State Privacy Rights

Effective Date: January 1, 2020 (CCPA) / January 1, 2023 (CPRA amendments)

Your Rights Under CCPA/CPRA

As a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, detecting security incidents, legal obligations).
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: Direct us not to sell your personal information or share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Limit our use of your sensitive personal information to purposes necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

Sensitive Personal Information Disclosure

Under CPRA, "sensitive personal information" includes health information. We collect the following sensitive data:

• Health conditions and medical history
• Prescription medications
• Tobacco and nicotine use
• Height and weight
• Hospitalizations
• Family medical history

Purpose: This sensitive information is collected solely to match you with appropriate life insurance carriers and is shared with licensed insurance agents and carriers for the purpose of providing quotes.

Your Right to Limit: You may request that we limit the use of your sensitive personal information to what is necessary to provide our Services. To do so, submit a request using the form below or email privacy@mylifematch.net.

Sale and Sharing of Personal Information

• Identifiers (name, contact information)
• Personal Information (as defined in Cal. Civ. Code § 1798.80(e))
• Protected Classifications (age, gender)
• Commercial Information (insurance preferences)
• Sensitive Personal Information (health data)

We receive monetary compensation for sharing leads with insurance professionals. Under CCPA/CPRA, this constitutes a "sale" of personal information.

Sources of Personal Information

We collect personal information from:

• Directly from you: Information you provide through our chat interface and forms
• Automatically: Device information, IP address, browsing behavior collected via cookies and similar technologies
• Third parties: We do not currently purchase personal information from third parties

Business Purposes for Collection

We collect and use personal information for the following business purposes:

• Providing our lead generation services
• Matching you with appropriate insurance carriers
• Sharing your information with licensed insurance agents
• Communicating with you about your inquiry
• Improving our Services and developing new features
• Detecting and preventing fraud
• Complying with legal obligations

Retention Period

We retain personal information for as long as necessary to fulfill the purposes described above, typically:

• Lead/contact information: Up to 3 years after last interaction
• Chat transcripts: 1 year
• Analytics data: 26 months

Financial Incentives

We do not offer financial incentives to consumers in exchange for the retention or sale of personal information.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. To do so, you must:

• Provide the agent with written permission signed by you
• Verify your own identity directly with us
• Directly confirm with us that you provided the agent permission

We may deny requests from agents who do not submit proof of authorization.

How to Exercise Your California Rights

California residents may submit requests by:

• Online: Use the Privacy Request Form below
• Email: privacy@mylifematch.net (include "California Privacy Request" in subject)
• Phone:

Verification

We will verify your identity by matching information you provide with information we have on file. Depending on the request type, we may require:

• Requests to Know (categories): Match at least 2 data points
• Requests to Know (specific pieces): Match at least 3 data points + signed declaration
• Requests to Delete: Match at least 2 data points

Response Timing

We will confirm receipt of your request within 10 business days. We will respond to verifiable requests within 45 calendar days. If we need additional time (up to 45 more days), we will notify you in writing.

Non-Discrimination Notice

We will not discriminate against you for exercising your CCPA/CPRA rights. We will not:

• Deny you goods or services
• Charge you different prices
• Provide a different level of quality
• Suggest you will receive different treatment

Effective Date: July 1, 2023

Your Rights Under CPA

• Right to Access: Confirm whether we are processing your personal data and access such data.
• Right to Correct: Correct inaccuracies in your personal data.
• Right to Delete: Delete personal data you have provided or we have obtained.
• Right to Data Portability: Obtain a copy of your personal data in a portable, usable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, or profiling.

Sensitive Data

Colorado law requires opt-in consent for processing sensitive data, which includes health information. By using our Services and providing health information, you consent to our processing of this data for insurance matching purposes.

Universal Opt-Out Mechanisms

We honor universal opt-out preference signals (such as Global Privacy Control) as valid opt-out requests for the sale of personal data and targeted advertising.

Right to Appeal

If we decline your privacy request, you have the right to appeal. To appeal, contact us at privacy@mylifematch.net with "Appeal" in the subject line. We will respond within 45 days.

Effective Date: July 1, 2023

Your Rights Under CTDPA

• Right to Access: Confirm processing and access your personal data.
• Right to Correct: Correct inaccuracies in your personal data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain a copy of your data in a portable format.
• Right to Opt-Out: Opt out of sale of personal data, targeted advertising, and profiling.

Sensitive Data Consent

Processing sensitive data (including health information) requires your consent. By submitting health information through our chat interface, you provide consent for us to process and share this data with insurance professionals.

Universal Opt-Out

We recognize and honor universal opt-out preference signals.

Appeal Rights

You may appeal any denial of your privacy request by emailing privacy@mylifematch.net. We will respond within 60 days.

Effective Date: January 1, 2025

Your Rights Under DPDPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccurate personal data.
• Right to Delete: Delete personal data you provided or we obtained.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Health information is sensitive data under Delaware law. We obtain your consent before processing sensitive data by requiring affirmative action (submitting the chat form).

Appeal Process

You may appeal a denied request within a reasonable time. We will respond to appeals within 60 days.

Effective Date: July 1, 2024

Note: Florida's law applies to businesses with over $1 billion in annual revenue or that meet other specific criteria. We include this information for transparency.

Your Rights Under FDBR

• Right to Access: Confirm processing and access your personal data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain data in a portable format.
• Right to Opt-Out: Opt out of sale of data, targeted advertising, and profiling.

Sensitive Data

Processing sensitive data requires consent. Health information is considered sensitive under Florida law.

