Matic Insurance Services, Inc. State Consumer Privacy Rights Policy

If you are a resident of a state with an applicable consumer privacy law, you may have certain rights regarding your personal information. These laws include, but are not limited to, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other state consumer privacy laws enacted or amended from time to time (collectively, “State Privacy Laws”). This policy describes those rights and explains how to exercise them. The rights available to you may vary based on your state of residence and applicable law.

For information about our privacy practices regarding personal information collected in connection with a financial product or service from Matic, please review our Privacy Notice.

 

Table of Contents:

  1. Collection of Information
    • Sources of Information
    • Purposes of Information
    • Sharing of Information
  2. Your Consumer Privacy Rights
  3. Exercising Your Rights and Authorized Agents
  4. Response Timing, Appeals, and Do Not Track
  5. Accessibility and Revisions
  6. Contact Us

Collection of Information

Depending on how you interact with Matic, we may collect the following categories of personal information to provide products or services, operate our business, and fulfill the purposes described in this policy. Some information may be treated as sensitive personal information under applicable State Privacy Laws.

  • Personal identifiers, such as name, address, date of birth, and government identifiers, including a Social Security number, driver’s license number, state identification card number, passport number, or other official identifier;
  • Demographic information, including characteristics protected by law, such as gender or age;
  • Commercial information;
  • Internet or other electronic network activity information;
  • Geolocation data, which may include precise geolocation;
  • Sensitive personal information, such as account credentials, precise geolocation, biometric or genetic data, health information, information about racial or ethnic origin, religious or philosophical beliefs, union membership, sex life or sexual orientation, and the contents of private communications when Matic is not the intended recipient;
  • Audio, electronic, visual, thermal, olfactory, or similar information;
  • Professional or employment-related information;
  • Education information; and
  • Inferences drawn from the above categories.

Sources of Information

The following are the categories of sources of personal information we may collect about you:

  1. We may collect personal identifiers from you, publicly available databases, data aggregators, advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers, and other third parties from whom we have purchased data;
  2. We may collect internet, browsing, or other network activity from your use of our websites, mobile apps, or telematics devices;
  3. We may collect telematics data, including geolocation data, from your use of telematics devices;
  4. We may collect geolocation data from your use of our mobile apps or in connection with your use of our websites;
  5. We may collect audio recordings when you call our customer service call centers;
  6. We may collect professional or employment information from job applications, resumes, or recruiters;
  7. We may collect education information from job applications, transcripts, resumes, or recruiters; and
  8. We may collect inferences from your use of our websites, telematics devices, our mobile apps, or from information provided by credit or consumer reporting companies if you have applied for a financial product or service.

Purposes of Information

We collect and use personal information for the business and commercial purposes described below, as permitted by applicable law. Depending on the category of personal information and the nature of your relationship with Matic, these purposes may include:

  1. Auditing;
  2. Detecting security incidents;
  3. Protecting against and prosecuting malicious, deceptive, or illegal activity (such as fraud);
  4. Debugging;
  5. Short-term, transient use of personal information;
  6. Performing services on behalf of Matic, another business, or a service provider (such as maintaining or servicing accounts or providing customer service);
  7. Undertaking internal research; and
  8. Verifying or maintaining the quality or safety of a service or device or improving a service or device.
  9. Joint marketing
  10. Other business purposes

Sharing of Information

Matic may disclose to the categories of recipients listed below for the business and  commercial purposes described in this policy. Certain disclosures may be considered a “sale,” “sharing,” or use for targeted advertising under applicable State Privacy Laws, even when no money is exchanged:

  1. Professional advisors including accountants, lawyers, and consultants
  2. Service providers (such as data storage providers, data security providers, payment providers, and email providers)
  3. Third parties that help administer, manage and analyze our programs and services
  4. Third parties with which we enter into agreements to share information, including entities in the insurance, real estate, and financial services industries
  5. Other types of third parties for joint marketing purposes

Matic may also share all categories of personal information as part of corporate transactions, such as mergers, acquisitions, or divestitures, as well as with our affiliates and subsidiaries. We may be required to share all categories of personal information with law enforcement, regulatory agencies, or litigants based on enforceable requests for this information.

Notwithstanding the foregoing, text messaging originator opt-in data and consent will not be shared with any third parties other than aggregators and providers of Matic’s text message services.

