Effective: January 1, 2020

This supplemental privacy notice (“Notice”) explains your rights as a California consumer regarding personal information that is subject to the California Consumer Privacy Act (“CCPA”). This Notice, which supplements the information contained in our Privacy Policy about Univista’s general privacy practices, applies only to California residents.

This Notice only describes Univista’s privacy practices with regard to personal information that is subject to the CCPA (“CCPA Information”). The Privacy Policy, and not this Notice, describes Univista’s privacy practices relating to personal information collected, processed, sold, or disclosed in connection with a financial transaction, which is not subject to the CCPA. This includes personal information collected, used, and shared in connection with getting an insurance quote, submitting an application for insurance, issuing or managing a policy, and servicing a claim. The Privacy Policy also includes other information about Univista’s privacy practices generally.

We collect CCPA Information about you in several different ways. For example, we collect information directly from you when you sign up as a guest user of our mobile application. We and service providers working on our behalf collect information from you when you use one of our websites, mobile apps, view our emails or otherwise engage with us through a computer or mobile device. We also collect personal information about you from third parties such as service providers, marketing companies and data providers.

We use your CCPA Information for business purposes including to market our products and services, to provide services such as our mobile application, and to perform analytics and research to improve and develop our websites, mobile apps, services and products.

We do not sell your CCPA Information, or any other personal information that we collect about you. We may share your CCPA Information with third parties for business purposes or as permitted or required by law including with service providers that provide marketing and advertising or other communications services, or that perform analytics and research to improve and develop our websites, mobile apps, services and products.

The following are the categories of CCPA Information we have collected and shared within the past 12 months, and examples of certain kinds of information that may fall into those categories.

Under the CCPA, California residents have certain rights to request access to and deletion of CCPA Information about them, as well as other rights described below. California residents that have engaged in a financial transaction with us also have rights with regard to other personal information. For information about these rights, see our Privacy Policy.

Right to Access CCPA Information: You have the right to request that we disclose certain information about our collection and use of CCPA Information about you over the past 12 months, including:

• the categories of CCPA Information collected about you,
• the categories of sources from which CCPA Information about you was collected,
• the business purpose for collecting CCPA Information about you,
• the categories of third parties with whom we have shared CCPA Information about you, and
• the specific pieces of CCPA Information we have about you.

Right to Deletion of CCPA Information: You have the right to request that we delete CCPA Information we have collected from you, subject to certain exceptions. In response to a request, we will delete CCPA Information we have collected from you unless the CCPA Information is needed for the following:

• To complete a transaction for which we collected the CCPA Information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you,
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities,
• Debug products to identify or repair errors that impair functionality,
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law,
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us,
• Comply with a legal obligation, including compliance with the California Electronic Communications Privacy Act, or
• Otherwise use CCPA Information about you, internally, in a lawful manner that is compatible with the context in which you provided the information.

To better protect you and CCPA Information about you, we will only respond to access or deletion requests that we have been able to properly verify through our authentication processes. To verify your identity, you will be asked to provide certain information, which we will only use to verify your identity and/or your authority to make the request. Responses to verified requests may take up to 45 calendar days or longer depending on the nature of the request. If additional time is needed, we will notify you. We will not respond to more than two access requests from you within a 12-month period.

Non-Discrimination Rights: We will not discriminate against you for exercising any of your rights under the CCPA.