Privacy Commitment

This notice describes how Simple Shield, Inc. handles information. References to the company mean Simple Shield; references to the customer mean the person using the website or related services. The notice applies to simpleshieldinsurance.com, our mobile experience, and activities involving an insurance product. It explains the information collected, its use, and the choices available.

1. Data That May Be Obtained

1.1 Details Submitted by You

Depending on how you interact with the Services, you may give us information such as:

• Identity data: Your name, birth date, gender, marital status, and, when underwriting requires it, Social Security number
• Ways to reach you: Postal address, telephone number, and email address
• Automobile details: Vehicle year, manufacturer, model, VIN, registration, and how the vehicle is used
• Driving details: Licensing state and number, experience, and driving record
• Billing data: Bank or payment-account information and the related billing location; the payment processor handles complete card numbers instead of Simple Shield
• Loss and claim data: Incident descriptions, damage images, reports, and communications concerning a claim
• Your communications: Information included in a form, telephone call, chat, or email

1.2 Data Recorded Through Technology

Our website or application may automatically record certain device and usage details, including:

• Technical connection details such as the network address, browser family, and device operating environment
• Site pages opened, links selected, and approximate visit duration
• Identifiers associated with the device and mobile connection
• Information produced by cookies or related tools described in Section 6
• Location information when device permission has been granted

1.3 Data Supplied by Other Sources

Information may also come from permitted outside sources, such as:

• Driver history and motor-vehicle records obtained from authorized state databases
• Insurance scores that use credit information where state rules allow them
• Prior-loss information from industry resources, including CLUE reports
• Providers used to validate identity
• Records that are lawfully available to the public

2. Reasons We Process Data

We process collected information for purposes that include:

• Operating the Services: Reviewing applications, issuing policies, administering accounts, and handling reported losses
• Evaluating risk: Determining eligibility and calculating a proposed or renewal premium
• Keeping in touch: Answering questions and delivering policy, billing, and service communications
• Meeting legal duties: Following insurance rules, court requirements, and other governing obligations
• Protecting against fraud: Identifying suspicious claims, misuse, and unauthorized account activity
• Improving the experience: Studying usage and refining products, support, and digital features
• Offering relevant updates: Sending permitted product or promotional messages that recipients can opt out of
• Measuring performance: Learning how visitors discover and interact with the Services

3. Limited Disclosures to Others

We do not sell personal information. We may disclose it in limited situations such as the following:

• Reinsurers: Policy details can be provided to organizations that financially support insured risks
• Operational vendors: Contracted companies may support payments, identity checks, claims, technology, and analytics and must protect the data they receive
• Government and regulators: Information can be produced to an insurance department, law-enforcement agency, or other authority when legally required
• Legal matters: A disclosure may be needed to obey an order or respond to a legal claim
• Company transactions: Data may move to a successor if there is a merger, acquisition, reorganization, or asset sale
• Permission from you: Another disclosure can occur when you knowingly authorize it

4. Safeguarding Information

We use administrative, technical, and physical controls designed to protect personal information, including:

• SSL/TLS encryption designed to protect information while it travels across the network
• Payment handling aligned with PCI-DSS requirements
• Extra identity-verification steps when an account feature supports them
• Periodic technical reviews and security testing
• Role-based controls intended to limit sensitive-data access to authorized workers
• Encrypted storage and recurring backup processes

No internet transmission or storage system can promise perfect security. If a breach affects covered information, Simple Shield will provide notices in the manner and timeframe required by governing law.

5. How Long Records Are Kept

Records are maintained only as long as reasonably needed for the purposes in this notice, legal and regulatory duties, disputes, and enforcement of agreements. Current retention examples include:

• Policy files kept for at least seven years after expiration when insurance rules require it
• Claim files maintained for a minimum of ten years
• Suppression records preserved so a marketing opt-out continues to be honored
• Inactive-account data scheduled for deletion after three years without activity, subject to legal exceptions

6. Cookies and Related Tools

Cookies, pixels, web beacons, and comparable technologies help the site function, remember selections, and measure interactions. Browser controls can limit many of these tools, although blocking some of them can prevent certain features from working as intended. Categories may include:

• Necessary cookies: Support core functions and generally cannot be switched off through the site
• Measurement cookies: Show how visitors use pages and features
• Advertising cookies: Help tailor or measure promotional messages
• Settings cookies: Retain selected settings for a future visit

7. Choices and Privacy Requests

State law may give you some or all of the following choices concerning your personal information:

• Request a copy: Ask what personal data is maintained and obtain an eligible copy
• Fix information: Seek an update to information that is inaccurate or incomplete
• Ask us to remove data: Ask for eligible data to be removed, subject to retention exceptions
• Receive a portable copy: Receive qualifying information in a format that can be read by a machine
• Marketing choice: Use the unsubscribe control in a promotional email to stop future messages
• California rights: When the CCPA applies, request required disclosures and exercise privacy rights without unlawful discrimination; Simple Shield does not sell personal data

Send a privacy request to privacy@simpleshieldinsurance.com or telephone 1-800-SIMPLESHIELD. We aim to respond within 30 days, subject to identity verification and any extension allowed by law.

8. Information About Minors

The Services are intended for adults. We do not knowingly request personal information from anyone under 18, and we will remove such information when discovered. Reach us right away if you suspect that information about a minor was provided.

9. Links Operated by Other Organizations

Links may lead to websites operated by other organizations. Their privacy practices are outside our control, so review their notices before sharing information.

10. Updates to This Notice

This notice may change when practices, technology, or law evolves. A material revision will be posted online, and we will send notice to the registered contact no fewer than thirty days ahead of the revised version. Continued use after that date indicates acceptance of the revision.

11. Reaching the Privacy Team

Questions or requests concerning this notice and Simple Shield data practices may be sent to:

• Write to: privacy@simpleshieldinsurance.com
• Telephone: 1-800-SIMPLESHIELD (Monday-Friday, 8 a.m.-8 p.m. Eastern)
• Postal mail: Simple Shield Privacy Office, reached through privacy@simpleshieldinsurance.com