California Privacy Policy

This California Consumer Privacy Act Policy of National Liability and Fire Insurance Company (“NL&F”) (collectively, “we,” “us,” or “our”) applies solely to individuals who reside in the State of California (“consumers” or “you”). We adopt this policy to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”). Any terms defined in the CCPA and/or CPRA have the same meaning when used in this policy.

Your Right to Know About Personal Information Collected, Disclosed, or Sold
You have the right to request that we disclose to you information about the collection and use of your personal information over the last 12 months, including:

The categories of personal information we have collected about you;
The categories of sources from which we have collected the personal information;
The business or commercial purpose for collecting or selling personal information;
The categories of third parties to whom we share personal information;
The specific pieces of personal information we have collected about you;
The categories of personal information we have disclosed about you for a business purpose; and
The categories of third parties to whom your personal information is disclosed, or categories of personal information disclosed.

We have not sold personal information about consumers in the last 12 months.

Consumer Rights
The CCPA and CPRA confer certain rights on consumers regarding personal information, including:

the right to know what personal information we have collected about the consumer, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purposes for collecting, selling or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about the consumer;
the right to delete personal information we have collected from the consumer, subject to certain exceptions;
the right to correct inaccurate personal information that we maintain about the consumer;
the right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by the CCPA and/or CPRA; and
if the consumer is an employee, an applicant for employment, or an independent contractor, the right not to be retaliated against for the exercise of the consumer’s rights.

How to Submit a Request
To exercise any of your rights described in this California Consumer Privacy Act Policy, please submit a request to us by contacting us via one of the following methods:

1-844-549-2512
Click here to complete a request. Return the completed form to us either via email at privacy@nlf-info.com or via U.S. mail following the instructions on the form.

Our Process to Verify Your Request
We will contact you to collect additional information to verify your identity. Depending on the nature of the request, we will require you to provide either two or three pieces of information to allow us to verify that you are the person about whom we collected personal information. We may also require you to submit a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Any information we collect for purposes of verifying your identity will not be used for any other purpose. If we are unable to verify that you are the person about whom we collected personal information, or that you have authority to make the request on that person’s behalf, we will notify you that we will not be able to respond to your request.

We will endeavor to respond to your request within 45 days of the date you submit it. If we require additional time, we will notify you of the extension in writing.

We will not respond to more than two requests from the same consumer in any 12 month period.

Information We Collect
“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information.

We may collect the following categories of your personal information:

Personal identifiers: a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
Personal information under Cal. Civ. Code § 1798.80(e): a name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Characteristics of protected classifications under Federal and California law: race, color, ancestry, national origin, religion, gender (including pregnancy, childbirth, or related medical conditions), disability, age (40 and older), genetic information, marital status, sexual orientation, gender identity and gender expression, AIDS/HIV status, medical conditions, political activities or affiliations, military or veteran status, and status as a victim of domestic violence, assault, or stalking.
Commercial information: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Biometric information: physiological, biological or behavioral characteristics that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
Internet or other electronic network activity information: browsing history, search history, information regarding interaction with a website, application, or advertisement, and other similar information.
Geolocation data: physical location.
Sensory data: audio, electronic, visual, thermal, olfactory, telemetry data, data aggregation tools or similar information.
Professional or employment-related information: job history or other employment information.
Education information non-public education information as defined in 20 U.S.C. § 1232g, 34 C.F.R. Part 99, such as transcripts, grades, class schedules, financial aid, or other records, files, documents or materials containing non-public information directly related to a student and maintained by an educational agency or institution.
Inferences drawn from other categories of personal information: to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We collect each category of personal information about consumers from the following categories of sources:

Directly from you or someone providing information on your behalf, such as an insurance agent, broker and alike or your employer in connection with obtaining insurance;
External data sources, such as consumer reporting agencies and other companies that provide data related to a specific consumer, business, or property;
Via our website, directly or indirectly from information submitted through a web portal or through the use of cookies and other data tracking systems. Refer to our Website Privacy Policy for additional information;
Sources used to facilitate the transaction of insurance and the investigation of associated claims including, but not limited to, medical providers, regulators, auditors, attorneys, investigators, adjusters, other insurance companies, other third parties, and affiliated companies.

