I. Your Privacy

Columbia Mutual Insurance Company (“Columbia”, “we” or “us”) is committed to protecting your privacy. This Privacy Notice (“Notice”) discloses how we collect, protect, use and share information gathered about you (a) on our website, (b) when you contact us via email or through our service, (c) from third parties, including publicly available information, (d) or any related online or offline services we provide. Note that customers of any Columbia insurance products or services may receive a Customer Privacy Notice, which will supersede this Notice to the extent there is any conflict. This Notice also describes your choices about the collection and use of your personal information.

II. Collection, Use, and Sharing of Personal Information

A. Collection of Personal Information

We often collect information that can be used to identify or contact a particular person (we refer to this type of data as "personal information"). The types of personal information we collect, and process depends on which of our products or services you may use. In addition to the personal information you provide us, Columbia may collect personal information through use of our website or other services, from online sources (e.g., social media platforms), and from various reporting or databases and agencies or bureaus. The personal information we collect about you can include:

• Identifiers: Full name; work or home postal address; work, mobile or home telephone number; work or personal email address; any other personal information you may provide when contacting us or submitting an inquiry, username, Social Security Number, date of birth, and driver’s license number.
• Other Personal Information such as profile preferences, responses to any surveys we send you, communications (such as via email, mail, phone, or other channels).
• Financial Information: Credit card information and credit reporting information such as credit scores.
• Employment Information: Occupation and Employer.
• Commercial Information: Whether your own or rent your residence; information about your property; and products or services purchased, obtained, or considered.
• Internet or other electronic network activity information: Internet Protocol (IP) address, device identifier and cookie data (including third-party cookies and related data).
• Vehicle information: motor vehicle and claims histories, vehicle operator information, mortgages, lien or lease holder information.

We collect your personal information, for example, when you:

• Apply for insurance, file a claim, contact us for information or with questions.
• Send us emails or other correspondence.
• Communicate with us by telephone.
• Visit or interact with our website and online services.

B. Use of Personal Information

Columbia collects and uses personal information to: underwrite insurance policies; adjust claims; operate the other functions necessary to provide you with the products and services we offer; monitor and improve our products and services; improve our websites and services; review or enhance our marketing, promotional activities and communications; and comply with and enforce as needed legal requirements, industry standards, our policies, and our contractual rights.

Most importantly, we use your personal information for the following purposes:

• If you apply for insurance or file a claim with us: we use your personal information to determine coverage, issue and administer your policy, process payment, adjudicate claims, and contact you regarding your policy and claims. In these situations, we may need to process your personal information to comply with relevant laws or fulfill our obligations under an insurance contract to which you are subject.
   
• If you email us or otherwise submit an inquiry or request: we may use your personal information as necessary to respond to you and provide you with the information requested. These processing activities are either based on your consent or our legitimate interest in communicating with you about our products and services, or are necessary to provide you with the products or services requested.
   
• A credit report or other consumer report about you may be used to develop an insurance score. Your insurance score may be used to review your application for insurance and subsequent amendments and renewals. An insurance score uses information from your credit and/or consumer report to help predict how often you are likely to file claims and how expensive those claims will be. Insurance score information may then be used to determine how much we will charge for insurance. Items from a credit report that could affect an insurance score include payment history, number of revolving accounts, number of new accounts, and the presence of collection accounts, bankruptcies and foreclosures. We will use information provided by LexisNexis or an equivalent third-party vendor in connection with the development of your insurance score. We engage in these processing activities based on our legitimate interest in properly assessing insurance eligibility, rates, and coverage.
   
• For any other purpose for which you provide affirmative consent or specific instructions.

Columbia or Columbia’s authorized service providers may use artificial intelligence (AI) to provide products or services to you, which may involve the use of your Personal Information. Columbia may use AI in connection with Columbia’s products or services to aid, assist, and facilitate Columbia’s business, including but not limited to underwriting, pricing, claims handling, or other business-related activities, at all times in compliance with applicable laws and regulations. In addition, Columbia may use AI to enhance user experience on Columbia’s websites and other applications. The type of AI used may vary based on your engagement with Columbia, or vary based on the product or service provided by Columbia.

