Privacy Policy

Prospective Insureds and Insureds
We collect information about you so that we can underwrite, process insurance transactions, administer or service your policy, and to operate our business. We collect personal information that we receive from you and we receive from others. Our goal is to limit the collection and retention of your personal information to what is necessary to provide you products or services and to operate our business. The information we may collect includes but is not limited to:

• Contact information which may include your name, address, e-mail and telephone number(s)
• Identification numbers issued by government bodies or agencies including your social security number, passport number, tax identification number, military identification number, or driver’s license number
• Gender, marital status, number of dependents, date(s) of birth, relationship to the policy holder, insured or claimant and claims history
• Financial information, credit history, credit score, assets, income and account details
• Health information, physical and mental conditions, medical history and procedures, relevant personal habits
• Education, professional licenses and affiliations, and employment history
• Driving records
• Criminal record or civil litigation history to prevent or detect fraud
• Information to prevent or detect financial crime
• Information enabling us to provide products and services including location and identification of property to be insured, policy and claim numbers, coverage/peril details, prior accident or loss history, status as director or partner, or other ownership or management interest in an organization, and other insurance you hold
• Policy information including policy number, relationship to the policyholder, details of policy including insured amount, exceptions and previous claims
• Your signature
• Recordings of telephone calls to our representatives and to call centers operated on our behalf
• If you visit one of our offices, we may also collect your likeness and movements on security camera footage
• If you register on our website or on one of our mobile applications, we collect the personal information you knowingly provide to access certain online services. We may also collect personal information from you indirectly when you browse our website, use one of our mobile applications or access one of our official social media pages. For additional information about what personal information may be collected in these instances, please review the portions of this Privacy Policy that reference the use of our website, mobile applications, or social media pages.

Information We May Collect From Others
To provide requested products or services we may also collect information from other sources. Other sources may include your insurance agent/broker and employer, public records, other insurance companies, anti-fraud databases, sanction lists, court records, government agencies, and credit reporting agencies when we believe it is necessary to manage underwriting risk, administer claims, and/or to prevent financial crime.

Claimants and Beneficiaries
If you are a claimant or beneficiary making a claim under a policy, we will collect your contact information along with claim details. Depending on the nature of your claim, we may collect personal information from you or others to administer your claim. The information we may collect from you in order to administer the claim includes:

• Contact information which may include your name, address, e-mail and telephone number(s)
• Social security number
• Policy information including policy number, relationship to the policyholder/insured person, details of policy including insured amount and exceptions, and previous claims
• Claim details including details giving rise to the claim, vehicle registration number, and health data including details of injury
• Medical information regarding injuries, treatment, or disability. Medical condition and health status including current or former physical or mental condition including personal habits and medical history
• Recordings of telephone calls to our representatives and to call centers operated on our behalf
• Employment history
• Criminal record or civil litigation history to prevent or detect fraud
• Information to prevent or detect financial crime.
• Police reports
• Your signature
• Banking information, if you elect to be paid benefits by direct deposit when available
• Photographs and video recordings created in connection with our insurance or other business activities, including for claims administration, settlement and disputes, or for other relevant purposes as permitted by law
• If you register on our website or on one of our mobile applications, we collect the personal information you knowingly provide to access certain online services. We may also collect personal information from you indirectly when you browse our website, use one of our mobile applications or access one of our official social media pages. For additional information about what personal information may be collected in these instances, please review the portions of this Policy that reference the use of our website, mobile applications, or social media pages.

Information We May Collect From Others Regarding a Claim
To administer a claim, we may collect the above information from other sources including your employer, agent, attorney or other representative. We may collect information from other parties to the claim, experts, witnesses, medical providers and loss adjusters. We may also collect information about you from public records, government agencies, and anti-fraud databases when we believe it is necessary for claim administration.

Employees
We collect information about our employees so that we can fulfill our obligations as an employer. The information we may collect includes:

• Contact information which may include your name, address, e-mail and telephone number(s)
• Social security number
• Employment history
• Medical information regarding injuries, treatment, or disability
• Medical condition and health status, including current or former physical or mental condition including personal habits and medical history

Prospective Insureds & Insured Persons
If you are a prospective insured, we may use your personal information to consider your application for an insurance policy and related services or products or for other business purposes as allowed by law. We may use it to communicate with you, your representatives, and others to underwrite, assess and evaluate risk. We may further use your personal information to prevent and detect fraud, unauthorized transactions, or other financial crimes and to comply with applicable laws and regulations such as those relating to money laundering, sanctions and anti-terrorism or to satisfy other legal or regulatory requirements. We may also use personal information to collect and process your premium and other payments.

