Categories of Personal Information Collected & Disclosed
The following identifies the categories of Personal Information we may collect about you (and may have collected in the prior 12 months). Note that our collection, use and disclosure of Personal Information about you will vary depending upon the circumstances and nature of our interactions or relationship with you. Depending on how you use our Services, we may collect the following categories of Personal Information:
Sources of Personal Information
We generally collect Personal Information from the following categories of sources:
Purposes for Collecting and Disclosing Personal Information
As described in the "How We Use Personal Information" section above, in general, we collect and otherwise process the personal information we collect for the following business or commercial purposes:
Sensitive Personal Information
Notwithstanding the purposes described above, we do not collect, use, or disclose "sensitive personal information" beyond the purposes authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.
Retention of Personal Information
We retain the Personal Information we collect only as reasonably necessary for the purposes described in this Privacy Policy or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting and recordkeeping obligations, to administer certain policies and coverage, and for research, development and safety purposes, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations. From time to time, we may also deidentify your Personal Information, retain it and use it for a business purpose in compliance with CCPA.
Disclosure of Personal Information to Third Parties and Other Recipients
The categories of Personal Information we may have disclosed for a business purpose in the preceding twelve (12) months include: identifiers, online identifiers, customer records, financial information, usage data, geolocation data, audio, video, and other electronic data, inferences, and sensitive personal information.
The categories of third parties and other recipients to whom we may disclose personal information for a business purpose may include:
Additionally, the CCPA defines "sale" as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and "sharing" includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising. While we do not "sell" Personal Information, we may "share" the following categories of Personal Information: online identifiers, and usage data. We disclose this information to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising. We do not sell or share "sensitive personal information," nor do we sell or share any Personal Information about individuals who we know are under sixteen (16) years old.
Rights Regarding Your Personal Information
The CCPA provides California residents with specific rights regarding Personal Information. This section describes your rights under the CCPA and explains how to exercise those rights. Subject to certain exceptions, California consumers have the right to make the following requests:
Right to Know. With respect to the Personal Information we have collected about you in the prior (twelve) 12 months, you have the right to request from us (up to twice per year and subject to certain exemptions and carveouts):
Right to Correct. Subject to certain restrictions, you have the right to request that we correct inaccuracies in your Personal Information.
Right to Delete. Subject to certain conditions and exceptions, you have the right to request deletion of your Personal Information that we have collected about you.
Right to Opt-Out. You have the right to opt-out of "sales" and "sharing" of your Personal Information, as those terms are defined under the CCPA. While we do not "sell" Personal Information, our use of certain third-party analytics and advertising cookies may constitute "sharing" under the CCPA. To exercise your right to opt-out of the "sharing" of your Personal Information, please use the Do Not Sell or Share My Personal Information link at the bottom of our Site.
You also have the right to opt-out of "sales" and "sharing" of your Personal Information through the use of an opt-out preference signal. If our Site detects that your browser or device is transmitting an opt-out preference signal, such as the "global privacy control" - or GPC - signal, we will opt that browser or device out of cookies on our Site that result in a "sale" or "sharing" of your Personal Information. If you come to our Site from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well.
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not engage in uses or disclosures of Personal Information that would trigger the right to limit use of sensitive personal information under the CCPA.
Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.
Exercising Your Rights
If you are a California resident and would like to exercise your CCPA rights, you may do so via any of the methods described below:
Authorized Agent. You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that you directly verify your identity and the authority of your authorized agent.
Businesses operating as an authorized agent on behalf of a California resident must provide both of the following:
Individuals operating as an authorized agent on behalf of a California resident must provide a written authorization document, signed by the California resident, containing the California resident's name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.
We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor's personal information may be at risk.
Verification. Before responding to your request, we must first verify your identity using the Personal Information you recently provided to us. The information we need in order to verify your identity differs depending on the request made and our relationship with you, and might include (as applicable) your name, the email address you regularly use to interact with us, your phone number, your date of birth, and, if available, your policy number. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. In some cases, we may also carry out checks, including with third party identity verification services, to verify your identity before taking any action with your Personal Information. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.
Artificial Intelligence
We or our third party service providers may use artificial intelligence (AI) to provide products or services to you, which may involve the use of your Personal Information from the Sources described herein . We may use AI in connection with our products or services to facilitate and service our business (e.g., assist in underwriting, pricing, claims handling process or data management), as well as to enhance performance and user experience on our websites and applications. The type of AI we use varies based on your relationship with us and by product and service.
Contact Us
If you have any questions about this section of the Privacy Policy, our privacy practices, or our use of AI, or if you wish to exercise your rights under California law, please contact us at:
Chubb Group
Attention: NA Privacy Office
202 Hall's Mill Road, P.O. Box 1600
Whitehouse Station, NJ 08889-1600
Telephone: 1-833-324-9798
E-mail: NAPrivacyOffice@chubb.com