Privacy Policy

This Privacy Policy (“Privacy Policy”) describes how James River Group, Inc. and its subsidiaries and affiliates including, without limitation, James River Insurance Company, James River Casualty Company, Falls Lake National Insurance Company, Falls Lake Fire and Casualty Company, Stonewood Insurance Company, and James River TPA Services, Inc. (collectively, “James River,” “we,” “us,” or “our”) collect, use, share, retain, and protect information that may be used to identify you directly or indirectly (“Personal Information”). This Privacy Policy also tells you about your rights and choices with respect to your Personal Information, and provides our contact information for any questions you may have.

This Privacy Policy does not apply to nonpublic personal information subject to the Gramm-Leach-Bliley Act that may be collected by James River in its capacity as an insurer. Notices governing James River’s processing of non-public personal information are provided to individuals in accordance with applicable law.

California Notice of Collection. This Privacy Policy is provided to all California residents and any other applicable individuals subject to this Privacy Policy. You can jump to topics by going to the headings below:

Types of Information We Collect
Use and Processing of Information
Cookies and Similar Tracking Technologies
Disclosure of Personal Information
Your Choices
Information For Authorized Agents
How We Protect Personal Information
Miscellaneous

Types Of Information We Collect

The following provides examples of the categories of Personal Information that we collect about you, or have collected about you in the prior 12 months, and the sources of that information:

• Identifiers. We collect Personal Information that may be used to identify you, such as information you provide to us on applications, forms, and in other communications to us. This Personal Information includes your name, street address, e-mail address(es), telephone and facsimile number(s), general location information, and other identification information.
• Policy Information. We collect policy-related information we receive directly from you or about you from business partners and affiliates, such as the name, contact information, payment information, policy information (e.g., policy number, policy type, coverage(s), and limit(s)), and underwriting, exposure or claims-related data of insurance applicants, agents, brokers, clients and their employees with whom we may interact.
• Transactional Information. We collect transaction-related information about you through your interactions with us or from third-party sources, such as our business partners, our affiliates, and others.
• Registration Information. We collect registration information directly from you when using our services, including but not limited to, your username, password, and other information that you may provide directly to us.
• Internet or other Electronic Network Activity Information. We collect certain internet and electronic network activity information automatically from your browser or mobile device when you visit our website or access our services, including but not limited to, Internet Protocol address, type of mobile device, mobile operating system, browser type, geographic location, pages you visit and the information you request, and the date and time of your access.
• Professional or Employment-related Information. We collect professional and employment-related information directly from you through applications or communications you provide to us, or about you through your interactions with us or from third parties, such as your professional references, prior employers, and other third parties. This information may include your former employment history, work performance, compensation information, and other similar information.
• Sensitive Personal Information. We collect sensitive Personal Information directly from you or about you from third party business partners and affiliates, such as your driver’s license number, Social Security number, and medical records data, when we process a claim you submit. To the extent that you are a job applicant or employee, we also collect sensitive Personal Information that you provide to us, such as through your job application or in communications you provide to us, which includes your Social Security number and other information that you provide to us.

As described above, we collect your Personal Information in a variety of ways, such as directly from you when you submit applications or claims to us, or about you through your interactions with the website (as described in greater detail below). In addition to the information that we collect from you directly, we may also receive information about you from other sources, including without limitation third parties, business partners, our affiliates, social media outlets, or publicly available sources.

Use and Processing of Information

In addition to the purposes and uses described above, we use information in the following ways (among others):

• To identify you when you visit our websites. When you visit our website, such as to access your account or review our services, we process your identification information, verification information, and internet or other electronic network activity information.
• To provide and improve insurance products or services. We process identification, policy information, and limited sensitive Personal Information to provide and improve our insurance products or services and engage in application underwriting and claims administration.
• To process and collect payments owed to us, such as premiums and deductibles. To do so, we process identification information, policy information, and transactional information.
• To comply with legal obligations, including to comply with applicable law, regulatory obligations, respond to law enforcement requests, and detect or prevent fraud. This may include, for instance, processing your identification information, transactional information, professional or employment-related information, or similar information for the purpose of verifying identities and identifying fraud.
• To respond to inquiries, such as those related to support, employment opportunities, or other requests. To respond to inquiries, we process your identification information, policy information (if applicable), and contents of the inquiries you submit to us.
• To send marketing and promotional materials, including information relating to our products, services, or promotions or those of a third party. We may process your identification information, internet or other electronic network activity information, and preferences derived from that information.
• For internal administrative purposes, as well as to manage our relationships. This may include, for instance, processing your identification, policy, transactional, and professional or employment related information.

