This Privacy Notice at Collection (“Privacy Notice”) applies to United States Fire Insurance Company t/a Crum & Forster and its affiliated companies within Crum & Forster (collectively, “C&F,” “we,” “us,” or “our”) processing of personal information of California residents to the extent the information is subject to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”). For example, this Privacy Notice does not apply to personal information collected pursuant to various exemptions including for (i) information collected subject to the federal Gramm-Leach-Bliley Act and its implementing regulations or the California Financial Information Privacy Act, (ii) medical and health information covered by HIPAA, and (iii) de-identified or publicly available information.
Personal Information We Collect
We collect or use information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). The chart below includes information collected for various types of individuals, such as our customers, employees, and others. As a result, all of the categories of collected personal information described below may not be applicable to you. We may collect or use the following categories of your personal information in the following ways:
|
Category of Personal Information |
Examples of Personal Information Collected or Used |
Expected Retention Period or Criteria for Retention |
Business or Commercial Purpose(s) for Which Used or Collected |
| Identifiers | A real name, alias, postal address, unique personal identifier, social security number, driver’s license number, online identifier, Internet Protocol address, email address, account name or other similar identifiers. | Personal Information is retained based on internal retention policies, which typically requires retention for a period of seven years. Information is segregated by legal retention requirements and maintained in accordance with various local, state, federal, and other legal requirements. Personal Information will not be retained beyond the reasonably foreseen need to retain the information for legal or business purposes. | We use this personal information in connection with providing, producing, and servicing commercial and personal lines insurance products with third parties, and in connection with human resources functions. For example:
|
| Personal Information Categories Listed in the California Customer Records statue (Cal. Civ. Code 1798.80(e)) |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, educational background, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. | See above for the general description. | We use this personal information to properly produce, underwrite and service insurance products, fulfill legal or regulatory requirements, operate the site and our services, and in furtherance of our legitimate business purposes. For example:
|
| Characteristics of protected classifications under California or federal law | Age, national origin, religion, citizenship or immigration status, marital status, physical or mental disability, genetic information or ancestry, sex, veteran or military status. | See above for the general description. Personnel records are retained for six years after inactivity, and claims processing records are retained for six years after inactivity. | See above |
| Commercial Information | Records of services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Location and identification of property insured (for example, property address, vehicle license plate or identification number), travel plans, age categories of individuals you wish to insure, policy and claim numbers, coverage/peril details, cause of loss, prior accident or loss history, your status as director or partner, or other ownership or management interest in an organization, or other insurances held. |
See above for the general description. Claims processing information is retained for six years after inactivity. |
|
| Biometric Information | Physiological, biological or behavioral characteristics that can be used, singly, or in combination with each other or with other identifying data, to establish individual identity, such as a fingerprint. | See above for the general description. Personnel files are retained for six years after inactivity. |
|
| Internet or other electronic network activity information | Browsing history, search history, and a consumer’s interaction with an Internet website, application, or advertisement.
Network traffic and other electronic or internet activity performed when acting as our personnel through our systems. |
Personal Information is retained based on internal retention policies, which typically requires retention for a period of seven years. Information is segregated by legal retention requirements and maintained in accordance with various local, state, federal, and other legal requirements. Personal Information will not be retained beyond the reasonably foreseen need to retain the information for legal or business purposes. |
|
| Geolocation data | Geographic tracking data, physical location and movements. | See above for the general description. |
|
| Audio, visual, thermal, olfactory or similar information |
Telephone or video calls or recordings. | See above for the general description. In addition, oversight records for claims processing activities are retained for ten years after inactivity. |
|
| Professional or employment-related information |
Business contact details in order to provide you our services at a business level, job title as well as work history and professional qualifications if you apply to work with us.
Current and/or past employment history, payroll records, benefits records, leave documentation, or medical records. |
See above for the general description.
Generally, human resources information is often stored for six years after |
|
| Non-public education information (as defined in the Family Educational Rights and Privacy Act (20 U.S.C. 1232g, 34 C.F.R. Part 99)) | Student records and directory information. | See above for the general description.
Student records are maintained as personnel files and retained for six years after inactivity. |
|
| Inferences drawn from other personal information | A person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes. | See above for the general description. |
|
| Sensitive Personal Information | Personal information that reveals: a Social Security number or other government identifier; account login information or a financial account number with associated credentials; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; contents of mail, email, or text messages not intended to be received by us; genetic data. Or any of the following: the processing of biometric information to uniquely identify our Personnel; health information; information that concerns a consumer’s sexual orientation or sex life. | See above for the general description. Sensitive Personal Information is often employment records. Personnel records and personnel medical records are retained for approximately six years. Some types of benefits information are retained for longer periods of time as required by law. |
|
We do not sell personal information. We do not share personal information for the purpose of cross-context behavioral advertising.
We do not sell or share the personal information of minors under 16 years of age.
Right to Limit the Use of Your Sensitive Personal Information
We use and disclose sensitive personal information we collect about you. You or your authorized representative may limit our uses and disclosures of your sensitive personal information by making a request.
To submit a request under the Right to Limit, please provide the information necessary to identify the consumer to whom the request should be applied and reasonable identifying information that you are authorized to make the request and submit an email requesting your “Right to Limit” to privacyinformation@cfins.com.
Once you make a request to limit our use and disclose of your sensitive personal information, we will wait at least twelve (12) months before asking you again. However, you may change your mind and opt back in to sensitive personal information use at any time by submitting an email requesting to opt-in to our use and disclosure of your sensitive information with the subject line “Right to Limit” to privacyinformation@cfins.com.
Further Information
Please visit our website https://www.cfins.com/ and our CCPA privacy policy for further information about personal information we collect, and your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020.
Crum & Forster Legal Department
P.O. Box 1973
305 Madison Avenue
Morristown, NJ 07962
E-mail: privacyinformation@cfins.com
Last Updated: April 24, 2024