Privacy Policy

Last Updated: January, 2023

This privacy policy ("Privacy Policy") describes how RSC Insurance Brokerage, Inc. and its affiliates and subsidiaries (collectively, "Risk Strategies", "we", "us", or "our") collect, use and disclose the personal information processed in relation to:

This Privacy Policy also describes the choices available to you regarding our use of your personal information and how you can access and update this information. We recommend that you review the Terms of Use governing your use of this Site and its content by clicking here.

Please note that this Privacy Policy does not apply to our processing of information about employees, staff, or contractors. We may provide additional privacy disclosures where the scope of the personal information processing falls outside the scope of this Privacy Policy. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Consumers with disabilities may access this notice by using a standard screen reader or contacting us at (617) 330-5700.

Our Sites

The processing of personal information in relation to the Sites is controlled by Risk Strategies, unless a Site identifies (in its privacy policy, terms of use or otherwise) that it is controlled by another Risk Strategies entity. Risk Strategies, as well as individual divisions of Risk Strategies, may have their own websites with their own privacy policies, in which case this Privacy Policy will not apply to such websites unless such website provides a link to this Privacy Policy.

Information We Collect

When we use the term "personal information" in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household. It does not include aggregated or deidentified information that is maintained in a form that is not capable of being associated with or reasonably linked to an individual or household.

We may collect personal information about you and related third parties, including beneficiaries, dependents, employees or other participants in the Services offered to you.  By providing us with the personal information of any third party, you confirm that you have the authority to do so on their behalf and have provided them with the information set out in this Privacy Policy.

The categories of personal information we collect can include:

Keep reading to learn more about how we collect personal information you provide to us directly through the Sites, information we collect through your use of the Services, and information we receive through third parties.

Information You Provide Through the Sites

When using our Sites, you may voluntarily provide information about yourself. We collect this information when you contact us through our Sites, create an account, provide us with personal information required to fulfill Services, or interact with us for any other purpose.

We may collect the following personal information about you through our Sites:

Information Processed Through the Services

We may also collect additional personal information (subject to applicable legal requirements and restrictions) in providing our Services, operating our business, and interacting with individuals in the course of our business, which may include:

Information Automatically Collected When You Use our Services

Like most digital platforms, we collect certain personal information automatically when you visit our online Services, including:

We may use this information to determine the way you access and use our Services and to improve your online browsing experience. This may include, for example, the site from which you came and the site to which you are going when you leave our services, the pages you visit, the links you click (also known as "clickstream data"), whether you open emails or click the links contained in emails, whether you access the services from multiple devices, and other actions you take on the services

We may also conduct analytics based on clickstream data. We may collect analytics data or use third-party analytics tools like Google Analytics to help us measure traffic and usage trends for the Services and to understand more about the demographics of our users. You can learn more about Google's practices with Google Analytics by visiting Google's privacy policy here. You can also view Google's currently available opt-out options here

Please see the Your Choices section below for information on how to block or delete cookies from your browser or device.

Information Provided by Third-Party Sources

In addition to the personal information collected above, we may also collect personal information from the following third-party sources:

How We Use Your Information

In addition to the above, we and our third party partners may use personal information for any lawful purpose, including the following:

We may also use aggregate, deidentified and anonymous information in a manner for any lawful, legitimate purpose such that the information does not uniquely identify you or any other user of the Services. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.

Disclosure of Information

Risk Strategies may share your personal information with other parties in the ways that are described in this Privacy Policy, including the following:

We may share information that has been anonymized or aggregated without limitation.