We collect each category of personal information about consumers for the following business or commercial purposes:

To facilitate the transaction of insurance and the investigation of associated claims;
Auditing related to a current interaction with the consumer and concurrent transactions;
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
Debugging to identify and repair errors that impair existing intended functionality;
Undisclosed short-term, transient use;
Performing services on behalf of the business or service provider;
Undertaking internal research for technological development and demonstration;
Undertaking activities to verify or maintain the quality or safety of a service;
To confirm eligibility for insurance benefits or payments;
To detect or prevent crime or fraud;
In response to court orders or other legally required actions;
For actuarial or research studies;
In connection with a sale of our business;
In connection with employment or application for employment;
In connection with your provision of services to us;
As otherwise required by law.

We will provide you notice if we collect additional categories of personal information or use the personal information we previously collected for materially different purposes.

Information We Disclose
In the last 12 months, we have disclosed the following categories of personal information about consumers for a business purpose:

Personal identifiers;
Personal information under Cal. Civ. Code § 1798.80(e);
Characteristics of protected classifications under Federal and California law;
Commercial information;
Internet or other electronic network activity information;
Geolocation data;
Sensory data;
Professional or employment-related information;
Education information.

We share personal information about consumers with the following categories of third parties:

Entities that facilitate our transaction of insurance and the investigation of associated claims;
Third Party Administrators, independent adjusters, outside counsel, investigators, and other parties for purposes of investigating and resolving claims;
Regulatory and other government agencies;
Consumer reporting agencies or insurance support organizations;
Entities that have an interest in policies issued by us, such as certificate holders, additional insureds, group policy owners, or lienholders;
Entities who perform administrative, analytical, business, personal, professional, or employment functions on our behalf;
To our lawyers, accountants and auditors;
As otherwise required by law.

We have not sold personal information about consumers in the last 12 months.

Third-Party Analytics
We use third party analytics programs, such as Google Analytics, which are operated by third party companies. We do not directly collect usage data through our use of third party analytics programs. These companies are unaffiliated with NL&F and may, themselves, collect usage data (using cookies, pixels and/or similar tools) about website visitors in order to provide us with aggregate data, reports or metrics that help us evaluate usage of, and improve, our website and mobile app. To learn more about Google’s privacy practices, please review the Google Privacy Policy – available at: https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to opt-out of Google Analytics collection of usage data – this is available at: https://tools.google.com/dlpage/gaoptout.

Right to Delete
You have the right to request that we delete from our records the personal information we have collected about you, subject to certain exceptions. Once we receive and confirm your request, we will determine whether an exception applies. If an exception does not apply, we will delete your personal information from our records. We will also direct our service providers to delete your personal information from their records. If an exception applies, we will not delete your personal information from our records and we will notify you in writing of the reason that we are denying your request to delete your information from our records.

Right to Correct
Subject to certain restrictions, you have the right to request that we correct inaccuracies in your Personal Information.

Non-Discrimination
A business may not discriminate against a consumer because the consumer exercised any of the foregoing rights.

Authorized Agent
You may use an authorized agent to submit requests to us as described in this privacy notice. An authorized agent is a natural person or a business entity that you have authorized to act on your behalf. If you use an authorized agent to submit a request to us, we will require you to (1) provide the authorized agent with written permission to make requests on your behalf and then verify the consumer’s own identity directly with us; or (2) provide the authorized agent with a power of attorney pursuant to Probate Code sections 4000 to 4665. We may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf.

Contact for More Information
For questions or concerns about our privacy policies or practices, please contact us at 1-844-549-2512. If you have a disability, you may contact us to access this notice in an alternative format.

Information Not Subject to CCPA
In accordance with the CCPA, this California Consumer Privacy Policy does not apply to: (1) certain medical information governed by the Confidentiality of Medical Information Act; (2) certain information that is furnished to or collected from a consumer reporting agency in accordance with the Fair Credit Reporting Act; (3) personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act, and implementing regulation, or the California Financial Information Privacy Act; (4) information collected, processed, sold, or disclosed pursuant to the Driver’s Privacy Protection Act of 1994; (5) certain information collected about a consumer in the course of their employment or application for employment; and (6) certain information collected about a consumer in the scope of a business-to-business transaction or communication.

Privacy Policy