Return to Site
OttoInsurance.com Privacy Policy
At Otto Quotes, LLC, privacy is a top priority, and we are committed to
protecting the personal information of our customers. This Privacy Policy
provides details on how we treat any personal information you may submit
to us. Please note that this Privacy Policy applies only to information
collected through the Site and not to websites maintained by other third
parties to which we link.
1.
INFORMATION WE COLLECT AND USE.
We have collected personal information about individuals, including
individuals who have visited and used our Site; participated in our
promotions; and/or provided their personal information to third parties
who have shared such with us, in the preceding twelve (12) months, as
noted here:
Categories of (PI)
Categories of Sources from which the Personal Information is collected
from?
Business Purpose
Length of Retention
Identifiers, or information that identifies, relates to, describes, or
is capable of being associated with, a particular individual
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☐ Social networks;
- ☒ Data brokers;
- ☒ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing, or fulfilling orders and transactions,
verifying customer information, processing payments, providing
financing, providing advertising or marketing services, providing
analytic services, or providing similar services on behalf of the
business or service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Identifiers collected in conjunction with an individual’s TCPA consent
are retained for a period of 6 years; All other data is retained
indefinitely, unless the consumer requests that their information be
deleted
Characteristics of protected classifications under California or federal
law.
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☒ Social networks;
- ☒ Data brokers;
- ☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Commercial information
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☒ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☒ Social networks;
- ☒ Data brokers;
- ☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Biometric information
- ☒ not applicable (not collected)
Not applicable
Not applicable
Internet or other electronic network activity information
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☒ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☒ Operating systems and platforms;
- ☒ Social networks;
- ☒ Data brokers;
- ☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Geolocation data
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☒ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☒ Operating systems and platforms;
- ☒ Social networks;
- ☒ Data brokers;
- ☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Audio, electronic, visual, thermal, olfactory, or similar information
(sensory data)
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☐ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☒ Operating systems and platforms;
- ☐ Social networks;
- ☐ Data brokers;
- ☒ Other third parties: call centers
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Professional or employment-related information
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☐ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☐ Social networks;
- ☒ Data brokers;
- ☒ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Education information
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☐ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☐ Social networks;
- ☒ Data brokers;
- ☐ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Inferences drawn from any of the information identified above to create
a profile about a consumer reflecting their preferences,
characteristics, psychological trends, predispositions, behavior,
attitudes, intelligence, abilities, and aptitudes
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☒ Advertising networks;
- ☐ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☒ Operating systems and platforms;
- ☐ Social networks;
- ☒ Data brokers;
- ☐ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors,
verifying positioning and quality of ad impressions, and auditing
compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing
intended functionality.
-
☒ Short-term, transient use, provided that the personal information
is not disclosed to another third party and is not used to build a
profile about a consumer or otherwise alter an individual consumer’s
experience outside the current interaction, including, but not
limited to, the contextual customization of ads shown as part of the
same interaction.
-
☒ Performing services on behalf of the business or service provider,
including maintaining or servicing accounts, providing customer
service, processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing financing,
providing advertising or marketing services, providing analytic
services, or providing similar services on behalf of the business or
service provider.
-
☒ Undertaking internal research for technological development and
demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety
of a service or device that is owned, manufactured, manufactured
for, or controlled by the business, and to improve, upgrade, or
enhance the service or device that is owned, manufactured,
manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their
information be deleted
Sensitive personal information
- ☒ not applicable (not collected)
- ☒ not applicable (not disclosed)
Not applicable
As noted in the chart above, we will collect and use personal information
about you to respond to your request for products and services offered
through the Site. Specifically, we collect information you provide to us
in connection with obtaining quotes for insurance products and services.
For example, you will be asked to provide your full name, address,
telephone number, email address, and other information in order to be
matched to insurance carriers and agents who may provide you a quote for
their insurance services. We also collect demographic information.
Demographic information is all other information such as gender, zip code,
or any information that is not tied to your personal information. In
addition, we might receive information about you from other online or
offline sources and may add that information to your existing account.
Additional information about our collection and use of information can be
found in the chart above.
A Special Note about Children's Privacy.
You must be at least 18 years old to use this website. We do not knowingly
collect, use or disclose personal information about visitors under 18
years of age. If you are under 18 years of age, you can use the services
offered on our website only in conjunction with your parents or guardians.
Please see our Terms of Service for more information.
