone number |
|
|
process your policy, account or claim. |
|
|
Tracking |
Contact you; provide relevant information; provide a location-based product or service requested by you; conduct analytics. |
Computer or Mobile
Device, Contact, Location |
IP Address, geolocation, email address, physical address, telephone number, country |
We Do Not Sell Your Personal Information
Under the California Consumer Privacy Act (“CCPA”), the sale of your personal information means the sharing of your personal information with certain third parties. Under CCPA, consumers have the right to direct a business that sells personal information about the consumer to third parties not to sell the consumer’s personal information. We do not share your personal information in a manner that would be considered a sale under CCPA. We only disclose your personal information in a manner consistent with applicable federal law or to our service providers pursuant to contracts that prohibit the service provider from using your personal information for any purpose other than those services specified in the contract.
Sources of Personal Information
We obtain categories of personal information from these categories of sources as follows:
Source |
Description of Source |
Categories Collected from Source |
Directly from you |
We collect personal information when you provide it to us in a request for a quote, claim, or policy on any of our website(s) or mobile applications or through interactions with an agent or our call center. |
Internal, Historical, External, Financial, Social |
Indirectly from you |
We may collect personal information including, but not limited to geolocation and driving data (when using mobile applications), IP address, cookies and device ID when you visit our website(s), interact with our online advertisements or use our mobile application(s). |
Tracking |
Provided by third-party service providers |
We may collect personal information from our third-party service providers. |
Historical, External, Financial, Social |
Sharing Personal Information
In accordance with CCPA, we may disclose your personal information, for a business purpose, to a third-party service provider. When we disclose personal information to a service provider for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
We share your personal information with the following categories of third parties:
- Government entities
- Insurance support organizations
In addition to sharing your personal information with third-party service providers, we may share your information as permitted by applicable federal law as described in our customer privacy notices.
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Access/Right to Know
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. You may request to know only the categories of personal information or the specific pieces of personal information we collected about you. Once we receive and confirm your verifiable consumer request we will disclose to you (as applicable to your request):
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The specific pieces of personal information we collected about you.
You may only make a verifiable consumer request for access twice within a 12-month period.
Right to Request Deletion
You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
Exercising Access and Deletion Rights
To exercise the access or deletion rights described above, a verifiable consumer request can be made to us by calling (415) 898-4370 Monday to Friday from 8 a.m. to 5 p.m. Pacific Time The representative will collect information from you for verification and to initiate your request.
Additional information will be required for verification purposes. The specific elements may vary depending on the nature of your relationship with us but will begin with name, address, phone number and date of birth. These elements will be matched with data in our systems. Only you, or an authorized agent, may make a request related to your personal information.
If we are unable to verify you based on the information you have provided and the information in our systems, we will advise you that we cannot complete your request based on an inability to verify you.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail.
Disclosures we provide may only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.
Contact for More Information
If you have additional questions related to our privacy policies and practices, please contact us at (415) 898-4370.
Security
Our policy is to restrict access to nonpublic personal information about you only to those employees who need to know that information to provide products or services to you or to provide necessary technical support. We require the employees with access to your nonpublic personal information, including your social security numbers, to use safeguards against unauthorized access, use and unlawful disclosure. We require our employees to adhere to high standards of ethics and integrity in performing their jobs and conducting business. We also require the same standards of confidentiality from the service vendors that assist us. We may use encryption (data scrambling) on some or all public portions of our websites and up to 2048-bit encryption on other portions—typically, where you can enter personally identifiable information. When you are on any website that asks you for confidential information, you should check to see if the information being transmitted is encrypted in order to increase the security of your information.
Push Notifications
You can choose whether or not to receive push notifications from us. If you subsequently change your mind, you can contact us on (415) 898-4370 to modify your preferences.
Children and Minors
We make no active effort to collect personal information from children and do not wish to receive any such information. If we learn that we have collected the personal information of a child under 18, we will take steps to delete the information as soon as possible.
Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our websites and in our mobile applications and update the notice’s effective date.
Your continued use of our website(s) following the posting of changes constitutes your acceptance of such changes.
Effective Date: January, 1, 2020