Last Updated: December 7, 2023
This state privacy policy applies only to residents of California, Colorado, Connecticut, Nevada, Utah, and Virginia and supplements our Privacy Policy. You can access that Privacy Policy by clicking here.
You take online privacy seriously and so does the JM&A Group. Our aim with this state privacy addendum is to help you make informed choices about your personal information. This addendum explains what personal information we collect about you, what we do with it, and how you can control it in connection with websites owned by JM&A Group (the “Websites”). To help you understand our practices, we have provided the following brief overview covering key points:
- What personal information do we collect? We collect the following categories of personal information: identifiers; commercial information; internet or other network activity; geolocation data; audio, electronic, visual, thermal, olfactory, or similar information; and government identifiers.
- How do we use your information? We use your personal information to fulfill our contractual obligations; customize our communications; perform administrative tasks; administer offers, promotions, and surveys; communicate with you; operate, evaluate and improve our business; and conduct data analysis.
- Do we sell or share you information? We do not sell your information in the traditional sense, but we do make it available to third parties for cross-context behavioral advertising (which is commonly known as “targeted advertising” and also considered a sale in some jurisdictions) in order to provide you more relevant advertising. You can elect to opt out of such activity by clicking here.
- How long do you keep my information? We retain personal information and sensitive personal information for as long as reasonably necessary to accomplish the purposes for which it was collected, and as necessary to comply with legal obligations and to protect our interests.
You can find more details about these answers below.
Who We Are
The JM&A Group is one of the largest independent providers of finance and insurance products in the automotive industry. In this role, the JM&A Group may collect and control your personal information. Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. This addendum describes how we deal with your personal information.
It is important for you to know that the JM&A Group is comprised of five (5) companies that may each have a different name than the JM&A Group (these companies are listed above). However, each of these companies is actually part of the JM&A Group. As such, the way these companies process your personal information is also captured within this addendum. Where we use terms such as we, us and our in this addendum, we mean the JM&A Group and all of its companies, even if they have a different name.
Categories of Personal Information We Collect, Where We Collect It From, Why We Collect It, And Who We Disclose It To
This section explains what personal information we collect and what we do with that information, including how we use it and to whom we disclose it.
Collection
In the last 12 months, we collected the following categories of personal information:
- Identifiers. This includes information such as your title, full name, address, contact details, including your email address, home and mobile telephone numbers, correspondence address (where different from your home address); and address history (only for current contract holders). We may also collect information relating to your use of our service.
- Employee and Customer Records. This includes information such as your name, signature, Social Security number, address, telephone number, driver’s license number, insurance policy number, and revolving credit account number.
- Commercial Information. This includes information such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Internet or other electronic network activity information. This includes information such as your IP address, browser type, and interactions you may have with our websites. We collect this information when you use the Websites.
- Geolocation Data. We collect your geolocation data when, while attending one of our sponsored events, you use a badge with location-tracking functionality.
- Audio, electronic, visual, thermal, olfactory, or similar information. This includes information such as audio or video recordings. It is our standard practice to record all external claims calls for training, compliance, security, and evidentiary purposes—even where these calls fall outside of our regulatory obligations. Some of our offices use closed circuit television cameras for health, safety, and security purposes—so, if you visit one of our office, you may be recorded on those cameras.
- Sensitive Personal Information. We may collect your payment information, Social Security number, or driver’s license number. This information is considered sensitive information in some states state.
We collect this personal information from: you; online-review platforms (such as Birdeye); your lender, devices, or insurance company; the car dealer from whom you purchased our product contract or contract we administer; or a repair shop in connection with our product contract or contract we administer.
Uses
The table below describes how we use the personal information we collect about you:
Purpose
Fulfill our Contractual Obligations. This includes activities such as providing you the services you request or honoring the commitments we made to you.
Data Categories Involved
- Identifiers such as your full name and contact details, including your address and email address.
- Geolocation data of the vehicle.
- Contract and vehicle information (including VIN and mileage), commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Sensitive personal information (but only payment information).
Purpose
Customize our Communications. This includes activities such as providing tailored communications and personalized content, offers, and advertising, including on our Websites, based on information collected through tracking tools.
Data Categories Involved
- Identifiers such as your full name and contact details, including your address and email address.
- Internet or other electronic network activity information.
Purpose
Perform Administrative Tasks. This includes activities such as assisting you with registration on our Websites and contact list or to respond to inquiries from you or notify you about information we believe may be useful to you.
Data Categories Involved
- Identifiers such as your full name and contact details, including your address and email address.
- Sensitive personal information (but only payment information).
Purpose
Administer Offers, Promotions, and Surveys.
Data Categories Involved
- Employee records such as name, place of employment address, telephone number and email address
- Internet or other electronic network activity information.
- Sensitive personal information (but only payment information).
Purpose
Communicate with You. This includes activities such as alerting you about industry-related issues.
Data Categories Involved
- Identifiers such as your full name and contact details, including your address and email address.
- Employee records such as name, place of employment address, telephone number and email address
Purpose
Operate, Evaluate and Improve our Business. This includes activities such as developing new products, managing communications, determining the effectiveness of our sales, marketing and advertising, performing accounting, auditing, billing, reconciliation and collection activities, claims activities and analyzing and enhancing our products and branded websites.
Data Categories Involved
- Identifiers such as your full name and contact details, including your address and email address.