2.
INFORMATION COLLECTION TECHNOLOGIES.
To better serve our users and Service Providers and increase the response
time of the Site, we use various technologies to collect information about
our users, such as:
-
Cookies. Cookies are small bits of code, usually stored on a
user's computer hard drive, which enable a website to "personalize"
itself for each user. We generally use cookies to reduce the time it
takes for pages to load on your computer and to assist with customer
tracking. Customer tracking (or "click-stream") data collected by us is
used to optimize your experience by learning whether or not you
successfully used the Site. Additionally, we may capture click-stream
data on some of our partner's websites, limited to the activity involved
with the completion of offers listed on our website. This information is
used to monitor the performance of our partners. We also may use cookies
to deliver targeted advertising (or allow third parties to deliver
targeted advertising) on our website and other websites.
-
Log Files. We keep track of Internet Protocol (IP) addresses. An
IP Address is a number that is used by computers on the network to
identify your computer every time you log on to the Internet.
-
Clear Gifs a.k.a. Web Beacons. We employ a software technology
called clear gifs (a.k.a. Web Beacons) that help us better manage
content on our site and in our HTML emails by informing us what content
is effective. Clear gifs are tiny graphics with a unique identifier,
similar in function to cookies, and are used to track the online
movement of Web users. Clear gifs are not tied to users' personally
identifiable information. This allows us to gauge the effectiveness of
certain communications and the effectiveness of our marketing campaigns.
-
Pixels and Third Party Tracking Technologies. A pixel tag (also
known as a web beacon) is a piece of code embedded in the Services that
collects information about engagement on the Services. The use of a
pixel allows us to record, for example, that a user has visited a
particular web page or clicked on a particular advertisement. This
Website utilizes third party service providers, including Clicky,
Logrocket and Criteo, among other tracking software providers/platforms.
These third party services provide pixels and third party tracking which
are placed on the Website to record consumer activity and interaction on
the Website, such as scrolling, pages viewed, and buttons clicked. In
addition, such third party tracking technologies track any entry of
information, assist with form population, track key strokes and click
stream data, for the purpose of tracking Website activity, and
documenting and retaining a record of consumer consent. Through your
decision to enter information, you consent to our use of such third
party tracking technologies.
Please note that other third parties, including Google and Meta, provide
pixels which are placed on the Website. Such pixels similarly collect
consumer activity and interactions on the Website, such as scrolling,
pages viewed, and buttons clicked, devices used to access the Site, IP
addresses, and timestamps. Such third parties may use such data collected
via such pixels on our Website for their own advertising and marketing
purposes. To the extent that you have a Facebook account, please note that
Meta may link information collected through its pixel to your Facebook
account and use such for its own personalized advertising purposes, in
accordance with Facebook’s own privacy policy.
We also collect information on whether you responded to a particular
advertisement featured on the Website, and which third party
advertisements and links you click through the Website through the use of
third party tracking pixels, including those from tracking software
providers/platforms. Third party technologies like cookies and tracking
pixels may also be used to collect personal information, in the course of
advertising on or through the Site and perform retargeting.
We automatically collect information when an individual opens one of our
emails, through the use of cookies and tracking pixels. We also
automatically collect information on whether the individual clicked on any
links within such emails. Third party publishers may also automatically
collect information when an individual opens an email promoting the
Website or clicks on a link included in such email, through the use of
cookies and tracking pixels. To the extent that you click on a third party
advertisement, or a particular product or service featured on the Website
or in any email communication or newsletter, we and the applicable third
party collect information on which link you clicked. If you request to
unsubscribe from receiving emails, we and our third party publishers may
add your email address to Our suppression file, to comply with CAN-SPAM.
3.
INFORMATION SHARING AND DISCLOSURE.
If you submit a request on the Site for quotes for insurance products or
services, with your consent we may share the information you have provided
in order to process and fulfill your request for quotes for insurance
products and services. No information will be shared with third parties
for marketing promotional purposes unless we have your consent.
