Return to Site
OttoInsurance.com Privacy Policy
At OttoInsurance.com (the “Site”), privacy is a top priority, and we are committed to protecting the
personal information of our customers. This Privacy Policy provides details on how we treat any personal
information you may submit to us. Please note that this Privacy Policy applies only to information collected
through the Site and not to websites maintained by other third parties to which we link.
1.
INFORMATION WE COLLECT AND USE.
We have collected personal information about individuals, including
individuals who have visited and used our Site; participated in our
promotions; and/or provided their personal information to third parties
who have shared such with us, in the preceding twelve (12) months, as
noted here:
Categories of (PI)
Categories of Sources from which the Personal Information is collected from?
Business Purpose
Length of Retention
Identifiers, or information that identifies, relates to, describes, or is capable of being associated with, a particular individual
- ☐ not applicable (not collected)
- ☒ Consumer directly;
- ☐ Advertising networks;
- ☒ ISPs;
- ☒ Data analytics providers;
- ☐ Gov’t entities;
- ☐ Operating systems and platforms;
- ☐ Social networks;
- ☒ Data brokers;
- ☒ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing, or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Identifiers collected in conjunction with an individual’s TCPA consent are retained for a period of 6 years;
All other data is retained indefinitely, unless the consumer requests that their information be deleted
Characteristics of protected classifications under California or federal law.
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☐ Advertising networks;
-
☒ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☐ Operating systems and platforms;
-
☒ Social networks;
-
☒ Data brokers;
-
☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Commercial information
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☒ Advertising networks;
-
☒ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☐ Operating systems and platforms;
-
☒ Social networks;
-
☒ Data brokers;
-
☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Biometric information
-
☒ not applicable (not collected)
Not applicable
Not applicable
Internet or other electronic network activity information
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☒ Advertising networks;
-
☒ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☒ Operating systems and platforms;
-
☒ Social networks;
-
☒ Data brokers;
-
☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Geolocation data
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☒ Advertising networks;
-
☒ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☒ Operating systems and platforms;
-
☒ Social networks;
-
☒ Data brokers;
-
☐ Other third parties
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Audio, electronic, visual, thermal, olfactory, or similar information (sensory data)
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☐ Advertising networks;
-
☐ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☒ Operating systems and platforms;
-
☐ Social networks;
-
☐ Data brokers;
-
☒ Other third parties: call centers
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Professional or employment-related information
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☐ Advertising networks;
-
☐ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☐ Operating systems and platforms;
-
☐ Social networks;
-
☒ Data brokers;
-
☒ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Education information
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☐ Advertising networks;
-
☐ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☐ Operating systems and platforms;
-
☐ Social networks;
-
☒ Data brokers;
-
☐ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting their preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes
-
☐ not applicable (not collected)
-
☒ Consumer directly;
-
☒ Advertising networks;
-
☐ ISPs;
-
☒ Data analytics providers;
-
☐ Gov’t entities;
-
☒ Operating systems and platforms;
-
☐ Social networks;
-
☒ Data brokers;
-
☐ Other third parties: credit reporting agencies
-
☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
-
☒ Helping to ensure security and integrity;
-
☒ Debugging to identify and repair errors that impair existing intended functionality.
-
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
-
☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
-
☒ Undertaking internal research for technological development and demonstration.
-
☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Retained indefinitely, unless the consumer requests that their information be deleted
Sensitive personal information
-
☒ not applicable (not collected)
-
☒ not applicable (not disclosed)
Not applicable
As noted in the chart above, we will collect and use personal information about you to respond to your
request for products and services offered through the Site. Specifically, we collect information you provide
to us in connection with obtaining quotes for insurance products and services. For example, you will be
asked to provide your full name, address, telephone number, email address, and other information in order to
be matched to insurance carriers and agents who may provide you a quote for their insurance services. We
also collect demographic information. Demographic information is all other information such as gender, zip
code, or any information that is not tied to your personal information. In addition, we might receive
information about you from other online or offline sources and may add that information to your existing
account.
Additional information about our collection and use of information can be found in the chart above.
A Special Note about Children's Privacy.
You must be at least 18 years old to use this website. We do not knowingly collect, use or disclose personal
information about visitors under 18 years of age. If you are under 18 years of age, you can use the services
offered on our website only in conjunction with your parents or guardians. Please see our Terms of Service
for more information.
