We obtain personal information from you directly, from your transactions with us, and from third parties such as travel agents, online booking service providers, online property listing sites, property managers, and furnished accommodations providers.

We do not collect personally identifying information from you when you visit our website or other online services unless you affirmatively provide it to us.

We do not allow third parties to collect personally identifying information from your computer or mobile device when you visit our website or use our online services.

We will not sell your information to third parties.

Any third parties who perform services for us are required to safeguard any customer information and may only use it in connection with performing those services.

We extensively secure and limit access to your information.

We protect information about potential, current, and former coverage holders.

We collect information from the InsureStays website. This includes the use of “Cookies” and other similar technologies.

We collect information through “Cookies” and other similar technologies to remember you when you visit our website [and Mobile Apps]. Cookies are text files placed on your computer or device to collect standard internet log information and visitor behavior information. This information is used to track and help us understand how you and others use our website and Mobile Apps, view our products and respond to advertising so we can enhance our overall product and service offering. For further information about Cookies in general, visit www.aboutcookies.org or www.allaboutcookies.org.

You can set your browser not to accept cookies or to alert you to when websites set or access cookies. The above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may become inaccessible or not function as a result.

We collect information from InsureStays Mobile Apps and via other Online channels.

We collect information about you from analytics providers such as Google, which includes the following:

• your gender;
• your age;
• your language of preference;
• your interests;
• your location via IP addresses;
• your internet provider;
• your computer’s operating system;
• your web browser; and
• your behavior on the website, such as how long you have spent on each page, how you got to the page, and whether you are a new visitor.

We collect information from search information providers.

We collect information from Third Parties; we may collect information about you from third parties such as:

• your insurance intermediary or other organizations providing services to them;
• other insurers (directly or using shared databases such as a register of claims);
• other third party databases which have been established to help detect and prevent fraudulent activity; and
• other publicly available sources such as social media, commercially available sources and information from our affiliates or business partners.

We will seek your permission to contact these people for your information.

We may collect Information about your transactions and experiences with us such as your payment history, travel itineraries, claims, coverage, and coverage changes.

We use the Personal Information collected:

A.) In relation to any quotes requested, or your insurance products and services taken out:

• Communicate with you and others as part of our business;
• Send you important information regarding changes to our policies, other terms and conditions, and other administrative information;
• Provide quotes and make decisions about eligibility for insurance and assistance services, and other products and services which we offer, and provide such products and services, including claim support; and, where applicable, assist with claim disputes;
• Process your premium and other payments;
• Identify you to anyone to whom you send messages through any of the InsureStays online Services;
• Without the Personal Information collected we may be unable to administer your coverage, product or service.

B.) To ensure we are able to adhere to legislation and regulatory obligations such as to:

• Prevent, detect and investigate crime, including fraud and money laundering;
• Resolve complaints, and handle requests for data access or correction;
• Comply with applicable laws and regulatory obligations (including laws outside your country of residence), such as those relating to anti-money laundering, sanctions and anti-terrorism; comply with legal process; and respond to requests from public and governmental authorities (including those outside your country of residence);

C.) Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This will enable us to effectively manage our business, such as to:

• Provide improved quality, training and security (for example, with respect to recorded or monitored phone calls to our contact numbers);
• Assess your eligibility for payment plans;
• Carry out research and analysis, and manage other commercial risks, including analysis of our customer base and other individuals whose Personal Information we collect as explained in this Privacy Policy;
• Manage our infrastructure and business operations, and comply with internal policies and procedures, including those relating to auditing; finance and accounting; billing and collections; IT systems; data and website hosting; data analytics; business continuity; and records, document and print management;
• Establish and defend legal rights; protect our operations or those of any of our group companies or business partners, our rights, privacy, safety or property, and/or that of our group companies, you or others; and pursue available remedies or limit our damages.
• We may collect Information about your transactions and experiences with us such as your payment history, travel itineraries, claims, coverage, and coverage changes to improve overall service.

We may share and aggregate information about you from InsureStays and other companies related to the business of InsureStays including those commonly held by Rental Guardian Holdings.

The information we share internally may include personal information held within InsureStays relating to other coverage held with us, quotes or claims details and, depending on your preferences, we may use this information to:

• help us identify products and services that may be of interest to you, to tailor and package our products and services;
• determine pricing and/or offer available discounts; and
• conduct customer research and develop marketing campaigns.

If you request a quote, or purchase a product or service from us, your personal information will be used and shared within InsureStays for the purposes of administration (including underwriting, determining premiums, managing claims and offering renewals). We will use your information to communicate with you about your quote, product or service, including improvements we make to the ways you can access your information.