If you are an insured, we may use your personal information to communicate with you, verify your identity, respond to your inquiries or complaints, and provide you with requested information or services. We may use personal information to send you important information and alerts about changes to our policies, information about our other products and services or for administrative purposes. We may also use your personal information for internal business operations such as auditing, finance and accounting, billing and collections, data management and security, and records management or other business purposes as allowed by law. Personal information may be used to respond to law enforcement requests, subpoenas and court orders, and to respond to requests from government authorities and regulators and to comply with applicable laws. We may also use personal information if we believe it necessary to establish and protect our legal rights, protect our operations, privacy, safety or property, and/or that of our affiliate companies, you or others.

Claimants & Beneficiaries
If you are a claimant or beneficiary, we may use your personal information for the above purposes and to administer, investigate, litigate and/or potentially settle your claim. We may also use your personal information to detect, prevent and report fraud or other illegal activity.

Employees
We use information about our employees so that we can fulfill our obligations as an employer, including for the administration of benefits.

We consider your personal information to be confidential and so we limit our disclosure of your personal information outside of ORA&H. In the course of conducting our business, there are circumstances in which we may disclose your personal information to others. We disclose your personal information only with your authorization or as otherwise permitted or required by law.

When personal information is disclosed to another party to perform services on our behalf, we expect them to maintain the confidentiality of your personal information, to use the information only for the limited purpose for which it was disclosed and to abide by all applicable federal and state privacy laws.

Such disclosures may include:

Prospective Insureds & Insured Persons

• ORA&H affiliates and/or subsidiaries in relation to a requested service or product or for usual business operations
• Insurance agents/brokers, reinsurers/other insurers, third-party administrators to underwrite, assess and evaluate risk and for administrative purposes
• Other business partners or service providers for operational and administrative purposes
• Regulators, government authorities, or law enforcement to comply with applicable law, regulation, inquiry, investigation, subpoena, summons, or legal process
• Consumer reporting agencies, insurance-support organizations, or other organizations to prevent or detect fraud
• Other third parties in any actual or proposed sale, merger, joint venture, assignment, transfer or other transaction related to any part or portion of our business

Claimants & Beneficiaries

• Vendors, including third-party administrators, adjusters, medical management service providers, agents/brokers and investigators, and medical providers in connection with claims and medical management
• Regulators, government authorities or law enforcement to comply with applicable law, regulation, inquiry, investigation, subpoena, summons, or legal process
• Participants in a legal process including lawyers, witnesses, investigators, and others we believe necessary or appropriate in the administration of a legal matter
• Other third parties in any actual or proposed sale, merger, joint venture, assignment, transfer or other transaction related to any part or portion of our business

Employees

• Benefits and service providers
• Regulators and government authorities

You may also provide information through your use of technology when you access and interact with our website or mobile application(s) (“sites”) through your computer, tablet or mobile device. We may collect information you provide to us through forms on our sites such as applications and log in pages. In addition, we may also collect information about your visits so that you may access certain services and so that we may better understand the interests of those that visit our sites.

If applicable, when you use our mobile applications or visit our sites from a mobile device, like a smartphone, we may also collect additional information from your device, including your location, device identifier, and information about your mobile network.

We may use a variety of tracking technologies to collect this information, including without limitation the following:

Browser Log Data 
We may use technologies that automatically collect information when you visit our sites, view our advertisements, or use our products or services ("Browser Log Data"). This Browser Log Data may include information such as your IP address (or other unique device identifier, including one that we may assign); certain details about your browser, operating system, and hardware; your location, if available; the URL that referred you to our sites; your activities on our site, including your preferences; and other logging information, such as the date and time of your visit. We also use web server logs to collect and store information about site usage. We may use this information for fraud detection and prevention, security, and to ensure our sites function properly. 