2.
INFORMATION COLLECTION TECHNOLOGIES.
To better serve our users and Service Providers and increase the response time of the Site, we use various
technologies to collect information about our users, such as:
-
Cookies. Cookies are small bits of code, usually stored on a user's computer hard drive, which enable a
website to "personalize" itself for each user. We generally use cookies to reduce the time it takes for
pages to load on your computer and to assist with customer tracking. Customer tracking (or "click-stream")
data collected by us is used to optimize your experience by learning whether or not you successfully used
the Site. Additionally, we may capture click-stream data on some of our partner's websites, limited to the
activity involved with the completion of offers listed on our website. This information is used to monitor
the performance of our partners. We also may use cookies to deliver targeted advertising (or allow third
parties to deliver targeted advertising) on our website and other websites.
-
Log Files. We keep track of Internet Protocol (IP) addresses. An IP Address is a number that is used by
computers on the network to identify your computer every time you log on to the Internet.
-
Clear Gifs a.k.a. Web Beacons. We employ a software technology called clear gifs (a.k.a. Web Beacons)
that help us better manage content on our site and in our HTML emails by informing us what content is
effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are
used to track the online movement of Web users. Clear gifs are not tied to users' personally identifiable
information. This allows us to gauge the effectiveness of certain communications and the effectiveness of
our marketing campaigns.
-
Pixels and Third Party Tracking Technologies. A pixel tag (also known as a web beacon) is a piece of
code embedded in the Services that collects information about engagement on the Services. The use of a pixel
allows us to record, for example, that a user has visited a particular web page or clicked on a particular
advertisement. This Website utilizes third party service providers, including Clicky, Logrocket and Criteo,
among other tracking software providers/platforms. These third party services provide pixels and third party
tracking which are placed on the Website to record consumer activity and interaction on the Website, such as
scrolling, pages viewed, and buttons clicked. In addition, such third party tracking technologies track any
entry of information, assist with form population, track key strokes and click stream data, for the purpose
of tracking Website activity, and documenting and retaining a record of consumer consent. Through your
decision to enter information, you consent to our use of such third party tracking technologies.
Please note that other third parties, including Google and Meta, provide pixels which are placed on the
Website. Such pixels similarly collect consumer activity and interactions on the Website, such as scrolling,
pages viewed, and buttons clicked, devices used to access the Site, IP addresses, and timestamps. Such third
parties may use such data collected via such pixels on our Website for their own advertising and marketing
purposes. To the extent that you have a Facebook account, please note that Meta may link information
collected through its pixel to your Facebook account and use such for its own personalized advertising
purposes, in accordance with Facebook’s own privacy policy.
We also collect information on whether you responded to a particular advertisement featured on the Website,
and which third party advertisements and links you click through the Website through the use of third party
tracking pixels, including those from tracking software providers/platforms. Third party technologies like
cookies and tracking pixels may also be used to collect personal information, in the course of advertising
on or through the Site and perform retargeting.
We automatically collect information when an individual opens one of our emails, through the use of cookies
and tracking pixels. We also automatically collect information on whether the individual clicked on any
links within such emails. Third party publishers may also automatically collect information when an
individual opens an email promoting the Website or clicks on a link included in such email, through the use
of cookies and tracking pixels. To the extent that you click on a third party advertisement, or a particular
product or service featured on the Website or in any email communication or newsletter, we and the
applicable third party collect information on which link you clicked. If you request to unsubscribe from
receiving emails, we and our third party publishers may add your email address to Our suppression file, to
comply with CAN-SPAM.
3.
INFORMATION SHARING AND DISCLOSURE.
If you submit a request on the Site for quotes for insurance products or services, with your consent we may
share the information you have provided in order to process and fulfill your request for quotes for
insurance products and services. No information will be shared with third parties for marketing promotional
purposes unless we have your consent.
