Privacy Policy MediaAlpha for Agents Privacy Policy Effective: September 1, 2020 QuoteLab, LLC, which does business as MediaAlpha, provides online services in the form of a lead acquisition marketplace (which we call MediaAlpha for Agents) for insurance carriers and their agents to acquire leads of consumers who have requested (through the websites we own and operate and our webforms that are embedded in certain third-party websites) to connect with and learn more about the products and services of such carriers and agents and to receive a quote directly from them so the consumer can decide if they want to make a purchase. Below are some key things to know about this Privacy Policy, us, and the services we provide: · We refer to the MediaAlpha for Agents website(s) and our associated services collectively as “our services”. · This Privacy Policy is applicable to any visitor to or user of our services. We refer to such visitors and users as “you” or “your”. · Authorized users of MediaAlpha for Agents include insurance carriers and their agents. We refer to all these businesses as “carriers and agents” or “our network of carriers and agents”. · Our websites and webforms provide the consumer the ability to connect with our network of carriers and agents (including with third parties who can connect the consumer with carriers and agents) to learn more about their various products and services and to request quotes and rates directly from them so they can decide if they want to make a purchase. · When consumers use our websites and webforms, the consumers will share their information with us and ask us to share their information with our network of carriers and agents and to request quotes or rates from them. · Each lead contains the details of the consumer’s request for quotes or rates, including the consumer’s personal information (also known as personal data) and, depending on the type of insurance products or services involved, may also contain the personal information of others including their family members or dependents. · We do not provide rates, quotes, or insurance, or finance products or services. · MediaAlpha is not a licensed insurance provider or lender. · We do not act as an agent for carriers and agents nor do we sell the products or services of carriers and agents. With the above in mind, we wrote this Privacy Policy to describe the information we collect, how we use it, when and who we share it with, and the controls available to you to manage your information in a way that is easier to read and understand. Of course, if you have questions, feel free to contact our us at agentprivacy@mediaalpha.com or toll free at 1-855-959-4165. Please read our entire Privacy Policy. If you only have a few minutes and want to know how to exercise your rights to manage the personal information we may have about you, we recommend you review Your Choices and Controls to understand some of the basics. If you’re a California or Nevada resident or wish to exercise rights on behalf of someone else, read the additional information in Your Privacy Rights. If you’re outside the United States, we also recommend you read the additional information here and here. Lastly, before you dive in, remember this Privacy Policy only applies to our MediaAlphia for Agents website(s) and our associated services that link to or reference this Privacy Policy. This Privacy Policy does not apply to our consumer facing websites and webforms or any other websites maintained by other companies that we may link to or those that can be accessed through our websites and webforms or the websites on which our webforms are located. This means that the privacy policy of such companies applies to any information you provide directly to them or is collected automatically by them from you. INFORMATION WE COLLECT This Privacy Policy applies only to the following basic categories of information we collect: · Information you provide to us through our services. · Information we collect automatically when you use our services. · Information you provide to us when you call us or when we call you. · Information we get from your carrier, associated agents, third parties, and offline sources. · Any other information you choose to provide to us. For each of these categories, we use the information to provide our services to you, to communicate with you, to process your request(s), to understand how our services are used, to improve our services, and to comply with applicable laws. Additional details on each category is provided below. Information You Provide to Us Through Our Services When you use our services, we collect information that you choose to provide to us to create an account and to use our services including to buy leads. For example, when you elect to create an account, we may allow you to provide your name, address, telephone number, email, carrier affiliation, payment information (such as a credit card) and other information in order to create your account and grant you access to our services. You may also use the functionality provided in our services to provide us with your lead filtering parameters for geography and consumer types (e.g., premium, preferred, standard, non-standard, etc.) and to set your lead purchase schedule and daily limits. Information We Collect Automatically When You Use Our Services When you use our services, we collect information about your use of our services and how you’ve used them, in addition to information about your activity, browser, and device. Like most online services, we may collect such information by using online tracking technologies, such as cookies, pixels, tags, and other unique identifiers (go to allaboutcookies.org or youronlinechoices.eu to learn more about such tracking technologies). Below is a more detailed explanation of the types of information