Although the sections above describe our primary purpose in collecting and using your Personal Information, in many situations we have more than one purpose. For example, if you purchase an insurance policy through us, we may collect and use your Personal Information to provide our insurance services to you, but we may also collect and use your Personal Information as we have an interest in maintaining your Personal Information after your transaction is complete so that we can quickly and easily respond to any questions about your policy. As a result, our collection and use of your Personal Information is based in different contexts, our need to perform a contract, our obligations under law, and/or our interest in conducting our business.

Cookies and Similar Tracking Technologies

Every time you come to the website, our website’s web server automatically collects information, including, in some instances, Personal Information, through cookies, web beacons, and other similar tracking technologies (collectively “cookies”). Cookies are small text files that are placed on your computer or mobile device when you visit a website. Cookies help the website remember information about your visit, which can make it easier to visit the website again and make the website more useful to you. Some cookies are deleted once you close your browser (session cookies), while other cookies are retained even after you close your browser so that you can be recognized when you return to a website (persistent cookies). More information about cookies and how they work is available at www.allaboutcookies.org.

Cookies on our website are generally divided into the following categories:

We may use the information collected through cookies and related tracking technologies for the following purposes:

• To make our website easier to use and generally improve its performance.
• To gather metrics about how you interact with our website.
• For security reasons.

Most web browsers automatically accept cookies, but you can usually change your browser settings to prevent this. If you disable cookies, your ability to use some features of the website may be limited. For mobile devices, you may be able to manage certain cookies using your built-in mobile device settings and controls. Any choices concerning cookies are browser and/or device specific. If you clear your cookies from your browser on any of your devices, your choices will need to be reset. You should check how to do this on your device(s) and operating systems.

Disclosures Of Personal Information

In addition to the specific situations discussed elsewhere in this Privacy Policy, we disclose, or have disclosed in the preceding 12 months, Personal Information in the following situations:

1. Affiliates and Acquisitions. We may disclose Personal Information to our corporate affiliates (e.g., parent company, sister companies, subsidiaries, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we may also disclose Personal Information to that company, including at the negotiation stage.
2. Other Disclosures with Your Consent. We may ask if you would like us to disclose your Personal Information to other unaffiliated third parties who are not described elsewhere in this Privacy Policy.
3. Other Disclosures without Your Consent. We may disclose Personal Information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws or regulatory obligations. We may also disclose your Personal Information in order to establish or exercise our rights, to defend against a legal claim, to detect, investigate, prevent, or act regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or for the provision of services by a third-party intermediary.
4. Partner Promotion. We may offer contests, sweepstakes, or other promotions with third-party partners. If you decide to enter a contest, sweepstakes, or promotion that is sponsored by a third-party partner the information that you provide will be disclosed to us and with them. A third-party partner’s use of your Personal Information is not governed by this Privacy Policy.
5. Service Providers. We may disclose your Personal Information to service providers. Among other things service providers may help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the administration of claims.
6. Disclosures to Affiliates and Non-Affiliates for Marketing and Other Purposes. We may disclose your information to affiliates and non-affiliates for marketing and other purposes. Under certain circumstances, you may opt-out of such disclosures with respect to certain data that you have provided to us. Please refer to the individual Privacy Notice you may have received from us (including, if applicable, the insurance broker with whom you do business) for information relating to the disclosure of your Personal Information.
   
   

Your Choices

You may be entitled to certain choices regarding your Personal Information. As applicable, please contact us by one of the methods listed below under "Contact Information." We will assist you with your request as soon as possible. Please note, if you elect to exercise one of your choices listed below, you will not receive discriminatory treatment by us for exercising your privacy rights that are conferred upon you by law. You may be able to make the following choices regarding your Personal Information:

1. Access to Your Personal Information. You may request access to your Personal Information by contacting us as described below. If required by law, upon request, we will grant you reasonable access to the Personal Information that we have about you.
2. Portability of Your Personal Information. You have the right to request that we provide the Personal Information which you provided to us in a structured, commonly used, and machine-readable format; and you have the right to transmit such Personal Information to another entity.
3. Deletion of Your Personal Information. You may request that we delete your Personal Information by contacting us as described below. If required by law, we will grant a request to delete information, but you should note that in many situations we must keep your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
4. Correction of Your Personal Information. You have the right to request that we correct or supplement any inaccurate or incomplete Personal Information we process about you.
5. Opt-Out of the Sale or Sharing of Your Personal Information. At this time, James River does not engage in the “sale” or “sharing” of Personal Information, as those terms are defined by applicable law.
6. Opt-Out of Profiling and Targeted Advertising. At this time, James River does not engage in targeted advertising involving your Personal Information or create profiles about your preferences for the purpose of marketing.
7. Opt-Out of the Processing of Your Sensitive Personal Information. We do not currently use or disclose sensitive Personal Information for purposes other than those which cannot be limited under applicable state law.
8. Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include "Do Not Track" instructions.
9. Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you service-related communications.