Your Choices

Online Advertising

We permit our trusted business partners and third-party advertising companies (including ad servers, ad agencies, technology vendors, or providers of sponsored content, collectively "ad partners") to collect your browsing information and numerical identifiers associated with your browser or device to provide ads on our behalf that are tailored to your interests. These ads may appear on our website, and on other third-party websites. Using cookies, our ad partners collect data from a particular browser or device about a user's web viewing behaviors over time, across unrelated websites, and in some cases combine such data with data collected from other browsers or devices associated with the same user or household, and use such data to predict user preferences and to deliver advertisements to that user which are calculated to target that user's predicted preferences across devices. If you take steps to block advertising cookies or opt out of interest-based advertising, note that this does not mean that you will no longer receive ads from Risk Strategies, as these ads are only one form of digital advertising. Throughout our online advertising practices we support the self-regulatory principles of the Digital Advertising Alliance ("DAA").

Privacy Preferences

You have some choices regarding how we use your personal information, including those in this section and, depending on where you live, please see the Region-Specific Disclosures section below for additional information that may apply to you.

Third-Party Links and Tools

Our Sites may provide links to third-party websites or applications. We do not control the privacy practices of those websites or applications, and they are not covered by this Privacy Policy. You should review the privacy notices of other websites or applications that you use to learn about their data practices.

Our Sites may also include integrated social media tools or "plug-ins," such as social networking tools offered by third parties. If you use these tools to share personal information or you otherwise interact with these features on the Sites, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public. Your interactions with third-party companies and your use of their features are governed by the privacy notices of the companies that provide those features. We encourage you to carefully read the privacy notices of any accounts you create and use.

Minors

Risk Strategies is committed to protecting the privacy needs of children and encourages parents and guardians to take an active role in their children's online activities and interests. We do not knowingly collect information from children under the age of sixteen (16), and Risk Strategies does not target or direct its Sites to children.

Changes to Our Privacy Policy

We may update this Privacy Policy to reflect changes to our information practices and will post the updated Privacy Policy with a modified "Effective Date" at the top. Any changes or modifications will be effective immediately upon posting of the changes or modifications, and, to the extent permitted by law, retroactively to all personal information we have already collected. We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices. If our information practices change, we will post these changes on this page.

Contact

If you have questions, comments, or concerns about this Privacy Policy, please contact us:
*    By phone at (617) 330-5700.
*    Email at privacy@risk-strategies.com.

Region-Specific Notices

Additional privacy terms may be applicable depending on your location. These terms (our "region-specific notices") are incorporated into, and should be read in conjunction with, this Privacy Policy. Unless otherwise indicated, the region-specific notices have the same effective date as the Risk Strategies Privacy Policy and all terms have the same meaning as defined in our Privacy Policy.

Notice to Certain U.S. State Residents

Residents of the U.S. states of California, Virginia, Colorado, Connecticut, and Utah who have interacted with us in the ways described in this Privacy Policy have certain privacy rights granted under the applicable laws in their state (respectively, the California Consumer Privacy Act of 2018 as a mended by the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and any similarly constructed U.S. state law enacted in the future; collectively, the "U.S. state privacy laws"). This notice does not apply to personal information that is exempted from the U.S. state privacy laws, such as personal information covered by sectoral privacy laws like the Health Insurance Portability and Accountability Act, the Confidentiality of Medical Information Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or the California Financial Information Privacy Act.

Sensitive Information. The following categories of personal information we collect may be classified as "sensitive" under the U.S. state privacy laws ("sensitive information"):

We use this sensitive information in determining your eligibility for and the provision of the Services as described in our Privacy Policy. We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising. We do not collect or process sensitive information, for inferring characteristics about you other than as necessary to provide the Services.

Your Privacy Rights. Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

The Right to Know

The right to confirm whether we are processing personal information about you and, under California law only, to obtain certain personalized details about the personal information we have collected about you, including:

  • The categories of personal information collected;
  • The categories of sources of the personal information;
  • The purposes for which the personal information were collected;
  • The categories of personal information disclosed to third parties (if any), and the categories of recipients to whom this personal information were disclosed;
  • The categories of personal information sold (if any), and the categories of third parties to whom the personal information were sold; and
  • The categories of personal information shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal information were disclosed for these purposes.

