LEGAL

Privacy Policy

Last updated 7/6/2021

In this Privacy Policy, Simply Business, Inc. (“Simply Business”, “we”, “our” or “us”) (“Privacy Policy”) sets forth its policies regarding the collection, use, sale, and disclosure of the information that we collect about you through our websites (including, www.simplybusiness.com, www.harborwayinsurance.com, and the web-site from which this Privacy Policy was accessed) and Simply Business social media (collectively, our “Sites”), offline through any means (e.g., if you contact customer service), and through your use of our services available through our Sites and offline (collectively our “Services”). This Privacy Policy is incorporated into, and is part of, the Simply Business Terms and Conditions (“Terms”), which governs your use of the Sites and Services. Capitalized terms not defined herein shall have their meaning set forth in the Terms.

We recommend you consult this Privacy Policy often (at least prior to or during each access or use of the Sites or use of the Services). If you have any questions about this privacy policy, please contact: [email protected].

If you are a California resident, please see “Special Notice for California Residents,” within this Privacy Policy, which provides additional information about your privacy rights.

1. Scope

This Privacy Policy applies solely to Simply Business. This Privacy Policy does not apply to: (i) nonaffiliated websites that may be accessible through the Sites; and (ii) Insurance Providers and other partners with which we may share your information as part of providing the Services or to which you agree. Simply Business is not responsible for the privacy practices of Insurance Providers.

2. From and about whom do we collect Data?

We collect Data from and about the following:

• You;
• Your business;
• Previous, current, and prospective insurance policyholders;
• Visitors to our Sites;
• Business contacts at our Panel Members (the insurers, as defined in our Terms of Service) or other suppliers;
• People or businesses referred to us; and
• Prospective employees seeking employment opportunities with Simply Business (“Applicants”). If you are an Applicant, please see our special notice for Applicants, available proximate to our online applications.

3. How and What Data Do We Collect About You?

We collect Data about you directly from you, from other persons, and automatically as you use our Sites and Services.

Information that We Collect Directly From You: We collect information, including personal information, from you when you take the following actions. The type of personal information that we collect from you varies based on your interaction with our Sites and Services.

• When you apply for or seek information about obtaining a policy (e.g. when you submit a request for a quotation).
• When you purchase a policy from us.
• When you renew a policy (or a policy under which you, or the business you represent, are insured is taken out or renewed).
• On a claim under a policy.
• If you respond to a customer survey, questionnaire, or marketing campaign.
• If you enter a promotion or contest.
• If you contact us for any reason and through any channel of communication (e.g. telephone, email, text, web chat, etc.).

The type of information that we collect from you includes:

• Identifying information about you: your name, alias, contact information (mailing address); email address; IP address; device ID; or similar identifiers.
• Risk Information: information necessary to provide a quote for insurance, including information about your business and current insurance coverage (if any).
• Payment Information: if you purchase a policy from us, we will collect information to process your premium and any other required payments.
• Policy Information: information about the quotes provided to you and the insurance coverages and policies purchased.
• Usage Information: data collected through your interactions with our Sites, Services, or other information technology resources.
• Profiles: We will also create records of Data about you in the course of providing the Services to you, either directly, through our Panel Members, or through our service providers.
• Sensory Data: we record certain calls for quality assurance and training purposes; if you visit our offices, we have CCTV cameras installed on premises.
• Employment Information: as our Services are provided to businesses, we will obtain information about your employer.

Information We Collect from Other Sources:

• Your Employer: If your employer purchases or inquires about a product from us, it may provide us with your information for billing, customer service, or other purposes.
• Partners: When You are referred to buy a policy through Simply Business by one of our partner entities, such as lead demand generation companies.
• From your friends: your friends may “refer” you to us through our “refer a friend” program.
• Data Brokers: We may purchase leads of prospective customers from lead generation providers.
• From advertisers we work with, including providers of digital advertising.
• Internet Service Providers/Data Analytics Providers: As discussed below, we engage service providers to assist us in evaluating use of our Sites and Services. Please see the discussion below regarding automatically collected data.
• Panel Members: we may receive data from panel members about your purchase/maintenance of the insurance; in such cases, we receive the data in aggregated form.