Web Cookies
When you visit our sites, we may use tracking technology such as cookies to automatically record details about your visit. Cookies are small text files stored by your internet browser on your computer's hard drive that allow sites to remember information about users. A cookie, by itself, does not tell us your email address or who you are. It cannot be used to collect data from your hard drive or personal information about you. We may use cookies and other device identifiers to collect information (such as browser type, time spent on the site and pages visited) and to support certain features of our site. For example, we may use these technologies and information collected for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience with the site. If you do not wish to receive cookies, your browser or other software (including Adobe Flash)‎ can be set to reject cookies or to alert you when a cookie is placed on your device. To do this, follow the instructions provided in your browser or other software, usually found within the “help”, “tools” or “edit” settings. Please note that if you disable cookies on your browser, you may not be able to access certain features or content on our sites.

Beacons
A Beacon is a small graphic image or other web programming code (also known as “1x1 GIFs” or “clear GIFs”) that may be included in our site’s pages and messages. Beacons may be invisible to you, but any electronic image or other web programming code inserted into a page or e-mail can act as a Beacon. Beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the sites, to monitor how users navigate the sites, to count how many e-mails that were sent were actually opened or to count how many particular articles or links were actually viewed.

Embedded Scripts
An embedded script is programming code that is designed to collect information about your interactions with the sites, such as the links you click on. The code is temporarily downloaded onto your computer, tablet or phone from our web server or a third party service provider, and is active only while you are connected to the sites, and is deactivated or deleted thereafter.

Browser Fingerprinting
Browser fingerprinting is the process of collection and analysis of information from your computer, tablet or phone, such as, without limitation, your operating system, plug-ins, system fonts and other data, for purposes of identification.

ETag or Entity Tag
ETag is a feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL. If the resource content at that URL ever changes, a new and different ETag is assigned. Used in this manner, ETags are a form of device identifier. ETag tracking may generate unique tracking values even where the consumer blocks HTTP, Flash, and/or HTML5 cookies.

Recognition Technologies
Recognition technologies are technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).

Location-identifying Technologies
The sites may use GPS (global positioning systems) software and other location-based technologies such as iBeacons to locate you so we may verify your location, deliver you relevant content based on your location, and allow you to share your location with other users as part of the services we provide via the sites. In addition to traditional GPS location-based services, others we work with may install low power Bluetooth, wifi, radio transmitters, or other devices in physical locations, which emit a signal that your smart phone can detect to pinpoint your location or otherwise interact with the sites. In addition, you may be able to send your location information via the sites to other users. You should consider the pros and cons involved in disclosing your location information to us and to other people. Where a user of the sites requests that their location information be revealed to other persons, the user will be provided options for managing sharing services, which may be through third party services such as through Twitter and Facebook. We are not responsible for the acts, omissions or policies of such third parties.

ORA&H has an official page on social media website Linkedin^® that enable customers to discuss their experiences with ORA&H products and services. When you interact with us on social media websites we may collect information such as your feedback, preferences, user ID and/or user name associated with that social media service, and any information or content you have permitted the social media service to share with us, such as your profile picture, email address or friends list, and any information you have made public with that social media service. ORA&H recommends you never include sensitive personal, financial or other confidential information when posting or commenting online. Any posts you make on our official social media pages (including posts that contain pictures, comments, suggestions, opinions, complaints or personal information), are available to others who use those pages and are subject to the terms of use and privacy policies of those sites. Please refer to the policies of those companies to understand your rights and obligations regarding your posts.

We may use third-party analytics services, like Google Analytics, Google Tag Manager, and HubSpot Analytics to collect, monitor and analyze visitor data (such as Browser Log Data, cookies and other tracking data), and trends for marketing optimization and to increase the functionality of our website and mobile applications. 

The Google Analytics service tracks and reports website traffic and provides us insight into behavior information relating to visitor age, gender and interests. Google Analytics Demographics and Interest Reporting gives us insight into behavior to help us understand browsing behavior and give you a better experience when you visit our websites. You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings.