All Service Providers in our network have entered into agreements with us which require them to secure any
personal information provided through the Site and limit how they can use such information. These Service
Providers are also required to comply with federal and state privacy regulations. By submitting your request
to us, you understand that Service Providers may contact you by telephone (including through automated
calling or on a recorded line), email, or regular mail based on the information you provided to us in order
to process and fulfill your request, even if you have opted into the National Do Not Call List administered
by the Federal Trade Commission, any state equivalent Do Not Call List, or the Do Not Call List of
OttoInsurance.com or one of these Service Providers. If one of the Service Providers contacts you and you
wish not to be contacted again by that Service Provider with respect to your inquiry, then you should
specifically make a request to that Service Provider. Please note that the Service Providers may maintain
the information you provided whether or not you elect to use their services.
Aggregate, Non-Personal, or De-identified Information. We may share aggregated information (i.e.,
information about you and other users collectively, but not specifically identifiable to you) and other
non-personal, de-identified, or anonymous information we collect.
We may be required to share your personal information with law enforcement or government agencies in
response to subpoenas, court orders, federal/state audits or similar circumstances whenever we believe it is
necessary to share information in order to investigate, prevent, or take action regarding illegal
activities, suspected fraud, situations involving potential threats to the physical safety of any person,
violations of our Terms of Service, or as otherwise required by law.
As with any other business, it is possible that we could in the future enter into a substantial corporate
transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale. If such
a transaction occurs, the successor company would have access to the information maintained by us, including
your personal information, but would continue to be bound by this Privacy Policy unless you consent
otherwise as provided herein.
4.
THIRD PARTY LINKS.
-
Links. This Privacy Policy applies to all information that you provide on the Site. However, when
you visit websites to which our site links, keep in mind you will be interacting with a third party that
operates under its own privacy and security policy. If you choose to obtain certain services through a
third party site, the data collected by the third party is governed by that third party's privacy
policy. A third party site will also have its own policy regarding the use of cookies and clear gifs. We
encourage you to review the privacy policies of any other service provider from whom you request
services.
5.
EMAIL.
By providing your contact information to us through the Site, you are registering to receive communications
from us directly, on our website or through a third party. By providing us with your email address, we will
periodically send you newsletters and other e-mails with offers and promotions. If you no longer wish to
receive these communications, please let us know by sending an email to us at info@ottoinsurance.com. You
may also opt-out by clicking on the unsubscribe link in our emails.
6.
CONFIDENTIALITY AND SECURITY.
The security of your personal information is very important to us, and we take several steps to safeguard
it. For example, we limit access to personal information to employees or agents who help provide the
products and services you request. Additionally, we maintain physical, electronic, and procedural safeguards
that comply with or exceed federal standards to protect your personal information.
7.
STATE PRIVACY SUPPLEMENTAL NOTICE.
The information for residents of each of the featured states below is intended to supplement the information
contained in our primary Privacy Policy.
I. California Residents – Your Privacy Rights
-
California “Shine the Light” Disclosure. The California “Shine the Light” law
gives California residents
the right to request, once a year, information under certain circumstances to request information from
us regarding the types of personal information we have shared with third parties for their direct
marketing purposes during the immediately preceding calendar year; and the names and addresses of third
parties with whom we have shared the personal information. California residents may request further
information about our compliance with this law by contacting us via email at
privacyrights@ottoinsurance.com. Please note that we are only required to respond to one request per
customer each year, and we are not required to respond to requests made by means other than through this
email address.
-
California Consumer Privacy Act of 2018. We adopt this notice to comply with the
California Consumer Privacy Act of 2018 (“CCPA”) and as amended by the California Privacy Rights Act
(“CPRA”). Any terms defined in the CCPA and CPRA have the same meaning when used in this Notice. The
CCPA and CPRA are collectively referred to as the “CCPA” for purposes of this Notice. If you are a
California resident under the meaning of Sec. 17014 of Title 18 of the Cal. Code of Regulations, your
use of the Site is subject to the CCPA, and all final, implementing regulations.
-
California Privacy Choices. If you are a resident of California, and subject to
certain legal limitations and exceptions, you may be able to exercise some or all of the following
rights:
-
Notice at Collection: at or before the point of collection, the right to receive notice of our
practices, including the categories of personal information and any sensitive personal
information to be collected; the purposes for which such information is collected or used;
whether such information is sold or shared; and the length of time that such information is
retained. This information is found within this section.