All Service Providers in our network have entered into agreements with us
which require them to secure any personal information provided through the
Site and limit how they can use such information. These Service Providers
are also required to comply with federal and state privacy regulations. By
submitting your request to us, you understand that Service Providers may
contact you by telephone (including through automated calling or on a
recorded line), email, or regular mail based on the information you
provided to us in order to process and fulfill your request, even if you
have opted into the National Do Not Call List administered by the Federal
Trade Commission, any state equivalent Do Not Call List, or the Do Not
Call List of OttoInsurance.com or one of these Service Providers. If one
of the Service Providers contacts you and you wish not to be contacted
again by that Service Provider with respect to your inquiry, then you
should specifically make a request to that Service Provider. Please note
that the Service Providers may maintain the information you provided
whether or not you elect to use their services.
Aggregate, Non-Personal, or De-identified Information. We may share
aggregated information (i.e., information about you and other users
collectively, but not specifically identifiable to you) and other
non-personal, de-identified, or anonymous information we collect.
We may be required to share your personal information with law enforcement
or government agencies in response to subpoenas, court orders,
federal/state audits or similar circumstances whenever we believe it is
necessary to share information in order to investigate, prevent, or take
action regarding illegal activities, suspected fraud, situations involving
potential threats to the physical safety of any person, violations of our
Terms of Service, or as otherwise required by law.
As with any other business, it is possible that we could in the future
enter into a substantial corporate transaction, such as the sale of our
business, a divestiture, merger, consolidation, or asset sale. If such a
transaction occurs, the successor company would have access to the
information maintained by us, including your personal information, but
would continue to be bound by this Privacy Policy unless you consent
otherwise as provided herein.
4.
THIRD PARTY LINKS.
-
Links. This Privacy Policy applies to all information that you
provide on the Site. However, when you visit websites to which our site
links, keep in mind you will be interacting with a third party that
operates under its own privacy and security policy. If you choose to
obtain certain services through a third party site, the data collected
by the third party is governed by that third party's privacy policy. A
third party site will also have its own policy regarding the use of
cookies and clear gifs. We encourage you to review the privacy policies
of any other service provider from whom you request services.
5.
EMAIL.
By providing your contact information to us through the Site, you are
registering to receive communications from us directly, on our website or
through a third party. By providing us with your email address, we will
periodically send you newsletters and other e-mails with offers and
promotions. If you no longer wish to receive these communications, please
let us know by sending an email to us at
requesttodelete@ottoinsurance.com. You may also opt-out by clicking on the
unsubscribe link in our emails.
6.
CONFIDENTIALITY AND SECURITY.
The security of your personal information is very important to us, and we
take several steps to safeguard it. For example, we limit access to
personal information to employees or agents who help provide the products
and services you request. Additionally, we maintain physical, electronic,
and procedural safeguards that comply with or exceed federal standards to
protect your personal information.
7.
STATE PRIVACY SUPPLEMENTAL NOTICE.
The information for residents of each of the featured states below is
intended to supplement the information contained in our primary Privacy
Policy.
I. California Residents – Your Privacy Rights
-
California “Shine the Light” Disclosure. The California “Shine the Light” law gives California residents the
right to request, once a year, information under certain circumstances
to request information from us regarding the types of personal
information we have shared with third parties for their direct marketing
purposes during the immediately preceding calendar year; and the names
and addresses of third parties with whom we have shared the personal
information. California residents may request further information about
our compliance with this law by contacting us via email at
privacyrights@ottoinsurance.com. Please note that we are only required
to respond to one request per customer each year, and we are not
required to respond to requests made by means other than through this
email address.
-
California Consumer Privacy Act of 2018. We adopt this notice to comply with the California Consumer Privacy
Act of 2018 (“CCPA”) and as amended by the California Privacy Rights Act
(“CPRA”). Any terms defined in the CCPA and CPRA have the same meaning
when used in this Notice. The CCPA and CPRA are collectively referred to
as the “CCPA” for purposes of this Notice. If you are a California
resident under the meaning of Sec. 17014 of Title 18 of the Cal. Code of
Regulations, your use of the Site is subject to the CCPA, and all final,
implementing regulations.
-
California Privacy Choices. If you are a resident of California, and subject to certain legal
limitations and exceptions, you may be able to exercise some or all of
the following rights:
-
Notice at Collection: at or before the point of collection, the
right to receive notice of our practices, including the categories
of personal information and any sensitive personal information to be
collected; the purposes for which such information is collected or
used; whether such information is sold or shared; and the length of
time that such information is retained. This information is found
within this section.
