Privacy Policy

Effective Date: July 2, 2025
Alliance P&C Risk Solutions ("we", "us", or "our")

We are committed to safeguarding your privacy and complying with applicable federal and state laws, including specific obligations in Ohio, North Carolina, and South Carolina.

1. Information We Collect

We may collect the following types of personal information from you:

Personal Identifiers

• Full name

• Home or mailing address

• Email address

• Telephone number *

• Date of birth

• Driver’s license number or other government-issued ID
  
  * SMS consent is not shared with third parties or affiliates

Insurance-Related Information

• Policy numbers

• Claim details

• Coverage and underwriting data

• Loss history

• Vehicle or property information

Financial Information

• Payment and billing details

• Credit score (if applicable)

• Bank account or credit card information

Online Activity (if applicable)

• IP address

• Browser type and version

• Pages visited and time spent on our website

• Cookies and tracking technologies

2. How We Use Your Information

We use your information to:

• Provide and manage insurance products and services

• Process claims and transactions

• Communicate with you about your policy or account

• Conduct customer service and support

• Comply with legal or regulatory obligations

• Improve our services and website experience

• Prevent fraud and enhance security
  
  We do not sell your personal data. Disclosures are limited to permitted purposes and authorized third parties.

3. State‑Specific Requirements

◾ Ohio

• Disclosure limitations: We will not disclose personal or privileged information without written authorization, except as permitted by Ohio Rev. Code § 3904.13

  Access requests: Upon written request and proper identification, within 30 business days we will:

  • Inform you of personal data held about you.

  • Provide copies or translations upon request.

  • Identify recipients of data disclosures over the past two years.

  • Explain how you may correct or delete your information

• Information security: As required by SB 273 (Ohio’s adoption of the NAIC model), we maintain a written information security program, conducting periodic risk assessments, implementing security safeguards, designating responsible personnel, and retaining/destroying information per schedule

• Incident response: In the event of a “cybersecurity event,” we will investigate, notify the state insurance regulator within 3 days, and comply with Ohio’s general breach notification requirements

◾ North Carolina

• Privacy notices: We will provide clear, conspicuous disclosures—initial and annual—to applicants and policyholders regarding our privacy practices concerning disclosure to affiliates/non-affiliates, categories of collected information, protection measures, and sharing practices. Additional notices will be sent upon any policy change.

• Scope & exemptions: Applies to residents under property & casualty policies delivered, issued, or renewed in North Carolina. Exemptions apply when data is only shared within affiliates or for renewals, subject to regulatory compliance .

• Data safeguards: Compliance with the Customer Information Safeguards Act (NC Gen. Stat. § 58‑39, Parts 1 & 3), meaning we must adopt reasonable administrative, technical, and physical protections.

• Identity theft protection: We align with the Identity Theft Protection Act, safeguarding sensitive info such as SSNs, and comply with North Carolina’s breach notification rules.

◾ South Carolina

• Information security: Under the South Carolina Insurance Data Security Act, we maintain a comprehensive information security program, including incident response plans, access controls, and data encryption safeguards.

• Access to recorded information: Upon your written and properly identified request, within 30 business days we will provide the nature and substance of your recorded personal data, copies or translations, recipient disclosures over the past two years, and procedures for correction/deletion.

4. Your Rights & Choices

• Access & correction: As above, you have the right to request and correct your personal data.

• Opt‑out (marketing): Where required, you can opt out of data sharing for marketing or secondary purposes.

• Privacy notices: You will receive notices at policy formation and annually (NC), and upon any material change.

• Breach alerts: If your personal data is breached, we will notify you as mandated by applicable state laws.

5. Security Measures

We maintain administrative, technical, and physical safeguards tailored to business size, information sensitivity, and applicable state and federal standards (GLBA Safeguards Rule, Ohio & SC Data Security Acts, NC Customer Safeguards Act).

6. Data Retention & Destruction

Personal information is retained only as long as necessary for business, legal, or regulatory purposes and securely destroyed thereafter, per our documented retention schedule.

7. Third‑Party Links

We are not responsible for the privacy practices of third‑party websites linked from ours.

8. Children

We do not knowingly collect information from individuals under 13.

9. Changes to Policy

We will update this Privacy Policy as needed. The Effective Date at the top will reflect the latest revision. Continued use confirms acceptance.

10. Contact Us

To exercise your privacy rights or if you have any questions, please contact:

Alliance P&C Risk Solutions
P.O. Box 921
Mount Pleasant, NC 28124
Phone: 888.501.1335
Email: info@carolinainsalliance.com
Website: Carolinainsalliance.com