Privacy Notice

LAST UPDATED: August 1, 2012

AAA Northern California, Nevada & Utah Insurance Exchange is concerned about privacy issues and wants you to be familiar with how we collect, use, and disclose information. This Privacy Notice describes our practices in connection with information that we collect through this website, located at http://www.aaa.com/AAA/InsuranceExchange or https://www.aaa4insurance.com (the "Site"). By providing Personal Information to us, you agree to the terms and conditions of this Privacy Notice. This notice also applies to our subsidiaries, Western United Insurance Company, ACA Insurance Company, Keystone Insurance Company, AAA Mid-Atlantic Insurance Company, and AAA Mid-Atlantic Insurance Company of New Jersey.

This Website Privacy Notice only applies to information collected through the Site. If you have purchased or applied for an insurance product from us, please also see the privacy notice provided to you at the time of purchase or mailed to you subsequently, which applies to all information that we collect about policyholders or applicants, through the Site as well as any other medium.

Updates to This Privacy Notice

We may change this Privacy Notice. Please take a look at the "LAST UPDATED: August 1, 2012" legend at the top of this page to see when this Privacy Notice was last revised. Any changes to this Privacy Notice will become effective when we post a revised Privacy Notice on the Site. Your use of the Site following any changes means that you accept the revised Privacy Notice.

Personal Information

"Personal Information" is information that identifies you or one or more others as an individual, such as:

• Name
• Postal address
• Telephone number
• Email address
• Vehicle identification number
• Driving history

Personal Information We Collect

The types of Personal Information we collect and share depend on the product or service you have with us, or for which you are requesting a quote. This information can include your name and address, Social Security number, credit history, and insurance claims history. We collect information from you (including from your transactions with us) and outside sources.

We collect Personal Information, for example, when you request a quote for insurance, apply for insurance, pay insurance premiums, file an insurance claim, or give us your contact information. We also collect Personal Information about you from others, such as affiliates or other companies. We also may obtain information from the American Automobile Association or your AAA club relating to your AAA Membership.

We also obtain information from consumer reporting agencies. It may include your driving record, claims history with other insurers, credit report information, and your insurance score. A consumer reporting agency that gathers information about you may share this information with others who are authorized to use consumer reports as allowed by law.

How We Use Personal Information

We may use Personal Information:

• To respond to your inquiries and fulfill your requests.
• To send you important information regarding the Site, changes to our terms, conditions, and policies.
• To personalize your experience on the Site by presenting products and offers tailored to you.
• For our business purposes, such as data analysis, audits, developing new products, enhancing our website, improving our services, identifying usage trends, and determining the effectiveness of our promotional campaigns.
• As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

What Personal Information We Share

All financial companies need to share customers' Personal Information to run their everyday business.

We may share all of the Personal Information about you that we collect with affiliated and unaffiliated companies, as allowed by law. For example:

• The information is shared with third-party providers to enable them to provide services. These service providers provide services such as website hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email delivery services, credit card processing, auditing services, and other similar services.
• We may share your Personal Information with insurance agents for purposes of fulfilling your request and addressing your insurance needs.
• We may share your Personal Information with other recipients including, for example, our family of insurance companies, claims representatives, service providers, consumer reporting agencies, insurance agents and brokers, law enforcement, courts and government agencies; a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
• We may share your Personal Information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

In addition, we may share Personal Information about our former customers in the manner described above. Federal and state laws do not allow you to limit the data sharing described above.

Non-Personal Information

"Non-Personal Information" is any information that does not reveal your specific identity, such as:

• Browser information
• Server log files
• Information collected through cookies, pixel tags and other technologies
• Demographic information and other information provided by you
• Aggregated information

How We Collect Non-Personal Information

We and our third party service providers may collect Non-Personal Information in a variety of ways, including:

• Through your browser: Certain information is collected by most browsers, such as your Media Access Control (MAC) address, device type, screen resolution, operating system version and Internet browser type and version. We use this information to ensure that our Sites function properly and for security purposes.
• Through web analytics: An Internet Protocol (IP) address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP), is identified and collected automatically using third-party web analytics software, and is identified and logged automatically in our server log files, along with the time of the visit and the page(s) that were visited, whenever a user visits the Site. We use IP addresses for purposes such as calculating Site usage levels, helping diagnose server problems, and administering the Site.
• By using cookies: Cookies allow a web server to transfer data to a computer for recordkeeping and other purposes. We and our service providers use cookies and other technologies to, among other things, better serve you with more tailored information and facilitate your ongoing access to and use of the Site, as well as for online tracking and analytics purposes. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to decline the use of cookies. To learn more about cookies, please visit http://www.allaboutcookies.org/. If you choose to decline cookies, some or all of the features, functionality, and promotions available through the Site may not be available to you.
• By using pixel tags and other similar technologies: Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Site pages and HTML-formatted email messages to, among other things, track the actions of Site users and email recipients, measure the success of our marketing campaigns, and compile statistics about Site usage and response rates.
• From you: We may collect demographic information such as your location, as well as other information such as your preferred times of communication, when you voluntarily provide this information to us. Unless combined with Personal Information, this information does not personally identify you or any other user of the Site.
• By aggregating information: We may aggregate Personal Information so that the end-product does not personally identify you or any other user of the Site, for example, by using Personal Information to calculate the percentage of our users who have a particular telephone area code. Aggregated Personal Information does not personally identify you or any other user of the Site.

