Privacy Policy

This California Privacy Statement is for California Residents only and supplements the Privacy Notice above. This policy is provided to comply with the California Consumer Privacy Act of 2018 (CCPA). This policy describes the personal information that Fortegra Financial Corporation (“we,” “our,” or “us”) collects in the course of its business, explains how this information is collected, used, shared, and disclosed, describes rights provided by the CCPA to California Residents (“consumers” or “you”) regarding their personal information, and explains how consumers can exercise those rights.

California Residents include every individual who is in California for other than a temporary or transitory purpose, and every individual who is domiciled in California but who is outside of California for a temporary or transitory purpose.

What is Personal Information?

We may collect, use, or share your personal information. Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“personal information”). “Personal information” does not include publicly available information, such as information that is lawfully made available from federal, state, or local records, and de-identified or aggregate consumer information.

With a limited exception, and as noted in other sections of this privacy policy, certain provisions of the CCPA do not apply to:

• Certain personal information covered by or collected under industry-specific federal and state privacy laws including, but not limited to, the Health Insurance Portability and Accountability Act of 1996, the California Confidentiality of Medical Information Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the California Financial Information Privacy Act, and the Driver's Privacy Protection Act of 1994.
• Personal information that we collect about you when you are acting as our job applicant, employee, owner, director, officer, medical staff member, or contractor to the extent that we collect and use your personal information solely within the context of that role. This also includes your emergency contact information and personal information that is necessary for us to retain to administer benefits for you. However, you will still receive a notice at the time of collection, which outlines the categories of personal information we collect and the purposes for which we collect the categories of personal information.
• Personal information we receive from you reflecting a communication or transaction between us and another business when you are acting as an employee, owner, director, officer, or contractor of such company, partnership, sole proprietorship, nonprofit, or government agency and you are seeking a product or service from us for the company, partnership, sole proprietorship, nonprofit, or government agency (Business Consumer). We have outlined the limited rights afforded to Business Consumers below.

Personal Information We Collect, Use, or Share

The CCPA requires us to disclose certain information regarding our collection, sale, and sharing of personal information.

Collecting Your Personal Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers. This may include a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, policy/certificate number, or other similar identifiers.
• Personal information described in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)). This may include a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Characteristics of Protected Classification under California or Federal Law. This may include age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental capacity, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), or veteran or military status.
• Commercial information. This may include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity. This may include browsing history, search history, or information on a consumer's interaction with a website, application, or advertisement.
• Geolocation data. This may include physical location or movements.
• Sensory data. This may include audio, electronic, visual, or similar information, such as photographs or video recordings created in connection with our business activities, and recordings of calls to our representatives and call centers.
• Professional or employment-related information. This may include current or past job history or performance evaluations.
• Inferences drawn from other personal information. This may include information, data, assumptions, or conclusions derived from facts, evidence, or another source of information or data reflecting your preferences, characteristics.

In the past 12 months, we have collected personal information from the following categories of sources:

• Personal Information You Provide Us Directly. Depending on your relationship with us, we may collect and retain personal information (such as your first and last name; telephone number; mailing address; email address; date of birth; employment history; bank account or other financial account number and account details; health status; medical history; date and cause of death, injury, or disability; recordings of telephone calls to our representatives and call centers; photographs or video recordings created in connection with our insurance or other business activities, including for claims assessment, processing, settlement, and disputes, or for other relevant purposes as permitted by law; and other general information) that you voluntarily provide us through your interaction with us or our agents by phone, by mail, by e-mail, by fax, at our offices, and through our website in order to provide you with the service(s) we offer, and to operate and maintain your account, or products or service provided (e.g., when you call us or visit us with questions, when you obtain our products or services, submit a claim or benefits request, or pay monies owed to us).

• Personal Information We Receive From You When You Visit Our Website. When you visit our website, we collect personal information on the efficiency and working of our site (e.g., cookies, IP addresses). The types of information your browser or internet session automatically sends us each time you visit one of our sites, which we automatically collect, includes: your browser (e.g., Chrome, Internet Explorer), your internet domain (e.g., AOL, Netcom, Earthlink), your computer’s operating system (e.g., Windows, Macintosh, UNIX, Linux), your navigation path (i.e., the URLs of where you come to our site from, which of our pages you visit, and where you go as you leave), and your IP address.
• Personal Information We Receive Directly Or Indirectly From Other Parties. We also collect your personal information directly or indirectly from others, such as consumer reporting agencies (credit and debit bureaus), affiliates, agents, or other companies.

