Privacy Policy

RLI Safety Solutions Website Privacy Policy.

Last Updated: October 23, 2023

This Privacy Policy and Notice ( “Privacy Notice”) describes how RLI Underwriting Services (“RUS”, “us” “we” or “our”) collects, uses, shares, retains, and protects information about you when you visit the RLI Safety Solutions website at: https://rlisafetysolutions.com/ or one of the pages thereon (the “Website”). This Privacy Policy does not apply to RUS’s collection of personal information through any platform or medium other than the Website.

RUS does not control and is not responsible for the content or the privacy policies or practices of any third-parties, third-party websites, or third-party applications, including those that may link to or can be accessible via the Website. This Privacy Notice does not govern third parties’ collection and use of your information, except as specifically described in this Privacy Notice.

Before accessing, using, or interacting with the Website you should carefully review this Privacy Notice and our Terms of Use (https://www.rlicorp.com/terms-use), which are incorporated by reference and also govern use of the Website. We may change our Privacy Notice and Terms of Use from time to time and encourage you to review them whenever you interact with us.

User Consent: By choosing to interact with RUS on the Website, including through our Website, you consent to the collection and use of information as described in this Privacy Notice and you represent that you are at least 18 years old. If you are under the age of 18 or you do not consent to the collection, use and/or disclosure of your personal information as set forth in this Privacy Notice, please exit and do not use our Website.

• What Personal Information Does RUS Collect on the Website?
• How Does RUS Collect Information About Me on the Website?
• How Does RUS Use Information About Me that is collected on the Website?
• Does RUS Share the Information It Receives via the Website?
• How Does RUS Secure Information About Me that is collected on the Website?
• What Choices Do I Have?
• Notice to California Residents of Their Rights Under the CCPA
• Changes to Our Notice
• Contact for More Information

What Personal Information Does RUS Collect on the Website?

For purposes of this Notice, unless noted otherwise, when we use the term “personal information,” we mean information that identifies, relates to, describes, references, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular person or household (“personal information”).

When you use the Website, we may collect personal information that falls into the following categories:

• Identifiers: real name, alias, postal address, unique personal identifier, online identifier, email address and account name
• Customer or User Records: your name, postal address and telephone number, and e-mail address
• Commercial Information: products or services purchased, obtained or considered or your other purchasing or consuming histories
• Internet or Network Activity: cookie tracking

How Does RUS Collect Information About Me on the Website?

We collect and store information that you give us directly. For example, when you:

• Register an account (create a “Website Account”): we may collect your, name, email address, username, password, address, account name, online identifier, products or services purchased, telephone number, and fax number
• Create an account or profile: we may collect your company name, address, email address, phone number, company’s federal ID number, contracts with retail agents/brokers
• Request customer support: we may collect your name, email address, phone number, and any other information you choose to provide to us regarding your request
• Email us, sign up for notifications, or subscribe to our newsletters: we may collect your name, email address, phone number, and address.
• Purchase a product or service: we may collect and store the information about the product or service purchased, your purchasing and consuming histories, billing and shipping information, name, telephone number, and email address.

We also receive and store certain types of information automatically when you interact with us online or with the Website.

• The Website uses cookies and other similar technologies (“Cookies”). Cookies are small bits of information that are stored on your hard drive or in connection with your Internet browser that may identify you as a certain user but do not identify you by name or postal address, unless you have provided us with such information or set up preferences in your browser to do so automatically.
• The Website uses Google Analytics to collect anonymized data points about how visitors use our Website, including the number of visitors to the Website, from where visitors navigated to get to our Website, and the webpages. This information is collected and maintained in an anonymous form and used to compile reports and help us improve our Website. RUS has enabled the restricted data processing feature made available by Google, as well as anonymization of any information collected by Google Analytics. If you choose to opt-out of Google Analytics, you can install a browser add-on in your browser across all websites (please note that RUS is not responsible for the content of external websites).
• Unique Identifiers (such as a universally unique identifier or “UUID”), which we may store (including remotely) on your device persistently and may access, collect, or monitor in order to help you log in and navigate through the Website.
• Log File Information to learn your IP address, browser type, access times, domain names, operating system, the referring web page(s), pages visited, location, mobile carrier, device information (including IDs), search terms, and cookie information.
• We may also use other tracking technologies to gather information regarding your use and interaction with the Website.

