Privacy and Cookies Policy

Effective Date/Last Updated: August 18, 2023

Purpose Insurance Agency, LLC ("we," "our," or "us") owns and operates this website and other websites ("Site" or "Sites"), where we provide you with a quick and simple way to connect you with one of our licensed insurance agents ("Licensed Insurance Agents"), or a downline agent, Related Party call center, Medicare Supplement provider, and/or ACA insurer (collectively, "Approved Recipients"), who can help you find the insurance product ("Insurance Product") that's right for you (the "Services"). We provide the following Privacy Policy ("Privacy Policy" or "Policy"), which describes how we collect, use, disclose, and share or sell information that is personally identifiable to a user ("Information") when you visit the Sites or otherwise engage with us or the Services. This Privacy Policy also discusses consumers' data privacy rights under applicable U.S. state laws, including the California Consumer Privacy Act ("CCPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Virginia Consumer Data Protection Act ("VCDPA"), and the Utah Consumer Privacy Act ("UCPA") and how to exercise those rights. California Consumers: Click here to read the California Notice at Collection within this Privacy Policy. Capitalized terms used but not defined herein shall have the same meaning as in the Site's Terms & Conditions, which are fully incorporated herein by reference.

ACCEPTANCE OF PRIVACY POLICY

By accessing and using one of our Sites, you signify your acceptance of this Privacy Policy and your agreement to the collection, use, disclosure, and sharing or sale of your Information as described herein. If you do not intend to agree to the terms of this Privacy Policy, DO NOT use the Sites.

PRIVACY POLICY UPDATES

This Privacy Policy is subject to change from time to time. Your continued use of the Site following the posting of changes to this Policy will confirm your acceptance of all changes made, except for changes that expand the use of your Information. If we expand or alter the Information we collect or how we use it, we will notify users by: (a) sending the modified Policy to our users via email; or (b) any other reasonable means acceptable under applicable state and federal law. We encourage you to review this Policy frequently to be informed of how we are using and protecting your Information.

FOR U.S. RESIDENTS ONLY

Please note if you are not a U.S. resident, you are not permitted to use the Sites and/or otherwise access any other Services.

CATEGORIES OF INFORMATION WE COLLECT

We may collect the following categories of Information:

• Identifiers (such as real name, alias, postal address, email and/or IP addresses, telephone numbers, contact preferences and birth date);
• Personal information (such as the Identifiers listed above, gender, financial information, medical and health information, and insurance-related information, including whether users are currently on Medicare or Medicaid);
• Protected classification characteristics under state or federal law (which, depending on the state in which the user resides, can include race, religious creed, color, national origin, ancestry, age, marital status, medical condition, physical or mental disability, sex, gender, gender identity, gender expression, sexual orientation, and military and veteran status);
• Commercial information (including preferences, products or services purchased, obtained, or considered, or other purchasing data (e.g., monthly income (within ranges) and payment information));
• Internet or similar network activity (such as browsing and search history and information about a consumer's interaction with a website, application, or advertisement) and information made available via Internet activity (such as users' device types, operating systems, Internet service provider and/or mobile carrier, user agent data, referring URLs, IP addresses, language preferences, browser characteristics, device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings);
• Information related to a user's consent to receive telemarketing calls, SMS messaging, push notifications, commercial email, and other forms of communication (which may include the creation of a report and session recordation of a user interacting with page(s) that seek to obtain a user's prior express written consent" (as defined in the Telephone Consumer Protection Act ("TCPA")) ("TCPA Consent") to receive telemarketing and text messages from us and the Approved Recipients;
• Inferences drawn from other categories of Information (for example, a profile reflecting a person's preferences, characteristics, psychological trends, and attitudes); and
• Sensitive personal information (Some of the Information in the categories above may constitute sensitive personal information, as defined under certain data protection laws. See the U.S. State Law Rights and Disclosures section below to learn about your rights concerning such Information.).

Note that sharing your Information with us is optional. You can still access information related to Insurance Products without disclosing your Information on our Website by calling the toll-free number provided and speaking with a licensed insurance agent. Please be advised that the Approved Recipients may request Information from you to help complete the application process.