we collect automatically when you use our services: Usage Information. We collect information about your activity through our services. For example, we may collect information about: how you interact with our services; which pages you have visited and which ones you visited immediately before or after navigating to our website; Your access and use of your account including the lead filtering parameters for geography and consumer types (e.g., premium, preferred, standard, non-standard, etc.), the lead purchase schedule and daily limits functionality, the leads you bid on, your bid price, which leads you buy, and which leads you return; and other demographic and usage information. Device, Browser, and Location Information. We collect information from and about the devices and browsers you use and about your location. For example, we collect: device type, browser type, IP Address (which is treated as personal information in some jurisdictions, but which we use only to identify your geographic area and to comply with applicable laws); and identifiers associated with cookies or other technologies that may uniquely identify your device or browser. Interactions with Emails and other Communications. We may also collect information when you interact with our emails and other communications that we send to you (including whether you opened, forwarded or selected a link or content in such email). For example, we may use information you submit to us through our services placed on third-party websites to show you more relevant leads and information on the use of our services or other services we offer that you may be interested in. Most web browsers are set to accept cookies by default. If you prefer, you can usually remove or reject browser cookies through the settings on your browser or device. Keep in mind, though, that removing or rejecting cookies could affect the availability and functionality of our services. For instance, some cookies are essential (or are required) for you to access and use our services. For example, if you reject all cookies, then you will not be able to access and use our services as the technology we use will not be able to authenticate you as an authorized user. To learn more about your choices, please check out Cookies and Other Technologies. Information You Provide to Us When You Call Us or When We Call You We may collect information from you when you call us or when we call you. The categories of information we collect from you or that you can provide to us through phone calls depends on the nature of the purpose of your call and our services you are calling about. Information We Receive from Suppliers, Third Parties, and other Sources We may receive information about you from suppliers, those businesses that provide us services (such as service providers, contractors, and consultants), third parties, or other online or offline sources. We may combine such information with the information you have provided to us in order to provide and improve our services including, among other ways, to filter or select the best leads to show to you or to measure the performance of services to you. Any Other Information You Choose to Provide to Us When you contact us, including by mail or email, or communicate with us in any other way, we’ll collect whatever information you volunteer or that we need to resolve your question or request. The categories of information we collect from you or that you can provide to us through mail, email, or other means depends on the purpose of your communication to us. HOW WE USE YOUR INFORMATION We use your information to: · Create your account and authenticate you to our services. · Process and fulfill your request for leads. · Communicate with you, including by phone calls, email, and mail about our services (including additional services we think may interest you), your use of our services (including your bids and purchases), or to respond to your inquiries. For example, if you request to be added to any of our mailing lists, we will periodically send you newsletters and other e-mails with offers and promotions. If you bid on a lead, we will communicate with you to process your bid request. Our emails will always identify MediaAlpha as the sender. You may unenroll from our mailing lists and newsletters any time by selecting “unsubscribe” in our emails. Keep in mind, we may continue to communicate with you for the purpose of communicating information relating to your account, your use of our services, your participation in our marketplace, general information regarding MediaAlpha, as well as to respond to any inquiry or request made by you. · Provide and improve our services and understand how our services are used. · To determine and provide ad placement, ad targeting, and ad campaign success and measurement of our marketing materials and advertisements to you, including through the use of your location information, both on and off our services. See Cookies and Other Technologies to learn more about our advertising practices and your choices. · Develop, operate, improve, deliver, maintain, and protect our services. · Monitor and analyze trends and usage of our services. · Enhance our services and your experience with them by using information we collect automatically by cookies and other technologies. · Enhance the safety and security of our services. · Verify your identity and prevent fraud or other unauthorized or illegal activity. · Enforce our the MediaAlpha for Agents Terms and Conditions and other usage policies. · Comply with legal requirements, including applicable laws, rules, regulations, and orders. We may also combine your information with other information we collected from you or you provided to us with information collected from you or you provided directly to our third-party partners and service