Introduction

Patriot Growth Insurance Services, LLC and our partner agencies (collectively, “Patriot,” “our,” or “we”) respect your privacy and are committed to protecting it through our compliance with this policy (“Privacy Policy”).

This Privacy Policy applies to information we collect:

• When you visit the website https://patriotgis.com/ or websites from our partner agencies, which link back to this Privacy Policy (collectively, our “Website”).
• In email, text, and other electronic messages between you and this Website.
• When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.
• Through third party business partners we work with to offer, provide, and improve our Website to our clients.

This Privacy Policy:

• May be supplemented by Privacy Notices tailored to our specific relationships with you, including Privacy Notices that are sent to individuals as required under applicable laws and regulations.
• DOES NOT apply to information that you provide to or is collected by any third party. Those third parties have their own privacy policies, which we encourage you to read before providing information on or through them.

Please read this Privacy Policy carefully to understand our policies and practices regarding how we may collect, use, maintain, protect, and disclose your information. If you do not agree with our policies and practices, you may choose not to use our Website, or you may choose to exercise your rights as disclosed in this Privacy Policy.

By accessing or using this Website, you agree to this Privacy Policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check for periodic updates. Not all partner agencies collect, disclose, handle, process, sell, share, transfer, or use every category of Personal Information mentioned in this Privacy Policy. If you have questions about a specific agency’s Personal Information practices, we encourage you to contact the specific agency or [email protected] noting the specific agency in the subject line.

Information We Collect

Personal Information

We have collected the following categories of personal information from individuals within the last twelve (12) months:

• Identifiers such as real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name.
• Customer records, such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories. Some Personal Information included in this category may also be considered Sensitive Personal Information.
• • Protected classification characteristics under state or federal law, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). Some Personal Information included in this category may also be considered Sensitive Personal Information.
• Commercial information such as records of products or services purchased or considered or consuming histories or tendencies.
• Biometric information, such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. On a limited basis, this may include biometric information for purposes of uniquely identifying an individual, if enabled and with the individual’s consent as it may be considered Sensitive Personal Information.
• Internet activity, such as browsing or search history, and interaction with websites, applications, or advertisements, including through use of what is now commonly known as “session replay” technologies, which may include data relating to the full Uniform Resource Locators (URLs), clickstream information (including date and time), services viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from the page (e.g. through cookies; see Information Collected Through Automatic Data Collection Technologies).
• Geolocation data such as physical location or movements. If we request your precise geolocation, usually through settings on a mobile site or application, we will ask for your consent to collect this as it may be considered Sensitive Personal Information.
• Sensory data, such as audio, electronic, visual, thermal, olfactory, or similar information.
• Professional or employment-related information such as current or past job history or performance evaluations.
• Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)), such as education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
• Inferences drawn from other personal information such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

As noted above, we may collect Sensitive Personal Information that you choose to provide. This may include precise geolocation, racial or ethnic origin, religious or philosophical beliefs, biometric information used for purposes of identifying you, or information about a genetic or medical condition that you want us to know about as you use our products or services.

Some of the Personal Information that we collect may also be considered Non-Public Information or NPI under various laws. For purposes of this Privacy Policy, we include nonpublic financial information and nonpublic health information as NPI.

We collect additional information from our employees or job applicants as necessary to comply with applicable law or provide employment related benefits. This information may include: government issued ID number, age, citizenship, ethnicity, gender identity or expression, medical condition, military or veteran status, current or past job or educational history, licenses or certifications, work style and motivators, contact information for references, and bank account information (for payroll / direct deposit purposes).

Technical Information
Technical information, which includes:

• Log and Usage Data, which is service-related, diagnostic, usage and performance information our servers automatically collect when you access or use our Website and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings and information about your activity in the Website (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”) and hardware settings).
• Device Data, such as information about your computer, phone, tablet or other device you use to access the Website. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model Internet service provider and/or mobile carrier, operating system, and system configuration information. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our mobile applications, we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID and information about the features of our application you accessed. This information is primarily needed to maintain the security and operation of our applications, for troubleshooting and for our internal analytics and reporting purposes.

If we combine or connect non-personal, demographic, or technical information with Personal Information so that it directly or indirectly identifies an individual, we treat the combined information as Personal Information. This may happen if you are signed into your account when using our Website. We ask that you be cognizant of information that you are sharing and that may be connected to you as an individual once you are logged into our Website.

Information Collection Sources

We collect different types of information about you from a number of sources and in a variety of ways, including information you provide to us; information we obtain from other sources, including third parties (specified below); and information we automatically collect. The type of Personal Information we collect depends on how you are specifically interacting with us and which services we are performing.