If you choose to assert any of these rights under applicable laws, we will respond within the time period prescribed by applicable law. Please note that many of the above rights are subject to exceptions and limitations. If we are not able to provide the requested information or make the change you requested, you will be provided with the reasons for such decisions. Under local law, you may be entitled to lodge a complaint with your local data protection authority such as your state Attorney General’s Office.

Your rights and our responses will vary based on your state of residency. Please note that you may be located in a jurisdiction where we are not obligated or are unable to fulfill a request. In such a case, your request may not be fulfilled.

Note that, as required by law, we will require you to prove your identity. We may conduct an identity verification by phone call or email. Depending on your request, we will ask for information such as your name, email address, or the last time you contacted us. In some cases, we may ask you to provide a signed declaration or a copy of a photo ID confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete Personal Information about you in our files.

We will deliver our written response by mail or electronically. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the Personal Information from one entity to another entity without hindrance, specifically by electronic mail communication. Further, if you would like to appeal any decision we make about your request, you may contact us as stated in the “Contact Information” section below.

You may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf, including, in some instances, that you verify your own identity directly with us.

Please address written requests and questions about your rights to datainquiry@james-river-group.com or call us at 1-833-417-0654.

Information for Authorized Agents

If you are an authorized agent submitting a request on behalf of an individual, you must attach the following to the request:

1. A copy of the signed permission from the individual on whose behalf you are submitting a privacy request.

2. A description of your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

If we do not receive both pieces of information, the request will be denied.

How We Protect Personal Information

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your Personal Information from unauthorized access, use, or disclosure, we cannot guarantee the security of your Personal Information. If we are required by law to inform you of a breach of your Personal Information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account by using one of the methods listed below under "Contact Information."

Miscellaneous

The following additional information relates to our privacy practices:

• Third-Party Applications/Websites. James River does not control and is not responsible for the content or the privacy policies or practices of any third parties, third-party websites, or third-party applications including those that may link to or can be accessible via the Website. As stated in our Terms of Use (see the section entitled “Links”), any links are provided for your convenience only and do not signify that we endorse such third-party websites. We do not review such third-party websites and you acknowledge and agree that:

• we are not responsible for such websites, including the terms on which such websites are made available and the privacy policies of such websites, and do not control their content or availability;
• we make no representation, warranty or condition, either express or implied, in relation to any goods or services or information received from such websites; and
• if you access any such websites, you do so entirely at your own risk.

• Changes to This Privacy Policy. We may change this Privacy Policy and our privacy practices over time. To the extent that our Privacy Policy changes in a material way, the Privacy Policy that was in place at the time that you submitted Personal Information to us will generally govern that Personal Information unless we receive your consent to the new Privacy Policy. Your continued use of our website following the posting of an updated Privacy Policy constitutes your consent to such a new Privacy Policy. We will note the effective date of the latest version at the end of the Privacy Policy.
• Accessibility. If you are visually impaired, you may access this Privacy Policy through alternative means by contacting us.
• Children. We do not knowingly collect any Personal Information from children under the age of 13 years of age. Our products, services, and websites are not intended for use by minors. We do not sell Personal Information of minors under 16 years of age without affirmative authorization.
• International Transfers of Personal Information. James River operates in the United States of America. If you are from a country outside of the United States with laws governing data collection, use, and disclosure that may differ from applicable United States law and you provide Personal Information to us, please note that any Personal Information that you provide to us may be transferred to the United States. By providing your Personal Information, where applicable law permits, you hereby specifically and expressly consent to such transfer and processing and the collection, use, and disclosures set forth herein.
• Data Retention. How long we retain your Personal Information depends on the context in which, and purposes for which, we collected it. We generally retain Personal Information for as long as necessary for achieving the purposes for which it was collected or processed unless a different retention period is required by applicable law. When we have no ongoing business need to process your Personal Information, we will either delete or anonymize it or, if that is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

Effective Date: December 2023

Last Updated: May 2024