-
Right to Know What Personal Information is Collected & Right to Access Personal Information: The
right to know what personal information the business has collected about the consumer, including
the categories of personal information, categories of sources from which the personal
information is collected, the business or commercial purpose for collecting, selling, or sharing
personal information, the categories of third parties to whom the business discloses personal
information, and the specific pieces of personal information the business has collected about
the consumer;
-
Right to Delete: The right to request that a business delete personal information that the
business has collected from the consumer, subject to certain exceptions;
-
Right to Correct: The right to correct inaccurate personal information that a business maintains
about a consumer;
-
Right to Opt-Out of the Sale or Sharing of Personal Information: if the business sells or shares
personal information, the right to opt-out of the sale or sharing of personal information by the
business;
-
Right to Limit the Use or Disclosure of Sensitive Personal Information: if the business uses or
discloses sensitive personal information for reasons other than those in § 7027(m), the right to
limit the use or disclosure of such sensitive personal information; and
-
Right to No Discrimination: The right not to receive discriminatory treatment by the business
for the exercise of CCPA privacy rights.
-
What Personal Information Do We Collect? We have collected personal information
about consumers within the preceding twelve (12) months as detailed above in Section 4.
-
What Personal Information Do We Disclose? We have disclosed personal information
about consumers, with their consent, as detailed above in Section 3. We do not use or disclose sensitive
personal information.
-
What Personal Information Do We Sell or Share? In the preceding 12 months, we
have shared personal information as detailed above in Section 3. Also, in the event that we, or
substantially all of our assets, are acquired, such personal information may be included within the
transferred assets. In the event we become the subject of an insolvency proceeding, whether voluntary or
involuntary, we or our liquidator, administrator, receiver or administrative receiver may sell, license
or otherwise dispose of, such information in a transaction approved by the court.
We do not have any actual knowledge of the sale of personal information of minors under 18 years of age.
There are no financial incentives to disclose.
-
How to Submit a Request Under the CCPA. California residents that wish to
exercise any of the above data rights under the CCPA may submit a request that specifies the right(s)
they wish to invoke. To submit a request to know, please email your request to
requesttoknow@ottoinsurance.com. To submit a request to delete, please email your request to
requesttodelete@ottoinsurance.com. To submit any other request, please email your request to
privacyrights@ottoinsurance.com.
To process your request, we may require that you submit the following information in conjunction
with your request: your first name, last name, phone number, a California address, and email
address. We may at times need to request additional Personal Information from you, taking into
consideration our relationship with you and the sensitivity of your request.
The information which you provide in conjunction with your request will be used to verify your
request and to attempt to identify you within our data records. The information which you submit in
conjunction with your request to know will be used for the express purposes of verification and
providing you with responsive information to your request, if required. Please note that we utilize
a two-step process for requests to delete, whereby you first submit your request to delete, and
second, you separately confirm that you want your personal information deleted. The CCPA permits
requests to know regarding collection and sale or sharing from the same consumer no more than twice
in a twelve (12) month period. In certain circumstances, we may decline a privacy rights request,
particularly where you are not a resident of California, or where we are unable to verify your
identity.
To opt-out of the sale of your personal information, you may submit a request by emailing us at
privacyrights@ottoinsurance.com.
-
How an Authorized Agent Can Make a Request Under the CCPA. If you elect to use
an authorized agent to exercise your right to submit a request to know, request to delete, and/or
request to correct, before processing the request, we require the purported authorized agent to provide
proof of your signed permission to submit the request (unless there is a power of attorney in place
pursuant to Probate Code §§ 4121-4130). We also require that you directly verify your own identity with
us, and directly confirm with us that you provided the authorized agent permission to submit the request
on your behalf. The information submitted will not be used for any purposes other than to verify the
request, fulfill the request, and fraud prevention.
-
Updates. We may revise this section from time to time as implementing
regulations further develop and come into effect and we are able to provide you with better information
on your CCPA rights and how to exercise them.
-
Retention of Personal Information. We retain personal information as long as is
reasonably necessary to fulfill the purpose for which it was collected, as required by an applicable
law, rule, regulation or contractual provision. We will retain your Personal Information for the
purposes of commercial marketing to you until you request we cease further efforts to provide you such
offers or in the event you request deletion of your personal information. To determine the appropriate
duration of the retention of personal information, we consider the amount, nature, and sensitivity of
the personal information, the potential risk of harm from unauthorized use or disclosure of personal
information, and if we can attain our objectives by other means, as well as our legal, regulatory, tax,
accounting, and other applicable obligations.