RUS uses third-party services to better understand your needs and to optimize your experience, by assessing, for example, how much time you spend on which pages and which links you choose to click. These services use cookies and other technologies to collect data on your behavior and devices. This includes a device’s IP address (collected during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our Website.

How Does RUS Use Information About Me that is Collected on the Website?

RUS may use and process information about you, including personal information, collected on the Website, for one or more of the legitimate business purposes described in this Privacy Notice. For example, RUS(and/or our Service Providers) may use information about you that was collected on the Website to:

• Deliver communications, information or services, and promotions
• Provide support to you and other users
• Present, optimize, and maintain the security of our Website and their contents
• Register, maintain, and provide notifications to you about your Website Account
• Detect and prevent fraud or other crimes
• Respond to law enforcement requests and as required by applicable law or court order
• Meet our legal and regulatory obligations Research, test, analyze, and develop our Website, products, and services.
• Fulfill or meet the reason your information was collected or provided
• Allow you to participate in interactive features on our Website
• Personalize your Website experience and to deliver content, product and service offerings relevant to your interests, including targeted offers through our Website, third-party sites, and via email or text message (with your consent, where required by law)

Does RUS Share the Information It Receives About Me via the Website?

RUS  does not sell your personal information (“PI”) collected on the Website for monetary consideration. The Website uses Cookies to enable your use of the RLI Safety Solutions website, help secure your personal information, and provide important updates to the website. Cookies may collect personal information about you, such as how you use the website or other digital activity information. Use of Cookies could be considered a “sale” or “sharing” under the California Privacy Rights Act; therefore, RUS provides California residents the opportunity to opt out of the sale or sharing of personal information that is collected on the Safety Solutions website.

We do not knowingly sell the personal information of Consumers under 16.

We may share your personal information with third-party service providers with whom we have entered into contracts that require personal information be kept confidential and prohibit the retention, use, or disclosure of personal information for any purpose other than the services specified. for the following purposes, which are not a sale: (i) if you direct us to share personal information; (ii) to comply with your requests under the CPRA; (iii) disclosures amongst RUS’s affiliates, or as part of a merger or asset sale; and (iv) as otherwise required or permitted by applicable law.

RUS may share or disclose information collected on the Website as described below:

• With RUS Affiliates: We may share personal information internally within RUS and with our subsidiaries and affiliates. RUS’s personnel may have access to personal information as needed to provide and operate the Website in the normal course of business. This includes the following categories of personal information: identifiers, customer records, commercial information, internet or other network activity, general geolocation data, and inferences drawn from personal information.
• Third-Party Service Providers: We employ other companies and individuals to perform functions on our behalf, such as sending mail, analyzing data, providing marketing assessments, providing analytics information, processing certain payments, and providing data hosting (as specified herein). They have access to information needed to perform their functions, but not for other purposes. This includes the following categories of personal information: identifiers, user records, commercial information, internet or other network activity, and inferences drawn from personal information.
• Business Transfers: If we purchase other businesses or their assets, sell our business assets, or are involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information, including any category of personal data collected by RUS, may be among assets sold or transferred and may be subsequently used by a third-party.
• Lawful Requests and Safety: We release personal information when we believe it is appropriate to comply with the law, it is necessary to protect our interests, to prevent fraud or other illegal activity, and to protect the safety of any person. Nothing in this Privacy Notice is intended to limit any legal defenses or objections that you may have to a third party’s, including a government’s, request to disclose your information.

How Does RUS Secure Information About It Collects About Me on the Website?

We realize that you trust us to protect your personal information. We take that trust seriously and maintain physical, electronic and procedural safeguards that are consistent with industry standards to help protect the privacy, accuracy, and reliability of personal information and to help protect it from loss, misuse, unauthorized access, disclosure, acquisition, exfiltration, alteration and destruction.

We also take commercially reasonable steps to ensure that our third-party service providers reasonably protect and secure your information. If RUS becomes aware that a third-party service provider is using or disclosing information improperly, we will take necessary and immediate steps to end or correct such improper use or disclosure.