- Employee records such as name, place of employment address, telephone number and email address.
- Geolocation data of your vehicle.
- Contract and vehicle information (including VIN and mileage), commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Purpose
Conduct Data Analysis. This includes activities such as performing analysis and other processing—including market and consumer research, trend analysis, and financial analysis.
Data Categories Involved
- Identifiers such as your full name, address, contact details, including your address and email address.
- Internet or other electronic network activity information.
- Employee Records such as name, place of employment address, telephone number and email address
- Geolocation data of the vehicle.
- Contract and vehicle information (including VIN and mileage), Commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
We also use your information to (1) comply with applicable legal or regulatory obligations (including legal claims, compliance, and investigative purposes); (2) protect against and identity fraud as well as other criminal activity; and (3) exercise our rights or defend legal claims. And we may also use information for other purposes with your consent. As required by law, we will obtain your consent before we process your sensitive personal information. We do not use your sensitive personal information for any reason other than those specified in California Civil Code section 1798.121(a). With the exception of payment data, we generally receive sensitive personal information (your Social Security or driver’s license number) when it is on a police report provided to us in connection with processing a claim under your contract. We do not use that sensitive information, and we only store it for so long as our record retention policy requires we keep a copy of the police report.
Disclosures
In the last 12 months, we have disclosed personal information to third parties as reflected in the table below:
Category of Recipient
Business Partners. This includes companies whose products we sell.
Data Categories Involved
- Identifiers such as your full name, address, contact details, including your address and email address.
- Geolocation data of the vehicle.
- Contract and vehicle information (including VIN and mileage), commercial information such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Purpose
We disclose personal information to our business partners so that they can provide you the services you purchased.
Category of Recipient
Online Marketers. This includes companies who help us provide more relevant advertising based on your interactions with us.
Data Categories Involved
Internet and Electronic Network Activity Information
Purpose
We disclose this information to provide you more relevant advertising.
We may also disclose personal information to others, who are not third parties under applicable privacy laws, as described in the Privacy Policy.
Profiling, Selling, and Targeted Advertising
We do not use your personal information for profiling—as the term is defined under applicable privacy laws—in furtherance of decisions that produce legal or similarly significant effects concerning you.
We also do not sell personal information in the traditional sense: giving your data to another in exchange for money. We do, however, allow trusted partners to collect some of your data so we can provide you targeted advertising based on your interactions with us and others online. Some states may consider this practice as us “selling” or “sharing” your information. In the last 12 months, we allowed companies to collect the following category of personal data for targeted advertising: Internet and Electronic Network Activity Information. We do not have actual knowledge that we sold personal information of any person under 16 years old or shared such information for targeted advertising.
Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. We do not currently respond to those signals. But we do offer you the right to opt out of using selling or sharing your personal information. You can do so by following the instructions below in the “Your Rights” section below or relying on an opt-out preference signal. To the extent possible, we respond to those signals on our Websites for the browser sending the opt-out signal. (If you later access our website from a different browser that is not sending the signal, your opt-out settings will not carry over.)
Your Rights
You have the following rights:
- Access. You can request that we provide you details about the personal information we collected about you and how we used it (including any disclosures to third parties). You can also ask to receive the specific pieces of personal information we collected about you.
- Delete. You can ask us to delete the personal information we have collected about you.
- Correct. You can ask us to correct inaccurate personal information we maintain about you.
- Opt Out of Sales and Targeted Advertising. You can ask us to not sell your personal information or use it for targeted advertising (which California calls “sharing”) based on your online activity.
- Learn of Direct Marketing. You can ask us once per year if we have shared personal information with third parties for their direct marketing purposes.
- Revoke Consent. You have the right to revoke your consent to our processing of your sensitive information, when our processing is based on that consent.
We will not receive discriminate against you for exercising the above rights. This means, if you exercise your rights, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through the use of discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
If you want to exercise one or more of your rights, please click here, email us at privacy@jmagroup.com, or call us at 1-800-327-5172. You may also choose to appoint an agent to make requests on your behalf. In this circumstance, we will need to verify both your appointment of the agent and the agent’s identity when the request is submitted.
Before fulfilling your request, we must be confident you are seeking to exercise rights concerning your information (or rights belonging to your child). We will take reasonable steps as allowed by law to verify your identity. In order to verify your identity, upon receiving your request to access, correct, or delete your information, we will send you an Identity Verification Form to complete and have notarized. We will compensate you for the cost of the notarization. The form asks for the minimal information (your name, address, telephone number, email address and either your Vehicle Identification Number (VIN) or contract number) we need to verify who you are and locate your personal information in our system.
If you are unable to honor your request, we will tell you and explain why. When we do so, you may appeal our decision by emailing us at privacy@jmagroup.com. In your email, please identify what decision you are appealing and concisely state why you believe your request should be fulfilled.
Changes to This State Privacy Policy
We reserve the right to update this state privacy policy at any time. When we do, we will post it on our Websites and change the last updated date. If there are material changes to our policy, we will post a prominent notice on our Websites and/or provide other notice as required by law. Use of our Websites following such changes constitutes your acceptance of the revised policy then in effect.
Contact Us
If you have any questions about our privacy practices or this addendum, you can email us at privacy@jmagroup.com, call us at 1-800-327-5172, or send us a letter to:
JM&A Group
350 Jim Moran Blvd.
Deerfield Beach, FL 33442