C. Sharing of Personal Information

We disclose the following personal information about consumers for business purposes:

• All Personal Information. We may share personal information with service providers who need the information to perform a technology, business, or other professional function for us (examples include IT services, hosting our website, payment processors, and other service providers). We only provide such vendors with information so they can perform their required functions on our behalf.
   
• Internet or other electronic network activity information. We may allow third parties to utilize cookies and similar tools on our websites to receive limited information (e.g., IP address, pageview, etc.) to measure site performance, and for marketing or advertising purposes customized to your apparent interests or needs (more information located in the Cookies section below).

We may also potentially disclose personal information for the following reasons:

• We may disclose personal information (i) if required to do so by law or legal process, (ii) when we believe disclosure is necessary to prevent harm or financial loss, (iii) in connection with an investigation or suspected or actual fraudulent, or illegal activity, or (iv) under exigent circumstances to protect the personal safety of our staff, users, or the public.
   
• If we reorganize or transfer all or a relevant portion of our business or assets, we may transfer personal information to the reorganized or new business as needed, provided that we will make reasonable efforts to direct the recipient to use personal information in a manner consistent with this Notice.

We do not sell personal information for monetary compensation, but as described above, certain limited information may be shared through cookies and other techniques in connection with our marketing partners. 

D. Your Privacy Choices

We offer you certain choices about what information we collect from you, how we use and disclose the information, and how we communicate with you.

• Marketing Emails: From time to time, we may contact you via email for the purpose of providing announcements, confirmations, surveys, and/or other general communications. You may choose not to receive marketing emails from us by clicking on the unsubscribe link in the marketing emails you receive from us. Even if you opt out of receiving such communications, we will continue sending you non-marketing email communications, such as administrative or transaction alerts, or information about changes to this Privacy Notice, when necessary.
   
• Cookies: Web browsers may offer users the ability to disable certain types of cookies; however, if cookies are disabled, some features or functionality of our Services may not function correctly. We may also implement a cookie banner or similar opt-out tool on our website through which you can disable third party performance and targeting cookies. Cookies are addressed in greater detail below.
   
• Jurisdiction-specific rights: See the relevant sections below for certain privacy rights that you may be able to exercise based on the jurisdiction where you reside.

III. Cookies

Cookies are a commonly used web technology that allow websites to store and retrieve certain information on a user’s system, and track users’ online activities. We, together with vendors we use, may collect information about your use of our services by such automated means, including but not limited to cookies, pixels and other similar technologies. 

Cookies and similar technologies can help us automatically identify you when you return to our services. Cookies help us review website traffic patterns, improve the services, and determine which services are popular. We can also use such information to deliver customized content and advertising to users of the services whose behavior indicates that they are interested in a particular subject area. We may also share with or allow third parties to utilize cookies for marketing or advertising customized to your apparent interests or needs.

Columbia’s website utilizes a Consent Management Platform (CMP) which allows site visitors to record their cookie consent preferences and automatically block or allow tracking cookies based on these choices.  You may update your consent preferences at any time by accessing the Columbia CMP.

You may also accept or decline cookies using your web browser’s settings. If you choose to not accept cookies from our website, you may not be able to take full advantage of its features or to receive some of the services that it provides. To learn more about cookies and your ability to opt-out of certain advertising cookies, please visit the following websites:

http://www.aboutads.info/choices or http://www.networkadvertising.org/choices.

Cookies used on the Columbia website:

IV. Non-Personal and Aggregated Information

We may use or share information in an anonymized or aggregate manner for many purposes such as research, analysis, modeling, marketing, and improvement of our services. Once de-identified, such information is not subject to this Notice.

V. International Transfers of Information

Our services are primarily intended for use in the United States, although our affiliates may operate similar services in other jurisdictions around the world and they may support these services from such jurisdictions. If you use our services from outside the United States, you acknowledge and agree that we may transfer your information to and from the United States, including countries which may not guarantee the same level of protection of personal information as the one in which you reside. However, we will handle your personal information in accordance with this Notice regardless of where your personal information is stored or accessed. Notwithstanding the foregoing, we will make all attempts to accommodate requests with respect to your information to the extent required by law and otherwise in our reasonable discretion.

