II. Sources of Personal Information

The Company may collect personal information from the following categories of sources:

Directly from users when they provide information electronically, by phone, or by mailOur affiliates and business partners (strictly for internal use; personal information is never shared externally)Client referralsData verification services for agentsUsers’ browsersMarketing vendors and advertising networks (personal information is not shared with these parties)Social media (personal information is not shared through these platforms)

The Company obtains information pertaining to insurance agents primarily from the agents themselves when they choose to affiliate with the Company. The Company obtains information pertaining to consumers seeking to purchase insurance products from referrals and written and electronic consumer inquiries regarding insurance products (including through companies that assist in the delivery of such inquiries).

We do not sell, share, or disclose this information to unrelated third parties.

III. Use of Personal Information

The Company may use personal information that it collects for one or more of the following purposes:

Provide you products and servicesAddress your inquiriesProcess transactionsTailor the content and information that we may send or display to youProvide and personalize our servicesComply with legal obligationsProtect our rights, property, and safety or the rights, property, and safety of others

The Company uses information pertaining to insurance agents to communicate with and compensate insurance agents. The Company uses information pertaining to consumers seeking to purchase insurance products to contact such consumers and provide policy services.

We do not share, sell, or disclose your personal information for marketing, promotional, or unrelated purposes.

IV. Sharing Personal Information

The Company does

not

share, sell, or disclose your personal information to any third parties, except as required to deliver products and services you have requested or to comply with legal obligations.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

V. Rights and Choices for California Residents

The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that the Company disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights), we will disclose to you:

The categories of personal information we collected about youThe categories of sources for the personal information we collected about youOur business or commercial purpose for collecting that personal informationThe categories of third parties with whom we share that personal information (We do not share personal information with unrelated third parties)The specific pieces of personal information we collected about you (also called a data portability request)If we disclosed your personal information for a business purpose, details of such disclosures (limited only to essential service providers)

Deletion Request Rights

You have the right to request that the Company delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies under the CCPA.

We do not sell or share personal information.

Right to Opt-Out of Sales

We do not sell the personal information of consumers, including those we know are under 16 years of age. If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time.

However, we do not sell personal information under any circumstances.

VI. Exercising Your Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

Calling us at (800) 956-8020Visiting www.cardinalsb.com

To exercise the right to opt-out (even though we do not sell personal information), you may submit a request to us by visiting the following webpage or contacting us via our website at

Do Not Sell My Personal Information

.

Only you, or an authorized representative, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representativeDescribe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

VII. Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. If you have an account with us, we may deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

VIII. Non-Discrimination Under CCPA

We will not discriminate against you for exercising any of your CCPA rights. We will not (subject to CCPA exceptions):

Deny you goods or servicesCharge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penaltiesProvide you a different level or quality of goods or servicesSuggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services

IX. Contact Information

If you have any questions or comments about this notice, the ways in which the Company collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Phone:

+1 (855) 933-0835

Website:

www.cardinalsb.com
Email:

agency@cardinalsb.com
Postal Address:

1720 Bray Central Drive STE 100

Mckinney, TX 75069