How We Use and Disclose Non-Personal Information

• Because Non-Personal Information does not personally identify you, we may use and disclose Non-Personal Information for any purpose. In some instances, we may combine Non-Personal Information with Personal Information (such as combining your name with your zip code). If we combine any Non-Personal Information with Personal Information, the combined information will be treated by us as Personal Information as long as it is combined.

Third Party Sites

This Privacy Notice does not address, and we are not responsible for, the privacy, information gathering, or other practices of any third parties, including any third party operating any site to which this Site contains a link. The inclusion of a link on the Site does not imply endorsement of the linked site by us or by our affiliates.

Security

We use reasonable organizational, technical, and administrative measures to protect Personal Information under our control. Unfortunately, no data transmission over the Internet or any data storage system can be guaranteed to be 100 percent secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the "Contacting Us" section below.

Choices and access

Your Choices Regarding Our Use of Your Personal Information

We give you choices regarding our use and disclosure of your Personal Information for marketing purposes:

• Receiving marketing-related emails from us: If you no longer want to receive mail or telephone marketing-related emails from us on a going-forward basis, you may opt-out of receiving these marketing-related emails by following the opt-out link contained in each such email.
• Receiving marketing-related communications from us:
  If you do not wish to receive mail or telephone marketing communications from us, please write us (and include your name, address, and your insurance policy number) at:

  AAA Northern California, Nevada & Utah Insurance Exchange
  Privacy c/o Legal & Regulatory Affairs
  3055 Oak Road, MS W280
  Walnut Creek, CA 94597
  Or, email us at: Privacy@goAAA.com
  Or, residents of AZ, CA, CO, CT, ID, IN, KS, KY, MT, NV, NY, OH, OK, OR, SD, UT, VA, WV, WY may call us at: (800) 207-3618

• Direct Marketing Association: We also participate in the Direct Marketing Association Mail Preference Service. You can limit direct mail marketing from us and other companies by registering with your mailing and/or email address at https://www.dmachoice.org/register.php, or by completing the registration form at https://www.dmachoice.org/static/pdf/registration_form.pdf and mailing it to:

  DMAchoice
  Direct Marketing Association
  PO Box 643
  Carmel, NY 10512

We aim to comply with your request(s) as soon as reasonably practicable. Please also note that if you do not wish to receive marketing-related email or mail messages from us, we may still send important administrative messages to you, and you cannot opt-out from receiving administrative messages.

How You Can Access or Change Your Personal Information

You have the right to see and, if necessary, correct Personal Information about you. This requires a written request, both to see Personal Information about you and to request a correction. We do not have to change our records if we do not agree with your correction, but we will place your statement in our file. If you would like a copy of Personal Information about you or want to request a correction, please write us (and include your name, address and one of your insurance policy number) at:

AAA Northern California, Nevada & Utah Insurance Exchange
Attn: Underwriting
PO Box 22221
Oakland, CA 94623-2221

In your request, please make clear what information you would like to have changed. We will try to comply with your request as soon as reasonably practicable. We are not responsible for changing information from the databases of third parties with whom we have already shared your Personal Information.

Use of the Site by Minors

The Site is not directed to individuals under the age of thirteen (13), and we request that these individuals do not provide Personal Information through the Site.

Jurisdictional issues

The Site is controlled and operated by us from the United States, and is not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the United States.

Contacting Us

If you have any questions about this Privacy Notice, please contact us by email at Privacy@goAAA.com or write to the following address:

AAA Northern California, Nevada & Utah Insurance Exchange
Attn: Privacy c/o Legal & Regulatory Affairs
3055 Oak Road, MS W280
Walnut Creek, CA 94597

Please note that email communications are not always secure; so please do not include credit card information or other sensitive information in your email messages to us.

For Nevada Residents Only

We are providing you this notice pursuant to state law. You may be placed on our internal Do Not Call List by calling (800) 922-8228. Nevada law requires that we provide you with the following contact information:

Bureau of Consumer Protection
Office of the Nevada Attorney General
555 E. Washington Street, Suite 3900
Las Vegas, NV 89101
Phone number: 702-486-3132
Email address: BCPINFO@ag.state.NV.us