Data Collected Automatically as You Use our Sites and Services:

We collect data from you automatically as you use our Sites and our Services. In particular, we use cookies and other technologies to collect information about you when you visit our Sites and use our Services. Specifically, we may collect the following information via these technologies; we may collect this information ourselves or through service providers, including internet service providers and data analytics providers:

• Your browser type and operating system
• Web pages you view
• Links you click
• IP address
• Site visited before coming to our Sites
• Whether you submit information in furtherance of obtaining a policy

We use this data predominantly to determine which portions of our Sites are most useful to visitors and to improve our Sites and our Services. We also may share this data in the aggregate to insurers and advertisers for advertising purposes. We typically do not combine the above-listed automatically collected data with other information that we maintain about you. We may share this data with insurers and lead generation partners to help them improve their products and services.

We also track reader response to our emails. In some circumstances, we may associate whether you read a particular email with other information that we have about you. We do this to help determine more relevant communications with you. Please also see “Tracking Tools” below for additional information.

4. How Do We Use The Information That We Collect About You?

We may use your information for one or more of the following business purposes:

• Transactional Purposes: To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request an insurance quote or ask a question about an insurance product on one of the Sites, we will use that information to fulfill Your quote or respond to Your inquiry, which may include sharing Your information with our Panel Members or partners. If You provide your information to purchase a product or service, we will use that information to process your payment and facilitate delivery.
• Administration/Product/Site Improvement: To understand how you access and use our Sites and Services to ensure technical functionality of the Sites and Services, develop new products and services (including insurance products and services), improve the Sites, and analyze Your use of the Sites and Services including Your interaction with applications, advertising, products, and services that are made available, linked to, or offered through the Sites.
• For Customer Service Purposes: To create, maintain, customize, and secure your account with us. To provide you with support and to respond to your inquiries, including investigating and addressing your concerns and monitoring and improving our responses.
• For Administrative and Fraud Prevention Purposes: To process your requests, purchases, transactions, and payments and to identify and prevent transactional fraud.
• If you purchase insurance services through the Site, to communicate with you with respect to the provision, renewal, or cancellation of or collection of payment for, such insurance services.
• For Marketing and Advertising Purposes: To communicate with you, as permitted by applicable law or with your consent, either directly or through one of our partners, services providers, or Panel Members for:

  • marketing
  • research
  • participation in contests, surveys and sweepstakes
  • promotional purposes, including to offer products and services of our Panel Members via emails, notifications, or other messages, consistent with any permissions You may have communicated to Us.
• To personalize your experience on our Sites and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Sites, non-affiliated sites, mobile applications, and via email or text message (with your consent, where required by law), and to evaluate the success of our advertising campaigns (including our online advertising and offline promotional campaigns.
• To help maintain the safety, security, and integrity of our Sites, products and services, databases and other technology assets, and business.
• For Legal Purposes: To comply with legal obligations, as part of our general business operations, and for other business administration purposes.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you on the Sites or through the Services when collecting Your Data.
• For analytics purposes: we evaluate overall usage of our Sites. For example, we tally the number of visitors to our Sites, number of users submitting quotes, number of persons obtaining a person, and similar usage data about our Sites. We may combine this data with demographic information that we obtain from other sources. We may share this aggregated information with insurers for our own and their own product improvement.

We may also use de-identified, anonymized or aggregated Data, including customer information, to provide potential insurers with a general profile of people using our Sites, and to analyze the effectiveness of our Services to customers.

5. How do we share the Data we collect?

Simply Business provides services exclusively to business customers. Our goal is to help you find the appropriate insurance for your company’s particular needs, and, to do so, we do need to share certain information with our Panel Members and other entities. Simply Business may disclose Your Data, including personal information, to another entity for a business purpose, or sell Your Data, including personal information, subject to your right to opt-out of the sale of Your personal information if You are a California Resident (see Your California Privacy Rights).

