Privacy Policy

1. Scope of This Policy

This Privacy Policy describes how Zethos Insure LLC and its affiliates, subsidiaries, and related companies ("Zethos Insure," "we," "us," or "our") collect, use, share, and protect personal information. This Policy applies to information we collect through:

• this website (the "Site") and related digital properties;
• insurance applications, quotes, and renewals, whether submitted online, by phone, by mail, or in person;
• claims handling and communications with you, your agents, or carriers;
• third parties, including motor vehicle reports, claims history reports (e.g., CLUE), credit reporting agencies, and insurance carriers; and
• other business interactions with our agency.

Where a carrier or co-sponsor collects or processes your information directly, that party's own privacy policy governs, as noted throughout this document.

2. Information We Collect

2.1 Personal Information You Provide

Depending on your interactions with us, we may collect:

• Identifying information: name, address, phone number, email, date of birth, driver's license number, Social Security number (where required for underwriting).
• Application and underwriting information: property, vehicle, or business details; prior insurance and claims history; health or medical information, for lines of business where relevant; financial and credit-related information used in underwriting or rating.
• Claims information: details of losses, injuries, damages, and communications related to a claim.
• Payment information: billing details necessary to process premiums (processed by our payment processor; we do not store full payment card numbers).
• Communications: records of calls, emails, texts, and correspondence with our agency.

2.2 Information We Receive From Third Parties

• Insurance carriers and reinsurers.
• Consumer reporting agencies (e.g., credit bureaus, motor vehicle records, claims history databases such as CLUE).
• Other insurance support organizations, as defined under applicable insurance information privacy law.

2.3 Non-Personal / Aggregate Information

We collect aggregate and non-identifying information about Site usage (e.g., pages visited, browser type) to understand and improve how visitors use the Site.

2.4 Cookies and Tracking Technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Site, remember preferences, and measure advertising performance. You can control cookies through your browser settings; disabling cookies may limit some Site functionality.

3. How We Use Information

• To provide quotes, bind and service policies, and process claims.
• To communicate with you about your policy, our services, and events (by phone, mail, text/SMS, or email, as you have consented or as otherwise permitted by law).
• To detect, investigate, and prevent fraud, misrepresentation, or nondisclosure in connection with underwriting or claims.
• To comply with legal, regulatory, and contractual obligations.
• To maintain, secure, and improve our systems and Site.

4. GLBA Privacy Notice — Sharing of Nonpublic Personal Information

As a licensed insurance agency, Zethos Insure is a "financial institution" under the Gramm-Leach-Bliley Act (GLBA) and is required to explain how we collect, share, and protect nonpublic personal information ("NPI"), and to give you the right to opt out of certain disclosures.

4.1 Categories of NPI We Collect

Information from applications and other forms; information about your transactions with us or our affiliates; and information from consumer reporting agencies, as described in Section 2.

4.2 Categories of Parties We Share NPI With

• Insurance carriers, underwriters, and reinsurers, to provide quotes, bind coverage, and handle claims.
• Our affiliated offices (U.S. and India), so that a request or file can be accessed, stored, or processed wherever we operate.
• Service providers who perform functions on our behalf (e.g., policy administration, IT, payment processing), under contracts limiting their use of your information.
• Government or regulatory authorities and law enforcement, where required by law.
• A successor entity in connection with a sale or transfer of all or part of our business.

We do not sell your nonpublic personal information to nonaffiliated third parties for their own marketing purposes.

4.3 Your Right to Opt Out

Where we disclose NPI to nonaffiliated third parties outside the service-provider, legal-compliance, and other exceptions permitted under GLBA, you have the right to opt out of that sharing. To opt out, contact us using the details in Section 11.

4.4 Annual Notice

We will provide this notice to customers annually for as long as the customer relationship continues, as required by the GLBA Privacy Rule, unless we qualify for the limited annual-notice exception under Regulation P (no changes to this policy and no NPI sharing outside the exceptions that permit sharing without notice).

