Privacy Policy
Version: 1.0v Effective date: August 5, 2026
WE VALUE YOUR PRIVACY AND TAKE PROTECTING IT SERIOUSLY!
Please read this Privacy Policy carefully before providing any kind of Your Personal information and/or using the Platform!
HereSure LLC, a licensed insurance producer agency operating under the consumer-facing brand (DBA) More and Sure, and our affiliated licensed insurance agents, registration number: 10627005, having its registered address at: 1521 Concord Pike, Suite 201, Wilmington, Delaware 19803, USA («Company», «Us», «We», and «Our») understands that Your privacy is important to You and is committed to being transparent about the technologies it uses**.**
This Privacy Policy (the «Privacy Policy», or «Policy») describes how the Personal information You provide to Us is collected and used, and the ways You can access the information regarding Your Personal information and other rights and choices available to You. The main purpose of the Privacy Policy is to help You understand how We Process and protect Your Personal information when You use the website https://moreandsure.com/, including any sub-websites, associated domains and/or subdomains, landing pages, and subpages, operated by Company (collectively referred to as the «Platform»).
- By accessing and using the Platform through any mobile phone, tablet, computer, laptop, or another device, or
- by providing any of Your Personal information to Us, including through the online insurance questionnaire, contact forms, or third-party lead-generation forms embedded in or linked from the Platform,
You, as a user of the Platform («User», «You», «Your», «Yourself»), confirm that:
- You have read, understood, and agree to be bound by this Privacy Policy;
- You have reached the age at which the legislation of the country of Your stay allows You to give Consent to the Processing of Your Personal information. In any case, in order to use Our Services, You must be at least 18 (eighteen) years old, or the age of legal majority in Your jurisdiction, or one of Your legal representatives or guardians must have read and agreed to the terms of the Privacy Policy on behalf of You.
As We encourage You to read this Policy attentively before using the Platform, We assume that all Users have done so and agreed to its provisions. If You do not agree or cannot confirm the above, You must immediately stop using the Platform. In this case, You must (a) contact Us and request the deletion of Your Personal information; (b) leave the Platform and not use it.
TABLE OF CONTENTS:
2. SCOPE OF THE PRIVACY POLICY
3. PERSONAL INFORMATION WE PROCESS
5. LEGAL BASIS WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION
6. PURPOSES OF PERSONAL INFORMATION PROCESSING
7. STORING AND DELETION OF PERSONAL INFORMATION
9. HOW WE SHARE PERSONAL INFORMATION
13. COOKIES AND OTHER TRACKING TECHNOLOGIES
14. PERSONAL INFORMATION THAT WE SHARE, SELL, OR USE FOR TARGETED ADVERTISING
15. CONTROLS FOR DO-NOT-TRACK FEATURES
16. ADDITIONAL U.S. DISCLOSURES
17. MARKETING AND INFORMATIONAL COMMUNICATIONS
18. CHANGES TO THE PRIVACY POLICY
1. DEFINITIONS
For the purposes of the Privacy Policy, the capitalized words shall have the meanings ascribed to them under the following conditions. Any use of the following definitions in the singular or plural, capitalized form shall be deemed interchangeable and, accordingly, to mean the same thing.
1.1 «Controller» means the Company that determines the purposes and means of Processing Personal information and is responsible for ensuring compliance with applicable privacy laws.
1.2 «Consent» means any freely given, specific, informed, and unambiguous indication of the User’s wishes by which the User, or the User’s legal guardian, a person who has power of attorney, or a person acting as a conservator for the User, including by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal information relating to the User for a narrowly defined particular purpose.
1.3 «Personal information» means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular User. Personal information may also have specific meanings under different privacy laws. The Personal information We collect varies depending on Our relationship and interactions with You.
1.4 «Processor» means the Company or any other entity or individual that Processes Personal information on behalf of the Controller according to the Controller’s instructions, without determining the purposes or means of the Processing.
1.5 «Processing» means any operation or set of operations that are performed on Personal information or on sets of Personal information, whether or not by automated means. The terms «Process», «Processes», and «Processed» will be construed accordingly.
1.6 «Third Party» means any entity or individual, other than the User, Controller, or Processor, that receives or interacts with Personal information for purposes not directly governed by the Controller’s instructions.
1.7 Any capitalized terms used in this Privacy Policy that are not expressly defined herein shall have the meanings assigned to them in the Terms & Conditions of the Company.
2. SCOPE OF THE PRIVACY POLICY
2.1 The Privacy Policy describes the Processing of Personal information provided or collected on the Platform.
2.2 The Privacy Policy applies solely to the Personal information collected through the Platform. Once You are redirected to a Third-Party website, platform, software, or service, the Privacy Policy no longer governs the collection, use, or disclosure of Your Personal information. We do not have control over, nor are We responsible for, the privacy practices or content of any Third-Party websites or services. We encourage You to review the privacy policies of any external sites or services You visit to understand their Personal information protection practices before engaging with them.
