Information Buoy Collects and How Buoy Collects It
“Personally Identifiable Information” means any information that may be used to identify an individual, including, but not limited to postal address, telephone number, fax number and e-mail address, and also may include certain business information, such as employer name, occupation, job function, job title and the list of insurance companies you will be communicating via the Website.
“De-identified Information” means information which does not enable identification of an individual User or household, such as aggregated information about the use of the Website and its services.
If you choose to register with the Website for certain services (such as insurance products and services), We require you to submit information on your behalf or on behalf of any third party that may include Personally Identifiable Information. You represent and warrant that you have the necessary rights and authorizations to submit, use and authorize Buoy to use such third party Personally Identifiable Information. Buoy may also collect through its services electronic data or information that you submitted to an insurer and that you receive from an insurer and/or any third party (“Third Party Data”). Buoy logs information about your transactions performed via the Website. This information includes, but not limited to, the following events:
- Logons and logoffs;
- Transmissions of quotes and policies to insurance carriers;
- Transmissions of quotes and policies to insurance carriers;
- Business rule validation failures.
Finally, please note that some Personally Identifiable Information will be used for detecting, taking steps to prevent, and prosecution of fraud or other illegal activity, to identify and repair errors, to conduct audits, and for security purposes. Personally Identifiable Information may also be used to comply with applicable laws, with investigations performed by the relevant authorities, law enforcement purposes, and/or to exercise or defend legal claims. In certain cases, We may de-identify Personally Identifiable Information. We may use De-identified Information and/or disclose it to third parties without restrictions (for example, in order to improve Our services and enhance your experience with them).
Information We Collect
We collect and combine information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“personal information”) such as names, email addresses, IP addresses, telephone numbers and broader categories of personal information such as commercial information. The categories of personal information we may collect about you depend on your interactions and engagement with us and include personal information you provide directly to us, personal information collected automatically through your use of our online services and personal information obtained from third party sources.
Cookies and Other Tracking Technologies
Some of the Website pages utilize “cookies” and other tracking technologies. A “cookie” is a small text file that may be used, for example, to collect information about Website activity. Some cookies and other technologies may serve to recall Personally Identifiable Information previously provided by a Website User. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.
We collect and analyze traffic on the Website by keeping track of the IP addresses of Our visitors. IP addresses are unique numeric identifiers that are assigned to each computer browser accessing the Internet.
We work with (or may in the future work with) network analytics service providers and other vendors to provide Us with information regarding traffic on the Website, including pages viewed and the actions taken when visiting the Website; to provide Us with information regarding the use of the Website. Our service providers may collect certain information about your visits to and activity on the Website as well as other websites or services, they may set and access their own tracking technologies on your device (including cookies and web beacons) and may use that information to show you targeted advertisements. Some of these parties may collect Personal Identifiable Information when you visit the Website or other online websites and services. We may also share certain De-Identified Information with these parties, including Hashed Information, in connection with the services they provide to Us.
- We reserve the right to use additional analytic tools.
In the Event of Merger, Sale, or Bankruptcy
In the event that Buoy is acquired by or merged with a third-party entity, We reserve the right, in any of these circumstances, to transfer or assign to such third-party entity the information We have collected from Our Users as part of such merger, acquisition, sale, or other change of control. In the unlikely event of Our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors' rights generally, We may not be able to control how your Personally Identifiable Information and Third-Party Data is treated, transferred, or used.
Links to Other Sites and Collection of Information by Third Parties
The Website may contain links to other sites. Once you enter another website (whether through an advertisement, service, or content link), be aware that Buoy is not responsible for the privacy practices of such other sites. We encourage you to look for and review the privacy statements of each and every website that you visit through a link or advertisement on the Website.
You have certain choices about your Personally Identifiable Information. Where you have consented to the processing of your Personally Identifiable Information, you may withdraw that consent at any time and prevent further processing by contacting Us as described below. Even if you opt out, We may still collect and use non- Personally Identifiable Information regarding your activities on Our services and for other legal purposes as described above.
“Do Not Track.” Do Not Track (“DNT”) is a privacy preference that Users can set in certain web browsers. Please note that We do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
Marketing emails – opt-out: You may choose not to receive marketing email of this type by sending a single email with the subject “BLOCK” to firstname.lastname@example.org . Please note that the email must come from the email account you wish to block.
Your Privacy Rights
In accordance with applicable law, you may have the right to request:
- Access and/or an Electronic Copy of your Personally Identifiable Information.
- Correction of or Change to Your Personally Identifiable Information.
You can access the quote information you provided and update it at any point during the Interview by navigating to previous pages and making the necessary changes. Upon completing the Interview, but as long as you have not yet purchased a policy, you can revise information you provided during the interview by going to the relevant data entry screen through the top progress bar or by using the “BACK” button. After you have revised the information, proceed forward to get a revised quote reflecting the changes you have made.
- Deletion of your Personally Identifiable Information.
- Restriction of or Object to processing of your Personally Identifiable Information, including the right to opt in or opt out of sale of your Personally Identifiable Information to third parties, if applicable, where such requests are permitted by law.
If you would like to exercise any of these rights, you can send an email to email@example.com.
While We cannot guarantee privacy perfection, We will address any issue to the best of Our ability as soon as possible.
We will process such requests in accordance with applicable laws. To protect your privacy, We will take steps to verify your identity before fulfilling your request.
California Consumer Privacy Act
This Privacy Notice for California Residents supplements and is expressly made part of the information contained in this policy, and applies solely to all visitors, Users, and others who reside in the State of California (“consumers” or “you”). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (CCPA). Any terms defined in the CCPA have the same meaning when used in this Notice.
Buoy, including its website, collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, Our websites and agents, have collected the following categories of personal information from consumers within the last twelve (12) months*:
*We have seperated this information into three categories: (1) Category, (2) Example and (3) Collected Y/N.
(2) Valid name, postal address, IP address, email address, SSN, driver’s license. FEIN, Social Security Number, or other similar identifiers.
(1) Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
(2) Valid name, signature, Social Security Number, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, health insurance information. Personal Information does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records. Note: Some personal information included in this category may overlap with other categories.
(1) Protected classification characteristics under California or federal law
(2) Age, marital status, sex (including gender, gender identity, gender expression, veteran, or military status
(1) Commercial information
(2) Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
(1) Biometric information
(2) Physiological, biological, or behavioral, characteristics (including DNA) that can be used to establish individual identity, or imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template such as a faceprint, a minutiae template, or a voiceprint, can be extracted and keystroke patterns or rhythms, gait patterns, or rhythms, and sleep, health or exercise data that contain identifying information.
(1) Internet or other electronic network activity
(2) Information on a consumer's interaction with Buoy website and application.
(1) Geolocation data
(2) Physical location
(1) Sensory data
(2)Audio, electronic, visual, thermal, olfactory, or similar information.
(1) Professional or employment-related information
(2) Current or past job history or performance evaluations.
(1) Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99))
(2) Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
(1) Inferences drawn from other personal information to create a profile about a consumer
(2) Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Buoy obtains these categories of personal information listed above from the following categories of sources:
- Directly from you. For example, from forms you complete or products and services you purchase.
- Indirectly from you. For example, from observing your actions on the Website.
- From third-party business partners, such as LexisNexis, who provide data services available in the public domain.
If you decide to exercise your rights, you will not receive any discriminatory treatment by Us for the exercise of the privacy rights conferred by the CCPA. However, note that some features of Our website, Our products and/or Our services will not function without your Personal Information. Unless permitted by the CCPA, We will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
- However, We may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive We offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.