We do not sell personal information for money. We, our service providers, and third parties such as advertising, social media, and analytics companies may, however, collect or disclose information through cookies and similar technologies. Cookies are small text files that the Services save on your device through your web browser and access when you return. Information collected about you on our website by third parties may be combined with information that you provided to them or that they collected through use of their services.

We do not knowingly sell or share the personal information of consumers under 16 years of age for targeted advertising without the affirmative authorization required by applicable law.

Your Consumer Privacy Rights

Right to know, access, and data portability. Subject to applicable law, you may request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purposes for collecting, using, or sharing it, and the categories of third parties to which we disclosed, sold, or shared it. Applicable lookback periods may vary by state. You may also request a copy of certain personal information in a structured, commonly used, and machine-readable format and, when technically feasible and required by law, request that we transmit that information to another entity.

Right to delete. You may request that we delete personal information we collected from or about you. After receiving and verifying a valid request, we will delete the covered personal information and direct our service providers or contractors to do the same when required by applicable law, unless a statutory exception applies. Exceptions may permit us to retain information to complete a transaction, provide a requested product or service, protect against fraud or security incidents, debug products or services, exercise legal rights, comply with legal obligations, conduct qualifying research, or make other lawful uses compatible with the context in which you provided the information.

Right to opt-out. Depending on your state of residence, you may have the right to opt out of targeted advertising, the sale or sharing of personal information, and certain profiling in furtherance of decisions that produce legal or similarly significant effects. You may submit an opt-out request through our “”Do Not Sell My Personal Information or Share My Personal Information” request form. To manage the use of cookies and similar technologies for advertising purposes, please review Matic’s Online Privacy Policy. Online choices may be specific to do sothe browser and device you use.

Right to limit or withdraw consent for sensitive personal information. If we process sensitive personal information in a manner subject to a limitation, consent, or opt-out right under applicable law, you may direct us to limit that use or disclosure, withdraw your consent, or exercise another applicable choice. This right does not apply where the information is processed only for purposes permitted without a consumer choice under applicable law.

Right to correct. You may request that we correct inaccurate personal information that we maintain about you. In responding to a verified request, we will consider the nature of the information and the purposes for which we process it and will use commercially reasonable efforts to correct the information as required by applicable law.

Right to non-discrimination and non-retaliation. We will not discriminate or retaliate against you for exercising a consumer privacy right. Unless permitted by applicable law, we will not deny goods or services, charge different prices or rates, provide a different level or quality of goods or services, or suggest that you may receive different treatment because you exercised a privacy right. We may offer a financial incentive or a different price or service level only when permitted by law and subject to any required notice and consent.

Exercising your rights. To exercise an applicable consumer privacy right, submit a request through our Personal Information Request Form or call us at (844) 431-6454 between 12 p.m. and 6 p.m. ET on weekdays. Your request must provide enough information for us to reasonably verify your identity or authority and must describe the request with enough detail for us to understand, evaluate, and respond to it. You do not need to create an account to submit a request. We will use personal information submitted with a request only to verify and process the request. We generally do not charge a fee, but we may charge a reasonable fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive when permitted by applicable law.

Third-Party Vendors & Business Partners

This paragraph contains instructions for all third-party vendors providing services to Matic, and third-party business partners of Matic. This paragraph does not apply to individual consumers.

If a consumer submits a request under an applicable State Privacy Law directly to one of Matic’s third-party vendors or business partners, the vendor or partner must direct the consumer to this policy and the approved request methods described above, including the webform or toll-free telephone number.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf where permitted by applicable law. You or your authorized agent may submit the request through our Personal Information Request Form or call us at (844) 431-6454 between 12 p.m. and 6 p.m. ET, on weekdays. We may require written and signed permission authorizing the agent to act for you, a valid power of attorney, verification of your identity directly with us, and confirmation that you authorized the request. We may deny a request from an agent who does not provide proof of authorization, subject to applicable law. A parent or legal guardian may also submit a request on behalf of a minor child where permitted by law.  