-
Right to Know What Personal Information is Collected & Right to
Access Personal Information: The right to know what personal
information the business has collected about the consumer, including
the categories of personal information, categories of sources from
which the personal information is collected, the business or
commercial purpose for collecting, selling, or sharing personal
information, the categories of third parties to whom the business
discloses personal information, and the specific pieces of personal
information the business has collected about the consumer;
-
Right to Delete: The right to request that a business delete
personal information that the business has collected from the
consumer, subject to certain exceptions;
-
Right to Correct: The right to correct inaccurate personal
information that a business maintains about a consumer;
-
Right to Opt-Out of the Sale or Sharing of Personal Information: if
the business sells or shares personal information, the right to
opt-out of the sale or sharing of personal information by the
business;
-
Right to Limit the Use or Disclosure of Sensitive Personal
Information: if the business uses or discloses sensitive personal
information for reasons other than those in § 7027(m), the right to
limit the use or disclosure of such sensitive personal information;
and
-
Right to No Discrimination: The right not to receive discriminatory
treatment by the business for the exercise of CCPA privacy rights.
-
What Personal Information Do We Collect? We have
collected personal information about consumers within the preceding
twelve (12) months as detailed above in Section 4.
-
What Personal Information Do We Disclose? We
have disclosed personal information about consumers, with their consent,
as detailed above in Section 3. We do not use or disclose sensitive
personal information.
-
What Personal Information Do We Sell or Share?
In the preceding 12 months, we have shared personal information as
detailed above in Section 3. Also, in the event that we, or
substantially all of our assets, are acquired, such personal information
may be included within the transferred assets. In the event we become
the subject of an insolvency proceeding, whether voluntary or
involuntary, we or our liquidator, administrator, receiver or
administrative receiver may sell, license or otherwise dispose of, such
information in a transaction approved by the court.
We do not have any actual knowledge of the sale of personal
information of minors under 18 years of age. There are no financial
incentives to disclose.
-
How to Submit a Request Under the CCPA. California residents that wish to exercise any of the above data
rights under the CCPA may submit a request that specifies the right(s)
they wish to invoke. To submit a request to know, please email your
request to requesttoknow@ottoinsurance.com. To submit a request to
delete, please email your request to requesttodelete@ottoinsurance.com.
To submit any other request, please email your request to
privacyrights@ottoinsurance.com.
To process your request, we may require that you submit the following
information in conjunction with your request: your first name, last
name, phone number, a California address, and email address. We may at
times need to request additional Personal Information from you, taking
into consideration our relationship with you and the sensitivity of
your request.
The information which you provide in conjunction with your request
will be used to verify your request and to attempt to identify you
within our data records. The information which you submit in
conjunction with your request to know will be used for the express
purposes of verification and providing you with responsive information
to your request, if required. Please note that we utilize a two-step
process for requests to delete, whereby you first submit your request
to delete, and second, you separately confirm that you want your
personal information deleted. The CCPA permits requests to know
regarding collection and sale or sharing from the same consumer no
more than twice in a twelve (12) month period. In certain
circumstances, we may decline a privacy rights request, particularly
where you are not a resident of California, or where we are unable to
verify your identity.
To opt-out of the sale of your personal information, you may submit a
request by emailing us at privacyrights@ottoinsurance.com.
-
How an Authorized Agent Can Make a Request Under the CCPA. If you elect to use an authorized agent to exercise your right to
submit a request to know, request to delete, and/or request to correct,
before processing the request, we require the purported authorized agent
to provide proof of your signed permission to submit the request (unless
there is a power of attorney in place pursuant to Probate Code §§
4121-4130). We also require that you directly verify your own identity
with us, and directly confirm with us that you provided the authorized
agent permission to submit the request on your behalf. The information
submitted will not be used for any purposes other than to verify the
request, fulfill the request, and fraud prevention.
-
Updates. We may revise this section from time to time as implementing
regulations further develop and come into effect and we are able to
provide you with better information on your CCPA rights and how to
exercise them.
-
Retention of Personal Information. We retain personal information as long as is reasonably necessary to
fulfill the purpose for which it was collected, as required by an
applicable law, rule, regulation or contractual provision. We will
retain your Personal Information for the purposes of commercial
marketing to you until you request we cease further efforts to provide
you such offers or in the event you request deletion of your personal
information. To determine the appropriate duration of the retention of
personal information, we consider the amount, nature, and sensitivity of
the personal information, the potential risk of harm from unauthorized
use or disclosure of personal information, and if we can attain our
objectives by other means, as well as our legal, regulatory, tax,
accounting, and other applicable obligations.