These third-party services have their own privacy policies addressing how they use such information. If you want to prevent your data from being used by Google Analytics, you may wish to take advantage of Google Analytics' currently available opt-outs for the web. We use Google Tag Manager to capture certain non-individually identifiable customer traffic data, including: time spent on page; pdf file downloads; video activity (plays, pauses, percent of video watched, etc.); scroll depth (how far down a webpage a user scrolls); and social actions taken on a website (shares and outbound links to social channels). We do not collect personal information from your online activities over time and across other websites or online services and we do not allow third parties to use these technologies on our sites.

If you would like to learn more about targeted ads that may be based on your online activities, and the choices that you may exercise for certain sites and advertisers, you may wish to visit the Network Advertising Initiative or the Digital Advertising Alliance.

To learn more about how Google Analytics and Hubspot Analytics collect and process data, please visit www.google.com/policies/privacy and legal.hubspot.com/privacy-policy.

“Do not track” is a technology that enables users to opt-out of tracking by websites they do not visit. We do not disclose personal information to third parties for their own marketing purposes. Additionally, we do not collect personal information from your online activities over time and across other websites or online services and we do not allow third parties to use these technologies on our sites. Because we do not use these technologies, we currently do not monitor, respond or take any action to web browser “do not track” signals or other similar mechanisms.

The security of your personal information is important to us, and we strive to implement and maintain reasonable, commercially acceptable, security procedures and practices appropriate to the nature of the information we store, to protect it from unauthorized access, destruction, use, modification, or disclosure. Within ORA&H, we only permit access to personal information about you to those employees who need to know the information in order to provide products and services to you. Unfortunately, no data transmission over the internet or electronic database can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, you should immediately notify us.

You are also responsible for taking reasonable steps to protect your personal information against unauthorized disclosure or misuse. We recommend you utilize the latest, updated version of your web browser. It is important that you create a strong password and protect against unauthorized access to your user name, password and your computer. You should not share your user name and password and should be sure to log out and close your browser when you have completed your session.

Our website or mobile application(s) may contain links to other websites or internet resources that are not operated by us. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party websites or services. If you click on a third-party link, you will be directed to that third-party's website. We strongly advise you to review the privacy policy and terms of use of every website you visit.

Only persons that are the age of majority in your jurisdiction or older have permission to access our website or mobile applications. Our website and mobile applications are not designed for, or targeted to, children under the age of 13. We do not knowingly collect, use, or disseminate personal information from children. If you are a parent or guardian and you learn that your child has provided us with personal information, please contact us and we will promptly delete it. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers as quickly as possible. If you believe that we might have any personal information from or about a child, contact us at inquiries@oldrepublicah.com or Old Republic Accident & Health, Attention: Legal Department, 307 North Michigan Avenue, Suite 2300, Chicago, IL 60601-5382.

Our website and mobile applications are directed to residents of the United States. Residents of other countries should not use our websites or mobile applications. If however, you are located outside of the United States and choose to provide personal information to us please note that we transfer the information to the United States and treat the information there in a manner consistent with United States law. The data protection laws in the United States may differ from those of the country in which you are located, and your personal information may be subject to access requests from governments, courts, or law enforcement in the United States.

You may have other privacy protections under applicable state laws. To the extent these laws apply, we will comply with them when we collect, use, and disclose information about you.

• Go to California Privacy Notice

For Insurance Customers in AZ, GA, MA, ME, MN, MT, NC, NJ, OH, OR, and VA
We may disclose your personal information to nonaffiliates without your prior authorization as stated in this Privacy Policy and as permitted by law. Information we obtain from a report prepared by an insurance-support organization may be retained by that insurance-support organization and disclosed to others. In general, you have a right to learn the nature and substance of any personal information about you in our files. You also have a right to obtain a copy of that information, subject to limited exceptions. To access the information about you, send a signed written request to us at the following e-mail or postal address: inquiries@oldrepublicah.com or Old Republic Accident & Health, Attention: Legal Department, 307 North Michigan Avenue, Suite 2300, Chicago, IL 60601-5382 and include your name and address, along with your policy or account number, if any. For your protection, we may use reasonable means to verify your identity prior to sending you this personal information.  If you believe that any information about you is inaccurate, you may notify us in writing about any correction, amendment, or deletion you believe should be made. We will carefully review your request and, where appropriate, make the necessary change. We are unable to change the information that other companies, like credit reporting agencies provide to us.