U.S. State Privacy Rights Notice
This Notice supplements our Privacy Policy and applies to residents of states with comprehensive consumer privacy laws, including those listed below. It also serves as our California Notice at Collection. Terms such as “personal information,” “sale,” “sharing,” and “targeted advertising” have the meanings given in the applicable state law.
Do Not Sell or Share My Personal Information / Opt out of targeted advertising
We do not sell personal information for money. However, we allow advertising partners such as Google to collect identifiers and browsing activity on the Site through cookies and pixels to measure ads and show relevant advertising. Some state laws treat this as a “sale,” “sharing,” or “targeted advertising.” You can opt out at any time:
- Automatically: Turn on Global Privacy Control in a supporting browser or extension. The Site detects the signal and turns off advertising cookies for that browser.
- By email: Send “Do Not Sell or Share” to [PRIVACY EMAIL].
- By phone: [TOLL-FREE PRIVACY PHONE].
Because we don’t ask for your name or email on this Site, a browser-based opt-out (GPC or cookie controls) is the most effective way to stop advertising cookies. Email and phone requests let us suppress the phone number you provide from our call records and partner reporting.
1. Laws covered
| State | Law |
|---|---|
| California | CCPA, as amended by the CPRA |
| Colorado | Colorado Privacy Act |
| Connecticut | Connecticut Data Privacy Act |
| Delaware | Delaware Personal Data Privacy Act |
| Florida | Florida Digital Bill of Rights (where applicable) |
| Indiana | Indiana Consumer Data Protection Act |
| Iowa | Iowa Consumer Data Protection Act |
| Kentucky | Kentucky Consumer Data Protection Act |
| Maryland | Maryland Online Data Privacy Act |
| Minnesota | Minnesota Consumer Data Privacy Act |
| Montana | Montana Consumer Data Privacy Act |
| Nebraska | Nebraska Data Privacy Act |
| New Hampshire | New Hampshire privacy law (RSA 507-H) |
| New Jersey | New Jersey Data Privacy Act |
| Oregon | Oregon Consumer Privacy Act |
| Rhode Island | Rhode Island Data Transparency and Privacy Protection Act |
| Tennessee | Tennessee Information Protection Act |
| Texas | Texas Data Privacy and Security Act |
| Utah | Utah Consumer Privacy Act |
| Virginia | Virginia Consumer Data Protection Act |
We will extend these rights to residents of other states as their laws take effect, and may honor requests from residents of other states at our discretion.
2. Personal information we collect and why
In the past 12 months we have collected the following categories of personal information. We do not collect sensitive personal information as defined by state law, and we do not use personal information to make decisions that produce legal or similarly significant effects.
| Category | Examples | Sources | Purposes | Disclosed to |
|---|---|---|---|---|
| Identifiers | IP address, cookie and device IDs, ad click IDs, phone number and caller ID | You, your device, our call provider | Call routing, analytics, ad measurement, billing, fraud prevention | Service providers, participating insurers and agencies, advertising partners* |
| Internet or network activity | Pages viewed, clicks, referring site, ad or keyword that brought you here | Your device | Analytics, ad measurement, Site improvement | Service providers, advertising partners* |
| Geolocation (approximate) | City, state, or ZIP inferred from IP address or area code | Your device, call provider | Routing to carriers licensed in your state, analytics | Service providers, participating insurers and agencies |
| Audio and electronic information | Call recordings and transcripts | Phone calls you place | Quality, training, verification, compliance | Service providers, participating insurers and agencies |
| Commercial information | Business and vehicle details you share on a call | You, during the call | Helping you get a quote | Participating insurers and agencies |
| Inferences | Interest in commercial auto insurance | Derived from Site activity | Ad measurement and, unless you opt out, advertising | Advertising partners* |
* Disclosures to advertising partners may be a “sale,” “sharing,” or “targeted advertising” under state law. You can opt out as described above. We have no actual knowledge of selling or sharing personal information of consumers under 16.
Retention. We keep website analytics data for up to 14 months and call logs and recordings for up to 24 months, unless a longer period is required by law or needed to resolve a dispute.
3. Your rights
Depending on your state, you may have the right to:
- Know and access the personal information we have about you, including the categories, sources, purposes, and the third parties we disclose it to (and, in some states, a list of specific third parties).
- Obtain a copy of your personal information in a portable format.
- Correct inaccurate personal information.
- Delete personal information we collected from or about you, subject to legal exceptions.
- Opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of significant decisions.
- Limit the use of sensitive personal information (we don’t collect it).
- Not be discriminated against for exercising your rights. We will not deny service or charge different prices because you exercise them.
4. How to make a request
- Email: [PRIVACY EMAIL]
- Toll-free: [TOLL-FREE PRIVACY PHONE]
- Mail: [COMPANY LEGAL NAME], Attn: Privacy, [MAILING ADDRESS]
Verification. Because we don’t collect names or emails, we verify requests by matching information you provide, usually the phone number you called from and the approximate date of the call, against our records. We will not ask for more information than needed. Opt-out requests do not require verification.
Authorized agents. You may use an authorized agent to submit a request. We may ask for written permission signed by you and may ask you to verify your identity directly.
Timing. We will confirm receipt within 10 business days where required and respond within 45 days. If we need more time (up to another 45 days, where allowed), we will tell you why.
5. Appeals
If we decline your request, you may appeal by emailing [PRIVACY EMAIL] with the subject “Privacy Request Appeal” within 45 days of our decision. We will respond within the time your state requires (generally 45 to 60 days). If you disagree with the result of your appeal, you may contact your state Attorney General.
6. California-specific disclosures
Shine the Light. California residents may request, once per year, information about personal information we disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. Requests can be sent to the contacts above.
Metrics. If we are required to publish annual request metrics, we will post them here.
7. Nevada
Nevada residents may submit a request directing us not to sell covered information as defined by Nevada law. We do not currently sell covered information under that definition, but you may still submit a request to the contacts above.