As such, we retain personal information for as long as you continue to use our Site and/or Services
for the purposes explained in our Privacy Policy. When you discontinue the use of our Site or
Services, we will retain your personal information for as long as necessary to comply with our legal
obligations, to resolve disputes and defend claims, as well as, for any additional purpose based on
the choices you have made, such as to receive marketing communications. In particular, we will
retain personal information provided, including complaints, claims, and any other personal
information provided during the duration of your agreement with us for the services until the
statutory limitation periods have expired and the necessary for the establishment, exercise, or
defense of legal claims.
Once retention of the personal information is no longer necessary for the purposes outlined above, we
will either delete or de-identify the personal information or, if this is not possible (for example,
because personal information has been stored in backup archives), then we will securely store the
personal information and isolate it from further processing until deletion or de-identification is
possible.
-
Out Preference Signal (Global Privacy Control). You may use an Opt-Out
Preference Signal, such as the Global Privacy Control (“GPC”). Our database containing your information
may not be linked to your browser identification and because your request will be linked to your browser
identifier only and not linked to any account or database information as the connection between your
browser and our database is not known to us, we may not be able to fulfill this request. If you would
like us to make the connection between your browser and your account within our database or wish to
opt-out of the sale of your personal information, please email us privacyrights@ottoinsurance.com.
II. Colorado Residents – Your Privacy Rights
Pursuant to the Colorado Privacy Act (“CPA”), the above identified categories of personal data are collected
or processed, for the above identified purposes. The categories of personal data that are shared with third
parties are also noted above, as are the categories of such third parties. We do sell personal data with
your consent, as noted above, and engage in targeted advertising. To opt out of our sale of or processing of
personal data and/or targeted advertising, please submit your request by emailing us at
privacyrights@ottoinsurance.com. Your authorized agent may opt out on your behalf.
Colorado residents have the following data rights under the CPA:
-
- Right to opt-out: of the processing of personal data for targeted advertising, sale of personal data, or
profiling in furtherance of decisions that produce legal or similarly significant effects concerning a
consumer;
-
- Right to access: may request confirmation on whether we process personal data concerning the consumer
and to access the consumer’s personal data;
-
- Right to correction: may correct inaccuracies in the consumer’s personal data, taking into account the
nature of the personal data and the purposes of the processing;
-
- Right to deletion: may delete personal data;
-
- Right to data portability: in conjunction with the right to access, a consumer may obtain the personal
data in a portable and, to the extent technically feasible, readily usable format
Colorado residents that wish to exercise any of the above data rights under the CPA may submit a request that
specifies the right(s) they wish to invoke by emailing us at privacyrights@ottoinsurance.com. We require the
following information to authenticate your identity: your first and last name and a Colorado address. Authorized
agents of Colorado residents may submit a request in the same manner. Please note that we must be able to
authenticate, with commercially reasonable effort, the identity of the consumer and the authorized agent’s authority
to act on such consumer’s behalf, by requiring the following information: the Colorado resident’s first and last
name and Colorado address, and proof that such Colorado resident has authorized the agent to submit a request on
their behalf.
Our contact information is below. To the extent that we decline to act upon your request, you may appeal by emailing
us at privacyrights@ottoinsurance.com. You may contact the Attorney General if you have concerns about the result of
the appeal.
III. Connecticut Residents – Your Privacy Rights
Pursuant to the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), the above
identified categories of personal data are processed, for the above identified purposes. The categories of personal
data that are shared with third parties are also noted above, as are the categories of such third parties.
We do sell personal data, as noted above, to the above identified categories of third parties, and engage in
targeted advertising. To opt out of our sale of or processing of personal data and/or targeted advertising, please
submit your request by emailing us at privacyrights@ottoinsurance.com. Your authorized agent may opt out on your
behalf.