Response timing and format. We will confirm receipt of a verifiable consumer request within ten business days when required by applicable law and provide information about how we will process it. We generally will respond within 45 calendar days after receipt. If we reasonably need additional time, we will notify you in writing of the reason and extension period. If applicable law requires a different period, we will follow that period. We will deliver our response through your account, if applicable, or by mail or electronically at your option. If we cannot comply with all or part of a request, our response will explain the applicable reason. For a portability request, we will provide the information in a readily usable format as required by law. Appeals If we deny your consumer privacy request and applicable law provides a right to appeal, you may appeal by submitting a new request through our Personal Information Request Form or by calling (844) 431-6454 and identifying the request as an “Appeal Request.” Please explain why you disagree with our decision. We will review and respond to the appeal within the period required by applicable law. If we deny the appeal, we will provide information about any right to submit a complaint to your state Attorney General or another applicable regulator.

Do Not Track

Because there currently isn’t an industry or legal standard for recognizing or honoring DNT signals, we don’t respond to them at this time.

Revisions

Matic may revise this policy from time to time to reflect changes in our practices, State Privacy Laws, or other legal requirements. We will post the revised policy on this website, or a successor website, and may provide additional notice in person,by email, or through other appropriate methods. Unless otherwise stated or required by law, revisions become effective when posted.

Contact Us

If you have questions or complaints about this policy, Matic’s privacy practices, or your consumer privacy rights, please contact us at (844) 431-6454.

 

This State Consumer Privacy Rights Policy was last updated on October 13, 2026

FAQs

What are my rights under Matic’s privacy policies?

In addition to the rights described above, depending on your relationship with Matic, you may have a right of access and correction relating to your personal information under other laws.

If you use our websites, you will have the rights we describe under our Online Privacy Policy. These rights include your right not to provide us with personal information, opting out of targeted ads, or opting out of cookies.

If you also obtain financial services products from us, you may also have the rights described in our Online Privacy Notice. Those rights include the right of access and correction and opting out of affiliate marketing, where applicable.

Does Matic sell my personal information?

Matic does not sell consumer’s personal information. You need not opt out of the selling of your personal information because Matic does not sell your personal information. However, if you are a customer that obtains financial products from us, you may opt out of the sharing of your personal information with our affiliates by submitting your request here or call us at (888) 380-6623.

What is the California Consumer Privacy Act?

The California Consumer Privacy Act (CCPA) is an act that was passed by the California legislature in 2018. It took effect on January 1, 2020. It provides individuals with privacy rights that are similar to existing rights under GLBA. However, the rights under CCPA apply to all California residents, unlike GLBA rights, which apply to customers or consumers of financial institutions.

What are my rights under the California Consumer Privacy Act?

You have the rights of notice, opt out, non-discrimination, access, and deletion. You may find additional information about these rights in Matic’s California Privacy Policy above.

Where can I exercise my rights as a California resident under the California Consumer Privacy Act?

You or your authorized agent may exercise your rights under the California Consumer Privacy Act by submitting your request here or call us at (888) 380-6623.

Please note that we may require additional information from you in order to honor your request, and there may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.

Why must I verify myself?

In order to preserve the privacy and the security of the information you are trying to access or delete, Matic requires proof that you are who you say you are. We do not generally charge a fee to fulfill any of your requests under CCPA; however, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, including repetitive requests. If we refuse to act on a request, we will notify you of the reason.

How long do you retain the information about my request?

Matic retains the information relating to your request in accordance with applicable law and regulation, and record retention policies. Matic may retain the information about your request to track and fulfill your request.

What happens when I request that you delete my data?

Per the California Consumer Privacy Act, your personal information is removed from Matic systems by means of deletion or de-identification within forty-five (45) calendar days of your initial request. An extension to fulfill your request may be made upon notice to you by Matic.

As permitted by California law, Matic may retain your personal information in its backup or archive systems until the retention period in those systems expire.

Why was my request denied?

Matic may reject your request for reasons permitted by the California Consumer Privacy Act, including, the inability to verify your identity or California residency. You will be notified of such rejection. Such notice will include an explanation of rejection in accordance with California state law.

What happens when my request is denied?

Though a request may be denied in accordance with California state law, Matic will opt you out of further marketing efforts. Once opted out of further marketing efforts, Matic will only contact customers to the extent necessary to service them.

How many requests can I make in a year?

You may make two requests to access your personal information in a 12-month period under the CCPA. You may make more than two requests; however, we are not required under the CCPA to respond to them.

X