providers. We use this information as detailed in this Privacy Policy. Keep in mind that information collected through cookies and other online tracking technologies is also used along with other information we collect for the purposes outlined in this Privacy Policy including: remembering your settings and choices and providing you with a customized experience; monitoring, analyzing, and for improving the operation, delivery, performance, and usability of our services, and for providing you with personalized ads based on your activity on our services and on other sites and services not operated by us. WHEN AND HOW WE SHARE INFORMATION We may share the information we have about you in the following ways: With Our Service Providers and Other Third Parties. To provide and protect our services, we may share the information we have about you with those businesses that provide services to us including our third-party vendors, suppliers, service providers, and other third parties under the following circumstances: To measure and optimize the performance of our services. For more about the information collected by third parties on our websites and webforms, visit Cookies and Other Technologies. To optimize our ability to reach our target audience and markets by sharing aggregated, non-personally identifiable, de-identified, and aggregated information (i.e., information about you and other users collectively, but not specifically identifiable to you) with such providers and third parties that provide services to us or perform business purposes for us. To help us and others prevent fraud, which may include sharing device, usage, and other information we have about you. For legal, safety, and security reasons. This means we may share information about you if we reasonably believe that disclosing the information is needed to: Comply with any valid legal process, governmental or law enforcement request, or applicable law, rule, or regulation (e.g., subpoenas, court orders, federal/state audits or similar circumstances, etc.). Investigate, remedy, or enforce potential violations of our polices, applicable law, and our MediaAlpha for Agents Terms and Conditions. Protect our rights, property, or safety or those of the carriers and agents, our suppliers, or others. Detect and resolve any fraud or security concerns. As part of a merger or acquisition, asset sale, financing, liquidation, or bankruptcy. If we become involved in any merger, asset sale, financing, liquidation or bankruptcy, or other acquisition of all or some portion of our business by another company, we may share your information with that company before and after the transaction closes. Note that we have agreements with our third-party vendors, suppliers, and service providers requiring them to secure any personal information we provide to them, limit how they use such information, and comply with national, state, and other applicable privacy regulations. THIRD-PARTY CONTENT, LINKS, AND INTEGRATIONS As noted above, our services may contain third-party content, links, and integrations. Through these integrations, you will be providing information to other third parties, as well as to us. We are not responsible for how any such third parties collect or use your information. As always, we encourage you to read the privacy policies of every third-party service that you visit or use. HOW LONG WE KEEP YOUR INFORMATION How long we keep your information (including the information that you submit through our services (like your name, phone number, address, email address, etc.)) depends on the type of information, the purpose for which it is used, how sensitive it is, and other similar factors. For example, we keep your information: · For the length of time reasonably needed to fulfill the purposes outlined in this Privacy Policy (including for as long as need to provide you with our services), unless a longer retention period is required or permitted by law. · For as long as necessary to resolve disputes and/or enforce our rights and agreements. · If it is aggregated, anonymized, de-identified (i.e., not capable of identifying you) then indefinitely. · In our backup or disaster recovery systems for a limited period of time or as required by applicable law. If you ever decide to stop using our services by closing your account, you can ask us to delete your information (see Your Choices and Controls to learn more) and we will process your request where and to the extent possible subject to the terms of this Privacy Policy, the MediaAlpha for Agents Terms and Conditions, and any exceptions under applicable law. Keep in mind, when we process your request, while our systems are designed to carry out deletion automatically, we cannot promise or guarantee that deletion will occur within a specific timeframe. Also, as noted above, there may be legal (to comply with law or enforce our rights) and contractual requirements to keep and not delete your information when you make a deletion request to us including to fulfill our obligations to you under the MediaAlpha for Agents Terms and Conditions. This means we may suspend deletion of or not delete your information if we receive valid legal process asking us to preserve your information, if we receive reports of abuse or violations of MediaAlpha for Agents Terms and Conditions, or if your use of our services (including your use of any lead) or your information is flagged by our automated systems for abuse or violations of MediaAlpha for Agents Terms and Conditions. HOW WE KEEP YOUR INFORMATION SECURE The security of your personal information is very important, and we take a number of steps to safeguard it. For example, we have implemented technical and organizational security measures that are designed to help protect your information from unauthorized access, disclosure, use, and