HOW WE COLLECT INFORMATION

We may collect Information from the following sources:

• Directly from users who voluntarily provide information via registration forms, responses to insurance-related surveys or multiple-choice questions, communications (including, with consent, business and commercial emails, telephone calls, USPS mail, and other contacts received from users);
• From publicly availably sources, such as Internet search engines and social media platforms;
• Via our hosting servers, which collect Information from users through various technological means when users access and interact with the Site;
• From our service providers who assist us in hosting the Sites and providing customer support;
• From parties under our common control (which includes our parent, subsidiaries, and other entities under common control with us - collectively "Related Parties");
• From Approved Recipients that we share or sell Information to, if you provide your consent, who may (a) send emails, push notifications, or SMS messages or make telemarketing calls to users who provided the appropriate consent; (b) drive users to our Sites; and/or (c) advertise goods and services on the Sites;
• From cookies (small text files placed on a user's browser by a website such as the Site that track online behavior), web beacons (single-pixel GIF image files), and other technological means (collectively, "Cookies"); and
• By combining Information, collected from various sources listed above, to augment and verify Information and to improve the overall quality of our Services.

HOW WE MAY USE INFORMATION

We may use Information in the following ways:

• For the purpose of providing you with information about Insurance Products and our Services, including sending email, direct mail, text/SMS message alerts, telemarketing messages, and other communications that users have requested or consented to receive or that we are required to send concerning users' registrations;
• For Site operations, content improvements, testing, research, analysis, and product development;
• To verify whether users are entitled/eligible to enroll in buy Insurance Products;
• To provide users with customer service and respond to customer inquiries;
• To carry out our obligations and enforce our rights arising from any contracts entered into between users and us, including for purposes of our Arbitration Agreement, and any inquiry specific to express written consent under the Telemarketing Sales Rule ("TSR") and/or the TCPA;
• To detect, investigate, and respond to any fraudulent or malicious activity or any other activity we determine is or may be a violation of our Terms & Conditions, this Policy, or existing laws, rules, and regulations;
• As necessary or appropriate to protect the rights, property, and/or safety of us, our service providers, the Related Parties, and/or the Approved Recipients with whom we have a contractual relationship for commercial or business purposes;
• To maintain suppression or opt-out lists so that we won't contact users who have asked not to be contacted;
• To augment Information by enhancing it with other data sources provided by the Approved Recipients and our service providers to enable us to gain deeper insights into our users; and
• To respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims, or when we determine it is necessary to comply with applicable laws and/or regulations.

HOW WE SHARE AND/OR SELL INFORMATION

We will only sell Information with Approved Recipients in connection with the Services, including the delivery of email messaging, telemarketing calls, text/SMS messaging, and push notifications, if we have obtained TCPA Consent from such users to be contacted by telephone or text/SMS messaging and push notifications.

We may share Information in the following ways:

• With Approved Recipients in connection with the Services, including the delivery of email messaging, telemarketing calls, text/SMS messaging, and push notifications, provided that we have obtained TCPA Consent from such users to be contacted by telephone or text/SMS messaging and push notifications;
• With our Related Parties to augment and verify the Information we collect and to develop and enhance their products and services;
• With one or more service providers who provide independent verification of consent, including verification of consent for purposes of the TSR and TCPA;
• To enable our customer service vendors to perform their respective tasks, including for the provision of the Services;
• To enable our Information verification and fraud detection service providers to perform contracted-for services; and
• To submit users' contact information to comment and petition campaigns run by governmental agencies, elected officials, or other parties where users have provided their express consent to endorse and be a part of the campaign including, in some instances, appending the user contact information with specific comment language.

You do not have to consent to the sale or sharing of your Information in order to use the Services. See below on how you can withdraw your consent at any time. When we share and/or sell Information, we enter into agreements that describe the purpose for which the Information is shared/sold, restrict its use to the agreement's specified purpose, and require that all Information remain confidential and be protected from unauthorized disclosure.

We may also share Information with applicable third parties as necessary if we become the subject of bankruptcy proceedings, or in connection with the sale, assignment, merger, or other transfer of all or a portion of our business. If we are involved in these types of transactions, we will notify users via email and via a Privacy Policy update on the Site regarding any material details pertaining to Information.

