Oriska Insurance COVERAGE PRESS PRODUCT LINE SMALL BUSINESS MINORITY BUSINESS PROJECT MANAGER 24-HR PROTECTION BONDING Privacy Policy Oriska Insurance Company Privacy Policy Statement Policy Last Updated: November 19, 2018. Our Approach to Privacy Oriska Insurance Company (OIC) values its relationship with you. Protecting the privacy of your information is of the greatest importance to us. As an insurance provider, we are regulated by Federal and State laws. These laws include New York’s Cybersecurity Regulation (23 NYCRR Part 500) and the Healthcare Insurance Portability & Accountability Act (HIPAA) of 1996. Both of these laws protect the confidentiality and security of your non-public information (such as personally identifiable information and protected healthcare information), as well as our use and disclosure of it. Whether you are a current, former, or potential customer, OIC treats your information with the same high level of confidentiality and security. Our Use and Disclosure of Information At OIC, we gather information about you that may be used including in connection with your application for a quote, to process and service your insurance policy, settle your claims and offer you additional products and services that we think may be of interest to you, for research and analytics purposes, and as permitted or directed by you. If you apply for a quote for yourself and any other person(s), we also may gather, use and share such person’s/persons’ information in the same manner. Information We Collect From You We may collect, store, and process the following categories of personal information about you (“Non-Public Information”): Basic personal details such as your name, address, e-mail address, telephone number, date of birth or age, gender, marital status, nationality ID Card Number; Additional information about your lifestyle and insurance requirements, such as details of your car, your home, your household or your travel arrangements; Information about your other policies, such as claims history, quotes history, payment history, claims data; Details on your dependents/spouse/partner/family; Identification document information; Bank account details; IP addresses when visiting our webpage without disabling Cookies including related location data; Results of checks relating to prevention of fraud and/or terrorist activities; Your marketing preferences; Signature; We may also collect, store and use the following “special categories” of Non-Public Information to include protected healthcare information (PHI) containing personal health information (for example current state of health, existing conditions, family or personal history in relation to some conditions). Information We Collect From Third Parties This includes information we collect from affiliated and nonaffiliated third parties, including but not necessarily limited to insurance support organizations and, consumer reporting agencies. It may include information such as vehicle reports, consumer credit information, demographic information, insurance histories, and insurance claims reports. Information obtained from insurance support organizations may be retained by such organizations and disclosed to other persons as permitted by law. Information About Your Transactions This includes information about your transactions with us and others, including our affiliates. It includes information such as your policy coverage levels, account balances, claims history, and billing information. Information We Disclose or Share Information about our current, former, or potential customers may be disclosed, but only as permitted or required by law, or as permitted or directed by the customer or consumer. For example, we may disclose such information to affiliated and nonaffiliated insurance companies, insurance agents, reinsurance companies, insurance support organizations, such as consumer reporting agencies, government entities, and claims administrators. We may also disclose such information to nonaffiliated third parties that perform services or functions on our behalf including the marketing of our products or services. Further, we may also disclose such information as necessary to effect, administer or enforce a transaction that you request or authorize, or in connection with servicing or processing a transaction that you request or authorize. The following are examples of situations in which we may disclose such information: Your information may be passed between us and our agents, appraisers, attorneys, investigators, and others who may be involved in the sales and marketing of OIC products and services, processing of applications, and servicing of policies or claims. If you request a comparison quote, your information may be shared with an affiliated insurance agent and third-party insurance companies in order to provide you with the requested comparison quotes. We provide your policy information to adjusters and other appropriate business entities that make any necessary repairs to your vehicle or property insured by us when you have a claim. We may provide your information to others whom we determine need such information to perform insurance or other professional functions for us. These may include parties helping us with administrative services and consumer reporting agencies. We may supply information as required by search warrant, subpoena, or legal process, to state insurance departments, or other law enforcement or government authorities when required by law, or to protect our own legal interests in the event of suspected illegal or fraudulent activities. If we collect your information as an agent for one of our business partners, we may use it to contact you or make you an offer regarding insurance products that may be of interest to you. Communications with OIC OIC may contact you regarding your policy and our products and services, such as insurance rate quotes, billing notices, confirmations of changes, changes to our products, and other OIC-specific communications. You may NOT unsubscribe from these OIC-specific communications that relate to your primary usage of our service and products, and you agree to receive these communications if you make a purchase. When you quote or become a policyholder with us, OIC may contact you about third-party promotions, our products and services and other information that may be useful to you. In addition, prior to purchasing a policy or after canceling your policy, OIC may contact you to confirm your quote or invite you to come back and get a new quote or to purchase a policy. You will have the ability to unsubscribe from whichever type of communication you received. Your Rights Where permitted by applicable law or regulation, you have the right to: Access, review, and update your Non-Public Information (e.g., personal data) held about you and to learn the origin of the data, the purposes and ends of the processing, the details of the data controller(s), the data processor(s) and the parties to whom the data may be disclosed; Withdraw your consent at any time where your Non-Public Information is processed with your consent e.g. direct marketing; Update or correct your Non-Public Information so that it is always accurate; Delete your Non-Public Information from our records if it is no longer needed for the purposes indicated above; Restrict the processing of your Non-Public Information in certain circumstances, for example where you have contested the accuracy of your personal data, for the period enabling us to verify its accuracy; Obtain your Non-Public Information for onward transmission by you to another entity without hindrance from Us; and File a complaint with us and/or with the competent data protection supervisory authority (i.e. the Office of the Information and Data Protection Commissioner by clicking here) You may exercise these rights by contacting us by email or by post as follows: Oriska Insurance Company Information Officer P.O. Box 855 Oriskany, NY 13424 Email: info@oriska.com It is important that you include your name, email address and purpose of your request when contacting us. Please note, however, that certain Non-Public Information and personal data may be exempt from such access, correction and erasure requests pursuant to applicable data protection laws or other laws and regulations regarding data retention. Confidentiality for Victims of Domestic Violence in New York The State of New York prohibits many types of discrimination against domestic abuse victims. It is unlawful for any insurance company to deny or cancel a policy, refuse to renew a policy, set a limit of coverage, or base insurance rates on the basis of being a victim of domestic abuse. If you and/or your child have experienced domestic violence, and you have obtained a valid Order of Protection directly related to the abuse, OIC will take appropriate actions to protect you and/or your child’s information. This includes safeguarding your name, address, and phone number. For more information. Contact Information For questions concerning our privacy policy, please contact us at the address below, or send an email to: privacy@oriska.com: Privacy Oriska Insurance Company Privacy Officer P.O. Box 855 Oriskany, NY 13424 Email: privacy@oriska.com This Privacy Policy Statement is specific to the Oriska Insurance Company. OIC shall review, update, and modify this Privacy Policy Statement as required and ensure that all of its customers and consumers are made aware of any updates to this policy. © 2021 ORISKA INSURANCE. ALL RIGHTS RESERVED. FINANCIAL AUDITS | PRIVACY POLICY