How We Use Your Personal Information

We may collect your personal information for the following business or commercial purposes:

• To fulfill or meet the reason for which the personal information was provided. For example, if you have provided personal information to us in order to obtain insurance coverage, we will use that information to determine if you qualify for such coverage.
• To provide you with information, products, or services that you request from us.
• Performing services such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, to resolve complaints, to send you important information regarding changes to our policies, or providing similar services on behalf of the business or service provider.
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
• Debugging to identify and repair errors that impair existing intended functionality.
• Internal research for technological development and demonstration.
• Advertising or marketing services on our own behalf.
• To comply with legal obligations.
• Establish and defend legal rights; protect our operations or those of any of our group companies or business partners, our rights, privacy, safety or property, and/or that of our group companies, you or others; and pursue available remedies or limit our damages.
• Verification, maintenance, or improvement of the quality of our services and devices.
• Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• If the personal information is part of a merger, acquisition, bankruptcy, or other transaction where a third party assumes control of us. The information will be shared as permitted by the CCPA.
• Prevent, detect and investigate crime, including fraud and money laundering, and analyze and manage other commercial risks.
• To advance our commercial or economic interest not otherwise identified above.

When We Disclose or Share Your Information

We may disclose your personal information to service providers and third parties in order to carry out specific business or commercial purposes. In the preceding 12 months, we have disclosed the following categories of consumer personal information for business or commercial purposes to service providers and the following categories of third parties:

Selling Your Personal Information for a Business or Commercial Purpose

We do not sell personal information. In the past 12 months, we have not sold consumers’ personal information to third parties. It is our business practice not to sell the personal information of minors under 16 years of age and we have no actual knowledge of doing so.

Your Rights under the CCPA

The CCPA provides you with certain rights, described below, with respect to the collection, retention, disclosure, and sale of your personal information.

The Right to Know About Personal Information Collected, Used, or Disclosed

You have the right to request that we provide you with certain information about the personal information we collect, use, or disclose about you as well as the categories and specific pieces of information that we have collected about you in the 12 months preceding your verifiable consumer request. Specifically, you have the right to request the following information:

• The specific pieces of personal information we have about you.
• The categories of personal information we have collected about you, including:
  • The categories of personal information we have collected about you in the past 12 months.
  • The categories of sources from which the personal information about you was collected.
  • Our business or commercial purpose for collecting your personal information.
  • If we shared your personal information:
    • The categories of personal information that we disclosed about you for a business purpose in the past 12 months and, for each category identified, the categories of third parties to which it disclosed that particular category of personal information; and
    • The categories of third parties that we share personal information.

Once we receive and confirm your verifiable consumer request, we will disclose the requested information to you unless an exemption applies under the CCPA.

A household may request to know aggregate household personal information by submitting a verifiable consumer request. Also, unless the household has a password-protected account, if all consumers in a household jointly request access to specific pieces of information for the household, we can individually verify the identity of all the members of the household, and we can verify that each member is a current member of the household, then we will comply with the request.

When you request information, we will provide the information requested in a format that is readily useable and that will allow you to transmit the information from one entity to another entity without hindrance. If you request access to the categories and specific personal information that we have collected about you, we will provide your personal information in a format that is portable, readily usable, and that will allow you to transmit the information to another entity without hindrance (Data Portability request).

However, there is certain information that we will not disclose to you. This information includes but is not limited to your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Additionally, note that we are not required to retain any personal information collected from you for a single, one-time transaction, if we do not sell or retain the personal information, or to reidentify or otherwise link information that is not maintained in a manner that would be considered personal information.

This right does not apply to Business Consumers.

The Right to Request Deletion of Personal Information.

You have the right to request that we delete any personal information that we have collected from you and maintained about you. Once we receive and confirm your verifiable consumer request, if we determine that we must comply with a deletion request and delete your personal information from our records, we will also direct any service providers we work with to also delete your personal information from their records. If we store any of your personal information in our archived or back-up systems, we will delete your information once the systems are accessed, restored, and/or used.