Information You Provide to Us

You may choose to provide Personal Information when you interact with us in person, online, or by phone. Examples include:

• You may provide your information when you complete forms or surveys; create an account; search for, register for, subscribe to, purchase, or renew a product or service; correspond with us by phone, email, text messaging or through our interactive chat functions, or otherwise; upload or share photos or post other digital content through one of our websites, applications, or interactions with our social media accounts.
• You may be required to provide financial, employment, or more Sensitive Personal Information if you buy certain products or services or to see if you are eligible for certain services.

Information Collected from Other Sources

We may also collect information from third parties or public information sources, including:

• From affiliated companies, such as other Patriot agencies
• From your employer or your contacts, such as if the organization or someone you know submits a request on your behalf that may include your personal information. This may also be Sensitive Personal Information such as health information related to employee benefit programs sponsored by your employer.
• Through marketing events partners, advertising networks, sales generation partners, or recruiting partners.
• Through public sources, such as LinkedIn or professional
• social or marketing websites.
• From our vendors, service providers, and business partners, including chat services and technologies.
• From government agencies and others who release or publish public records, such as when permitted or required to do so, we may obtain criminal records information as part of background screenings.
• From credit bureaus or other similar agencies.
• From professional or industry organizations and certification / licensure agencies that provide or publish Personal Information related to you.

Employees or job applicants may provide additional information listed above through job applications, benefits enrollment, and payroll or direct deposit enrollment.

Information Collected Through Automatic Data Collection Technologies

We also collect certain Personal Information by (technologically) observing your interactions with our Website. We collect this information through the use of “cookies” and similar technologies (e.g., tracking pixels or session replay technology) to understand how you navigate through and interact with our Website, to learn what content is popular, to enhance the Website and provide you with a more relevant and personalized experience, for authentication and advertising purposes, to save your preferences, and to collect certain usage, device, and location information, as described above. The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
• Web Pixels or Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Patriot, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain Website content and verifying system and server integrity). We and our vendors also use these technologies and the information collected by them for data analytics purposes.

Other technologies we may use include

• Location-identifying technologies, such as geo-filtering or global positioning systems (GPS) to locate you or make assumptions about your location. We will ask for permission to use your precise location.

We use these automatic information collection technologies to distinguish you from other Website users. This helps us deliver a better and more personalized service when you browse our Website. It also allows us to improve our Website by enabling us to:

• Estimate our audience size and usage patterns.
• Store your preferences so we may customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Visit the Your Rights and Choices section for information on how you can opt out of behavioral tracking on this Website and how we respond to web browser signals and other mechanisms that enable consumers to exercise choice about behavioral tracking. You may also submit a request through Do Not Share or Sell My Personal Information.

Our Website is not always designed to respond to “do not track” signals received from browsers. Our website is in the process of implementing a tool designed to respond to Global Privacy Control, but this is browser dependent. Once implemented, we will describe more information about Global Privacy Control in Your Rights and Choices.

Third-Party Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third parties, including video content providers and analytics companies. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. They may associate the information collected with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites or other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control how these third-party tracking technologies operate or how they may use the collected information. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Your Rights and Choices.

Please be aware and considerate any time you interact with social media content or connect your social media account to our Website through social login.

We may use third party analytics such as Google Analytics or similar analytics services. For information on how Google processes and collects your information regarding Google Analytics and how you can opt-out, please see https://tools.google.com/dlpage/gaoptout. You may also opt out of Google’s use of cookies for advertising, including DoubleClick cookies, by visiting Google’s Ads Settings page.

To learn more about interest-based advertising in general and to opt out, please visit http://www.aboutads.info/choices. To opt-out of the use of your mobile device ID for targeted advertising, please see http://www.aboutads.info/appchoices.

We also may use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g., how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

Using Personal Information

We may use the Personal Information we collect, including NPI, for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. We may also save your information to facilitate new services offered to you.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments, and provide related products or services or prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To provide, support, personalize, and develop our Website, products, and services.
• To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Website, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our consumers is among the assets transferred.
• In any other way we may describe when you provide the information.

We will not collect additional categories of Personal Information or use your information for any materially different, unrelated, or incompatible purposes without providing you notice. We may also use Personal Information to contact you about our own and, in certain circumstances, third parties’ goods and services that may be of interest to you. If you do not want us to use your Personal Information in this way, we give you choices as described in Your Rights and Choices. You also always have the option to not provide Personal Information. You may also provide us with your preferences.