modification. We also maintain physical, electronic, and procedural safeguards that comply with or exceed federal standards to guard your information, and we anonymize or expunge data when it is no longer necessary to provide services to our users or substantiate records for an advertiser. From time-to-time, we review our security procedures to consider appropriate new technologies and methods. Even so, despite our efforts, no security measures are perfect, impenetrable, or 100% secure. We cannot ensure, and do not warrant or guarantee, that the information you transmit to us will remain secure, nor do we guarantee that this information will not be accessed, disclosed, altered, destroyed or used in an unauthorized manner. These are the risks of being online and conducting business online. Of course, if we learn of a security breach, we may attempt to notify you electronically so that you can take appropriate protective steps. We may also post a notice on our services if a security breach occurs. Depending on where you live, you may have a legal right to receive a notice of a security breach in writing. If you have any questions about the security of your information, please email us at agentprivacy@mediaalpha.com or call us at 1-855-959-4165. COOKIES AND OTHER TECHNOLOGIES As discussed above, our service providers (including any other third parties working on our behalf), and any other businesses (third parties) who collect information on our services, may automatically receive certain information associated with you and/or your device(s) as part of your use of our websites and webforms through browser or device-based tracking technologies such as cookies, pixels, tags, beacons, scripts, or other technology. Many devices and browsers give you the option to manage and/or disable cookies and other online tracking technologies. To opt-out of the use of these technologies, you can change your browser options to stop accepting cookies or to prompt you before accepting cookies. To assist you, we compiled directions for some commonly used browsers and devices in the table below. Keep in mind that not all devices and browsers are the same so the methods described below may not work for your browser, browser version, or device and may change at any time. We encourage you to refer to the relevant instructions for your particular device or browser. Before you dive in, please note, if you opt out of the collection and use of information via cookies and other tracking technologies, you may still see customized advertising displayed by advertising networks from which you have not opted out. In addition, your opt-out will not prevent any advertising network from displaying advertising that is not customized to you and your interests and, consequently, may be less relevant to you. You will need to make such choices on each browser and device you may use to visit our services. Disabling Cookies in Browsers. When you elect to opt-out on a website, including our websites, an opt-out cookie is placed on your device. Then when you visit the same website, the opt-out cookie tells the website you opted out. This means that blocking all cookies may then prevent the websites from operating as expected and may also prevent your consent choices from being stored. This may mean that if you opt-out and then block cookies, we may not know about, or be able to honor, your opt-out. You should also be aware that blocking cookies on your computer will not affect your consent choices on a different device, such as a mobile device. You may want to keep this in mind when determining your browser cookie settings. For more information on how to disable cookies on the most common browsers see below. Browser Name Instructions Source Google Chrome At the top right, click “⋮” icon, and then Settings. At the bottom, click Advanced. Under “Privacy and security”, click Site settings and then Cookies. Turn Allow sites to save and read cookie data on or off. Google Support Apple Safari On Mac: Safari > Preferences, click “Privacy” On iOS: Settings > Safari, then turn on “Block All Cookies” Apple Mac Support Apple iOS Support Mozilla Firefox Click the menu button “☰” and select “Preferences”. Select the “Privacy & Security” panel and go to the “Cookies and Site Data” section. Mozilla Support Microsoft Edge More button “⋯” > Settings. Select “View Advanced Settings”. Under “Privacy and Services” > “Cookies” Microsoft Support Other Options for Disabling Online Tracking. Blocking cookies in your browser may not prevent cross-site tracking of your online activity using other online tracking technologies. In addition to managing your cookie settings for your browser, you can opt-out of tracking directly with the businesses that operate the tracking technologies. To opt-out of certain analytic tracking by our service providers visit the links below: Service Provider Helpful Links Google Analytics https://tools.google.com/dlpage/gaoptout Bing https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads http://choice.microsoft.com/ Do Not Track. Some web browsers may transmit “do not track” signals (go here to learn more). Web browsers may incorporate or activate these features differently, making it unclear if users have consciously activated them. As a result, we do not take steps to respond to such signals. European Visitors. In connection with the General Data Protection Regulation (GDPR) applicable in the European Economic Area (EEA), we eliminate or limit the use of cookies and similar technologies with visitors from the EEA (excluding our corporate website available at www.mediaalpha.com, which continues to use cookies for all users with proper consent (see more information below)). Specifically: If you visit a third-party site that serves our advertisements, we will not place any cookies on your