California Residents: Your privacy rights under the California Consumer Privacy Act (CCPA)
Last Updated: August 1, 2024
This California Consumer Privacy Act Notice (“Notice”) explains how Golden Bear (“we”, “our”, “us”), collects, uses, and discloses Personal Information relating to California residents that is subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA”). This Notice provides you with information about your rights under the CCPA and about Golden Bear’s Privacy Statement, policies and practices. This Notice is supplementary to our Privacy Statement.
What is Personal Information?
Under the CCPA, “Personal Information” is information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or device such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. Personal Information does not include deidentified or aggregate consumer information (such as demographic-level data or data that can no longer be tied to a single identifiable individual), or information that is publicly available (such as information from public records).
Overview of Your Rights under California’s Privacy Law
The California Consumer Privacy Act (CCPA) gives California residents certain privacy rights with respect to some of the Personal Information we collect. These rights are:
- The right to notice of the Personal Information we collect
- The right to know and access the categories, sources and specific pieces of Personal Information we have collected about you on or after January 1, 2022, including our purpose for collecting the information and the categories of third parties with whom we disclose that Personal Information, subject to certain exceptions
- The right to correct certain Personal Information we collect
- The right to delete some or all of the Personal Information we collect, subject to certain exceptions
This Notice describes the steps you must take to exercise these rights, how we will verify your identity, and how we will respond to your requests.
Please note that the California Consumer Privacy Act, including the rights described in this section, does not apply to personal data we receive, generate, or obtain in connection with providing financial products or services to you for personal or household uses. Other exceptions and limitations may also apply as provided by law.
Notice of Collection
We collect Personal Information about California residents from a variety of sources and use it for purposes related to our business. We may disclose Personal Information to our service providers in order to manage consumer accounts, provide goods and services to our consumers, market our products, improve our business, including our marketing services, and respond to legal and regulatory requirements. A fuller description of the purposes for which we collect the Personal Information of our consumers is provided below.
The Personal Information we collect includes not only clear personal identifiers, but also any information that directly or indirectly can be associated with, or linked to, our consumers or their households. Below are the categories of Personal Information we collect about our consumers, the sources of that information, and the purposes for which we use Personal Information.
We have disclosed information in the below categories, including categories of Sensitive Personal Information, to our subsidiaries and affiliates and service providers within the past 12 months. We may also disclose this information to our legal, tax and accounting advisors, as well as with government entities as necessary and permitted by law. In the event we are acquired by or merge with another company, or otherwise undergo a change of control, we may also disclose the below categories of Personal Information as part of that transaction. We may also disclose your Personal Information to other third parties at your direction or with your consent.
Please note that Personal Information we collect from or generate about you in connection with providing you a financial service or product for personal, family, or household purposes may be disclosed to third parties pursuant to the Gramm-Leach Bliley Act (“GLBA”).
We do not sell your Personal Information or share it with third parties for cross context behavioral advertising, as those terms are defined under California law.
Personal Information We Collect, Use and Disclose
We also collect the below categories of Sensitive Personal Information as defined under California law (even though as with Personal Information more broadly, the California Consumer Privacy Act may not apply at all times). We generally use Sensitive Personal Information only for the necessary purposes below or as otherwise permitted by law.
Purposes for which we use your data
We may use your data for the following business purposes:
- To consider your application for insurance, assess and evaluate institutional risk and provide you with an insurance product and services, where applicable;
- To administer your insurance product and maintain your account, including processing premium payment, processing claims, administering benefits and paying out withdrawals, surrenders and claims settlements, and encouraging customer engagement;
- To provide account statements and other required documents;
- To respond to court orders and legal investigations or as otherwise required or permitted by federal and state law;
- To comply with legal requirements;
- To report to consumer reporting agencies;
- To authorize, settle and clear the collection of amounts charged, debited or otherwise used to pay premium or receive payments and the audit of such information;
- To prevent and detect security incidents, fraud, money laundering, unauthorized access, data destruction and other crimes;
- To obtain reinsurance, or stop loss or excess loss insurance on our operations;
- To improve our products and technology, carry out market research, perform data analytics, risk modeling and statistical analysis and for mergers and reorganizations;
- For marketing and analytic purposes.
Children Under the Age of 16
Our website does not target consumers under 16 years of age. We do not knowingly collect, sell or disclose the Personal Information of consumers under 16 years of age.
