California Privacy Notice

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This Privacy Notice for California Residents supplements the Privacy Policy of CAMICO Mutual Insurance Company and CAMICO Services, Inc., dba CAMICO Insurance Services (together, “CAMICO”, “we” “our” or “us”). CAMICO makes the following additional disclosures to consumers who are California residents (“you” and “your”) as required by the California Consumer Privacy Act (“CCPA”). Certain information CAMICO collects, processes, maintains, discloses, or otherwise uses may be exempt from the CCPA pursuant to GLBA and other applicable laws.

CAMICO’S INFORMATION PRACTICES

PERSONAL INFORMATION WE COLLECT

During the past twelve months, we have collected the following categories of personal information from or about consumers from the categories of sources and for the business purposes described below:

Category of Personal Information	Examples	Sources	Business or Commercial Purposes
Identifiers	Name, alias, postal address, email address, telephone number, IP address, policy number, account number, driver’s license number, Social Security number	Consumers, applicants, insureds, claimants, agents, brokers, public records, service providers, website activity	Underwriting, policy administration, claims handling, fraud prevention, customer service, legal compliance
Personal information described in Cal. Civ. Code § 1798.80(e)	Signature, financial account information, insurance information	Consumers, financial institutions, claims participants	Policy issuance, payment processing, claims administration
Protected classification characteristics	Age, gender, marital status, disability status	Consumers, claimants, public records, legal proceedings	Claims investigation, underwriting, legal compliance
Commercial information	Insurance products purchased, transaction history, payment records, claims history	Consumers, agents, brokers, insurers, reinsurers	Insurance servicing, underwriting, claims administration
Internet or other electronic network activity information	Browsing history, search history, interaction with websites and applications	Website activity, analytics providers, cookies, device technologies	Website administration, analytics, cybersecurity, marketing
Audio, electronic, or visual information	Voicemail recordings and call recordings	Consumers and callers	Customer service, quality assurance, claims handling
Professional or employment-related information	Employment status, professional credentials, educational background, employment history	Consumers, applicants, public records, licensing bodies	Underwriting, employment administration, claims investigation
Sensitive Personal Information	Social Security number, driver’s license number, financial account information, precise login credentials, health-related disability information	Consumers, claimants, financial institutions, public records	Claims administration, underwriting, fraud prevention, payment processing, legal compliance

PERSONAL INFORMATION WE DISCLOSE

During the preceding twelve months, we have disclosed the following categories of personal information for a business purpose to the categories of third parties indicated below:

Categories of Recipients	Categories of Personal Information Disclosed	Business Purpose for Disclosure
Insurance companies and reinsurers	Identifiers, customer records information, commercial information, professional information, claims information	Underwriting, risk evaluation, policy servicing, claims administration, reinsurance administration
Insurance agents, brokers, and producers	Identifiers, customer records information, commercial information	Marketing, underwriting, policy servicing, communications with insureds and applicants
Claims administrators, adjusters, investigators, attorneys, and expert consultants	Identifiers, customer records information, protected classifications, professional information, commercial information, sensitive personal information	Claims investigation, litigation management, fraud prevention, dispute resolution
Financial institutions and payment processors	Financial information, account information, identifiers	Premium payment processing, claims payments, transaction administration
Auditors, accountants, and compliance professionals	Identifiers, financial information, commercial information	Auditing, compliance, financial reporting, operational review
Government agencies, regulators, law enforcement, and parties responding to legal process	Any category of information reasonably necessary to comply with legal obligations	Compliance with legal obligations, regulatory inquiries, subpoenas, court orders, and lawful investigations
Information technology providers, cybersecurity providers, cloud service providers, and analytics vendors	Identifiers, internet activity information, account information	Website hosting, cybersecurity, analytics, operational support, system administration
CAMICO affiliates and related entities	Identifiers, customer records information, commercial information	Internal administration, operational support, policy servicing, claims administration

“SENSITIVE” PERSONAL INFORMATION

We collect certain categories of Sensitive Personal Information (“SPI”) as defined by the CCPA, including Social Security numbers, driver’s license numbers, financial account information, payment card information, account credentials, and certain disability or health-related information provided in connection with underwriting or claims handling activities.

We do not use or disclose SPI for the purpose of inferring characteristics about consumers.

We use and disclose SPI only as reasonably necessary and proportionate:

to provide requested insurance products and services;
to administer underwriting and claims processes;
to detect and prevent fraud, malicious activity, and security incidents;
to process payments and financial transactions;
to comply with legal and regulatory obligations; and
for other purposes permitted by applicable law.