As such, we retain personal information for as long as you continue to
use our Site and/or Services for the purposes explained in our Privacy
Policy. When you discontinue the use of our Site or Services, we will
retain your personal information for as long as necessary to comply
with our legal obligations, to resolve disputes and defend claims, as
well as, for any additional purpose based on the choices you have
made, such as to receive marketing communications. In particular, we
will retain personal information provided, including complaints,
claims, and any other personal information provided during the
duration of your agreement with us for the services until the
statutory limitation periods have expired and the necessary for the
establishment, exercise, or defense of legal claims.
Once retention of the personal information is no longer necessary for
the purposes outlined above, we will either delete or de-identify the
personal information or, if this is not possible (for example, because
personal information has been stored in backup archives), then we will
securely store the personal information and isolate it from further
processing until deletion or de-identification is possible.
-
Out Preference Signal (Global Privacy Control). You may use an Opt-Out Preference Signal, such as the Global Privacy
Control (“GPC”). Our database containing your information may not be
linked to your browser identification and because your request will be
linked to your browser identifier only and not linked to any account or
database information as the connection between your browser and our
database is not known to us, we may not be able to fulfill this request.
If you would like us to make the connection between your browser and
your account within our database or wish to opt-out of the sale of your
personal information, please email us privacyrights@ottoinsurance.com.
II. Colorado Residents – Your Privacy Rights
Pursuant to the Colorado Privacy Act (“CPA”), the above identified
categories of personal data are collected or processed, for the above
identified purposes. The categories of personal data that are shared with
third parties are also noted above, as are the categories of such third
parties. We do sell personal data with your consent, as noted above, and
engage in targeted advertising. To opt out of our sale of or processing of
personal data and/or targeted advertising, please submit your request by
emailing us at privacyrights@ottoinsurance.com. Your authorized agent may
opt out on your behalf.
Colorado residents have the following data rights under the CPA:
-
- Right to opt-out: of the processing of personal data for targeted
advertising, sale of personal data, or profiling in furtherance of
decisions that produce legal or similarly significant effects concerning
a consumer;
-
- Right to access: may request confirmation on whether we process
personal data concerning the consumer and to access the consumer’s
personal data;
-
- Right to correction: may correct inaccuracies in the consumer’s
personal data, taking into account the nature of the personal data and
the purposes of the processing;
- - Right to deletion: may delete personal data;
-
- Right to data portability: in conjunction with the right to access, a
consumer may obtain the personal data in a portable and, to the extent
technically feasible, readily usable format
Colorado residents that wish to exercise any of the above data rights
under the CPA may submit a request that specifies the right(s) they wish
to invoke by emailing us at privacyrights@ottoinsurance.com. We require
the following information to authenticate your identity: your first and
last name and a Colorado address. Authorized agents of Colorado residents
may submit a request in the same manner. Please note that we must be able
to authenticate, with commercially reasonable effort, the identity of the
consumer and the authorized agent’s authority to act on such consumer’s
behalf, by requiring the following information: the Colorado resident’s
first and last name and Colorado address, and proof that such Colorado
resident has authorized the agent to submit a request on their behalf.
Our contact information is below. To the extent that we decline to act
upon your request, you may appeal by emailing us at
privacyrights@ottoinsurance.com. You may contact the Attorney General if
you have concerns about the result of the appeal.
III. Connecticut Residents – Your Privacy Rights
Pursuant to the Connecticut Act Concerning Personal Data Privacy and
Online Monitoring (“CTDPA”), the above identified categories of personal
data are processed, for the above identified purposes. The categories of
personal data that are shared with third parties are also noted above, as
are the categories of such third parties.
We do sell personal data, as noted above, to the above identified
categories of third parties, and engage in targeted advertising. To opt
out of our sale of or processing of personal data and/or targeted
advertising, please submit your request by emailing us at
privacyrights@ottoinsurance.com. Your authorized agent may opt out on your
behalf.