2.3 The Privacy Policy applies to the following people:
- Users who use the Platform in any way as may be available;
- People who provide feedback, send complaints, or send any other correspondence to Us by email or another available way.
2.4 The Privacy Policy does not apply to business-to-business transactions, employment-related data, or de-identified or aggregate data, except where specified by applicable laws.
2.5 The Privacy Policy has been drafted to comply with applicable U.S. privacy laws. We are committed to ensuring the protection of Personal information in full compliance with the applicable regulatory frameworks governing data protection and privacy. If You are accessing the Platform from jurisdictions outside the USA, please note that different legal frameworks may apply to the Processing of Your Personal information. Where applicable, We will implement distinct sections or supplementary provisions within the Privacy Policy to reflect any specific requirements imposed by the data protection laws of Your country or region. We strongly encourage You to review these additional sections to fully understand Your rights and Our obligations under the applicable data protection laws in Your jurisdiction.
3. PERSONAL INFORMATION WE PROCESS
3.1 Personal information You provide to Us.
3.1.1 When You complete and submit the insurance questionnaire available on the Platform, We collect the following Personal information that You voluntarily provide:
- identity and contact information (first name, last name, email address, phone number);
- location information;
- demographic information;
- employment information;
- household and family information;
- insurance information;
- health information; and financial information.
3.1.2 By submitting this Personal information, You acknowledge that it is necessary to enable the Company to understand Your insurance needs and to assign or refer Your inquiry to a licensed insurance agent, insurance carrier, or affiliated insurance agency for the purpose of providing insurance-related Services.
3.1.3 If You reach out to Us via email or using a contact form for customer support, general inquiries, or other purposes, We may collect:
- email address;
- Your name and surname;
- phone number;
- any additional information You choose to provide in Your message.
3.1.4 The Company reserves the right to request additional Personal information during communication with the User, which is necessary to provide the required support or resolve complaints, among other purposes.
3.1.5 We collect only the Personal information that is knowingly and voluntarily provided by You as a data subject, or the information contained in any messages that You send to Us when contacting Us. The Processing of Your Personal information occurs based on the lawful basis specified in section 5 of the Policy, and in accordance with the purposes of Processing set forth herein.
3.2 Personal information collected in an automated way.
3.2.1 When You access or use the Platform, certain Personal information may be collected by Us in an automated way. This includes:
- Your IP address;
- Your country;
- Your user agent (browser and operating system information transmitted by Your browser);
- data regarding Your use of the Platform (including interaction logs and session data);
- information obtained from cookies or any other similar tracking technologies;
- technical information about the device You use, such as device type, model, domain server, operating system, and type of network connection;
- session-related details, including timestamps, language preferences, pages visited, date and time of access, and Platform performance data.
3.3 Sensitive information.
3.3.1 The Company does not intentionally Process, or request sensitive Personal information from Users unless explicitly required for the provision of specific Services and with Your prior Consent. Sensitive personal information includes, but is not limited to, data revealing racial or ethnic origin, religious or philosophical beliefs, health or medical conditions, biometric data, genetic information, sexual orientation, and precise geolocation.
3.3.2 We ask that You refrain from providing any sensitive Personal information when using Our Services unless specifically requested and required by applicable laws or for the execution of a Service You have requested. If You choose to provide such information without being explicitly asked, the Company disclaims responsibility for Processing such Personal information and reserves the right to delete it unless it is necessary for legitimate purposes and Processed in accordance with applicable privacy laws.
3.3.3 Health-related questions may subsequently be asked by a licensed insurance agent during the insurance consultation and application process in accordance with applicable state insurance laws, including questions regarding medical conditions such as ADD/ADHD, AIDS, anxiety, asthma, blood pressure, cancer, cholesterol, depression, diabetes, heart attack, HIV, sleep apnea, stroke, or any other serious medical condition, as well as questions regarding alcohol consumption, treatment for alcohol or drug abuse, marijuana product use, and smoking. The exact questions and available answer options may vary depending on the selected insurance product and the underwriting requirements of the applicable insurance carrier.
3.3.4 For any required collection of sensitive Personal information, We will inform You beforehand, specify the purpose of the collection, and obtain Your explicit Consent where required by law.
3.4 We do not collect Personal information for the purpose of Profiling.
4. CHILDREN’S PRIVACY
4.1 The Company is committed to protecting privacy and ensuring compliance with applicable laws. Our Services are not directed to individuals under the age of 18, and We do not knowingly collect, Process, or store Personal information from individuals under 18 years of age.