device unless you have provided your consent and been provided with notice of our privacy practices and your ability to opt-out at any time. We will not seek your consent to use cookies in this instance, though the advertiser or their website publisher may do so. If you visit our services, we will only place limited third-party cookies, such as those made available for analytics purposes by Google and Bing. In this case, we will seek your consent to use these third-party cookies and will only do so after you indicate your consent. If you do not consent, then no cookies will be written to your device. If you are visiting our corporate website, mediaalpha.com, for the first time, or the first time after we make a material change, we will seek your consent to use cookies. If you do not consent, you will still be able to use our services, but certain functionality may be limited. To enable this feature, we use third-party tools to determine your geographic location; if these tools indicate that you are in the EEA, then we treat your visit as above. If you feel that you are subject to GDPR, but we have nonetheless used cookies in connection with your visit without consent (which may be due to a failure of the third party geolocation tools, your use of a proxy server, your location outside of the EEA at the time of your visit, or some other factor beyond our control) please notify us at agentprivacy@mediaalpha.com or call us at 1-855-959-4165 and make sure to include any relevant details so that we can ensure proper treatment of your data under GDPR. YOUR PRIVACY RIGHTS To manage or make choices about the personal information (as known as personal data) we have about you, review Your Choices and Controls. If you are a resident of California, a resident of Nevada, or a citizen of a European Economic Area (EEA) Member State, review the applicable sections below to learn more about your privacy rights. If you are a parent or legal guardian or a representative, review the sections identified below to learn more about how you may exercise rights on behalf of your child or another person. · California Residents. If you reside in California, the following additional information about how we use and disclose your information and any additional rights you may have is below: o Uses and Disclosure of Your Information. For more information on information we collect, including the sources we receive information from, review Information We Collect. We collect and use these categories of personal information (also known as personal data) for the business purposes described in How We Use Your Information, including to provide, manage and improve our services. o Rights Regarding Your Information. If you are a California resident, you have the right to delete personal information we have collected about you and you have the right to know certain information about our data practices in the preceding 12 months. You have the right to request the following: · categories of personal information we have collected about you; · categories of sources from which the personal information was collected; · categories of personal information about you we disclosed for a business purpose or sold; · categories of third parties to whom the personal information was sold or disclosed for a business purpose; · business or commercial purpose for collecting or selling the personal information; and · specific pieces of personal information we have collected about you. To exercise any of these rights, please contact us at agentprivacy@mediaalpha.com or call us at 1-855-959-4165 to submit your request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days. We may also ask you for specific information to verify and process your request. Kindly note, if we do not have information that permits us to verify your identity, we may deny your requests to know or delete. Keep in mind, you are responsible for keeping your account information up-to-date and accurate. If you wish to update or correct your account information first log into your account to update your information in your account settings. For any information that cannot be updated in your account, or if your credit card information is lost or stolen or your account credentials are compromised contact us at agentprivacy@mediaalpha.com or call us at 1-855-959-4165. Right to Non-Discrimination. Should you wish to exercise your rights as a resident of California, we will not discriminate against you by showing you different products or services based solely upon your request. Kindly note, however, if the carriers and agents require additional data or information from you before providing quotes, rates, or other information, exercising your California rights may limit the number and range of carriers and agents who are displayed in response to your request. o Do Not Sell My Personal Information. MediaAlpha does not “sale” the personal information of users of MediaAlpha for Agents as such term is defined under California law. If you wish to put on file with us your preference to opt-out of the sale of your personal information contact us at agentprivacy@mediaalpha.com or call us at 1-855-959-4165. Please identify that you wish to put on file your preference to opt-out of the sale of your information (also called a Do Not Sell My personal Information request). o Shine the Light. California residents may, no more than once per calendar year, request from us information about our disclosure of certain categories of personal information to third parties for direct marketing purposes. To be valid, requests must be submitted to us at agentprivacy@mediaalpha.com or at 1-855-959-4165. Please identify that you are submitting a “Shine the Light Request” request. We will provide you within 30 days of receiving your request, a list of the categories of personal