Connecticut residents have the following rights under the CTDPA:
-
- Right to confirmation and access: Confirm whether or not a controller
is processing the consumer’s personal data and access such data (unless
confirmation or access would require the controller to reveal a trade
secret);
-
- Right to correct: may correct inaccuracies in the consumer’s personal
data;
-
- Right to delete: may delete personal data provided by, or obtained
about, the consumer;
-
- Right to data portability: may obtain a copy in a portable and, to the
extent technically feasible, readily usable format that allows consumer
to transmit data to another controller without hindrance, where
processing is carried out by automated means, provided that controller
shall not be required to reveal any trade secret; and
-
- Right to opt-out of certain data processing: may opt-out of the
processing of personal data for targeted advertising, sale of personal
data, or profiling in furtherance of solely automated decisions that
produce legal or similarly significant effects concerning the consumer.
Connecticut residents that wish to exercise any of the above rights under
the CTDPA may submit a request that specifies the right(s) they wish to
invoke by emailing us at privacyrights@ottoinsurance.com. You are
permitted to designate an authorized agent. Information provided in
response to a consumer request shall be provided free of charge, once per
consumer during any twelve-month period. To the extent that we decline to
act upon your request, you may appeal by emailing us at
privacyrights@ottoinsurance.com.
IV. Oregon Residents – Your Privacy Rights
Pursuant to the Oregon Consumer Privacy Act (“OCPA”) (ORS
646A.570-646A.589), the above identified categories of personal data are
processed, for the above identified purposes. The categories of personal
data that are shared with third parties are also noted above, as are the
categories of such third parties.
We do sell personal data, as noted above, and engage in targeted
advertising. To opt out of our sale of personal data and targeted
advertising, please submit your request by emailing us at
privacyrights@ottoinsurance.com. Your authorized agent may opt out on your
behalf.
Oregon residents have the following rights under the OCPA:
-
- Right to access: may request confirmation on whether we are processing
or have processed the consumer’s personal data and obtain a copy of such
personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal
data, taking into account the nature of the personal data and the
purposes of the processing;
-
- Right to delete: may delete personal data, including personal data the
consumer provided to the controller, personal data the controller
obtained from another source and derived data);
-
- Right to opt-out of certain data processing: may opt-out of the
processing of personal data for targeted advertising, sale of personal
data, or profiling the consumer in furtherance of decisions that produce
legal effects or effects of similar significance.
Oregon residents that wish to exercise any of the above rights under the
OCPA may submit a reques that specifies the right(s) they wish to invoke
by emailing us at privacyrights@ottoinsurance.com. To the extent that we
decline to act upon your request, you may appeal by emailing us at
privacyrights@ottoinsurance.com.
V. Texas Residents – Your Privacy Rights
Pursuant to the Texas Data Privacy and Security Act (Texas Bus. & Com.
Code § 541.001 et seq.), the above identified categories of personal data
are processed, for the above identified purposes. The categories of
personal data that are shared with third parties are also noted above, as
are the categories of such third parties.
We do sell personal data, as noted above, and engage in targeted
advertising. To opt out of our sale of personal data and targeted
advertising, please submit your request by emailing us at
privacyrights@ottoinsurance.com.
Texas residents have the following rights under the Texas Data Privacy and
Security Act:
-
- Right to access: may request confirmation on whether we process the
consumer’s personal data and obtain access such personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal
data, taking into account the nature of the personal data and the
purposes of the processing of the consumer’s personal data;
- - Right to delete: may delete personal data;
-
- Right to data portability: if the data is available in a digital
format, may obtain a copy in a portable and, to the extent technically
feasible, readily usable format; and
-
- Right to opt-out of certain data processing: may opt-out of the
processing of personal data for targeted advertising, sale of personal
data, or profiling.
Texas residents that wish to exercise any of the above rights under the
Texas Data Privacy and Security Act may submit a request that specifies
the right(s) they wish to invoke by emailing us at
privacyrights@ottoinsurance.com. Texas residents are permitted to
designate another person to serve as their agent and act on their behalf
as an authorized agent. Please note that we are not required to act on an
opt-out request from an authorized agent unless we are able to verify,
with commercially reasonable effort, the identity of the consumer and the
authorized agent’s authority to act on the consumer’s behalf. To the
extent that we decline to act upon your request, you may appeal by
emailing us regarding your appeal at privacyrights@ottoinsurance.com.
VI. Utah Residents – Your Privacy Rights
Pursuant to the Utah Consumer Privacy Act (“UCPA”) (§ 13-61-101 et seq.),
the above identified categories of personal data are processed, for the
above identified purposes. The categories of personal data that are shared
with third parties are also noted above, as are the categories of such
third parties.