In the course of marketing, obtaining coverage (for instance if you request a quote, or purchase a product or service) and providing service and claims support, your personal information may be shared with and processed by InsureStays may make your information available to:

• Insurance and Distribution Parties
• Our associated companies, introducers, intermediaries, insurers, reinsurers, insurance and reinsurance brokers, and their agents or appointed representatives, other distributors, affinity marketing partners, financial institutions and securities firms as well as the policyholder (for a corporate policy) and your broker or agent for the purposes of administration (i.e. progressing a claim made by you), including third parties providing services to them, (as detailed above).
• Our service providers
• External third-party suppliers or service providers, such as medical professionals, accountants, actuaries, auditors, experts, lawyers and other outside professional advisors; travel and medical assistance providers; call center service providers; IT systems, support and hosting service providers; printing, advertising, marketing and market research and analysis service providers; banks and financial institutions that service our accounts; third-party claim administrators; document and records management providers; claim investigators and adjusters; examiners; jury consultants; translators; and similar third-party vendors and outsourced service providers that assist us in carrying out business activities, for example, to help administer your coverage, to help us manage and store data, provide data analytics, conduct market research and to communicate with you effectively. This may include any online or digital partners we work with, so we, or our online or digital partners on our behalf, can communicate with you through their platforms.
• Regulatory bodies
• Regulatory bodies [in the US overseas] as well as with other insurance companies (directly and via shared databases) to prevent and detect fraud.
• Governmental authorities and third parties involved in court action

InsureStays may also share Personal Information with governmental or other public authorities (including, but not limited to, workers’ compensation boards, courts, law enforcement, tax authorities and criminal investigations agencies) in response to lawful requests by such public authorities; and third-party civil legal process participants and their accountants, auditors, lawyers and other advisors and representatives as we believe to be necessary or appropriate:

(a) to comply with national security or other law enforcement requirements; (b) to comply with legal process;

(c) to respond to requests from public and government authorities including public and government authorities outside your country of residence;

(d) to comply with applicable law, including laws outside your country of residence; (e) to enforce our terms and conditions;

(f) to protect our operations or those of any of our family of companies;

(g) to protect our rights, privacy, safety or property, and/or that of our family of companies, you or others; and

(h) to allow us to pursue available remedies or limit our damages.

We may share Personal Information with payees; emergency service providers (fire, police and medical emergency services); retailers; medical networks, organizations and providers; travel carriers; credit bureaus; credit reporting agencies; and other people involved in an incident that is the subject of a claim; as well as purchasers and prospective purchasers or other parties in any actual or proposed reorganization, merger, sale, joint venture, assignment, transfer or other transaction relating to all or any portion of our business, assets or stock.

InsureStays may disclose your Personal Information as described above, but only in good faith and for the limited and specified purposes described in this notice.

InsureStays will only share your information for marketing purposes outside InsureStays where you have consented to marketing.

In the event we share your Personal Information, we will take appropriate measures to protect your privacy and the Personal Information we transfer.

We require all third parties to respect the security of your Personal Information and treat it in accordance with the law. We do not allow our third party service providers to use your Personal Information for their own purposes and we only permit them to process your Personal Information for specified purposes and in accordance with our instructions.

In addition, if we learn that third party is using or disclosing your Personal Information in a manner that is contrary to this Policy, we will take reasonable steps to prevent or stop such use or disclosure. InsureStays may be liable for onward transfers of Personal Information to third parties in violation of this Policy and the US Privacy Shield.

Due to the global nature of some segments of our business, we may transfer Personal Information to parties located in other countries including the European Economic Area (EEA), the United States of America, the Republic of India, and the Republic of the Philippines for processing, storage, administration or any other use stated within this Policy.

We may transfer Personal Information internationally to our group companies, service providers, business partners and governmental, regulatory or public authorities.

When we transfer your Personal Information overseas we ensure a similar degree of protection is afforded to it by ensuring one of the following safeguards:

• We will only transfer your Personal Information to countries that have been deemed by the relevant data protection regulatory bodies to provide an adequate level of protection for personal information
• Where we use certain service providers we may use specific contracts approved by data protection regulatory bodies.
• Where we transfer data to our group companies we require all of our group companies to follow the same rules as InsureStays when processing your Personal Information
• The purposes and processing associated with any such transfer will comply with all applicable data protection regulations, including, for all EU residents, the EU’s General Data Protection Regulation, if and where we participate in the U.S. Department of Commerce’s EU Privacy Shield (“Privacy Shield”). We are committed to ensuring that all Personal Information received from the EU in reliance on the Privacy Shield, is subject to the Principles. If there is any conflict between this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern in matters regarding EU residents. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov.
• Further, please note that any communication you send to an “insurestays.com” e-mail address will be routed through the United States.

You will receive marketing communications from us if you have requested information from us or obtained insurance products and services from us / our authorized retailers and in each case you have not opted out of receiving that marketing.

We will get your express opt-in consent before we share your Personal Information with any company outside the InsureStays group of companies for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by contacting us. Where you opt out of receiving these marketing messages, this will not apply to Personal Information provided to us as a result of a product or service you have purchased from us, your product/service experience, or other transactions.

If you no longer wish to be contacted for marketing purposes, please email stayinfo@insurestays.com with subject line “Opt-out”.

InsureStays will only process Personal Information in ways that are compatible with the purpose for which InsureStays collected it, or for purposes which you might later authorize. We will only keep your information for as long as is necessary and in accordance with any relevant regulatory, accounting or reporting requirements.

To determine the appropriate retention period for Personal Information we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use of disclosure, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Before we use your Personal Information for a purpose that is materially different than the purpose we collected it for or that you later authorized, we will provide you with the opportunity to opt out.