MINORS

The Sites are designed to comply with the Children's Online Privacy Protection Act ("COPPA") and other laws protecting children's privacy. In compliance with COPPA, we do not knowingly solicit, collect, or retain Information from children less than the age of 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you are a parent or guardian of a child under 18 years of age and you think your child has given us Information, you can email us at support@policysavings.com. In compliance with the CCPA, we do not knowingly sell or share Information of users under the age of 18 for any commercial purpose.

COOKIES, INTEREST-BASED ADVERTISING, AND THIRD-PARTY ANALYTICS

Our Site uses Cookies to determine whether users have previously visited the Site and to streamline the registration process so, for example, users don't have to re-enter their basic registration information when they return to the Site. We may also use Cookies to enhance a user's experience while on the Site. Some of the Approved Recipients may place Cookies on the Site to track users' online behavior while on the Site and after they leave the Site. These third-party Cookies may enable the delivery of interest-based advertisements (to find out more about Cookies, visit https://www.networkadvertising.org/understanding-online-advertising/glossary/) based on a user's visit to the Site and/or other websites. In addition, the Approved Recipients may use Information gathered in this manner to recognize users across different channels and platforms, including computers, mobile devices, and Smart TVs. Approved Recipients may use this information over time for advertising, analytics, attribution, and reporting purposes.

We may use Google Analytics and similar tools provided by our third-party partners to help analyze how users interact with the Site and to display customized ads and other content to our users during a current browsing session or in the future when the user is online. These analytics are performed by using the technological means described above to monitor a user's interactions with the Site and do not involve the collection of any additional Information.

Most browsers are initially set up to accept Cookies, but users can reset their Internet browsers to refuse all Cookies or to indicate when a Cookie is being sent or to refuse online tracking. To disable and reject certain Cookies, follow the instructions associated with your Internet browser. In general, when a "do-not-track" setting is active, the user's browser notifies other websites that the user does not want their Information and online behavior to be tracked and used, for example, for interest-based advertising. As required under some state laws, we are required to inform users that, as is the case with most websites, we generally do not honor or alter our behavior when a user to one of the Sites has activated the "do-not-track" setting on their browser. The exception to this is in the case of California consumers, where, in compliance with the CCPA, we will honor any opt-out preference signals they set on applicable browsers.

Even where you reject a Cookie, you may still use the Site, but your ability to use certain features or offerings may be impaired. For example, if you return to the Site, you may have to re-enter Information you previously supplied to us. We may retain Cookie data indefinitely.

Users may opt-out from interest-based advertising delivered to their web browser by companies who have elected to participate in one of the interest-based advertising opt-out mechanisms such as the Digital Adverting Alliance's opt-out program located here or the National Advertising Institute's opt-out program located here. Users may also choose to opt-out of interest-based advertising on their mobile devices. For more information, please click here. Please note that opting out of interest-based advertising does not mean you will no longer see advertising online. Rather, it means that the company or companies from which you opt-out will no longer show ads that have been tailored to your interests.

OPTING-OUT FROM MARKETING

Users may opt-out from receiving future contact from us via the following ways:

• Email Opt-Out. To opt-out from email marketing click the "Unsubscribe" link on the bottom of every page on the Site or click here.
• TCPA Consent Opt-Out. Providing TCPA Consent is not required to participate in some Services. You may continue to use all other aspects of the Site, regardless of whether you elect to provide TCPA Consent. Users who elected to provide TCPA Consent but later wish to revoke it can opt out from future telemarketing calls by following prompts to stop individual telemarketing calls on recorded calls, by informing calling parties that they wish to be placed on their do not call list, or by contacting, as appropriate, the Approved Recipients or our customer service team here. The Terms of Use also contain guidance for opting out from telemarketing;
• SMS/Text Messaging Opt-Out. To revoke consent for, or opt-out from, SMS/text messaging, reply STOP to text/SMS messages received or contact customer service here;
• Push Notification Opt-Out. To opt-out of browser-based push notifications, disable the notifications at the time you receive the notification or disable notifications through your browser's settings; and
• Targeting Advertising Opt-Out. To-opt out of Cookies, interest-based advertising and/or third-party analytics, see the section above. California consumers may also set an opt-out preference signal on applicable browsers.

