Information We Collect
In the course of our business, it is necessary to collect nonpublic personal information about you. However, we do not collect any information unless it is required to serve you and to conduct our business. We collect information from sources such as:
- Your interaction with us, including your use of our website through the use of Google Analytics features such as Audience Demographic Reports, Audience Interest Reports, and Remarketing;
- Consumer reporting agencies and other third parties authorized by you to give us information (e.g., consumer reports, claims reports, medical reports and motor vehicle reports); and
- Your transactions with us, our affiliates, and insurers or broker-dealers that we represent.
We do not sell, trade or rent your information to third parties. We do not knowingly solicit or sell personal information of people under the age of 16.
Use and Disclosure of Customer Information
We do not disclose any nonpublic personal information about you to anyone outside our organization, except to effect a transaction authorized by you or as required by law. We may use and disclose such personal information to our affiliate companies:
- To communicate with you, including for marketing and advertising purposes;
- To identify other products and services that may be beneficial to you;
- To complete financial transactions authorized by you;
- To service, process or administer business operations such as accounting, underwriting and claims; and
- For other legitimate purposes relating to our business operations.
Sharing of Information with Service Providers
From time to time, we may retain third parties to perform various support services for us and may enter into relationships with other parties with whom we will jointly market various products and services.
We may disclose limited amounts of your information to these parties so they can perform their services or engage in joint marketing activities with us, but we do not disclose any more information than is necessary.
Sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Marketing and Advertising
Our email messages may contain an advertisement or solicitation. If you no longer wish to receive such messages from MagMutual, please unsubscribe here.
If we receive your or your patient’s health information, we do not share such information with third parties or affiliates except as required to service the subject of your policy, account, claim or contract; for legitimate insurance functions; as allowed by applicable laws governing the privacy of health records; or with your or your patient’s authorization.
Confidentiality and Security of Your Information
We go to great lengths to maintain the privacy and security of your personal information. We maintain physical, electronic, technical, and procedural safeguards to protect all the information we collect. We are careful to ensure that our employees follow strict policies and procedures to protect the confidentiality of your personal information, and our computer systems are configured in a way that prevents inappropriate or unauthorized access by third parties. Our employees are allowed access to your personal information only to the extent that they need to know that information to provide products or services to you or for other legitimate business purposes.
Your California Privacy Rights
California Consumer Privacy Act (CCPA) Notice – Effective January 1, 2020
This CCPA Notice does not apply to personal information that we collect, use, and disclose in our normal course of business on behalf of our customers or that we collect from job applicants, contractors, or employees.
“Personal information” does not include the following:
- Publicly available information from government records;
- De-identified or aggregated consumer information;
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), or the California Confidentiality of Medical Information Act.
Information We Collect
We collected the following categories of personal information in the last 12 months.
- Identifiers (names, contact information, email address, postal address, Social Security number, Internet Protocol address);
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (name, contact information, payment card data, medical information, insurance information, and financial information);
- Characteristics of protected classifications under California or federal law, such as gender, age, medical conditions, physical or mental disability, genetic information;
- Commercial information, such as transaction information and purchase history;
- Biometric information;
- Internet or network activity information, such as browsing history and interactions with our website;
- Geolocation data, such as device location;
- Audio, electronic, visual, and similar information, such as call and video recordings;
- Professional or employment-related information;
- Education information subject to the federal Family Educational Rights and Privacy Act, such as student records; and
- Inferences drawn from other personal information
We have not sold any personal information in the last 12 months.
What We Do with Your Information
We may collect, use, or disclose personal information from you for the following purposes:
- Internal analytics to improve and develop our services;
- Audit, compliance, policy, procedures, or regulation;
- Billing, payment, and fulfillment;
- Customer claims and fraud investigation and prevention;
- General business administration;
- Marketing products and services;
- Financial reporting and accounting; and
- Exercise and defend against legal claims
In addition to personal information, we may use or disclose patient information that has been de-identified as permitted by law. To the extent we share such de-identified patient information, we do so pursuant to one of the de-identification methodologies described in Section 164.514(b)(1) or (b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA expert determination method and the HIPAA safe harbor method, respectively.
Sources of Collected Information
We may collect, use, or disclose personal information from the following categories of sources:
- Affiliated entities and insurers or broker-dealers that we represent;
- Third-party service providers;
- Government or public authorities upon request and as required by law; and
- Consumer reporting agencies and other third parties authorized by you to give us information (e.g., consumer reports, claims reports, medical reports, and motor vehicle reports)
Your Rights Under the CCPA
Right to Disclose
- You have the right to request, twice within a 12-month period, that we disclose the following information to you about our collection, use, and disclosure of your information in the last 12 months:
- Categories of personal information we collected about you;
- Categories of sources from which we collected personal information about you;
- The specific pieces of personal information we collected about you;
- The business purpose for collecting personal information about you;
- The categories of personal information about you that we otherwise shared or disclosed; and
- The categories of third parties with whom we shared, or to whom we disclosed, personal information about you
Right to Delete
- You have the right to request the deletion of personal information that we collected from you and maintained.
- In some cases, the CCPA may allow us to refuse to act on certain requests to delete personal information. When this is the case, we will provide you with an explanation as to why.
Right to Non-Discrimination
- You have the right not to be discriminated against for exercising any of your CCPA rights.
- Except as permitted by the CCPA, we will not:
- Deny you goods or services;
- Charge you different prices or rates for goods or services;
- Provide you a different level or quality of goods or services; or
- Suggest that you may receive a different price rate for goods or services or a different level or quality of goods or services
To make a request for the disclosures or deletion described above, contact us via email at email@example.com or toll-free at 1-800-282-4882.
We must be able to reasonably verify your identity and authority to exercise these rights before fulfilling a request. So that we can verify your identity when you make a request, you will need to sign in to your MagMutual Account or provide certain personal information via email or over the phone when making the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We will respond to your request free of charge within 30 calendar days. If we require more time (up to 90 days), we will notify you in writing of the reason and extension period.
Accuracy of Information
It is important to us to keep your information current and accurate. You may access or review your information, subject to proper identification, by sending us a written request at firstname.lastname@example.org. If you believe that our records are inaccurate or incomplete, please contact us via email at email@example.com or toll-free at 1-800-282-4882. We will investigate your concerns and correct any inaccuracies within 30 calendar days.
Changes to our Policy
Last Updated: July 16, 2021