Connecticut residents have the following rights under the CTDPA:
-
- Right to confirmation and access: Confirm whether or not a controller is processing the consumer’s personal data and
access such data (unless confirmation or access would require the controller to reveal a trade secret);
-
- Right to correct: may correct inaccuracies in the consumer’s personal data;
-
- Right to delete: may delete personal data provided by, or obtained about, the consumer;
-
- Right to data portability: may obtain a copy in a portable and, to the extent technically feasible,
readily usable format that allows consumer to transmit data to another controller without hindrance,
where processing is carried out by automated means, provided that controller shall not be required to
reveal any trade secret; and
-
- Right to opt-out of certain data processing: may opt-out of the processing of personal data for targeted
advertising, sale of personal data, or profiling in furtherance of solely automated decisions that
produce legal or similarly significant effects concerning the consumer.
Connecticut residents that wish to exercise any of the above rights under the CTDPA may submit a request that
specifies the right(s) they wish to invoke by emailing us at privacyrights@ottoinsurance.com. You are permitted to
designate an authorized agent. Information provided in response to a consumer request shall be provided free of
charge, once per consumer during any twelve-month period. To the extent that we decline to act upon your request,
you may appeal by emailing us at privacyrights@ottoinsurance.com.
IV. Oregon Residents – Your Privacy Rights
Pursuant to the Oregon Consumer Privacy Act (“OCPA”) (ORS 646A.570-646A.589), the above identified categories of
personal data are processed, for the above identified purposes. The categories of personal data that are shared with
third parties are also noted above, as are the categories of such third parties.
We do sell personal data, as noted above, and engage in targeted advertising. To opt out of our sale of personal
data and targeted advertising, please submit your request by emailing us at privacyrights@ottoinsurance.com. Your
authorized agent may opt out on your behalf.
Oregon residents have the following rights under the OCPA:
-
- Right to access: may request confirmation on whether we are processing or have processed the consumer’s personal
data and obtain a copy of such personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal data, taking into account the nature of
the personal data and the purposes of the processing;
-
- Right to delete: may delete personal data, including personal data the consumer provided to the controller,
personal data the controller obtained from another source and derived data);
-
- Right to opt-out of certain data processing: may opt-out of the processing of personal data for targeted
advertising, sale of personal data, or profiling the consumer in furtherance of decisions that produce legal
effects or effects of similar significance.
Oregon residents that wish to exercise any of the above rights under the OCPA may submit a reques that specifies the
right(s) they wish to invoke by emailing us at privacyrights@ottoinsurance.com. To the extent that we decline to act
upon your request, you may appeal by emailing us at privacyrights@ottoinsurance.com.
V. Texas Residents – Your Privacy Rights
Pursuant to the Texas Data Privacy and Security Act (Texas Bus. & Com. Code § 541.001 et seq.), the above identified
categories of personal data are processed, for the above identified purposes. The categories of personal data that
are shared with third parties are also noted above, as are the categories of such third parties.
We do sell personal data, as noted above, and engage in targeted advertising. To opt out of our sale of personal
data and targeted advertising, please submit your request by emailing us at privacyrights@ottoinsurance.com.
Texas residents have the following rights under the Texas Data Privacy and Security Act:
-
- Right to access: may request confirmation on whether we process the consumer’s personal data and obtain access
such personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal data, taking into account the nature of
the personal data and the purposes of the processing of the consumer’s personal data;
-
- Right to delete: may delete personal data;
-
- Right to data portability: if the data is available in a digital format, may obtain a copy in a portable and, to
the extent technically feasible, readily usable format; and
-
- Right to opt-out of certain data processing: may opt-out of the processing of personal data for targeted
advertising, sale of personal data, or profiling.
Texas residents that wish to exercise any of the above rights under the Texas Data Privacy and Security Act may
submit a request that specifies the right(s) they wish to invoke by emailing us at privacyrights@ottoinsurance.com.
Texas residents are permitted to designate another person to serve as their agent and act on their behalf as an
authorized agent. Please note that we are not required to act on an opt-out request from an authorized agent unless
we are able to verify, with commercially reasonable effort, the identity of the consumer and the authorized agent’s
authority to act on the consumer’s behalf. To the extent that we decline to act upon your request, you may appeal by
emailing us regarding your appeal at privacyrights@ottoinsurance.com.
VI. Utah Residents – Your Privacy Rights
Pursuant to the Utah Consumer Privacy Act (“UCPA”) (§ 13-61-101 et seq.), the above identified categories of
personal data are processed, for the above identified purposes. The categories of personal data that are shared with
third parties are also noted above, as are the categories of such third parties.