OPTING OUT OF SHARING/SALE OF INFORMATION

You may opt-out of the sale or sharing of your Information at any time. To opt-out of the sharing/sale of your Information click on the "Do Not Sell My Personal Info" link on the bottom of the Site page(s) that you have visited and/or provided Information to and complete the form. You can also send an email to support@policysavings.com, stating that you want to opt-out of the sale and sharing of your Information. We do not require a verification process to opt-out, but we reserve the right to confirm this request by sending you an email containing a final "Do Not Sell My Personal Info" link and requesting that you respond to the email. Please note that it may take us several days to process an opt-out request. In compliance with the CCPA, we will honor any opt-out preference signals California consumers set on their applicable browsers.

ACCESSING, CORRECTING, AND DELETING YOUR INFORMATION

Users who provide Information to us may contact us here to correct their Information, request their Information be deleted, and/or access what Information we have collected, processed, and shared/sold. We will respond to user requests within forty-five (45) days. If you request deletion of your Information, please note that your Information will be suppressed from further use as described in this Policy. However, please remember that if we have already shared your Information with the Approved Recipients, you will need to contact those Approved Recipients individually to have them suppress or delete your Information. Note that we may retain and use your Information as necessary to comply with our policies including legal obligations, dispute resolution, and enforcement of our agreements.

When you make a request regarding accessing, correcting, or deleting your Information, we will ask individual users to identify themselves and the Information requested to be accessed, corrected, or deleted before processing such requests. To the extent permitted by applicable law, we may decline to process requests that we are unable to verify, are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning Information residing on archive servers).

Please refer to the U.S. State Law Rights and Disclosures section below for additional information on privacy rights for consumers in certain states.

HEALTH AND WELLNESS INFORMATION

Our surveys and multiple-choice questions may ask health and wellness-related questions. We may share your responses with Approved Recipients who advertise health and wellness-related products and services. If you do not wish to share health and wellness-related Information, do not answer the health and wellness-related survey and multiple-choice questions and do not provide TCPA Consent.

MEDICARE SUPPLEMENT PLANS DISCLOSURE

Some of the Approved Recipients offer Medicare Supplement plans. Medicare Supplement plans are not connected with or endorsed by the U.S. Government or the Federal Medicare program. Approved Recipients have confirmed to us that all related optional marketing deals on the Site comply with applicable Federal civil rights laws and do not discriminate on the basis of race, color, national origin, age, disability, or sex. With your consent, we may provide Information to Medicare Supplement providers so they can contact you. If you do not wish us to share your Information, do not provide consent to telemarketing.

THIRD-PARTY SITES

Our Site currently does not contain links to other sites or services. However, if we include links to any third-party sites (such as when you link from a survey question, optional marketing offer, or advertisement to another site), you would be leaving the Site and be subject to the privacy policies and terms and conditions of those third-party sites – NOT this Privacy Policy. The inclusion of a link towards a third-party website, service, or application would not imply an endorsement by us. In that case, we would not be responsible for the privacy practices, content, or security of such third-party sites. You should review the policies of such third parties and contact them directly to respond to your questions.

SECURITY OF YOUR INFORMATION

We use commercially reasonable efforts to prevent unauthorized access, disclosure, or accidental loss or destruction of your Information. Access to your Information is strictly limited and we take reasonable measures to ensure that your Information is not accessible to the public. We restrict access to users' Information to only those persons who need access to perform or provide their job or service, both internally and with our third-party service providers. Information is encrypted with advanced TLS (Transport Layer Security) when collected, stored, and/or transmitted.

While we have endeavored to create a secure and reliable Site for users, we are not able to fully eliminate security risks associated with Information. Given the nature of the Internet, your Information passes through entities that we are unable to control. Therefore, we cannot guarantee that our security measures or those of third parties who access or transmit your Information will prevent your Information from being improperly accessed, stolen, or altered. In compliance with applicable federal and state laws, we shall notify you and any applicable regulatory agencies if we learn of an information security breach of your Information. You will be notified via email in the event of such a breach. Please be advised that notice may be delayed in order to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures.