• Service providers: we share your information with entities that assist us in providing our services, which include entities that host our website, provide marketing services on our behalf, and otherwise assist us in providing our services to you. This also may include entities that assist us in online analytics.
• Panel Members: we provide a portion of your information to a select group of insurers to obtain quotes on your behalf. Once you select a provider, we will share your information with the provider once we have underwritten your policy.
• Other Insurers: If none of our Panel Members are able to underwrite your policy, then, with your consent, we will ask your permission to share your information with providers outside of our network. We also share aggregated data with the insurance providers for the purpose of assisting the providers in building and improving their products and services.
• Lead Generation Providers: if you come to us as a lead from a lead generation provider (as compared with an initial inquiry directly from you) and either we receive and act upon your lead or you submit to us information, we may send information to the lead generation provider, including (i) whether the lead was successful; (ii) policy information; and (iii) other information as described to you on the Sites or through the Services when collecting your Data. If we are unable to provide services to you – or we are not the right fit for your business – we may share your lead with a different lead generation provider or an insurer outside of our panel that we believe, in our sole discretion, may be able to fulfill your insurance needs.
• Analytics Providers: As described below, we engage service providers to assist us in evaluating use of our Sites. These providers may collect data automatically as you use our Sites.

We also may disclose your data in the following circumstances; typically, in doing so, we are disclosing your data to law enforcement, legal advisors, other persons to assist us in protecting our rights and interests and the rights and interests of other persons:

• To comply with Legal and Regulatory Obligations: we may share your information with law enforcement, regulatory bodies, and other persons where we are legally required to do so, e.g., in response to a subpoena.
• To protect our rights and interests and the rights and interests of other persons: we will share your information with other persons, which may include law enforcement, government entities, and other persons, when we believe it appropriate to protect our rights, property, and interests, and the rights, property, and interests of other persons. We also may share information to protect the health and safety of persons.
• Due to a Corporate Transaction: we may share your information in furtherance of a sale of a part or all of our assets, involuntary or voluntary dissolution, or other corporate transaction.

6. Tracking Technology

We, and certain service providers who analyze the activity of visitors to our Sites on our behalf (“Analytics Providers”) and advertising providers, may use ‘IP Addresses’, ‘cookies,’ ‘web beacons’, ‘pixel tags,’ and other tracking technologies (described in more detail below) in the Sites and Services, or in our communications with You (“Tracking Technologies”). These Tracking Technologies allows us and the Analytics Vendors and advertising providers to have access to some Data and analysis about You which helps to:

• Enhance the functionality and features of the Sites and Services;
• Verify Your viewing and/or receipt of communications;
• Keep (and sometimes track) information about You;
• Make Your transactions and other activities more convenient and efficient;
• Diagnose problems with our server;
• Administer the Sites and Services; and
• Assist us in determining, facilitating, serving, and measuring our online advertising.

IP Address and Clickstream Data

Our servers may collect Data about the computer or other device you use to access or use the Sites or Services. This Data may include the Internet address of the computer or other device you use when you access or use the Sites or Services. Your computer’s Internet Protocol address, or IP Address, is a number that is automatically assigned to your computer by your Internet Service Provider (“ISP”) whenever you connect your computer to the Internet. When you operate your device to request and receive webpages or other content from our Sites or Services, our servers may log your IP Address. We may also log your domain name, which is a textual identifier for your computer that also may have been assigned by your ISP. As stated above, we do not typically associate your browsing information with your account. We may, however, use your IP Address and domain name to help identify you (or the corporate entity) and to gather demographic information about our customers as a whole. We may also record the referring webpage that linked you to us (e.g., of another website or a search engine); the webpages or other content you view on the Sites; the website or webpage you visit after the Sites; the ads you see on the Sites and/or click on; other Data about the type of web browser, computer, platform, related software and settings you are using when accessing and/or using the Sites or the Services; any search terms you have entered on any Site or a referral site; and other web usage activity and data logged by our web servers. We use this Data for internal system administration, to help diagnose problems with our server, and to administer the Sites and the Services. Such information may also be used to gather demographic information, such as country of origin and ISP. We do not typically associate this information with you.