A household may request the deletion of aggregate household personal information by submitting a verifiable consumer request. In addition, unless the household has a password-protected account, if all consumers in a household jointly request deletion of household personal information, we can individually verify the identity of all the members of the household, and we can verify that each member is a current member of the household, then we will comply with the request.

Please note that we may deny your deletion request for a number of different reasons, which are identified in the CCPA.

This right does not apply to Business Consumers.

How to Exercise Your CCPA Rights

Submitting a Verifiable Request to Know or Request to Delete

To exercise your Right to Know or your Right to Delete, please submit a verifiable consumer request to us by either:

• Calling us at 800-888-2738
• Visiting www.fortegra.com/data-subject-access 

Only you (or your authorized agent) may make a verifiable consumer request for your personal information. You may also make a verifiable consumer request on behalf of your minor child.

To submit a verifiable consumer request, you (or your authorized agent) will be asked to:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. We will use any personal information collected from you in connection with our verification of your request solely for purposes of verification.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request on behalf of another person. Making a verifiable consumer request does not require you to create an account with us.
• We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Verifying Your Identity

Once you submit your verifiable consumer request, we will verify your identity by matching the information you provided us with information in our systems. If you submit a request to know specific pieces of personal information or a request to delete certain information, in addition to verifying your identity with information we have on file, you also may be required to submit a signed declaration under penalty of perjury stating that the requestor is the consumer whose personal information is the subject of the request. If we are unable to respond to your request for specific pieces of information, we will evaluate your request as if it is a request to know the categories of personal information that we have collected about you.

We will generally avoid requesting additional information from you to verify you. However, if we cannot verify your identity based on the information we currently maintain, we may request additional information from you, which will only be used to verify your identity and for security or fraud-prevention purposes. We will delete any new personal information we collect to verify your identity as soon as practical after processing your request unless otherwise required by the CCPA.

Generally, if we are unable to verify your identity, we will deny your request and inform you of our inability to verify your identity and explain why we were unable to do so.

We will not charge you to verify your identity. In addition, we will not charge you or your authorized agent a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

When and How You Will Receive a Response

Once we receive a consumer request, we will confirm our receipt of your request within 10 business days and provide you with additional information about how we will process the request. We also will promptly take steps to determine whether the request is a verifiable consumer request, and disclose and deliver the requested personal information. Our goal is to respond to your verifiable consumer request within 45 days of receiving it. However, in the event that we need more time (up to 45 more days to respond to your request, we will inform you of the need for an extension in writing along with the reasons for the extension. If you have an account with us, we will deliver your requested personal information to that account. If you do not have an account with us, you are not required to create an account with us to make a verifiable consumer request and we will deliver the requested personal information by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt.

When you request information, we will provide the information requested in a format that is readily useable and that will allow you to transmit the information from one entity to another entity without hindrance. If you request access to the categories and specific personal information that we have collected about you, we will provide your personal information in a format that is portable, readily usable, and that will allow you to transmit the information to another entity without hindrance (Data Portability request).

If we are unable to comply with a given request, we will provide you with a response within 45 days (or if more time is needed, up to 90 days total) explaining why we have not taken action on your request and identifying any rights you may have to appeal the decision.

Please note that we will only respond to a verifiable consumer request for access or data for personal information twice (2) within a 12-month period.

Authorized Agent for Requests

You may designate an authorized agent to make a request on your behalf. Unless you have a power of attorney, if you would like to use an authorized agent, which is an individual or business registered with the Secretary of State that you have authorized to act on your behalf, to submit a request, you must provide the authorized agent with written and signed permission to do so, verify your own identity directly with us, and directly confirm that you provided the authorized agent with permission to submit the request. We may deny a request from an authorized agent that does not submit proof that they are authorized to act on your behalf.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. For example, unless otherwise permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to Our California Privacy Statement

We are required by law to update this California Privacy Statement at least once each year. We will notify you by mail, email or through a notice on our website homepage when we make changes to this privacy notice. This privacy policy was last updated on 10/27/2020.

Contact Information

If you have any questions regarding our California Privacy Statement, the ways in which we collect, and use your personal information, or how to exercise your rights under the CCPA, please do not hesitate to contact us at:

Phone: 800-888-2738
Website: www.fortegra.com/data-subject-access