U.S. STATE LAW RIGHTS AND DISCLOSURES

Some U.S. states have enacted laws that provide statutory rights to consumers in their state. The information below describes those rights and how you can exercise them.

NOTICE AT COLLECTION

This Policy provides timely notice to users, including those who are California residents and fall within the definition of "consumers" as provided for in the California Consumer Privacy Act ("CCPA"), that we collect Information at or before collection.

In the chart below, we set forth the categories of Information we collect from users and which categories of Information we share. We collect these categories of Information for the following purposes: to provide you with information about the Services, and other content and products and/or services that we believe may be of interest to you, including sending you communications that you have consented to receive; for website operations, content improvements, testing, research, analysis, and product development; to verify whether users are entitled/eligible to participate in the Services; to provide users with customer service and respond to customer inquiries; to carry out our obligations and enforce our rights arising from any contracts entered into between users and us, and any inquiry into whether the user has provided express written consent where required under applicable law; to detect, investigate, and respond to any fraudulent or malicious activity or any other activity we determine is or may be a violation of our Terms and Conditions, this Policy, or existing laws, rules, and regulations; as necessary or appropriate to protect the rights, property, and/or safety of us, the Approved Recipients, and our service providers; to maintain suppression or opt-out lists so that we won't contact users who have asked not to be contacted; to augment Information by enhancing it with other data sources provided by the Approved Recipients, and service providers to enable us (for example, to gain deeper insights into our users); and to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims, or when we determine it is necessary to comply with applicable laws and/or regulations. We will retain your Information unless you exercise your data privacy rights for so long as we need to protect us from claims related to your interactions with us. For example, if you complete survey questions in connection with the Services, we will retain the Information relating to your sign up for so long as you could challenge that transaction. For Identity Verification, the Information is retained no longer than six (6) months after submission.

We do not knowingly sell or share Information of users under the age of eighteen (18) years for any commercial purpose.

Category	Sold/Shared?
Identifiers (such as real name, alias, postal, email and/or IP addresses, telephone numbers, contact preferences and birth date)	Yes, for the business and commercial purposes
Personal information (such as the Identifiers listed above, gender, education, employment, employment history, financial information, home or automobile ownership, medical and health information, and insurance-related information, including Medicare) and which may include Information that is a protected classification characteristic under state and/or federal law) and/or sensitive personal information under state law, including the CCPA (for example, race and/or ethnic origin, physical or mental disability, or sexual orientation)	Yes, for business and commercial purposes
Commercial information (including preferences, products or services purchased, obtained, or considered, or other purchasing data)
Internet or similar network activity (such as browsing and search history and information about a consumer's interaction with a website, application, or advertisement) information available from Internet activity (such as device types, user agent data, referring URLs, and IP addresses)
Inferences drawn from other categories of Information (for example, a profile reflecting a person's preferences, characteristics, psychological trends, and attitudes).
Information related to a user's consent to receive telemarketing calls, SMS messaging, push notifications, commercial email, and other forms of communication (which may include the creation of a report and visual playback of a user responding to one or more survey questions and interacting with the page that seeks to obtain a user's "prior express written consent" (as defined in the TCPA ("TCPA Consent"))	Yes, for business purposes

Please see the Rights of California Consumers section of this Privacy Policy immediately below to learn about California consumer privacy rights and how to exercise those rights. This includes the right to know the Information we have collected and sold, the right to opt-out from the sale or sharing of Information, and the right to correct or delete your Information.

RIGHTS OF CALIFORNIA CONSUMERS

California consumers have rights under the CCPA regarding their Information. These rights are:

• Right to Know. The right to know what Information we have collected, including the categories of Information, the source of collection, our purpose for collecting the Information, the categories of third parties with whom we disclose, share or sell that Information and for what reason, and the specific pieces of Information we have collected about you.
• Right to Delete. The right to request that we delete the Information about you that we have collected. Note that there are certain exceptions to this right, including when the Information is necessary to provide you with goods or services you requested, to prevent fraud, and to comply with our legal obligations.
• Right to Correct. The right to request that we correct inaccurate Information that we maintain about you.
• Right to Opt-Out of Sale/Sharing. The right to limit or opt-out from the sale or sharing of Information.
• Right to Opt-Out of Sale/Sharing of Sensitive Information. The right to limit or opt out from the sale or sharing of sensitive Information, as defined under the CCPA. Note that there are certain exceptions to this right, including when the Information is necessary to provide you with goods or services you requested, to prevent fraud, and ensure safety and security.
• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.