While we attempt to protect the information in our possession and account for the protection of information provided to our third-party service providers through us, no security system is perfect and we cannot promise that information about you will remain secure in all circumstances. Please do your part to help us keep your information secure. You are responsible for maintaining the confidentiality of your password(s) and your Account(s), and for all activities that occur under your password or Account(s). RUS specifically reserves the right to terminate your access to your Account(s) and any contract you have with RUS related to the use of the Website in the event it learns or suspects you have disclosed your Account or password information to an unauthorized third party.

What Choices Do I Have?

RUS seeks to ensure that all individuals are provided with the rights mandated by their governing jurisdiction. Not all of the rights discussed herein will apply to everyone and, depending upon your jurisdiction, may not apply to you. For example, the CCPA and CPRA provide California Residents the right, under certain circumstances, to request that RUS disclose, delete or correct their personal information.

To exercise these rights, as described above, please submit a request to us by either:

• Calling us at 1-833-473-1468
• Visiting us at https://rlisafetysolutions.com/privacy-policy/, or email privacy@rlicorp.com

Communications from RUS

Users may opt-out of receiving certain communications from RUS by following the unsubscribe process described in our communications, changing your account settings, or by contacting us using the contact information provided below.

Notice to California Residents of Their Rights

The California Consumer Privacy Act (the “CCPA”) as amended by the California Privacy Rights Act (the “CPRA”), provide California Residents (as defined in the CCPA and CPRA), specific rights regarding their personal information. For purposes of the CCPA, personal information does not include: publicly available information from government records; de-identified or aggregated consumer information; and, information excluded from the CCPA’s scope, including: health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data, certain information covered by sector-specific privacy laws, such as the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994 (DPPA). Any terms defined in the CCPA have the same meaning when used in this Notice.

The rights conferred by the CCPA and CPRA apply solely to visitors, users, and others who reside in the State of California. The following sections describe your rights and explains how to exercise those rights.

Right to Request Access to Specific Information and Data Portability Rights

The CCPA grants California Residents the right to ask RUS about its collection and use of the personal information it has collected, used, and disclosed over the past twelve (12) months. Instructions on how a California Resident can submit a verifiable consumer request for access to this information (referred to as a “Request to Know”) are below. Once we receive and confirm that you have made a verifiable consumer Request to Know, we will make an individualized disclosure to you about:

• Categories of personal information we collected about you;
• Categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting the personal information;
• Categories of third parties with whom we share that personal information;
• Certain, specific pieces personal information we collected about you (“Data Portability Request”); or,
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing: (1) sales, identifying the personal information categories that each category of recipient purchased; and, (2) disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Right to Request Deletion of Your Data

California Residents have the right to request that we delete the personal information that we have collected and retained (“Requests to Delete”). Upon RUS’s receipt of a verifiable request to delete personal information (see below), we will delete—subject to the exceptions explained below— the personal information from our records and will direct our service providers to delete your personal information from their records.

However, please note that RUS may deny your request to delete and need not comply with such a request (and need not ask third-party service providers to comply) if retaining the information is necessary to perform certain functions or commitments, including: completing the transaction for which the personal information was collected; providing a service requested; otherwise performing our contract with you or taking reasonably anticipated actions within the context of our ongoing business relationship with you; detecting security incidents and protecting against malicious, deceptive or otherwise illegal activity or to prosecute those responsible for those activities; complying with a legal obligation or otherwise using the personal information, internally, in a lawful manner; complying with the California Electronic Communications Privacy Act; fulfilling the terms of a written warranty or product recall conducted in accordance with federal law; or, for a purpose otherwise contemplated by Cal. Civ. Code Section 1798.105(c)-(d) or as otherwise amended.

Right to Correct Inaccurate Personal Information

The CPRA provides an additional right for California Residents to request that we correct inaccurate personal information that we maintain about them (the “Right to Correct”). RUS will use commercially reasonable efforts in order to comply with California consumer requests to correct.

