State Privacy Rights Notice

This notice supplements the Privacy Policy with state privacy rights, including California consumer privacy rights where they apply, and explains how to make a request.

Scope and applicability

This notice is provided by Northdale Insurance Agency, Inc. It addresses personal information about individuals, including website visitors, prospective customers and business contacts. Rights depend on your residence, the applicable law, Northdale's role, and the information and activity involved. A business entity itself is not a California consumer merely because it buys a policy, but information about its individual contacts can be personal information.

Whether the California Consumer Privacy Act applies to Northdale and to particular information depends on our business and on the information involved, and many insurance records are subject to separate insurance privacy laws. We will respond to privacy requests and explain any exception that applies. The California Consumer Privacy Act, as amended by the California Privacy Rights Act, is referred to here as the CCPA. The California rights described below apply when Northdale and the information are covered. This statement does not limit rights available under insurance privacy laws or other applicable laws.

Certain information or activities subject to federal financial privacy, consumer reporting, medical confidentiality or other laws may be exempt from some CCPA requirements. An exemption is evaluated for the specific information and activity. It is not a statement that all information held by an insurance agency is exempt. Certain security and other obligations may remain even when an exemption applies. Insurance information access and correction rights are explained in our Insurance Customer Privacy Notice.

Categories and uses of information

The categories below describe what we may collect, depending on what you submit and the insurance transaction involved. Website forms collect a narrower range than a full insurance application. We do not ask visitors to put sensitive identification, medical or payment details in general website forms.

We collect relevant categories from you and authorized representatives, from the website and its service providers, and from insurance, reporting, verification and public-record sources as described in the Privacy Policy. We use them to answer requests; obtain or service insurance; verify instructions; assist with certificates, changes, claims and billing; maintain systems; document consent; prevent fraud; and meet legal obligations. Optional marketing and tracking are subject to the choices and limitations disclosed in the relevant notices.

Recipients can include carriers, wholesalers, insurance support organizations, authorized finance and payment providers, technology and operational service providers, authorized certificate recipients, professional advisers and authorities. We do not characterize an independent insurer or advertising recipient as a restricted service provider without a basis for doing so.

Sale sharing and sensitive information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. A legal sale can include valuable consideration other than money. Sharing can include certain advertising disclosures even without payment. Necessary insurance processing is evaluated separately under applicable rules.

If that changes, we will add a Do Not Sell or Share link and update this notice before we begin. We honor qualifying opt-out preference signals, including Global Privacy Control, as required for covered processing. A recognized signal is applied to the browser or device and any known consumer or account as applicable under law. Where a choice cannot be associated across devices, use the available control on each relevant browser or device or contact us.

We use sensitive personal information only as needed to provide the insurance services you request and to meet legal obligations. The right to limit applies to uses and disclosures specified by law; it is not an unrestricted right to prohibit all use of sensitive information needed to provide a requested service. We do not use this notice as consent to collect or disclose sensitive information for a new purpose.

We do not knowingly sell or share personal information of consumers under 16 without the authorization required by law. The website is directed to adults. Information an adult supplies about a minor for an insurance transaction is handled under the applicable insurance process.

Retention

We retain categories for no longer than reasonably necessary and proportionate to their disclosed purposes, subject to legal requirements. For inquiry and contact data, relevant criteria include the pending request and any resulting insurance relationship. For insurance and transaction records, criteria include policy servicing, required retention, audit, tax, complaint and claim periods. For technical data, criteria include security, troubleshooting and approved analytics needs. Consent and suppression records are kept as needed to prove and honor choices. Legal holds can extend ordinary retention.

Contact us if you have questions about how long we keep a particular kind of record. We will not keep all website activity indefinitely merely because some insurance records require longer retention.

California rights

When the CCPA applies, you may exercise the following rights, subject to statutory exceptions:

• Know and access: request the categories and specific pieces of personal information collected about you, sources, purposes, and required information about disclosures, sales and sharing. Where required, information beyond the preceding 12 months will be provided unless an applicable statutory limitation applies.
• Delete: request deletion of personal information, with appropriate instructions to service providers, contractors and other recipients where required. Exceptions may apply for transactions, legal obligations, security and other permitted purposes.
• Correct: request correction of inaccurate personal information, taking account of its nature and purpose.
• Opt out: direct us to stop covered sales or sharing for cross-context behavioral advertising, including through a qualifying opt-out preference signal.
• Limit: restrict certain uses or disclosures of sensitive personal information when the law provides that right.
• Equal treatment: exercise applicable rights without unlawful discrimination or retaliation. Any lawful financial incentive program requires its own notice and consent where required.

We will assess an exemption or exception rather than automatically deny all requests connected with insurance. We will explain a denial to the extent required and provide applicable review or complaint options.

How to make a request

Website request method: use our Contact page and identify your request as a privacy request.

Additional assistance: services@northdaleinsurance.com or (559) 777-7657.

Mail: Northdale Insurance Agency, Inc., Attention Privacy Requests, 4630 W Jennifer Ave, Suite 103A, Fresno, CA 93722.

Provide your name, contact information, state of residence and the nature of your request. A policy number may help if the request concerns insurance, but do not send a full Social Security number, password or payment credential. We will provide an appropriate verification process.

Verification and authorized agents

For requests to access, delete or correct information, we may match information already held or request additional information proportionate to the risk. We use verification information for permitted verification and related compliance purposes. We do not require you to create a new account to make a request. If we cannot verify a request, we will explain what we can do under the applicable law.

An authorized agent may submit a request using the same channels. We may require evidence of permission and, where permitted, direct verification of the consumer. Valid powers of attorney are handled under applicable law. An opt-out of sale or sharing does not require the same identity-verification process as a request for access to sensitive records; we will not impose unnecessary verification that defeats the opt-out.

Response periods and charges

For covered California requests to know, delete or correct, we acknowledge receipt within 10 business days and ordinarily respond within 45 calendar days after receipt. If permitted and reasonably necessary, we may extend by a further 45 calendar days and explain the reason within the initial period. We handle covered opt-outs of sale or sharing and requests to limit sensitive information as soon as feasibly possible and within 15 business days, subject to any more specific applicable requirement.

Requests are generally free. Any refusal or reasonable fee for a manifestly unfounded or excessive request is limited by law and will be explained. California insurance-record requests may instead have a 30 business day response period under the Insurance Customer Privacy Notice. We route requests to the correct process rather than applying one deadline to every request.

Other state rights and appeals

If another state consumer privacy law applies to Northdale and your information, available rights may include access, correction, deletion, portability, opt-outs of certain advertising, sales or profiling, and an appeal of a denial. These rights and exemptions differ by state. Submit the request through the contact channels above and identify your state. We will apply the relevant response and appeal rules.

Where an appeal is available, email services@northdaleinsurance.com with Privacy Appeal in the subject or mail the privacy address above. Include the original request reference and the reason for your appeal. We will provide a written decision within the applicable legal period and any required regulator complaint instructions. This general process does not replace a required state-specific disclosure, which we will provide when applicable.

Updates and questions

We review this notice at least annually when required and update it for material changes. The effective date identifies the current version. You may raise concerns with us or with the relevant regulator. California CCPA information and complaint channels are available at cppa.ca.gov and oag.ca.gov; insurance privacy complaints may also be directed to the California Department of Insurance.