How to Exercise Your Rights

To exercise your CCPA rights, click on the "Do Not Sell My Personal Info" link on the bottom of the Site page where we collect Information, or send an email to support@policysavings.com.

Verification Process. We require a verification process for requests to access, correct, or delete Information in order to prevent an unauthorized third-party from accessing or making decisions regarding a user's Information. Generally, we will verify a request by matching the identifying information supplied by the user with the Information we already have for the user. If we cannot verify the user using the foregoing method, we may request additional information, such as a government-issued identification card, which we will not retain or use for any other purpose.

Use of an Authorized Agent. California consumers may also designate an authorized agent to make these requests on their behalf. You must provide written authorization to the authorized agent that they are authorized to act on your behalf. When contacting us, the agent must submit proof of that authorization. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued identification card, to verify your identity before processing your request to protect your Information.

Timing. We will confirm receipt of your request within ten (10) business days. For all verifiable consumer requests, we strive to respond within forty-five (45) days of receipt. If we require additional time, which can be up to ninety (90) days in the aggregate, we will provide written notice. Any disclosures we provide will be delivered electronically in a secure fashion. If, for some reason, we cannot fulfill or comply with your request, our response will explain that decision.

How We Handle Deletion Requests After Verification. Once we receive and confirm your request to delete, we will delete or de-identify (and direct our service providers, vendors, and other applicable third parties to delete) your Information from our system other than from our archive servers (which we maintain for compliance purposes), unless there is an applicable exception. If we do not comply with a deletion request, we will provide you with grounds for the denial in writing. Note that after a deletion request, we may retain and use your Information for the limited purpose of complying with our policies, including this Policy, and to comply with applicable laws.

Disclosure of Information Collected and Sold. Once we receive and confirm your verifiable consumer request to access your Information, we will disclose to you the following:

• The categories and sources of Information collected;
• Our business and commercial purposes for collecting and selling that Information;
• The categories of third parties with whom we shared that Information;
• The specific pieces of Information collected;
• If we sold or disclosed your Information for a business purpose, we will disclose:
  • For sales - the Information categories for each category sold and the categories of third parties to whom the Information was sold; and
  • For disclosures - the Information categories for each category disclosed and the categories of third parties to whom the Information was disclosed.

Notice of Right to Opt-Out of the Sale or Sharing of Your Information

California consumers have the right to opt-out from the sale or sharing of their Information, including the sale of sharing of any sensitive Information. We provide a "Do Not Sell My Personal Info" link on each Website page where we collect Information that links to an online request form. You can access the form here or you can send an email to support@policysavings.com and elect to opt-out from the sale of your Information. We do not require a verification process to opt-out, but we reserve the right to confirm your request by sending you an email and requesting that you respond to the email.

While our agreements with third parties to whom we sell or disclose Information prohibit the further sale or use beyond the scope of our agreement with them, if we have sold or shared a California consumer's Information after an opt-out request is submitted but before we have complied with the opt-out, we will, where possible, notify all third parties to whom we have sold or shared a California consumer's Information to comply with the opt-out request. If the user requests a transaction with us that requires the sale of their Information, we will inform them that they have opted out and if they want to proceed with the transaction, we will offer the opportunity to opt-in.

Notice of Right to Limit Sensitive Personal Information

Under the CCPA, "Sensitive Personal Information" includes non-public information that reveals a consumer's social security, driver's license, state identification card, or passport number, a consumer's account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, a consumer's racial or ethnic origin, religious or philosophical beliefs, or union membership, Information collected and analyzed concerning a consumer's health, sex life, or sexual orientation. As noted in the Categories of Information We Collect section above, we do collect, use, share, and sell Information defined as Sensitive Personal Information under the CCPA.