Retention of Personal Information
We store Personal Information about you on computer systems operated by us or our service providers. Due to being a highly regulated company, we keep various records that contain Personal Information in accordance with applicable state and federal regulations, or pursuant to contractual obligations. In general, we aim to keep Personal Information only for as long as necessary and only for the reason(s) we collected it. It may be necessary to keep Personal Information longer than our official retention periods for legal or regulatory reasons, including litigation. To support us in managing how long we hold Personal Information and our record management, we maintain a data retention policy which includes clear guidelines on retention and deletion.
We consider the following criteria when determining how long a particular record will be retained, including any Personal Information contained in that record:
- How long the record is needed to provide you with the products and services you request
- How long the record is needed to support and enhance our operational processes
- How long the record is needed to protect our rights and legal interests
- How long the record must be retained to comply with applicable laws and regulations
The same Personal Information about you may be included in more than one record and used for more than one purpose, each of which may be subject to different retention periods based on the factors listed above.
Exercising Your Rights under California’s Privacy Law
Right to know and access
You have a right to ask us to disclose certain Personal Information that we have collected about you. You, or your authorized agent, may ask us to disclose, subject to certain exceptions:
(i) the categories of Personal Information we have collected;
(ii) the categories of sources for the Personal Information we collected about you;
(iii) the purposes for which we collected the Personal Information;
(iv) the categories of third parties with whom we have disclosed the Personal Information; and
(v) the specific pieces of Personal Information that we have collected.
Before we respond to your request to know and access, we must verify the identity of the requestor. Our process for verifying the identity of the requestor is described below.
Right to correct
You have the right to correct certain Personal Information. There are many types of correction requests and our service areas are ready to assist you with your request.
Before we respond to your request to correct certain Personal Information, we must verify the identity of the requestor. Our process for verifying the identity of the requestor is described below.
Right to delete
You have the right to ask us to delete some or all of the Personal Information we have collected or maintained about you, subject to certain exceptions.
Before we respond to your request to delete Personal Information, we must verify the identity of the requestor. Our process for verifying the identity of the requestor is described below.
Right to non-discrimination if you exercise your consumer rights
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by law, we will not do any of the following to you if you exercise your CCPA rights:
- Deny you goods or services
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
- Provide you a different level or quality of goods or services
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services
Do Not Track Signals
We do not currently take actions to respond to Do Not Track or opt-out preference signals. As noted above, we do not sell your Personal Information or share it for cross-context behavioral advertising.
How to submit a request to exercise your rights
You may exercise your privacy rights by visiting our form or by calling this toll-free number — 888-374-8867.
For matters involving sensitive personal information, or if you have any concerns or questions regarding the privacy of your personal information, you can contact our Privacy Officer or General Counsel.
Contact Information:
- Email: privacy@goldenbear.com
- Phone: 888-374-9967
- Address: Golden Bear Insurance Company, 1550 W. Fremont Street, Stockton, CA 95203
Before providing information you request, deleting, or correcting information in accordance with these rights, we must be able to verify your identity. In order to verify your identity, you will need to submit information about yourself, including your name, contact information, and, to the extent applicable, providing your account login credentials. We will match this information against information we have previously collected about you or provided to you to verify your identity and your request. If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information in order to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion and then confirm separately that you want Personal Information about you deleted.
We may need to request additional information from you to verify your identity, which may include other account information, answers to security questions, your name, government identification number, date of birth, contact information, or other personal identifying information. Information collected for purposes of verifying your request will only be used for verification.
If you would like to appoint an authorized agent to make a request on your behalf, you must provide the agent with written, signed permission to submit privacy right requests on your behalf. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. Note that we may require you to verify your identity with us directly before we provide any requested information to your authorized agent unless your authorized agent has power of attorney or acts as a conservator, in which case we will not contact you directly.
How we will respond to your request
We intend to confirm receipt of your request within 10 days and to respond to a verified request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For requests to know the specific pieces of information we have collected, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request
For more information, contact:
Privacy Officer or General Counsel
Golden Bear Insurance Company
1550 W. Fremont Street
Stockton, CA 95203
privacy@goldenbear.com
888-374-9967
Changes to This California Consumer Privacy Act Notice
We may change or update this Notice from time to time. When we do, we will post the revised Notice on this page with a new "Last Updated" date.