Our Sites

The processing of personal information in relation to the Sites is controlled by One80, unless a Site identifies (in its privacy policy, terms of use or otherwise) that it is controlled by another One80 entity. One80, as well as individual divisions of One80, may have their own websites with their own privacy policies, in which case this Privacy Policy will not apply to such websites unless such website provides a link to this Privacy Policy.

Our Role in Processing Personal Information

Data protection laws sometimes differentiate between “controllers” (or similar terms) and “processors” (or “service providers” or similar terms) of personal information. A “controller” determines the purposes and means (the why and how) of processing personal information. A “processor,” which is sometimes referred to as a “service provider,” processes personal information on behalf of a controller subject to the controller’s instructions.

This Privacy Policy describes our privacy practices where we are acting as the controller of personal information. However, this Privacy Policy does not cover or address how our customers may process personal information when they use our services, or how we may process personal information on their behalf in accordance with their instructions where we are acting as their processor. As a result, we recommend referring to the privacy policy of the customer with which you have a relationship for information on how they engage processors, like us, to process personal information on their behalf. In addition, we are generally not permitted to respond to individual requests relating to personal information we process on behalf of our customers, so we recommend directing any requests to the relevant customer.

Information We Collect

We may collect personal information about you and related third parties, including beneficiaries, dependents, employees or other participants in the Services offered to you. By providing us with the personal information of any third party, you confirm that you have the authority to do so on their behalf and have provided them with the information set out in this Privacy Policy.

The categories of personal information we collect can include:

  • Personal identifiers such as your name, email address, mailing address, phone number, date of birth, and government-issued identifiers (e.g., social security or national insurance number, passport number, ID number, tax identification number or driver’s license number).
  • Customer records such as your identification documents, account credentials, and payment and billing information (credit or debit card or other financial information).
  • Commercial information such as your communication with us or interest or participation in an insurance product, risk consulting service or other Services.
  • Demographics such as race, ethnicity, gender, marital status, date and place of birth.
  • Sensory information such as photos and videos of you and audio recordings of phone calls between you and us, where permitted by law.
  • Preferences you provide to us or generated through your use of the Services, including inferences we may make based on our experience with you.
  • Internet, network and device information from the browser or device you use to access our Services, which could include your IP address, device ID, cookie identifiers, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and or clickstream data.
  • Professional information in connection with your role as a brokerage or carrier partner, agent, vendor or research partner.
  • Education information such as educational history.
  • Sensitive information we may collect the following categories of personal information, which may be classified as “sensitive” depending on the applicable privacy laws (“sensitive information”):
    • Government-issued identifiers;
    • Username and password;
    • Demographics such as race, ethnicity, religion, citizenship status, sexual orientation or sex life;
    • Information about a known child under the age of 13;
    • Health and medical information, including medical history; and
    • Payment card and financial account information.

Keep reading to learn more about how we collect personal information you provide to us directly through the Sites, information we collect through your use of the Services, and information we receive through third parties.

Information You Provide Through the Sites

When using our Sites, you may voluntarily provide information about yourself. We collect this information when you contact us through our Sites, create an account, provide us with personal information required to fulfill Services, or interact with us for any other purpose.

We may collect the following personal information about you through our Sites:

  • Personal identifiers such as contact information;
  • Customer records such as billing information and user name, account number, and password;
  • Preference information such as preferences about marketing publications and your interests in relation to our Services; and
  • Commercial information associated with your inquiries to us, including information you may voluntarily submit to us by completing forms on our Sites.

Information Processed Through the Services

We may also collect additional personal information (subject to applicable legal requirements and restrictions) in providing our Services, operating our business, and interacting with individuals in the course of our business, which may include:

  • Personal identifiers such as government issued identification numbers;
  • Customer records such as billing information, income and other financial information, and records of real property;
  • Commercial information about the insurance quotes individuals receive and the policies they obtain, current and/or previous claims;
  • Demographic information;
  • Health and medical information and other information necessary to secure insurance products, provide risk consulting services, offer guidance on other Services to you, and process claims;
  • Sensory information such as voice recordings when you call us;
  • Inferences we may make about you based on other data that we collect and our experience with you;
  • Education information such as transcripts and educational history;
  • Professional information such as employer, job title and employment history; and
  • Background check information such as criminal records data and other information from credit and background checks.