We may use non- Personal Information, including aggregated or deidentified Personal Information, for any business purpose.

Disclosing Personal Information

We may disclose your Personal Information, including NPI, to:

• Any member of our corporate group, which means our subsidiaries, our ultimate holding company and its subsidiaries, and our affiliates.
• Business partners, suppliers, service providers, sub-contractors, and other third parties we use to support our business (such as analytics and search engine providers that assist us with Website improvement and optimization).
• Third parties to market their products or services to you if you have consented to/not opted out of these disclosures. For more information, see Your Rights and Choices.
• Advertisers and advertising networks that require the information to select and serve relevant ads to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users.
• Credit reference agencies when required to assess your credit score before entering into a contract with you.
• For any other purposes that we disclose when you provide the information.
• With your consent.

We may also disclose your Personal Information to third parties:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply any agreements between Patriot and you, if applicable.
• As we believe necessary to protect the rights, property, or safety of Patriot, our affiliates, our customers, or others.
• In the event of sale (of some or all of our assets), transfer, merger, reorganization, dissolution, or similar event involving our business (including in contemplation of such transactions), your information may be among the shared or transferred business assets. If such transfer is subject to any mandatory restrictions under applicable laws, we will comply with those restrictions.

We may disclose your information to a third party for one or more of the following business purposes:

• Performing services or servicing accounts.
• Processing or fulfilling orders and transactions.
• Providing employee benefits or analytic services.
• Maintaining or improving the quality of products or services we offer.
• Detecting security incidents, protecting against malicious activity, and prosecuting those responsible.

We aim to make these business purpose disclosures to third parties pursuant to written contracts specifying the purposes, requiring the recipient to keep the Personal Information disclosed confidential, and prohibiting use of the disclosed information for any purpose except under the contract. We use our best efforts and due diligence to select, manage, and oversee our service providers.

We may disclose aggregated information that does not identify any individual, without restriction. We may also share non-Personal Information without restriction.

At the same time, consumers have the right to opt out of Patriot’s disclosures of NPI to nonaffiliated third parties by clicking the Do Not Sell or Share My Personal Information.

Generally, we do not sell Personal Information. However, certain state laws define selling very broadly to also include renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s Personal Information for money or other valuable consideration.

Based on this broad definition, some of our partner agencies may sell your Personal Information to third parties, subject to rights you may have to opt-out of those sales.

The chart in our section on California-Specific Disclosures indicates the categories of Personal Information that Patriot partner agencies have sold or shared for cross-context or behavioral advertising purposes in the preceding twelve (12) months and the categories of third parties to which Patriot has made these disclosures. Our Personal Information sales do not include information about individuals we know are under age 16. If you would like to opt out of these sales, please click Do Not Sell or Share My Personal Information.

Your Rights and Choices

We strive to provide you with choices regarding your Personal Information. We have created mechanisms to provide you with the following control over your information:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly. You can also use the Network Advertising Initiative (NAI) website to opt out of seeing personalized ads from NAI member companies here. You can opt out of receiving personalized ads from certain companies that perform ad targeting services, using the Digital Advertising Alliance (DAA) website here
  Marketing, Email, and SMS. Patriot respects the rights users give us when opting to receive email communications and enforces internal policies to preserve those rights. It is our objective to retain the long-term ability to continue to communicate with our users. If you do not want Patriot or Patriot’s representatives to contact you, you may “opt out” of this preference at any time by unsubscribing or contacting Patriot directly. Please see the Contact Information section for our contact information. You’ll always have the option to opt back in.
  Opting Not to Register or Provide Personal Information. If you choose not to register or provide Personal Information, you can still visit most areas of Patriot’s Website; however, you will not have access to areas that require personal identification.
  

As discussed above under Third-Party Cookies and Other Tracking Technologies, we may use services provided by Google and other companies that use tracking technology. There are several ways to opt out of having your online activity and device data collected through these services.

The following advertising partners offer opt-out features that let you opt-out of use of your information for interest-based advertising:

• Google: https://adssettings.google.com
  Hotjar: https://www.hotjar.com/legal/compliance/opt-out/
  Meta: http://www.aboutads.info/choices
  Snapchat: https://help.snapchat.com/hc/en-us/articles/7012345515796?lang=en-US
  theTradeDesk: https://www.adsrvr.org/?AspxAutoDetectCookieSupport=1
  Vimeo: https://vimeo.com/privacy
  

The following advertising partners provide more information regarding their privacy practices in their privacy terms:

• Microsoft Advertising: https://privacy.microsoft.com/en-us/privacystatement.
  Spotify: https://www.spotify.com/us/legal/privacy-policy/
  Wix: https://www.wix.com/manage/privacy-security-hub
  Youtube: https://policies.google.com/technologies/cookies?hl=en
  

Additionally, some of our agencies use Snitcher to measure the business usage of their websites. Snitcher shows us the company names and addresses based on the IP addresses of our visitors. For Snitcher to distinguish between different visitors on our website, it sets a cookie named ‘SNID’ with a lifetime of two years. You may change your cookie preferences to opt-out of this cookie, where applicable.