Effective Date: January 1, 2026

Your Rights Under Indiana ICDPA

• Right to Confirm and Access: Confirm processing and access your data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your data.
• Right to Portability: Obtain data in portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Consent required for sensitive data processing, including health information.

Effective Date: January 1, 2025

Your Rights Under Iowa ICDPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising and sale of personal data.

Note: Iowa does not provide a right to correct or a right to opt out of profiling.

Sensitive Data

Iowa requires opt-in consent for processing sensitive data including health information.

Effective Date: January 1, 2026

Your Rights Under KCDPA

• Right to Confirm and Access: Confirm processing and access your data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your data.
• Right to Portability: Obtain data in portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Consent required for processing sensitive data including health information.

Effective Date: October 1, 2025

Your Rights Under MODPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccurate personal data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Maryland requires consent for processing sensitive data. Health information is considered sensitive data. We obtain consent through your affirmative submission of the chat form.

Data Minimization

Maryland law requires data minimization. We only collect data reasonably necessary to provide our insurance matching services.

Effective Date: July 31, 2025

Your Rights Under Minnesota MCDPA

• Right to Confirm and Access: Confirm processing and access your personal data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain data in a portable, readily usable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.
• Right to Question Profiling: Question the result of profiling decisions.

Sensitive Data

Consent required for processing sensitive data including health information, which we obtain through your use of our Services.

Universal Opt-Out

Minnesota requires recognition of universal opt-out mechanisms such as Global Privacy Control.

Effective Date: October 1, 2024

Your Rights Under Montana MCDPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccuracies in your data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain a portable copy of your data.
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling.

Sensitive Data

Montana requires opt-in consent for sensitive data processing. Health information qualifies as sensitive data.

Appeal Rights

You may appeal any denial of a privacy request. We will respond to appeals within 60 days.

Effective Date: January 1, 2025

Your Rights Under NDPA

• Right to Confirm and Access: Confirm processing and access your data.
• Right to Correct: Correct inaccurate personal data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Nebraska requires consent for processing sensitive data including health information.

Response Time

We will respond to requests within 45 days, with a possible 45-day extension if reasonably necessary.

Effective Date: January 1, 2025

Your Rights Under NHPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling.

Sensitive Data

New Hampshire requires opt-in consent for processing sensitive data, which includes health information.

Appeal Process

If we decline your request, you may appeal within a reasonable period. We will respond within 60 days.

Effective Date: January 15, 2025

Your Rights Under NJDPA

• Right to Confirm and Access: Confirm processing and access your personal data.
• Right to Correct: Correct inaccurate personal data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

New Jersey requires consent for processing sensitive data. Health data is sensitive data under NJDPA. By providing health information through our Services, you consent to our processing.

Universal Opt-Out

New Jersey requires recognition of universal opt-out preference signals (effective January 2025).

Appeal Rights

You may appeal a denied request. We will respond to appeals within 60 days.

Effective Date: July 1, 2024

Your Rights Under OCPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.
• Right to Obtain List of Third Parties: Obtain a list of third parties to whom we have disclosed your data.

Sensitive Data

Oregon requires opt-in consent for sensitive data processing. Health data is considered sensitive.

Universal Opt-Out

Oregon requires recognition of universal opt-out mechanisms starting January 1, 2026.

Appeal Process

You have the right to appeal denied requests. We respond to appeals within 45 days.

Effective Date: January 1, 2026

Your Rights Under RIDTPPA

• Right to Confirm and Access: Confirm processing and access your data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Rhode Island requires consent for processing sensitive data including health information.

Effective Date: July 1, 2025

Your Rights Under TIPA

• Right to Confirm and Access: Confirm processing and access your personal data.
• Right to Correct: Correct inaccurate data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of data, and profiling.

Sensitive Data

Tennessee requires opt-in consent for processing sensitive data, including health information.

Affirmative Defense

Tennessee provides an affirmative defense for businesses that maintain a privacy program conforming to NIST or similar frameworks.

Appeal Rights

You may appeal a denied request within a reasonable time. We respond within 60 days.

Effective Date: July 1, 2024

Your Rights Under TDPSA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccuracies in your data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain a portable copy of your data.
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling.

Sensitive Data

Texas requires consent for processing sensitive data. Health information is classified as sensitive data under TDPSA.

Small Business Consideration

Texas provides certain accommodations for small businesses. Regardless of size, we honor all privacy rights.

Response Time

We respond to requests within 45 days, with a possible 45-day extension if needed.

Effective Date: December 31, 2023

Your Rights Under UCPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable format.
• Right to Opt-Out: Opt out of targeted advertising and sale of personal data.

Note: Utah does not provide a right to correct data or opt out of profiling.

Sensitive Data

Utah requires opt-in consent for processing sensitive data, which includes health information. By providing health information through our chat, you consent to processing.

Response Time

We respond to requests within 45 days.

Effective Date: January 1, 2023

Your Rights Under VCDPA

• Right to Confirm and Access: Confirm whether we process your data and access it.
• Right to Correct: Correct inaccuracies in your personal data.
• Right to Delete: Delete your personal data.
• Right to Portability: Obtain your data in a portable, readily usable format.
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling.

Sensitive Data

Virginia requires opt-in consent for processing sensitive data. Health information is considered sensitive data under VCDPA.

Appeal Process

If we decline to take action on your request, you may appeal. Submit appeals to privacy@mylifematch.net with "Virginia Appeal" in the subject line. We will respond within 60 days.

Response Time

We respond to requests within 45 days, with a possible 45-day extension if reasonably necessary.