Cookies

A “cookie” is a small data file that a website may send to your browser and that your browser may then store on your computer or other device. Cookies may be used to track where You travel on the Sites and Services and what You look at and transact with. We may use cookies to deliver specific messages to you, for example, to announce a new feature that was added since the last time you visited a Site or used a Service. We may use session cookies, for example, to simulate a continuous connection, as cookies help us “remember” information about your preferences and allow You to move within the Sites without reintroducing yourself. A cookie may enable us to relate Your use of the Sites to other information about you, including your personal information.

Most web browsers automatically accept cookies. You can usually refuse cookies, or selectively accept cookies, by adjusting the preferences in Your web browser. Please know, if you refuse or delete cookies (or configure Your web browser to refuse or delete cookies), there may be some features of the Sites or Services that will not be available to You and some webpages, areas of the Sites, Services, or features may not display or function properly.

For the avoidance of doubt, some service providers (including Analytics Vendors) may place cookies on your computer or mobile device. If you would like to disable these "third party" cookies, you may be able to turn them off by going to the third party's website.

Web Bugs

We may use web bugs (aka “web beacons” or “pixel tags”) or similar technologies in the Sites, Services, and/or in communications with You to enable us to evaluate the Sites and Services usage information about users, upgrade user information, and know whether You have visited a webpage or received a message. A “web bug” is typically a one-by-one pixel, transparent image (although it can be a visible image as well), located on a webpage or in an e-mail or other type of message, which is retrieved from a remote site on the Internet enabling the verification of an individual’s viewing or receipt of a webpage or e-mail message. A web bug may enable us to relate your viewing or receipt of a webpage or other message to other information about You, including your personal information.

“Do Not Track”

Some third parties have ways (e.g. Browser do-not-track signals) for users to control how online services collect their information. We do not take any action based on these signals.

Ad Networks

We use network advertisers to serve advertisements on our Sites, Services, and on non-affiliated websites or other media (e.g., social networking platforms). This enables us and these network advertisers to target advertisements to you for products and services in which you might be interested. Ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web bugs, Flash LSOs and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These cookies and other technologies are governed by each entity's specific privacy policy, not this one. We may provide these advertisers with information, including personal information, about you.

We may disclose certain information (such as your email address) to Facebook Custom Audiences (for more information on Facebook Custom Audience go here or to opt-out, go to the Facebook ad preferences page)—so that we can better target ads and content to you and others with similar interests on third parties’ websites or media (“Custom Audiences”). We may also work with other ad networks and marketing platforms that enable us and other participants to target ads to Custom Audiences submitted by us and others. You may also control how Facebook and other third parties display certain ads to you, as explained further in their respective privacy policies or by using the opt-outs described below.

Users may opt out of many ad networks. For example, you may go to the Digital Advertising Alliance ("DAA") Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative ("NAI") Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.

Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies' delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our Site, Services, or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt out may not be effective. Additional information is available on the DAA's website at www.aboutads.info or the NAI's website at www.networkadvertising.org.

7. Third party content and sites

When you are on the Site you may be directed to other sites that are operated and controlled by parties that we do not control. We are not responsible for the data collection and privacy practices employed by any of these parties or their sites. We encourage you to note when you leave our Sites and to review the privacy policies of the different websites you visit.

8. Changing communication preferences

At the point of submitting your personal details, we collect Your email address to enable Simply Business and insurance organizations to contact you. Additionally, this allows Simply Business’s customer service team to get in touch if any more information is needed. You may opt-out of future marketing communications by contacting us at [email protected] or using the opt-out details set out in one of our marketing emails.

9. Children and COPPA

The Sites and Services are not geared towards children, and use of all of the Sites and all of the Services is limited to legally-competent adults aged 18 and older. Simply Business does not knowingly solicit, collect or maintain any information from children under the age of 13. If you believe that your child under 13 has gained access to the Sites or Services without your authorization and without our permission, please contact us at [email protected].

10. Security

We use commercially reasonable safeguards to help protect and secure your personal information. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can guarantee to be 100% secure. Please note that we cannot ensure the security of any information you transmit to us, and you use our Sites and provide us with your information at your own risk.

11. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time and will post any changes on our Sites and Services. We encourage You to check this page periodically for any changes. Your continued use of the Sites or Services following the posting of non-significant changes to this Privacy Policy constitutes Your acceptance of those changes.

12. Contacting Simply Business

If You have any questions about the Privacy Policy or practices described in it, You should contact us at [email protected] or at our mailing address:

Simply Business, Inc. 1 Beacon Street 15th Floor Boston, MA 02108

13. Additional Information for Nevada Residents

If you are a Nevada resident, you may opt-out of the sale of your personal information by emailing us at [email protected].

14. Additional Information for California Residents

Simply Business provides insurance to business customers. We primarily use the information that we collect from and about you for the purpose of providing our insurance services to you; therefore, with the exception of the do not sell and nondiscrimination rights, to the extent that we use your information the course of providing services to you, the rights below do not apply. Nonetheless, we set forth the rights that may apply if we use business contact information outside of the relationship (e.g., if we obtain a list of prospective customers and before we have a relationship with you). If you are a California resident, the California Consumer Protection Act (CCPA) may provide you with additional rights, under certain circumstances, regarding our use of your personal information. This section describes these rights and how to exercise them.

Sources of Information

As described above, we collect information about you from: you, your employer, internet service providers, ad networks, analytics providers, lead generation providers/data brokers, and insurance companies.

Disclosures and Sale of Your Personal Information

As described above, we disclose your information for a business purpose or sell your information to the following entities: lead generation providers/data brokers; insurance companies; internet service providers; ad networks; analytics providers; and law enforcement, as applicable.

Right to Obtain a Copy of Your Personal Information

California residents have the right to request that Simply Business disclose the specific pieces of information that we collected about you during the past twelve months. You also have the right to information about the following information from the past twelve months.

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or disclosed your personal information for a business purpose.

Deletion Request Rights

California residents have the right to request that Simply Business delete any of your personal information that we collected from You and retained, subject to certain exceptions. Once we receive and confirm Your verifiable consumer request, we will delete or deidentify or aggregate (and direct our service providers to do the same) Your personal information from our records, unless an exception applies.

Exercising Your Rights

To exercise the access, data portability, and deletion rights described above, California residents may submit a verifiable consumer request to us by:

• Calling us at (855) 769-6958.
• Emailing us at [email protected].

Only you or an authorized agent may make a verifiable consumer request related to your personal information.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of such a person.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information that we collected if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell You why we made that decision and provide you with a cost estimate before completing your request.

Do Not Sell My Personal Information Right

You have the right to opt out of the sale of your personal information. You have the right to opt out of the sale of your personal information. Above we described the circumstances in which we disclose your information. In particular, if we obtain a lead that we cannot serve, we may provide your information to another lead generation service; we also use behavioral advertising on our Sites. Both of these circumstances may constitute a sale under the CCPA.

To exercise the right to opt-out, you (or Your authorized representative) may submit a request to us by:

• Calling us at (855) 769-6958.
• Emailing us at [email protected].

We allow entities to place cookies on our Sites to collect information about your interaction with such Sites. This collection of information may be a “sale” under the broad definition of “sale” as defined under the CCPA; to opt out of this sharing please visit: www.optout.aboutads.info and www.optout.networkadvertising.org. To opt out of the collection of information through your Apps, please go to: https://youradchoices.com/control .

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change Your mind and opt back in to personal information sales at any time by:

• Calling us at (855) 769-6958.
• Emailing us at [email protected].

Requests from Agents

We will accept valid requests from agents that meet the following guidelines. The agent must provide a written authorization from the consumer that the agent may act on the consumer’s behalf. We reserve the right to verify your authority and the consumer’s identity with the consumer, at our discretion.

Non-Discrimination

We will not discriminate against You for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny You goods or services.
• Charge You different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide You a different level or quality of goods or services.
• Suggest that You may receive a different price or rate for goods or services or a different level or quality of goods or services.

Following please find a description of the information that we collect about you (which is the same as what is set forth in the primary section of the privacy policy) and whether we disclose or sell that data. When we disclose that data for a business purpose, we typically are disclosing to: Service providers; panel members; and regulatory authorities, auditors, and legal advisors.