information (also known as personal data) disclosed to third parties for direct marketing purposes during the immediately preceding calendar year and the names and addresses of the third parties. · Nevada Residents. Kindly note, MediaAlpha does not “sale” the personal information of users of MediaAlpha for Agents as such term is defined under Nevada Revised Statutes 603A. If you wish to put on file with us your preference to opt-out of the sale of your personal information contact us at agentprivacy@mediaalpha.com or at 1-855-959-4165. Please identify that you wish to put on file your preference to opt-out of the sale of your information (also called a Do Not Sell My personal Information request).. · Visitors Outside the United States. This Privacy Policy is intended to cover collection of information on our services from residents of the United States. The data protection and other laws of the United States might not be as comprehensive as those in your country. By visiting our services or otherwise using our services in any other way, you acknowledge and agree that your information may be transferred to our facilities and those third parties with whom we share it as described in this Privacy Policy, regardless of the laws of your country of residence. To the extent the laws of another jurisdiction apply to your data or use of our services, we will comply with such laws. For example, for European Visitors, read the European Visitors section of Cookies and Other Technologies to learn more about our use of cookies and similar technologies with visitors from the EEA. · Children’s Information. As noted in the MediaAlpha for Agents Terms and Conditions, you must be at least 18 years old to use our services. We do not knowingly collect, use, or disclose personal information about visitors under 18 years of age. If you are under 18, you may not use our services. YOUR CHOICES AND CONTROLS We want you to be in control of your information, so we provide you with the following ways to exercise control over the information we have about you. Keep in mind that each option is subject to applicable legal limitations. Additionally, because your privacy is important to us, we will ask you to verify your identity/request or provide additional information before we let you exercise your choices over the information we have about you. We may also reject your request for several reasons, including, by way of example only, if the request risks the privacy of other persons or is unlawful. For each of the following, when you contact us, please identify to us which right you are seeking to exercise and the scope of the request. · Access and Portability. You can access and receive a copy of the information we have about you by contacting us at agentprivacy@mediaalpha.com or toll free at 1-855-959-4165. · Correction or Modify (also known as rectification). You are responsible for keeping your account information up-to-date and accurate. If you wish to update or correct your account information first log into your account to update your information in your account settings at any time. For any information that cannot be updated through your account or if your credit card information is lost or stolen or your account credentials are compromised or if you need assistance contact us at agentprivacy@mediaalpha.com or at 1-855-959-4165. · Deletion (also known as erasure). If for some reason you ever want to delete the information we have about you, by contacting us at agentprivacy@mediaalpha.com or at 1-855-959-4165. · Revoke Consent or Object to Processing. You can revoke the consent you gave to us or object to our processing of the information we have about you by contacting us at agentprivacy@mediaalpha.com or at 1-855-959-4165. · Marketing and Communication Preferences. If you wish to unsubscribe to any email communications we send to you, simply select “unsubscribe” in the emails. If you wish to unsubscribe or change/update any communication preferences with us including calls or mail, contacting us at agentprivacy@mediaalpha.com or at 1-855-959-4165. Please note that we only control our own mailing and marketing lists/subscriptions and policies. Third parties that maintain their own marketing lists may send communications that advertise our services. You must contact these parties directly in order to stop receiving their communications. Keep in mind, we may continue to communicate with you for the purpose of communicating information relating to your account, your use of our services, your participation in our marketplace, general information regarding MediAlpha, as well as to respond to any inquiry or request made by you. · Cookies and other Tracking Technologies. To learn more about your choices and how to exercise control over the information we collect from you automatically using cookies and other online tracking technologies, read Cookies and Other Technologies. If you have any questions or need assistance contact us at agentprivacy@mediaalpha.com or at 1-855-959-4165. REVISIONS TO THE PRIVACY POLICY We may change this Privacy Policy from time to time. When we do, we’ll let you know by revising the date at the top of the Privacy Policy. We may also provide you with additional notice (such as adding a statement to our services’ homepages or adding “Updated” to the footer links to our Privacy Policy (e.g., Updated Privacy Policy), or pop-up alerts in your account. We encourage you to review this Privacy Policy whenever you use any of our services to ensure you are aware of our current privacy practices. QUESTIONS AND SUGGESTIONS If you have any questions, concerns, or suggestions about our Privacy Policy, you may contact us at agentprivacy@mediaalpha.com or toll free at 1-855-959-4165 or by mail at: MediaAlpha Attention: DPO 700 S. Flower St., Suite 640 Los Angeles, CA 90017