State-Specific Privacy Notice

Effective Date: November 2026

About This Notice

This State-Specific Privacy Notice is provided for residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and any other U.S. jurisdiction with similar privacy laws. It supplements the general Privacy Notice of Blue Ridge Insurance, a Your Policy Company, and is provided pursuant to the Virginia Consumer Data Protection Act, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), and similar state statutes.

Where this notice conflicts with our general Privacy Notice, this notice controls.

Insurance-specific laws: Personal information collected as part of providing insurance products may be governed by state insurance information and privacy laws rather than, or in addition to, general consumer privacy statutes. Where an insurance-specific law applies, it controls.

Information We Collect

We have collected the following categories of personal information in the last 12 months. None of it has been sold or shared for cross-context behavioral advertising.

• Identifiers: name, email, phone, IP address
• Personal records: address, policy numbers, date of birth, driver’s license number
• Protected classifications: age, gender, marital status, where required for underwriting
• Commercial information: products purchased or considered, policy and premium history
• Internet activity: pages visited, searches, interaction data on our site
• Geolocation: state and ZIP code, to determine coverage availability
• Professional information: occupation and employer, for commercial applications
• Inferences: profiles drawn from the above to assess insurance needs
• Sensitive personal information: Social Security number, for certain applications, with consent

We collect this directly from you, automatically through cookies and analytics, and from third parties including insurance carriers and publicly available sources.

How We Use It

• Providing quotes, binding coverage and servicing your policies
• Communicating about policies, renewals and claims
• Improving our website and services
• Complying with insurance regulations and licensing requirements
• Detecting and preventing fraud
• Marketing where permitted, with opt-out available at any time

Sharing Your Information

We do not sell your personal information. We may disclose it to:

• Insurance carriers and underwriters: to quote, bind and service coverage
• Our parent company and affiliates: Your Policy LLC and affiliated agencies, which provide shared quoting, client service and technology systems on our behalf
• Service providers: IT, analytics and communications vendors acting as processors under contract
• Regulatory and legal authorities: where required by law or to protect our legal rights
• Business successors: in a merger, acquisition or sale of assets, with notice to you

All business-purpose disclosures are governed by written contracts limiting use of the information to the specified purpose.

Your Rights

• Know: what we collect, where it came from, why, and who we share it with
• Delete: subject to exceptions for transactions, legal obligations and fraud prevention
• Correct: inaccurate information we hold about you
• Opt out: of sale or sharing. We do neither.
• Limit: our use of sensitive personal information
• Portability: receive your information in a usable format
• Non-discrimination: we will not deny service, change pricing or reduce quality because you exercised a right

Submitting a Request

Email privacy@your-policy.com with “State-Specific Privacy Law Request” in the subject line, including your full name, mailing address and the nature of your request.

We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time, up to 90 days total, we will tell you in writing unless state law requires a shorter period. You may submit up to two requests in any 12-month period.

We must verify your identity before fulfilling a request, and will ask for information matching our records. You may use an authorized agent with written permission signed by you or a power of attorney; we may still verify your identity directly.

Sensitive Personal Information

We limit use and disclosure of sensitive personal information to what is necessary to provide our services, comply with law, or as otherwise permitted by regulation. We do not use it to infer characteristics about you beyond what providing insurance requires. You may direct us to limit its use at any time.

Retention

We retain personal information as long as needed to fulfill the purposes above and to comply with insurance record-keeping requirements, which commonly run five to seven years or longer. We do not operate financial incentive programs requiring CCPA disclosure.

Contact Us

• Email: privacy@your-policy.com
• Phone: (434) 212-3300
• Local Office: Blue Ridge Insurance, 14805 Forest Rd, Suite 202, Forest, VA 24551
• Mailing Address: Your Policy LLC, 3301 Northland Drive, Suite 400, Austin, TX 78731