1. Scope and relationship to the Privacy Policy
This notice supplements the Privacy Policy for California residents. The California Privacy Rights Act (CPRA) amended the California Consumer Privacy Act (CCPA); they are addressed together here. Statutory rights depend on the law’s applicability to the business and information involved. We make the browser privacy controls available without asking your state of residence.
An insurance-related purpose does not automatically exempt every website record from privacy law. If a particular record is subject to another law or an exemption, we will consider that record and explain the applicable limitation when responding to a request.
2. Information disclosures
The categories, sources, purposes, and recipients below describe this website’s preview activities during its operating period within the preceding 12 months. They include browser processing and request-log information, even when a lead is not submitted. In CCPA terms, they may include identifiers, California customer-record information, protected classification characteristics such as age or sex, commercial or insurance-interest information, internet/network activity, general location from a ZIP code or IP address, and sensitive information concerning health. We do not create a marketing profile from the preview answers.
| Category and examples | Purpose and source | Current handling |
|---|---|---|
| Identifiers and contact information Name, email, phone number, ZIP code, IP address, and browser or device identifiers. | From you, your browser, and the link you open; to display the requested journey, deliver and secure the site, and respond when you contact us. | Typed funnel answers stay in browser memory. URL values and technical request information can reach our hosting provider. Messages you send to us are received by us and our communication service providers. |
| Insurance interests and household information Coverage type, vehicle count and age range, property and ownership details, household relationships, dependents, coverage goals, and current insurance. | From your answers or a prefilled link; to show relevant questions and explain possible next steps. | Processed locally in this preview unless included in a URL or in a message you send us. The preview does not send these answers to an insurer or lead buyer. |
| Age, financial estimates, and potentially sensitive information Birthdate, age range, sex at birth, mortgage or coverage budget, Medicare enrollment and timing, preferred benefits, current health coverage, and self-reported health. | From you or a prefilled link; to tailor the selected journey. Health-related information may be sensitive personal information or consumer health data under applicable law. | The same browser-only and URL exceptions apply. No diagnosis, underwriting decision, consumer report, or eligibility determination is generated. See the separate consumer-health notice. |
| Internet and network activity Page URL, request time, browser type, device information, network address, error information, and security events. | Generated when your device contacts our hosting and security services; used for delivery, availability, abuse prevention, and troubleshooting. | Cloudflare provides hosting and security. Cloudflare Web Analytics also measures site usage and performance. We do not embed advertising pixels or session replay. |
| Preferences and correspondence Browser privacy restrictions, a preview logo preference, privacy requests, and information you include in email or mail. | From your choices, browser signals, and direct messages; to remember restrictions, operate the preview, and handle requests. | A privacy cookie stores restrictions, not funnel answers. The logo preference uses session storage. Correspondence is handled separately from the preview. |
We do not collect biometric templates, professional or employment records, nonpublic education records, precise device geolocation, or audio/video recordings through this website preview. We do not collect payment credentials, Social Security numbers, or account passwords. Website choices are not an automated decision about insurance eligibility.
No current preview lead is sold or shared with an insurance buyer, and the deployed preview has no cross-context advertising integration. Information needed to deliver or secure the site is processed by hosting/security services; information you send directly is processed for correspondence, rights handling, and appropriate legal purposes. Our planned referral model may involve compensation and must be disclosed separately before activation.
3. Rights available under applicable California law
- Access and know: request the personal information we hold about you, its sources and uses, and information about recipients, subject to applicable law.
- Correct: ask us to correct inaccurate information. You can also edit any answer while using a preview.
- Delete: ask us to delete personal information, subject to exceptions such as security, legal obligations, and maintaining opt-out records.
- Portability: obtain a usable copy of information where the applicable law provides that right.
- Opt out: restrict sale, sharing for cross-context behavioral advertising, or targeted advertising where applicable. Use the browser controls without creating an account or providing your identity.
- Limit or withdraw: limit covered uses of sensitive information and withdraw consent where consent is the basis for processing. Consumer-health rights are explained separately.
- Appeal and complain: ask us to reconsider a denied request where applicable, and contact the appropriate privacy regulator. You do not have to resolve a complaint with us before contacting a regulator.
- Non-discrimination: exercising privacy rights does not forfeit your legal rights or automatically prevent you from browsing the site. A requested service may still require information necessary to provide that service.
A request to know may seek categories or specific pieces of information, sources, business or commercial purposes, categories of disclosures and recipients, and applicable sale/sharing information, including information for the statutory lookback period. We do not require you to know a field name or legal citation to make a request.
4. How to make a request
Use Privacy requests & contact for contact methods. Email or mail us with a description such as “access,” “delete,” “correct,” or “California privacy request.” Browser opt-outs are available directly on the privacy choices page. You may also ask for a copy of this notice in an accessible format.
For access, deletion, and correction, provide only the information reasonably needed to locate the interaction. We may verify identity and authority before disclosing information or changing records. No account creation is required. We do not require proof of identity for a browser sale/sharing opt-out or demand unnecessary sensitive documents. An authorized agent may submit a request; we may ask for proof of authorization and, when permitted, verify with you directly.
CoverageFlow, LLCPrivacy & Consumer Requests
697 3rd Ave, New York, NY 10017
legal@coverageflow.com
5. Response timing, exceptions, and review
For a request to know, correct, or delete covered by the CCPA, we acknowledge receipt within 10 business days and generally provide a substantive response within 45 calendar days. If a permitted extension is necessary, we explain the reason and the additional time, up to a total of 90 calendar days. Covered sale/sharing and sensitive-information limitation requests are implemented as soon as feasibly possible and no later than 15 business days.
Requests generally do not require a fee. A request may be limited or denied where law permits, such as when identity cannot reasonably be verified, a legal retention duty applies, or information is needed for security or to honor an opt-out. We explain the reason and any available next step. For a disputed decision, contact us and ask for review. You may also contact the California Privacy Protection Agency or Attorney General.
6. Sale/sharing, Global Privacy Control, and sensitive information
Use Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information to record browser restrictions. These controls are available without a login or an identity-verification process. A detected Global Privacy Control signal is treated as a sale/sharing opt-out for the browser; it overrides a less restrictive local state.
The current service does not use sensitive information to infer characteristics for advertising or for unrelated purposes. A limitation therefore does not prevent the local preview from displaying questions you request. The browser setting is not a request to delete separately held information or to stop communications to a phone number; use the request contact channel for those actions. We do not use an opt-out to collect more marketing data.
7. Minors, non-discrimination, and financial incentives
The website is for adults. We do not knowingly sell or share personal information about people under 16, and do not solicit information directly from children under 13. We do not offer a financial-incentive program or a price discount in exchange for personal information through this preview. We will not unlawfully discriminate against you for exercising a privacy right, require a waiver of that right, or infer consent from silence.
8. Retention and changes
Retention periods and criteria appear in Privacy Policy, section 7. Request and suppression records may be kept to satisfy applicable obligations and prevent an opt-out from being reversed. We review these disclosures when our practices change and at least as often as applicable law requires. A new service cannot rely on an older notice to authorize an incompatible use.
Official resources: California Attorney General’s CCPA information and California Privacy Protection Agency.