Certain state residents may have additional Personal Information rights and choices. Please see Your State Law Privacy Rights for more information.

Your State Law Privacy Rights

In addition to disclosures made elsewhere in this policy, certain states require us to disclose information related to our privacy practices. This Section of our policy (“State Law Privacy Policy”) serves to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CCPA”), and any terms defined in the CCPA have the same meaning when used in this Section. This Section of our policy also serves to comply with other state consumer privacy laws, such as those in Colorado, Connecticut, Nevada (opt-out rights), Utah, and Virginia (collectively, “State Consumer Privacy Laws”). We use terms consistent with the rest of our privacy policy. We try to note terms used in other state laws for ease of reference, if applicable.

Our State Law Privacy Policy supplements the information contained in our Privacy Policy and applies solely to all visitors, users, and others who reside in states with comprehensive consumer privacy laws, such as California, Colorado, Connecticut, Nevada (limited), Utah, and Virginia (“Consumers” or “you”).

The State Consumer Privacy Laws provide in-state residents with specific rights regarding their Personal Information, what some of the State Consumer Privacy Laws call personal data. If applicable, this section describes your state-specific rights and explains how to exercise those rights. The section will not apply, however, if Patriot does not collect any Personal Information about you or if all of the information we collect is exempt from the law (for example, the CCPA does not protect information that is already protected by certain other privacy laws, and it does not protect information that is already publicly available; the other State Consumer Privacy Laws do not apply to Personal Information about a natural person in a commercial or employment context).

Also, please note, the State Consumer Privacy Laws have exemptions and exceptions applicable to Patriot’s business. Some of these rights are only given to individuals when acting as “Consumers,” as that term is defined under the relevant law. Some of these rights do not extend to individuals who are acting in their business capacity or as an employee.

Right to Know and Data Portability/Right of Access

California Consumers have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months (the “Right to Know”). Virginia Consumers have the right to confirm whether Patriot is processing your personal data and to access this personal data (the “Right to Access”).

Once we receive your request and confirm your identity (see Exercising Your Rights), we will disclose to you:

• The categories of Personal Information we collected about you.
  The categories of sources of the Personal Information we collected about you.
  Our business or commercial purpose for collecting, selling, or sharing that Personal Information.
  The categories of third parties with whom we share the Personal Information, to whom we sell the Personal Information (and the categories of Personal Information sold), and to whom we disclose Personal Information for a business purpose (and the categories of Personal Information disclosed for that reason).
  The specific pieces of Personal Information we collected about you in a portable and readily usable format when Patriot processes the information through automated or searchable means (also called a “data portability” request).
  

California-Specific Disclosures

While our Privacy Policy notes the categories of Personal Information that we have collected in the past twelve (12) months and the categories of sources, the following chart indicates the categories of third parties to which Patriot has disclosed the Personal Information for a business purpose and which categories of Personal Information that Patriot has sold or shared with third parties for cross-contextual behavioral advertising in the preceding twelve (12) months. We include information about our data retention practices in the section Data Retention below.

Right to Delete

Consumers may have the right to request that we delete any of your Personal Information that you have provided or that we have collected or obtained about you, subject to certain exceptions.

Once we receive your request and confirm your identity (see Exercising Your Rights), we will review your request to see if an exception allowing us to retain the information applies. We will delete from our records or deidentify Personal Information not subject to a lawful exception and will direct our service providers or other third parties, if applicable, to take similar action.

Right to Correct Inaccurate Information

Consumers may have the right to request correction of any inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the Personal Information processing. We will use commercially reasonable efforts to correct this information.

Right to Limit

Consumers may have the right to request to limit Patriot’s use of Sensitive Personal Information unless Patriot’s use of Sensitive Personal Information falls into one of limited business purposes. We do not generally collect or process Sensitive Personal Information for the purpose of inferring characteristics about a consumer.