The Right to Access & Portability

The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

The Right to Correction

The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information

The Right to Control Over Sensitive Information

The right to exercise control over our collection and processing of certain sensitive information

The Right to Control Over Automated Decision-Making / Profiling

The right to direct us not to use automated decision-making or profiling for certain purposes, including any form of automated processing of personal information to evaluate, analyze, or predict personal aspects concerning an individual's economic situation, health, personal preferences, interests, reliability, behavior, location or movements in furtherance of decisions producing legal or similarly significant effects

Right to Opt-Out of Sales or Sharing of Personal information

The right to direct us not to (a) "sell" your personal information to third parties for monetary or other valuable consideration, or (b) "share" your personal information with third parties for cross-context behavioral advertising purposes and targeted advertising purposes.

See the section Do Not Sell or Share My Personal Information below for more information.

The Right to Request Deletion

The right to request the deletion of personal information that we maintain about you, subject to certain exceptions.

Depending on your state of residency, you also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of Service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

Do Not Sell or Share My Personal Information. Under the laws of California, Colorado, Connecticut and Utah, the definition of "sale" is broad and covers many common business activities, even when the personal information used is not exchanged for money, or when it has been partially de-identified. Risk Strategies shares personal identifiers, or internet, network and device information, and preferences for data analytics including fraud detection, marketing and advertising purposes, for example, to better understand engagement with our Services, to match your interests with similar products you may also be interested in, to offer advertising for our products across other devices that you use, and to identify other potential customers with interests similar to yours who may also be interested in our products.

Under Virginia law, "selling" is the exchange of your personal information for monetary consideration only. Risk Strategies does not sell your personal information to third parties for money for their independent business use.

When we use the term "share" or "sharing" we mean sharing, renting, releasing disclosing, disseminating making available, transferring or otherwise communicating orally, in writing, or by electronic or other means, your personal information by us to a third-party for cross-context behavioral advertising as well as targeted advertising as defined under the U.S. state privacy laws.

We do not "sell" or "share" sensitive information. We do not sell the personal information of consumers we know to be less than 16 years of age. If we wish to do so in the future, we will first seek affirmative authorization from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age. Please contact us at privacy@risk-strategies.com to inform us if you, or your minor child, would like to opt-in to "sales".
    

Exercising Your Rights. To exercise the rights described above, please choose one of the following options:

We will need to verify your identity and confirm your state of residence before processing your request, which will generally require the matching of sufficient information you provide to us to the information we maintain about you in our systems or the successful authentication through your account (if you have one with us).

Making a privacy rights request does not require you to create an account with us. However, we cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We will only use personal information provided in a privacy rights request to verify the requestor's identity or authority to make the request, to process the request, and for necessary record keeping.

Authorized Agents. Only you, or someone legally authorized to act on your behalf and with written permission, may make a privacy rights request related to your personal information. In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us. We generally require evidence of either: (i) a valid power of attorney; or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a signed statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Appealing Privacy Rights Decisions. Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by emailing privacy@risk-strategies.com with the subject line "Privacy Rights Appeal." We welcome the opportunity to discuss the decision about your privacy rights request with you.

Notice to California Residents

Retention of Personal Information. We retain personal information only for as long as is reasonably necessary to fulfil the purpose for which it was collected. However, if necessary, we may retain personal information for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator or other government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.

Therefore, we retain personal information for as long as the individual continues to use our Services for the purposes explained in this Privacy Policy. In particular, we will retain their personal information for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as, for any additional purpose based on the choices you have made, such as to receive marketing communications. We will retain personal information supplied when joining our services, including complaints, claims and any other personal information supplied during the duration of an individual's contract with us for the services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.

Notice to Nevada Residents

If you are a resident of the State of Nevada in the United States, Chapter 603A of the Nevada Revised Statutes permits Nevada residents to opt out of potential future sales of certain covered information that a website operator has collected or will collect about you. To exercise this right, please contact us: