Privacy Policy

1. On or from this Site;

2. In email, text and other electronic messages between you and this Site; and

3. Through forms you download from the Site and submit to us.

1. Us offline or through any other means, including on any other website operated by any third party (including our affiliates and subsidiaries); or

2. Any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Site.

1. Information You Provide

If you participate in certain activities on the Site, you may need to provide us with information about yourself such as your name, email address, mailing address, phone number, or fax number. For example, if you choose to send us an email or fill out an online form, you are voluntarily providing personal information to us. In doing so, you are giving us your consent to collect, use and disclose that information for the purpose it is requested and for other reasonable internal business purposes. We do not sell, rent or trade voluntarily submitted personal information with third parties. We may collect additional information when you; contact us regarding a question, concern or inquiry about the Site or our services; sign up to be placed on our mailing and/or marketing lists; or otherwise interact with the Site or our staff.

Your decision to provide us with information is voluntary, but if you choose not to provide any requested information, you may not be able to take advantage of all of the Site’s features.

2. Information We Automatically Collect

When you visit the Site, basic information is passively collected through your browser via use of tracking technologies, such as “cookies” which utilize various files sent from our servers to your computer hard drive, laptop, tablet, mobile phone or other device whenever you visit or interact with the site. Additional information about cookies and tracking technologies is available here. The information we collect through cookies and other means is not personal information and does not individually identify you. It includes things like:

a. the domain name and IP address from which you accessed the Site;

b. the type of browser and operating system you use;

c. the date and time and length of your visit;

d. the specific page visited, graphics viewed and any documents downloaded;

e. the specific links to other sites you accessed from the Site; and

f. the specific links from other sites you used to access the Site.

Mobile devices are the one possible exception to the rule that our passive, automatic collection activities exclude personal information. We say that because, if you access the Site from a phone or other mobile device, the mobile services provider may transmit to us uniquely identifiable mobile device information which allows us to then collect mobile phone numbers and associate them with the mobile device identification information. Some mobile phone service providers also operate systems that pinpoint the physical location of devices and we may receive this information as well. Regardless, we use both automatically collected non-personal information and mobile device information only to compile generic reports about popular pages on the Site, and to see how our customers and followers are accessing the Site. We then use that data to administer the Site, make your activities more convenient and efficient and to enhance the functionality of the Site, such as by remembering certain of your information thereby saving you time.

a. Cookies: A cookie is a text file sent by a web server to a web browser and stored by the browser. The text file is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.

We may send a cookie, which may be stored by your browser on your computer’s hard drive. We may use the information we obtain from the cookie in the administration of the Site, to improve the Site’s usability and for marketing purposes. We may also use that information to recognize your computer when you visit the Site, and/or to personalize the Site for you. Most browsers allow you to refuse to accept cookies. (For example, in Internet Explorer you can refuse all cookies by clicking ‘Tools’, ‘Internet Options’, ‘Privacy’, and selecting ‘Block all cookies’ using the sliding selector.) This will, however, have a negative impact upon the usability of many websites. For more information about cookies visit www.allaboutcookies.org, which gives details on how to delete cookies from your computer.

b. Web Beacons: A Web Beacon is a small tag (which may be invisible to you) that may be placed on the Site’s pages and messages.

c. Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on.

d. ETag: An ETag or entity tag is a feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL.

e. Browser Fingerprinting: Collection and analysis of information from your Device, such as, without limitation, your operating system, plug-ins, system fonts and other data, for purposes of identification.

f. Recognition Technologies: Technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).

We use Google Analytics to analyze the use of the Site. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to the Site is used to create reports about the use of the Site. Google will store this information.

Google’s privacy policy is available at: www.google.com/privacypolicy.html

4. Information We Collect When You Interact With Third Party Sites

The Site may include functionality that allows certain kinds of interactions between the Site and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we may provide links on the Site to facilitate sending a communication from the Site or we may use third parties to facilitate emails or postings to social media. These third parties may retain any information used or provided in any such communications or activities and these third parties’ practices are not subject to our Privacy Policy. TMH may not control or have access to your communications through these third parties. Further, when you use third-party sites or services, you are using their services and not our services and they, not we, are responsible for their practices

1. To present the Site and its contents to you;

2. To assess the performance of the Site, to improve the content offered through the Site;

3. To offer enhanced functionality when accessing the Site, including keeping track of your specified preferences or to track your online activities over time and across third party sites;

4. To deliver content relevant to your interests on the Site and third party sites based on how you interact with our advertisements and/or content;

5. To provide you with information, products or services that you request from us;

6. To process claims;

7. To fulfill any other purpose for which you provide it;

8. To provide you with notices about your account/subscription, including expiration and renewal notices;

9. To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;

10. To notify you about changes to the Site or any products or services we offer or provide though it;

11. To allow you to participate in interactive features on the Site;

12. In any other way we may describe when you provide the information;

13. To contact you about our own and third-parties’ goods and services that may be of interest to you;

14. To perform research;

15. Internal business purposes;

16. As permitted or required by law; or

17. For any other purpose with your consent.

1. Third Parties Providing Services to TMH. We may use third-party service providers to perform certain services on behalf of us or the Site, such as: (i) assisting us in Site operations; (ii) managing a database of customer information; (iii) hosting the Site; (iv) designing and/or operating the Site’s features; (v) tracking the Site’s activities and analytics; and (vi) other services designed to assist us in maximizing our business potential. We may provide these third parties with access to user information to carry out the services they are performing for us. These third parties may have additional or different privacy policies and/or Terms of Use. You should be sure that you read and agree to those policies and Terms.

2. Affiliates and Business Transfer. We may share your information with our parent, subsidiaries and affiliates. As part of this sharing of information with our parent, subsidiaries and affiliates, this means that once you provide us with information, any one of our related entities may use your information including for marketing purposes, pursuant to the terms of this Privacy Policy. We also reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Site and/or our Services; or (ii) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including during any due diligence process.

1. Whether and why we have your personal information;

2. How we got your personal information;

3. What we have done with your personal information;

4. To whom we have communicated your personal information;

5. Where your personal information has been stored, processed or transferred;

6. How long we will retain your personal information, or how that retention period will be determined; and

7. The safeguards in place to protect your information when it is transferred to third parties.

1. We do not sell or share the information we collect to anyone for marketing purposes;

2. We contractually require every person or organization providing products or services for us or on our behalf to protect the confidentiality of nonpublic personal information;

3. We prohibit any person or organization from disclosing or using nonpublic personal information other than to carry out the purposes of the products and services we provide;

4. We maintain physical, electronic and procedural safeguards so that all nonpublic personal information is treated in accordance with this Privacy Policy; such safeguards include advanced data-encryption and storage technology, secure facilities with access controls at public points of entry, various other security systems, and onsite supervision of these areas;

5. We employ an independent auditing company to annually review our security practices.

In addition, we use standard security protocols and mechanisms to facilitate the exchange and the transmission of sensitive data. We do not process Personal Information in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you.

1. Your Rights and Choices Under CCPA: The California Consumer Privacy Act (“CCPA”) provides consumers (California Residents) with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights:

a. Access to Specific Information and Data Probability Rights: If you submit a written request, once we receive your information and confirm your verifiable consumer request, we will disclose to you:

i. The categories of Personal Information we collected about you.

ii. The categories of sources for the Personal Information we collected about you.

iii. Our business or commercial purpose for collecting or selling that Personal Information.

iv. The categories of third parties with whom we share that Personal Information.

v. The specific pieces of Personal Information we collected about you (also called a data portability request).

vi. If we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:

1. Sales, identifying the Personal Information categories that each category of recipient purchased; and

2. Disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.

b. Deletion Request Rights: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your Personal Information from our records, unless an exception applies. We may deny your request if retaining the information is necessary for us to:

i. Complete the transaction for which we collected the Personal Information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.

ii. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

iii. Debug products to identify and repair errors that impair existing intended functionality.

iv. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

v. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).

vi. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.

vii. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

viii. Comply with a legal obligation.

ix. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

2. Response and Timing Format: To make such a request, please provide enough information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California address for our response. To make such a request, please send an email to: compliance@tmhighland.com with “California Privacy Rights” as the subject line, or mail us a letter to: Tokio Marine Highland Insurance Services, Inc., 625 Fair Oaks Ave, Suite 290, South Pasadena, CA 91030, Attn: California Privacy Rights. You must include your full name, email address, and postal address in your request.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

a. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.

b. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us.  We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

a. Deny you services.

b. Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.

c. Provide you a different level or quality of services.

d. Suggest that you may receive a different price or rate for services or a different level or quality of services.