VI. Security 

Columbia maintains comprehensive administrative, technical and physical safeguards (encryption, passwords, physical security, etc.) designed to protect your personal information against unauthorized access and disclosure. However, we cannot ensure the security of any information you transmit to us, or guarantee that this information will not be accessed, disclosed, altered, or destroyed. Therefore, we do not promise, and you should not expect, that your personal information provided through our website will always remain private. We will make any legally required disclosures in the event of any compromise of personal information. To the extent the law allows us to provide such notification via e-mail or conspicuous posting on the Services, you agree to accept notice in that form. 

VII. Links to Other Websites and Third-Party Content

Our services may contain links to other websites or online services, including social media. Please be aware that we are not responsible for the content or privacy practices of such other websites or online services, and we encourage you to be aware when you leave our services and to read the privacy statements of any other website or online service that collects personal information.

You may see us promoted by other businesses on various websites, web pages, social media or other platforms. Please note that we do not always have complete information about where our brand may be displayed or promoted, and if you believe that we are featured in venues that are inappropriate or offensive, please contact us.

VIII. State-Specific Notices

Note: A number of state privacy laws grant individuals a right to access, correct or delete personal information maintained about them by a business, as well as the ability to opt-out of certain data activities. However, Columbia is an insurance business primarily subject to federal privacy laws including the Gramm-Leach-Bliley Act (GLBA) and Fair Credit Reporting Act (FCRA) and is therefore subject to exceptions provided by such state laws. Likewise, the specific insurance-related information we maintain about customers is subject to such exceptions. 

In addition to the disclosures and rights provided above in this Notice, you may have certain rights with respect to the collection, use, transfer and processing of your personal information, as described below, subject to the exceptions that apply to us or your data as described above. To exercise any of the rights below, please contact us using the applicable contact information below. Only you, or a person duly authorized to serve as your agent, may make a request related to your personal information.

A. Collection and Use of Personal Information

This Section elaborates on the disclosures at the top of this Notice in regard to the categories of personal information we may about you: 

• Internet or other electronic network activity information: Browsing history; Search history; Information regarding a consumer’s interaction with an Internet Web site, application, or advertisement; Internet Protocol address; Device ID; Cookies; Beacons; Pixel Tags; Mobile Ad Identifiers
   
• Identifiers: Personal Identifiers; Name; Address; Email address; Telephone number; Date of Birth; Social Security number; Signature

The foregoing types of personal information have been collected about consumers in the past 12 months. All other personal information collected about consumers is in connection with the furnishing of insurance or in response to a request for insurance. Such personal information is collected and handled pursuant to applicable federal and/or state insurance laws and therefore exempt from general state privacy laws.

• We collect identifiers, through third-party lead generators and credit services.
• We collect internet or other electronic network activity information from interactions with our website.

Such personal information is used for the following purposes: (i) Authenticate identity; (ii) marketing purposes; (iii) Respond to court orders and legal investigations; (iv) Provide customer service and support; (v) Safeguard against potential fraud; (vi) Protect data from unauthorized parties and comply with legal requirements; (vii) Enforce this Notice, and any other agreements entered into with us; (viii) Operate, understand, optimize, develop, or improve our sites, applications, products, services and operations; (ix) Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; (x) Debugging to identify and repair errors that impair existing intended functionality; and (xi) Investigate and prevent activities that may violate our policies.

Columbia shares such information with affiliates, analytics providers, service providers, IT vendors, and law enforcement (if necessary), as further described above.

In the preceding 12 months, we have disclosed personal information to third parties for business or commercial purposes as described below:

1. Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.

• Internet or other electronic network activity information

2. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

• Identifiers

3. Debugging to identify and repair errors that impair existing intended functionality.

• Identifiers
• Internet or other electronic network activity information

4. Performing services on behalf of the business including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

• Identifiers
• Internet or other electronic network activity information

5. Undertaking internal research for technological development and demonstration.

• Internet or other electronic network activity information

B. Individual Rights

If you reside in a state with applicable legislation which provides individual rights, you may request:

• To know if we have their information, or alternatively, a copy of the following: (1) the categories of personal information we collected about you; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling (if applicable) the personal information; (4) the categories (or in some states, the identity) of third-parties with whom we shared personal information, and the categories of personal information shared; and (5) the specific pieces of your personal information that we have collected, used, disclosed, or sold.
   