If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal information we require fall outside the scope of this Privacy Policy. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Information Automatically Collected When You Use our Services

Information Provided by Third-Party Sources

In addition to the personal information collected above, we may also collect personal information from the following third-party sources:

  • Our Affiliates. We are able to offer you the products and services we make available because of the hard work of our team members across all Accession Risk Management Group (“Accession”) entities. To provide our products and facilitate our services, Accession may receive personal information from other Accession entities for purposes and uses that are consistent with this Privacy Policy. For example, we may receive your contact information if you are referred by another Accession entity.
  • Other Customers. We may receive your personal information from our other customers. For example, a customer may provide us with your contact information as a part of a referral.
  • Social media. If you choose to interact with us on social media, we may collect personal information about you from the social media accounts that you make public. We use personal information collected in connection with your social media account to communicate with you, better understand your interests and preferences, and better understand our customer base more broadly.
  • Business partners. Our business partners may collect the personal information listed above in connection with the Services and may share some of this information with us. This includes our customers, the insureds, employers, administrators or other participants in the Services offered to you and the other third parties in the supply chain for providing the Services to you.
  • Service providers. Our service providers, such as payment processors and marketing providers, collect the personal information and often share it with us. For example, we receive personal information from payment processors to confirm that an individual’s payment for the Services was accepted. We also receive information about the success of our email campaigns, including information about who has opened our marketing communications and when.
  • Information providers. We may, from time to time, obtain information from third-party information providers to correct or supplement personal information we collect. For example, we may obtain updated contact information from third-party information providers to confirm an address or reconnect with an individual, or we may receive the results of a background check from a third-party provider. We may also enrich the data we own with third-party information, such as demographic information about business contacts to understand our audience and develop better marketing communications.
  • Acquired entities or data. We may, from time to time, acquire the equity or assets of a third-party entity in a merger or acquisition, which may include personal information about the entity’s customers, prospects, users, employees, business contacts or any person to which they’ve encountered. We will use this information in accordance with this Privacy Policy.
  • Publicly available information. As permitted under applicable laws, we may collect personal information from publicly available sources, such as government records or public review websites, to help improve our business and services.

How We Use Your Information

Disclosure of Information

Retention of Personal Information

In accordance with applicable law, we retain personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected. However, if necessary, we may retain personal information for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator or other government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.

Therefore, we retain personal information for as long as the individual continues to use our Services for the purposes explained in this Privacy Policy. In particular, we will retain their personal information for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as, for any additional purpose based on the choices you have made, such as to receive marketing communications. We will retain personal information supplied when joining our services, including complaints, claims and any other personal information supplied during the duration of an individual’s contract with us for the services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.

Security of Personal Information

We have implemented reasonable physical, technical, and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information. Moreover, we are not responsible for the security of information you transmit to us over networks that we do not control, including the Internet and wireless networks.

Your Choices

Third-Party Links and Tools

Children’s Personal Information

One80 is committed to protecting the privacy needs of children and encourages parents and guardians to take an active role in their children’s online activities and interests. We do not knowingly collect information from children which we consider to be an individual under the age of sixteen (16) or the equivalent age as specified by law in your jurisdiction, and One80 does not target or direct its Sites to children.

Transfer of Personal Information Between Countries

There are circumstances in which we will have to transfer your personal information out of the jurisdiction in which it was collected, or in which you reside, to entities around the world, including Accession group companies, to perform processing activities such as those described in this Privacy Policy in connection with the Services we provide to you. The One80 entity that controls your personal information may differ depending on where you live. If you do not reside in the U.S., your personal information may be processed by One80 and other Accession group companies on behalf of the One80 entity controlling personal information for your jurisdiction. Personal information collected by One80 or an Accession group company worldwide is generally stored in the United States. Regardless of where your personal information is stored, One80 maintains the same high level of protection and safeguarding measures.

Changes to Our Privacy Policy

We may update this Privacy Policy to reflect changes to our information practices and will post the updated Privacy Policy with a modified “Effective Date” at the top. Any changes or modifications will be effective immediately upon posting of the changes or modifications, and, to the extent permitted by law, retroactively to all personal information we have already collected. We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices. If our information practices change, we will post these changes on this page.

Region-Specific Notices

Additional privacy terms may be applicable depending on your location. These terms (our “region-specific notices“) are incorporated into, and should be read in conjunction with, this Privacy Policy. Unless otherwise indicated, the region-specific notices have the same effective date as the One80 Privacy Policy and all terms have the same meaning as defined in our Privacy Policy.