Global Privacy Controls

Certain browsers allow users to enable an opt-out preference signal in their browser settings (a "Global Privacy Control"). When a Global Privacy Control is enabled, it signals websites that the user visits that the user is automatically exercising their right to opt-out of the sale or sharing of their Information without the need, for example, of clicking on a "Do Not Sell My Information" link. Via our service provider, we have enabled acceptance of California users' Global Privacy Control.

Commitment to Nondiscrimination. We are committed to not discriminating against California consumers who exercise their CCPA rights. As such, unless otherwise permitted by the CCPA, we will not deny, charge you different prices or rates, or provide a different quality level of goods or services, including through granting discounts or other benefits, or imposing penalties, and/or suggest that you may receive a different price, rate, or quality level of goods or services. While we do not provide financial incentives for users who do not exercise their CCPA rights, please note that some of the functionality of the Site may be unavailable if consumers exercise their right to have their Information deleted.

CCPA Metrics. We are required to compile certain annual metrics regarding the CCPA, including the number of disclosure, deletion and opt-out requests we receive, the median number of days it takes us to respond, and how many of each were denied. The metrics for the last calendar year are displayed here. Please note that the information outlined is compiled from various entities, which include our parent, subsidiaries, and other entities under common control with us.

RIGHTS OF VIRGINIA, COLORADO, CONNECTICUT, AND UTAH CONSUMERS

Virginia, Colorado, Connecticut, and Utah consumers have rights under the VCDPA, CPA, CTDPA, and UCPA, respectively, regarding their Information. These rights are:

• Right to Know. The right to know whether we are processing your Information.
• Right to Access. The right to access your Information we have processed.
• Right to Delete. The right to request that we delete the Information about you that we have collected.
• Right to Correct. The right to request that we correct inaccurate Information that we maintain about you (Virginia, Colorado, and Connecticut).
• The Right to Data Portability. The right to obtain a copy of your Information in a portable format.
• Right to Opt-Out. The right to opt-out of targeted advertising, the sale of Information, and/or any automated processing performed on Information that evaluates, analyzes, or predicts personal aspects of the user ("profiling").

How to Exercise Your Rights

To exercise your statutory privacy rights, click on the "Do Not Sell My Personal Info" link on the bottom of the Site page where we collect Information, or send an email to support@policysavings.com.

Timing. If we have not taken action or deny your request to know, access, correct, delete or opt-out, you may appeal the decision within ninety (90) days by writing to us at support@policysavings.com. Within sixty (60) days of receipt of this written appeal, we will inform you in writing of any actions taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

De-identified Data Disclosure. We may use de-identified data in some instances (data that cannot be linked to any identifiable natural person or any device linked to any such person). We maintain de-identified data without attempting to re-identify it, and any de-identified data that is sold or shared is not able to be re-identified.

Commitment to Nondiscrimination. We are committed to not discriminating against consumers who exercise their privacy rights. As such, unless otherwise permitted by applicable law, we will not deny, charge you different prices or rates, or provide a different quality level of goods or services, including through granting discounts or other benefits, or imposing penalties, and/or suggest that you may receive a different price, rate, or quality level of goods or services. While we do not discriminate against users who exercise their rights, please note that some of the functionality of the Site may be unavailable if consumers exercise their right to have their Information deleted.

OTHER STATE SPECIFIC PRIVACY RIGHTS

Other U.S states grant their residents privacy rights, including, for example, in Nevada, where you have the right to opt-out of the sale of Information. To exercise your privacy rights, please submit your request by clicking on the link "Do Not Sell My Personal Info" or send an email to support@policysavings.com. In your request, please specify that you want to exercise your rights and specify the Site that you visited and the email address you registered with. We may contact you to ask you for further information to help you exercise your rights. We will try to respond to requests within one month and we will let you know if we need to take longer, for example, because your request is complicated. Other states have enacted and may enact in the future data privacy laws. We will update this Policy as needed to reflect these new laws when they take effect.

QUESTIONS, SUGGESTIONS, OR TO CONTACT US

If you have any questions, comments, complaints, or suggestions regarding this Policy or the Site, please contact us here.