• That we (and our service providers) correct your personal information if it is inaccurate or delete your personal information. Note that deletion requests are subject to certain limitations, for example, we may retain personal information as permitted by law, such as insurance-related information as explained above, and for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and for certain other internal business purposes described in this Notice.
   
• To opt out of (i) any selling or sharing of your personal information to a third-party (excluding service providers or other exceptions permitted by law); (ii) any third-party targeted advertising (i.e., cross-context behavioral advertising); (iii) any use of sensitive personal information (such as precise geo-location or financial information) except for the purposes it was collected and as otherwise permitted by law; (iv) impactful profiling activities or automated decision making activities with respect to your personal information. As described above, certain identifying information with cookies may be shared with brands/services we partner with, advertising businesses and other third-parties through, and anyone can opt-out of such cookies through our website cookie banner or other opt-out mechanism.

You can submit your request by calling us at 1-800-877-3579. You may also submit a request via our website at https://www.columbiainsurance.com/contact. We will process your request in a manner and timeframe proscribed by any applicable privacy law, subject to the applicable exceptions including in our capacity as an insurance business.

Note that before completing any privacy request, we will take steps to verify you as the person (or authorized agent) to whom the information relates, and you may be required to promptly respond as necessary to any verification requests we communicate to you. 

If we deny a privacy request, you may appeal the decision to us at the contact information provided below or in our denial notice. To the extent possible, please describe the basis for your appeal and if there is any specific personal information that concerns you. We will provide a prompt response and within the timeframe provided by any applicable law.

If you are unsatisfied with our response to an appeal, you can raise your concerns with your state’s Office of the Attorney General.

C. No Discrimination

We may not, and will not, discriminate against any customer for exercising their privacy rights, including those provided by the applicable privacy laws. Please note that we may otherwise continue to share your personal information with our affiliates and service providers, and as otherwise directed by you, for the purposes described in our Notice.

D. Additional Disclosures for California Residents

Columbia Mutual Insurance Company does not assign monetary value to consumers’ personal information or offer financial incentives in return for personal information. 

Privacy rights in California apply to all individuals (not just retail customers), including job applicants, current and former employees, contractors and business partners. Due to the nature of these relationships, the collection and use of personal information can vary, but all such individuals can request additional information about our privacy practices with respect to their information, as well as make the access, deletion, correction and opt-out requests, by contacting us as described above.

IX. Retention and Deletion of Personal Data

Columbia implements and maintains reasonable restrictions on the retention of personal information and generally will dispose of such personal information once it is no longer necessary for the purposes for which it was collected or further processed, including for any business, legal, accounting or reporting requirements. To determine the appropriate retention period for such personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information and whether we can achieve those purposes through other means, as well as all applicable legal requirements. We may continue to store archived copies of your personal information for legitimate business purposes and as necessary to comply with applicable law. In addition, we may continue to store anonymous, aggregated or anonymized information for any legitimate business use described in this Notice.

X. Children’s Information

Our services are not intended for use by children. We do not knowingly collect personal information from children under legal age. Please contact us if you believe we may have unknowingly collected information about a child under legal age, and we will take immediate steps to delete any such personal information.

XI. Updates to this Notice

The effective date of our most recent Privacy Notice is indicated at the top of this page. We may change this Privacy Notice from time to time by updating this page. By using our website or sending us any personal information after the indicated effective date, you signify your agreement with this Privacy Notice and you will be deemed to be bound to the Notice in effect as of the date of such use.

XII. Contact Us

If you would like to review or ask us to correct information you have submitted to us through our website, you may do so by contacting us as follows:

https://www.columbiainsurance.com/contact
P.O. Box 618
Columbia, MO 65205
1-800-877-3579
Effective Date: April 2, 2026