We do sell personal data, as noted above, and process personal data for targeted advertising. To opt out of our sale
of personal data and/or the processing of your personal data for targeted advertising, please submit your request by
emailing us at privacyrights@ottoinsurance.com.
Consumers have the following rights under the UCPA:
-
- Right to access: may request confirmation whether a controller is processing the consumer’s personal data; and
access the consumer’s personal data;
-
- Right to delete: may delete the consumer’s personal data;
-
- Right to obtain a copy/portability: may obtain a copy of the consumer’s personal data, that the consumer
previously provided to the controller, in a format that: to the extent technically feasible, is portable; to the
extent practicable, is readily usable; and allows the consumer to transmit the data to another controller
without impediment, where the processing is carried out by automated means;
-
- Right to opt-out of certain data processing: may opt-out of the processing of personal data for purposes of
targeted advertising, or the sale of personal data.
Utah consumers that wish to exercise any of the above rights under the UCPA may submit a request that specifies the
right they wish to exercise by emailing us at privacyrights@ottoinsurance.com. We require the following information
to authenticate your identity: your first and last name and a Utah address. Please note that We must be able to
authenticate a consumer request to exercise a right under the UCPA, using commercially reasonable efforts.
VII. Virginia Residents – Your Privacy Rights
Pursuant to the Virginia Consumer Data Protection Act (“CDPA”) (Code of Virginia § 59.1-571 et seq.), the above
identified categories of personal data are processed, for the above identified purposes. The categories of personal
data that are shared with third parties are also noted above, as are the categories of such third parties.
We do sell personal data, as noted above, and engage in targeted advertising. To opt out of our sale of personal
data and targeted advertising, please submit your request by emailing us at privacyrights@ottoinsurance.com.
Virginia residents have the following rights under the CDPA:
-
- Right to access: may request confirmation on whether we process the consumer’s personal data and obtain access
such personal data;
-
- Right to correct: may correct inaccuracies in the consumer’s personal data;
-
- Right to delete: may delete personal data;
-
- Right to data portability: may obtain a copy in a portable and, to the extent technically feasible, readily
usable format; and
-
- Right to opt-out of certain data processing: may opt-out of the processing of personal data for targeted
advertising, sale of personal data, or profiling.
Virginia residents that wish to exercise any of the above rights under the CDPA may submit a request that specifies
the right(s) they wish to invoke by emailing us at privacyrights@ottoinsurance.com. To the extent that we decline to
act upon your request, you may appeal by emailing us regarding your appeal at privacyrights@ottoinsurance.com.
9.
UPDATING, OBTAINING OR REMOVING YOUR INFORMATION.
Upon request via email or mail, we will provide you a summary of personal information retained by us. We will only
send your personal records to your email address or postal address that we have on file for you. To modify, correct,
change, update or remove your personal record from our database, please send your request via email to
info@ottoinsurance.com.
10.
VISITORS OUTSIDE THE UNITED STATES.
This Privacy Policy is intended to cover collection of information on our Site from residents of the United States.
The data protection and other laws of the United States and other countries might not be as comprehensive as those
in your country. By visiting our site or using our Services, you acknowledge and agree that your information may be
transferred to our facilities and those third parties with whom we share it as described in this Privacy Policy,
regardless of the laws of your residence country.
11.
CHANGES TO OUR PRIVACY POLICY.
We have the right to make material changes to this Privacy Policy at our discretion and at any time. The only notice
to you will be our posting of the updated Privacy Policy on the Website and update the effective date. Please review
this policy often so that you will always know what information we gather, how we might use that information, and
with whom we disclose, share, and sell it.
NEED MORE INFORMATION OR HAVING DIFFICULTY ACCESSING THIS INFORMATION?
If you have any questions or concerns regarding your privacy rights, or our privacy practices, please email
privacyrights@ottoinsurance.com, or contact us by mail at 1111 Lincoln Road, Suite 657, Miami Beach, FL 33139. Further, if you
have a disability which interferes with your ability to access this policy, accommodations can be made to present
the policy in an alternative format, to assist you. If you would like to receive this information in another format
that is accessible to your needs (for example: audio, large print, etc.) please email
privacyrights@ottoinsurance.com.
Last Updated: July 27, 2024