5. Insurance-Specific Notices (NAIC Model 670)

Connecticut has adopted the NAIC Insurance Information and Privacy Protection Model Act (Model 670). In addition to the rights described elsewhere in this Policy, applicants and policyholders have the following rights and protections:

• Notice of Information Practices: we will provide a notice describing the types of information we collect and their sources, generally at the time an application is submitted (or, if information is collected only from you or public records, no later than delivery of the policy).
• Access and Correction: you may request access to recorded personal information we hold about you and request that it be corrected, amended, or deleted.
• Adverse Underwriting Decisions: if we decline, decline to renew, or apply special conditions to your coverage based in whole or part on personal information, you may request the specific reasons for that decision, as permitted by law.
• Pretext Interviews: we do not use pretext interviews to collect personal information except where permitted by law (e.g., suspected fraud investigations).
• Restrictions on Disclosure: we will not disclose personal or privileged information about you without your written authorization, except under the exceptions permitted by Model 670 (e.g., to carriers for underwriting or claims, to comply with legal process, or to detect fraud).

A full breakdown of these notice requirements is provided separately.

6. Connecticut Data Privacy Act (CTDPA) Rights

Effective July 1, 2026, Connecticut narrowed the GLBA exemption under the CTDPA: only data specifically regulated by GLBA Title V remains exempt, while other personal data we process (e.g., website and marketing data not tied to an insurance transaction) is subject to the CTDPA. If you are a Connecticut resident, you have the right to:

• Confirm whether we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you have provided or that we have obtained about you.
• Obtain a portable copy of your personal data.
• Opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Appeal our decision on a rights request.
  • If you would like to submit an appeal for any decision with regard to any Consumer request, please contact info@zethosinsure.com with the subject line: Rights Request Appeal.

We honor opt-out preference signals (such as Global Privacy Control), where technically feasible, for the browsing activity these rights apply to. To exercise these rights, contact us using the details in Section 11.

7. Do We Sell Personal Information?

We do not sell personal information as that term is defined under Connecticut or other applicable state privacy laws, and we do not share NPI with nonaffiliated third parties for their own marketing purposes.

8. Data Security

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect personal information, consistent with the FTC/GLBA Safeguards Rule and the Connecticut Insurance Data Security Law. In the event of a cybersecurity incident involving nonpublic information, we will notify affected individuals and regulators as required by applicable law. No security program can guarantee complete security, and we encourage you to use caution when sharing sensitive information.

9. Data Retention

We retain personal information for as long as needed to service your policy, comply with legal, regulatory, and contractual recordkeeping requirements, and resolve disputes.

10. Other Provisions

10.1 Children's Privacy

Our Site and services are not directed to individuals under 18, and we do not knowingly collect personal information from children.

10.2 Links to Third-Party Websites

The Site may link to third-party websites governed by their own privacy policies, for which we are not responsible.

10.3 Email Monitoring

While every Zethos Insure employee has a unique firm-provided email address, email sent to or from us may be monitored to ensure compliance with professional standards and internal policies. Monitoring is not continuous or routine but may occur where there are reasonable grounds to do so.

10.4 SMS/Text Messaging

• Phone numbers collected for SMS/text purposes are used only for account notifications and are not shared with third parties or affiliates for marketing purposes.
• To opt in, text START or SUBSCRIBE. Message frequency may vary; message and data rates may apply.
• To opt out at any time, text STOP. You will be unsubscribed and receive no further messages.
• For assistance, call 860-787-0877 or visit https://www.zethosinsure.com.

11. How to Contact Us / Exercise Your Rights

To ask questions, exercise any right described in this Policy (access, correction, deletion, opt-out, or appeal), or request this Policy in an alternative format due to a disability, contact us at:

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact info@zethosinsure.com.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

12. Updates to This Policy

We may update this Policy from time to time. Material changes affecting how we share nonpublic personal information will be reflected in an updated annual notice as required by the GLBA Privacy Rule. Please review this Policy periodically.

References

This revision was checked against the following sources:

• Gramm-Leach-Bliley Act Privacy Rule overview — Federal Trade Commission
• GLBA Privacy Notices — Consumer Financial Protection Bureau (Regulation P)
• NAIC Insurance Information and Privacy Protection Model Act (Model 670) — full text
• Connecticut Data Privacy Act (CTDPA) — official summary, Connecticut Attorney General