InsureStays maintains procedures to help ensure that Personal Information is necessary for its intended use, accurate, complete, and current.

InsureStays will take appropriate technical, physical, legal and organizational measures, which are consistent with applicable privacy and data security laws. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any Personal Information you might have with us has been compromised), please immediately notify us at stayinfo@insurestays.com. See full contact information above or below.

When InsureStays provides Personal Information to a service provider, the service provider will be selected carefully and expected to use appropriate measures to protect the confidentiality and security of the Personal Information.

We will put in place procedures to deal with any suspected Personal Information breaches. We will notify you and any applicable regulator of a breach when we are legally required to do so.

Your rights include the following:

• Right to access, rectification, and erasure:
  • You may have the right to access the Personal Information that we hold about you and to request that we correct, amend, or delete it if it is inaccurate or processed unlawfully. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access. If you would like to request access to, correction, amendment, or deletion of your Personal Information, you can submit a written request to the contact information provided above. We may request specific information from you to confirm your identity.
• Right to restriction of processing:
  • You have the right to “block” or suppress processing of your personal information in certain circumstances, for example where you think that the personal information we hold about you may be inaccurate or where you think that we no longer need to process your personal information.
• Right to data portability:
  • You have the right to data portability in certain circumstances, which allows you to obtain and reuse your personal information for your own purposes across different services thus allowing you to move, copy or transfer your personal information easily from our IT environment to another third party in a safe and secure way.
• Right to object:
  • You have the right to object to the processing of your information in certain circumstances including where your information is used for direct marketing and for purposes of scientific/historical research and statistics. Please see the Marketing section for more information.
• Right to withdraw consent at any time:
  • Where you have provided consent to the processing of your information (for example, to the processing of your medical/health information), you have the right to withdraw your consent at any time. If you withdraw your consent we may not be able to provide certain products and services to you. If you wish to withdraw this consent please email us at stayinfo@insurestays.com and we will act on this instruction as soon as we can.
• Right not to be subject to automated-decision making:
  • As we use systems which make decisions based on automated processing of your information, you have the right to obtain human intervention, express your point of view and to obtain an explanation of the decision and challenge it.
• Right to lodge a complaint:
  • You can make any of the requests set out above, or file a complaint about how we have handled your information. Please do not hesitate to contact us using the contact details provided above to ensure that it is resolved without delay. Please note that in some cases we may not be able to comply with a request you have made for reasons such as our own obligations to comply with other legal or regulatory requirements. However, we intend to respond to any request or complaint you make and if we can’t comply with your request, we will tell you why.
  • In addition, UK residents have the right to lodge a complaint with the UK’s Information Supervisory Authority (the Information Commissioner’s Officer – “ICO”) where you believe that your information has not been processed in accordance with the relevant legislation and regulatory requirements. More information can be found on the ICO’s website:https://ico.org.uk/
• NOTICE REGARDING THE PERSONAL INFORMATION OF EU RESIDENTS
  • Any complaint or dispute about how we handle EU Personal Information should be directed to the contact information provided in this privacy policy. If we are unable to reach a mutually satisfactory resolution for such complaint or dispute, we will cooperate with the dispute resolution procedures administered by the European Data Protection Authorities (DPA). We commit to cooperate with EU DPAs and respect the advice given by such authorities with regard to human resources data transferred from the EU in the context of any employment relationships. With respect to such EU Personal Information, we are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
  • Under certain limited conditions, by providing notice to us, you may invoke binding arbitration regarding certain residual claims about EU Personal Information before a Privacy Shield Panel. Such procedure is in accordance with the rules established under the Privacy Shield. We are subject to the investigatory and enforcement powers of the FTC for EU Personal Information. We participate in the American Arbitration Association dispute resolution program (adr.org).
• NOTICE TO RESIDENTS OF ARIZONA, CALIFORNIA, CONNECTICUT, GEORGIA, ILLINOIS, MAINE, MINNESOTA, MONTANA, NEVADA, NEW JERSEY, NORTH CAROLINA, OREGON, or VIRGINIA
  • You have the right to access and correct the personal information that we have collected from or about you. To do so, simply contact InsureStays’ customer service department. If you’d like to correct information that you provided to us, our representative will make the appropriate adjustments to InsureStays’s records. If you wish to correct personal information provided to InsureStays by a third party (such as a claims reporting agency) the representative will provide you with the applicable third party’s contact information.

Upon the request of residents of other states, we will take reasonable steps to verify the accuracy of the personal information in our records.

The InsureStays Online Services are not directed to individuals under the age of eighteen (18) years, and we request that these individuals do not provide Personal Information through the InsureStays Online Services.

• Mailing Address: PO Box 4443, Pawleys Island, SC 29585
• Email: stayinfo@insurestays.com
• Phone: (843) 286-5144

We may modify our privacy policy from time to time. The most recent version is always posted at www.insurestays.com. In addition, in the event that we make a significant change to our privacy practices, we will electronically send a revised copy of our privacy policy to active coverage holders. Coverage holders who cannot access our privacy policy electronically may contact us requesting a copy be mailed.