Use and Disclosure of Sensitive Personal Information

RUS only uses and discloses sensitive personal information (“SPI”) for the following purposes provided by Section 7027(m) of the CCPA regulations. Specifically, RUS may use or disclose SPI collected through the Website to: provide goods or services reasonably expected by California consumers; to prevent, detect and investigate security incidents; to resist malicious, deceptive, fraudulent or illegal actions directed at RUS; to ensure the physical safety of natural persons; for short-term transient use related to your interaction with RUS; to perform services on behalf of RUS; to verify or maintain the quality or safety of a product or service; and, to maintain the necessary security and quality control over RUS’s stored information. Since RUS does not use or disclose SPI collected through the Website for purposes other than these exempted purposes, we are not required to post a Notice of Right to Limit or provide a method for submitting a request to limit use or disclosure of SPI.

Opt-Out of Sale/Sharing

RUS  does not sell your personal information (“PI”) collected on the Safety Solutions website for monetary consideration. The RLI Safety Solutions website uses cookies and other similar technologies (together, “Cookies”) to enable your use of the RLI Safety Solutions website, help secure your personal information, and provide important updates to the website. Cookies may collect personal information about you, such as how you use the website or other digital activity information. Use of Cookies could be considered a “sale” or “sharing” under the California Privacy Rights Act; therefore, RUS provides California residents the opportunity to opt out of the sale or sharing of personal information that is collected on the Safety Solutions website.

If you are a California resident, you may exercise your right to opt out of the sale and sharing of your personal information by contacting us at do-not-sell@rlisafetysolutions.com. Once you have exercised your right to opt out, RUS will place a “Do Not Sell” tag on your account to prevent the future sale or sharing of your personal information through the Safety Solutions website.

How to Exercise Your Access, Data Portability, Deletion and Correction Rights

You may make a verifiable request to exercise your right to access or data portability twice within a 12-month period. To exercise the access, data portability, deletion, and correction rights described above, please submit a verifiable consumer request to us by either:

• Calling us at 1-833-473-1468
• Visiting us at https://rlisafetysolutions.com/privacy-policy/, or email privacy@rlicorp.com

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to the personal information about you. If the request is made through an agent, we reserve the right to require a signed authorization or verification of the agent’s identify from you in order protect the privacy of the personal information requested. You may also make a verifiable consumer request on behalf of your minor child.

We cannot provide you with the information sought in a Request to Access, or comply with a Request to Delete or Correct, if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. A verifiable request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We reserve the right to require additional information from you to verify your request before we respond. Any information provided to us in a verifiable customer request will be used only to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will acknowledge your request or exercise of the foregoing Rights within ten (10) days of receipt with information regarding how we will process your request. We will endeavor to respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time to provide a response, we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

As mentioned above, we may collect or process sensitive data as needed or required to deliver services you have requested, to inform you of other products or services, and to contact you via surveys to conduct research about your opinions. You may request that we delete this information, subject to certain exceptions as provided by the CCPA.

Other California Privacy Rights

Under California Civil Code Section 1798.83 (known as the “Shine the Light” law), residents of California may request certain information about our disclosure of personal information during the prior calendar year to third parties for their direct marketing purposes. To make such a request, please write to us at the address below or email privacy@rlicorp.com with “Request for California Privacy Information” on the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.

Non-Discrimination

We will not discriminate against you for exercising any of the rights conferred by California statute, including the CCPA. Unless permitted by law, we will not: deny you goods or services; charge you different prices or rates; provide you a different level or quality of goods or services; or suggest that you may receive a different price or rate or a different level or quality of goods or services. We may offer certain financial incentives permitted by the CCPA that can result in different prices, rates or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects.

Changes to Our Privacy Notice

RUS may modify this Privacy Notice from time to time. The most current version of this Privacy Notice will govern our use of your information and will be located at https://rlisafetysolutions.com/privacy-policy/, You may contact us to obtain prior versions. We will notify you of material changes to this policy by posting a notice at the Website or by emailing you at an email address associated with your Website Account, if applicable, and provide an “at a glance” overview of any changes.

Contact for More Information

RUS is an affiliate of RLI Corp., located at 9025 N. Lindbergh Dr., Peoria, IL 61615. Should you have any comments or questions about how we collect and use your personal information, communication can be directed to RUS’s postal address, via email to privacy@rlicorp.com or by telephone to 1-833-473-1468.