We do not sell or share SPI.

RETENTION PERIOD

We retain the personal information we collect for the length of time necessary to provide our services to consumers, as provided in our data retention and disposal policies and as required by laws and government regulations applicable to our insurance business. We do not store credit card information in our systems. We retain images of checks taken for payment of premiums in our file drive. We do not delete transaction data from our systems due to regulatory requirements for retention of this information.

“SALE” OR “SHARING” OF PERSONAL INFORMATION

You have the right to opt-out of the “sale” and “sharing” of your personal information as those terms are defined in the CCPA. We currently do not “sell” your personal information as defined in the CCPA. We may “share” your personal information (except “sensitive” personal information) with social media networks, advertising firms and other third parties that use the information to send advertising and marketing communications for products and services targeted to you. You may submit a request to opt-out of the sale and sharing of your personal information by accessing the “Do Not Sell or Share My Personal Information” link here. We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.

YOUR ADDITIONAL RIGHTS AS A CONSUMER

REQUESTS TO ACCESS AND DATA PORTABILITY

You have the right to request that we disclose certain information to you about our collection and use of your personal information (“right to know”), including the specific pieces of personal information we have collected about you (a “data portability request”). You may exercise your right to know twice in any 12-month period. Once we receive your request and confirm your identity, we will disclose to you:

The categories of:
- personal information we collected about you; and
- sources from which we collected your personal information.
The business or commercial purpose for collecting your personal information and, if applicable, sharing your personal information.
If applicable, the categories of persons, including third parties, to whom we disclosed your personal information, including separate disclosures identifying the categories of your personal information that we:
- disclosed for a business purpose to each category of persons; and
- sold or shared to each category of third parties.
When your right to know submission includes a data portability request, a copy of your personal information, subject to any permitted redactions.

REQUESTS TO CORRECT

If the information we collect about you is inaccurate, you have the right to request that we correct the inaccurate information, subject to certain exceptions and limitations (“right to correct”). If we receive a verifiable request from you to correct your personal information, we will correct the information in our records and systems and will direct our service providers to do the same, unless we determine that the information is more likely than not accurate or that complying with your request would be impossible or require disproportionate effort. We may require you to provide documentation in support of your request.

REQUESTS TO DELETE

You also have the right to request that we delete your personal information (“right to delete”). If we receive a verifiable request from you to delete your personal information, we will delete the information from our records and systems and direct our service providers to do the same, unless we are permitted by law to maintain the information. If the information is stored on archived or backup systems, we may delay compliance with your request until the data is restored to an active system or is next accessed or used.

HOW TO SUBMIT REQUESTS TO DISCLOSE, CORRECT OR DELETE

You may request that we disclose or delete your personal information by calling us toll free at 800.652.1772 or by sending an email message to us at inquiry@camico.com. If you make such a request, we may require that you provide identifying information which matches the information we maintain about you, and/or provide other information that allows us to verify your identity.

AUTHORIZED AGENT

You may designate an authorized agent to make the above requests on your behalf by providing us with written, signed permission for the authorized agent to act on your behalf. We may require that you to provide information that verifies your identity and confirms that you have provided the agent with permission to submit the request.

NON-DISCRIMINATION

We may not discriminate against you if you exercise your privacy rights by denying our services to you, charging different prices or rates for our services, providing a different level of services, or in other ways.

OPT-OUT PREFERENCE SIGNALS

We recognize browser-based opt-out preference signals, including Global Privacy Control (“GPC”), where required by applicable law.

If you enable a legally recognized opt-out preference signal on your browser or device, CAMICO will process the signal as a request to opt out of the sharing of personal information for cross-context behavioral advertising for the browser or device transmitting the signal. In certain circumstances, and where legally required, CAMICO may associate the signal with your account if you are logged into an account with us.

To download and use a browser supporting the Global Privacy Control browser signal, please visit: https://globalprivacycontrol.org/.

You may continue to make opt-out requests by using the “Do Not Sell or Share My Personal Information” link available on our website.

FOR MORE INFORMATION

If you have questions or concerns about our privacy practices, you may contact us by email at inquiry@camico.com. CAMICO’s mailing address is 1800 Gateway Drive, Suite 200, San Mateo, CA 94404, Attn. Customer Service.

UPDATES TO NOTICE

This Privacy Notice for California Residents was last updated as of June 1, 2026. We reserve the right to change this Privacy Notice at any time by posting changes on this website. Please check this page for updates.