We do sell personal data, as noted above, and process personal data for
targeted advertising. To opt out of our sale of personal data and/or the
processing of your personal data for targeted advertising, please submit
your request by emailing us at privacyrights@ottoinsurance.com.
Consumers have the following rights under the UCPA:
-
- Right to access: may request confirmation whether a controller is
processing the consumer’s personal data; and access the consumer’s
personal data;
- - Right to delete: may delete the consumer’s personal data;
-
- Right to obtain a copy/portability: may obtain a copy of the
consumer’s personal data, that the consumer previously provided to the
controller, in a format that: to the extent technically feasible, is
portable; to the extent practicable, is readily usable; and allows the
consumer to transmit the data to another controller without impediment,
where the processing is carried out by automated means;
-
- Right to opt-out of certain data processing: may opt-out of the
processing of personal data for purposes of targeted advertising, or the
sale of personal data.
Utah consumers that wish to exercise any of the above rights under the
UCPA may submit a request that specifies the right they wish to exercise
by emailing us at privacyrights@ottoinsurance.com. We require the
following information to authenticate your identity: your first and last
name and a Utah address. Please note that We must be able to authenticate
a consumer request to exercise a right under the UCPA, using commercially
reasonable efforts.
VII. Virginia Residents – Your Privacy Rights
Pursuant to the Virginia Consumer Data Protection Act (“CDPA”) (Code of
Virginia § 59.1-571 et seq.), the above identified categories of personal
data are processed, for the above identified purposes. The categories of
personal data that are shared with third parties are also noted above, as
are the categories of such third parties.
We do sell personal data, as noted above, and engage in targeted
advertising. To opt out of our sale of personal data and targeted
advertising, please submit your request by emailing us at
privacyrights@ottoinsurance.com.
Virginia residents have the following rights under the CDPA:
-
- Right to access: may request confirmation on whether we process the
consumer’s personal data and obtain access such personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal
data;
- - Right to delete: may delete personal data;
-
- Right to data portability: may obtain a copy in a portable and, to the
extent technically feasible, readily usable format; and
-
- Right to opt-out of certain data processing: may opt-out of the
processing of personal data for targeted advertising, sale of personal
data, or profiling.
Virginia residents that wish to exercise any of the above rights under the
CDPA may submit a request that specifies the right(s) they wish to invoke
by emailing us at privacyrights@ottoinsurance.com. To the extent that we
decline to act upon your request, you may appeal by emailing us regarding
your appeal at privacyrights@ottoinsurance.com.
9.
UPDATING, OBTAINING OR REMOVING YOUR INFORMATION.
Upon request via email or mail, we will provide you a summary of personal
information retained by us. We will only send your personal records to
your email address or postal address that we have on file for you. To
modify, correct, change, update or remove your personal record from our
database, please send your request via email to
requesttodelete@ottoinsurance.com.
10.
VISITORS OUTSIDE THE UNITED STATES.
This Privacy Policy is intended to cover collection of information on our
Site from residents of the United States. The data protection and other
laws of the United States and other countries might not be as
comprehensive as those in your country. By visiting our site or using our
Services, you acknowledge and agree that your information may be
transferred to our facilities and those third parties with whom we share
it as described in this Privacy Policy, regardless of the laws of your
residence country.
11.
CHANGES TO OUR PRIVACY POLICY.
We have the right to make material changes to this Privacy Policy at our
discretion and at any time. The only notice to you will be our posting of
the updated Privacy Policy on the Website and update the effective date.
Please review this policy often so that you will always know what
information we gather, how we might use that information, and with whom we
disclose, share, and sell it.
NEED MORE INFORMATION OR HAVING DIFFICULTY ACCESSING THIS INFORMATION?
If you have any questions or concerns regarding your privacy rights, or
our privacy practices, please email privacyrights@ottoinsurance.com, or
contact us by mail at 1111 Lincoln Road, Suite 657, Miami Beach, FL 33139.
Further, if you have a disability which interferes with your ability to
access this policy, accommodations can be made to present the policy in an
alternative format, to assist you. If you would like to receive this
information in another format that is accessible to your needs (for
example: audio, large print, etc.) please email
privacyrights@ottoinsurance.com.
Last Updated: July 27, 2024