california privacy act supplemental notice

Print this page

Effective: June 8, 2021

This supplemental privacy notice ("Notice") explains your rights as a California consumer regarding personal information that is subject to the California Consumer Privacy Act ("CCPA"). This Notice, which supplements the information contained in our Privacy Policy about Esurance's general privacy practices, applies only to California residents.

This Notice only describes Esurance's privacy practices with regard to personal information that is subject to the CCPA ("CCPA Information"). The Privacy Policy, and not this Notice, describes Esurance's privacy practices relating to personal information collected, processed, sold, or disclosed in connection with a financial transaction, which is not subject to the CCPA. This includes personal information collected, used, and shared in connection with getting an insurance quote, submitting an application for insurance, issuing or managing a policy, and servicing a claim. The Privacy Policy also includes other information about Esurance's privacy practices generally.

How we collect, use and share CCPA information

We collect CCPA Information about you in several ways and from several sources. For example, we collect information directly from you when you sign up as a guest user of our DriveSense^® mobile application. We and service providers working on our behalf collect information from you when you use one of our websites, mobile apps, view our emails or otherwise engage with us through a computer or mobile device. We also collect personal information about you from third parties such as service providers, marketing companies and data providers.

We use your CCPA Information for business purposes including to market our products and services, to provide services such as our DriveSense^® mobile application, and to perform analytics and research to improve, develop, and protect our websites, mobile apps, services and products.

We do not sell your CCPA Information, or any other personal information that we collect about you. We may share your CCPA Information with third parties for business purposes or as permitted or required by law, including with service providers that provide marketing and advertising or other communications services, or that perform analytics and research to improve, develop, and protect our websites, mobile apps, services and products.

The following are the categories of CCPA Information we have collected and shared for at least the past 12 months, and examples of certain kinds of information that may fall into those categories.

CCPA INFORMATION CATEGORIES	EXAMPLES
PERSONAL IDENTIFIERS	Name, alias, postal address, email address, unique personal identifier, online identifier, internet protocol (IP) address, phone number, date of birth, or other similar identifiers.
PERSONAL CHARACTERISTICS	Age, race, ancestry, national origin, citizenship, religion or creed, marital status, gender, veteran or military status.
SERVICE OR PRODUCT RELATED INFORMATION	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, professional or employment-related information, education records, and family member information.
INTERNET OR OTHER ELECTRONIC NETWORK ACTIVITY INFORMATION	Information regarding your interaction with our website, application or advertisements, links you use or web pages you visit while visiting our site or applications, browser type, internet service provider (ISP), cookies, and mobile device information including device identifier or other device information, and location information.
GEOLOCATION DATA	Physical location, movements, or trip tracking information.
INFERENCES	Inferences drawn from personal information to create a profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities or aptitudes.

We may share the following categories of CCPA Information with the following categories of third parties:

California Consumer Privacy Act rights and choices

Under the CCPA, California residents have certain rights to request access to and deletion of CCPA Information about them, as well as other rights described below. California residents that have engaged in a financial transaction with us also have rights with regard to other personal information. For information about these rights, see "Reviewing or Modifying Your Information" in our Privacy Policy.

Right to Access CCPA Information: You have the right to request that we disclose certain information about our collection and use of CCPA Information about you over the past 12 months, including:

• the categories of CCPA Information we have collected about you,
• the categories of sources from which CCPA Information about you was collected,
• the business purpose for collecting CCPA Information about you,
• the categories of third parties with whom we have shared CCPA Information about you, and
• the specific pieces of CCPA Information we have collected about you.

Right to Deletion of CCPA Information: You have the right to request that we delete CCPA Information we have collected from you, subject to certain exceptions. In response to a request, we will delete CCPA Information we have collected from you unless the CCPA Information is needed to:

• Complete a transaction for which we collected the CCPA Information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you,
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities,
• Debug products to identify or repair errors that impair functionality,
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law,
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us,
• Comply with a legal obligation, including compliance with the California Electronic Communications Privacy Act, or
• Otherwise use CCPA Information about you, internally, in a lawful manner that is compatible with the context in which you provided the information.

To submit an online access or deletion request online please click here. Also, you can call us at 1-844-472-1759.

To better protect you and CCPA Information about you, we will only respond to access or deletion requests that we have been able to properly verify through our authentication processes. To verify your identity, you will be asked to provide certain information, which we will only use to verify your identity and/or your authority to make the request.

You also may submit an access or deletion request through an agent that you have authorized to act on your behalf. Requests from authorized agents must be submitted via the same online portal or toll-free number identified above. To protect your privacy, you will be required to verify your identity directly with us.

Responses to verified requests may take up to 45 calendar days or longer depending on the nature of the request. If additional time is needed, we will notify you. We will not respond to more than two access requests from you within a 12-month period.

Non-Discrimination Rights: We will not discriminate against you for exercising any of your rights under the CCPA.

Consumer Request Metrics: The chart below lists the number of access and deletion requests Esurance received, complied with and denied from residents of California in 2021 along with the average amount of days it took to complete a request.

Metrics: 2021 Access My Data Requests for California Residents	Quantity
Number of requests received	17
Number of Requests Complied with in whole or in part	7
Number of Requests Denied*	9
Average Days to Complete a Request	22
*We were unable to authenticate the requestor.

Metrics: 2021 Delete My Data Requests for California Residents	Quantity
Number of requests received	66
Number of Requests Denied*	66
Average Days to Complete a Request	6
*Allstate's practice is to delete personal information after it is no longer needed for business purposes. These business purposes are explained in our Privacy Statement.