Right to Opt-Out of Sale or Sharing

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request using the Do Not Sell or Share My Personal Information  or using the Contact Information below.  However, we do not sell data triggering that statute’s opt-out requirements. To opt-out of this type of sale or sharing through cookies or tracking technology, we will rely on you to set your preferences regarding cookies and other tracking technology.

Consumers may also have the right to opt-out of certain sales or sharing or the right to opt-in to sales or sharing if the Consumer is a minor or if the information at issue is Sensitive Personal Information.

Specifically, some State Consumer Privacy Laws give Consumers the right to request to opt out of the processing of the Personal Information for purposes of (i) targeted advertising, (ii) the sale of Personal Information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

Patriot does not generally sell any Personal Information. Patriot also does not use consumer Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. Some partner agencies may “sell” Personal Information under the broad definition of selling under some of the State Consumer Privacy Laws. Some partner agencies may “share” Personal Information for targeted advertising or cross-context behavioral advertising. Selling or sharing, however, generally only occurs through the use of cookies or other tracking technologies. To opt-out of this type of sale or sharing through cookies or tracking technology, we will rely on you to set your preferences regarding cookies and other tracking technology.

For sales or sharing that do not occur through cookies or tracking technologies on our websites, if you are age 16 or older, you have the right to direct us to not sell or share your Personal Information at any time. We do not sell the Personal Information of consumers we actually know are less than 16 years old, unless we receive affirmative authorization from either the consumer who is between 13 and 15 years old, or the parent or guardian of a consumer less than 13 years old. Consumers who opt-in to Personal Information sales or sharing may opt-out of future sales at any time. To set your Cookie Preferences, you may be able to click on the Cookie Preferences link in the footer of the applicable agency homepage or change this through your browser settings since this is browser specific.

To exercise the right to opt-out or opt-in, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link: Do Not Sell or Share My Personal Information.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales or sharing. However, you may change your mind and opt in again to Personal Information sales or sharing at any time by submitting a request online through this link.

You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided in an opt-out request to review and comply with the request.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your state law privacy rights. In California, this includes the right not to receive discriminatory treatment by us for the exercise of privacy rights, including an employee’s, job applicant’s, or independent contractor’s right not to be retaliated against for the exercise of their state law privacy rights. Unless permitted by law, we will not:

• Deny you goods or services.
• Charge (or suggest you may receive) different prices for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide (or suggest you may receive) a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by consumer privacy laws that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time. Currently, we do not provide any financial incentives.

Exercising Your Rights

To exercise your rights, please submit a request by either:

• Calling us at 888.895.0028.
  Emailing us at [email protected].
  Submitting a request via Do Not Sell or Share My Personal Information.
  

Only you, or sometimes someone legally authorized to act on your behalf, may make requests related to your Personal Information.

At times, you or your authorized agent may only submit a request twice within a 12-month period. Your request must:

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• Provide sufficient information, which will likely need to match information we previously collected from you, that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative (“Authorized Agent”). In some instances, we may ask you to provide a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. For requests seeking particularly Sensitive Personal Information, we may require additional proof of identification.

If you would like, you may designate an Authorized Agent to make a request under some state privacy laws on your behalf. We will deny requests from agents that do not submit proof of authorization from you. If you designate an Authorized Agent to make a request, to verify that an authorized agent has authority to act for you, we may require:

• A copy of a power of attorney or require that you provide the Authorized Agent with written permission.
  You to verify your own identity with us directly.
  

We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it, except for record-keeping purposes. We will delete this information as soon as practicable after complying with the request.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected].

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeal Process

If you would like to submit an appeal for any decision with regard to any Consumer request, please contact [email protected] with the subject line: DSAR Appeal.

Other California Privacy Rights

Shine the Light Law

Patriot does not make any disclosures of Personal Information to third parties for the third party’s direct marketing purposes, but California’s “Shine the Light” law found in Section 1798.83 of the Civil Code, permits users of our Website that are California residents to request information about such disclosures, if applicable. To make such a request, please find our Contact Information below.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information, and whether we can achieve those purposes through other means. We specify the retention periods for your Personal Information in our document retention policy.

Children Under 16

Our Website is not intended for children under 16 years of age.  No one under age 16 may provide any information to the Website.  We do not knowingly collect Personal Information from children under 16. If you are under 16, do not use or provide any information on this Website.  If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us using our Contact Information below.

California residents younger than 16 may have additional rights regarding the collection of their Personal Information. For more information about California privacy rights, see Your State Law Privacy Rights. We do not knowingly sell any Personal Information about minor children.

Data Security

We have implemented measures designed to secure your Personal Information, including NPI, from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.