4.2 If We become aware that a person under 18 has provided Us with their Personal information without the Consent of a parent, legal guardian, or other authorized representative, We will take all necessary measures to delete such Personal information. If You are a parent or legal guardian and believe that Your child under 18 has provided Us with Personal information without Your Consent, please contact Us immediately at info@moreandsure.com. Upon verification, We will promptly delete such Personal information from Our systems.
4.3 By agreeing to this Privacy Policy, You represent and warrant that You are at least 18 years of age. Please do not send any Personal information about You to Us if You are under 18.
4.4 The Company does not knowingly use Personal information of individuals under 18 for marketing, Profiling, or targeted advertising purposes.
4.5 If Personal information is collected from individuals under 18 with verifiable parental or guardian Consent (to the extent permitted by law), it will only be used for the purpose for which it was provided, such as delivering requested Services or maintaining secure communications.
4.6 We also recommend that parents and guardians monitor their children’s Internet activities and use tools that can help ensure a safe online experience consistent with their preferences.
4.7 If You have any questions or concerns regarding Our policies on privacy for individuals under 18, please contact Us at info@moreandsure.com.
5. LEGAL BASIS WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION
5.1 The Company Processes Personal information in accordance with applicable laws and relies on the following legal bases to ensure lawful and transparent data handling practices:
5.1.1 Contractual necessity. The Processing of Personal information is necessary for the performance of a contract to which the User is a party or to take steps at the request of the User prior to entering into a contract. This includes but is not limited to: providing the Services requested by the User, including access to and use of the Company’s Platform; administering and operating the Company’s business, including User support, technical maintenance, and Service optimization; complying with contractual obligations, such as enforcing the Company’s Terms & Conditions, including actions taken against Users who violate these terms.
5.1.2 Legitimate interests. We rely on legitimate interests when the Processing of Personal information is necessary for purposes of the legitimate interests pursued by the Company or by a Third Party, except where such interests are overridden by the interests or fundamental rights and freedoms of the User, and includes but is not limited to: researching, analyzing, and improving the Company’s Services to enhance user experience and optimize service delivery; facilitating integrations and promotions with business partners to provide Users with a seamless and enriched experience; ensuring the safety, security, and integrity of the Company’s Platform, including fraud prevention and detection activities, except where explicit Consent or legal obligations apply.
5.1.3 Compliance with a legal obligation. The Processing of Personal information may be necessary for compliance with a legal obligation to which the Company is subject, that includes complying with applicable laws, regulations, and legal processes, including responding to lawful requests from public authorities; fulfilling legal obligations in connection with the enforcement of the Company’s Terms & Conditions, such as taking action required by consumer protection, data protection, or anti-fraud laws.
5.1.4 Consent. We rely on Your Consent to collect and Process Personal information where the Processing is not covered by other lawful bases such as compliance with legal obligations, сontractual necessity, or legitimate business purposes. In such cases, We will obtain Your Consent prior to Processing, and You may withdraw Your Consent at any time in accordance with this Privacy Policy.
5.1.5 Where the Company relies on Consent as the legal basis for Processing Personal information, the User retains the right to withdraw their Consent at any time by contacting the Company through the methods specified in the Privacy Policy. Withdrawal of Consent will not affect the lawfulness of Processing carried out before such withdrawal.
6. PURPOSES OF PERSONAL INFORMATION PROCESSING
6.1 To ensure the proper functioning of the Platform, and to provide You with the best possible experience, We Process various categories of Personal information. The following table outlines the categories of Personal information that We may Process, the specific purposes for such Processing, the legal basis upon which We rely, as well as any Third Parties to whom Your Personal information may be disclosed/shared.
| Category of Personal information | Purpose of Processing | Legal Basis | Third Parties |
|---|---|---|---|
| Users’ data (identity, contact, location, demographic, employment, household/family, insurance, health, and financial information) | To understand Users' insurance needs; to create and manage insurance leads; to assign or refer leads to licensed insurance agents; to contact Users by phone, email or SMS regarding insurance products; to obtain quotes, underwrite, and process insurance applications with insurance carriers | Performance of contract; Consent Legitimate interests | Company’s licensed insurance agents, insurance carriers and their authorized underwriting/policy-administration providers, GoHighLevel/LeadConnector (CRM) |
| Third-Party authentication data (name, alias/nickname, email, unique User identifier) | To enable registration/login via Third-Party accounts; to facilitate access to Platform | Performance of contract; Consent (where applicable) | Google, Apple, or other Third-Party authentication services |
| Customer support data (name, email address, phone number, country, message content, additional info voluntarily provided) | To respond to inquiries, provide support, handle complaints, and ensure quality of Service | Legitimate interests; Performance of contract | Customer support tools, email service providers |
| Automatically collected data (IP address, device details, cookies, usage data, language preferences, timestamps) | To operate, secure, improve and optimize the Platform; to monitor usage, prevent fraud, ensure Service performance | Legitimate interests; Consent (where applicable); Compliance with legal obligations | Analytics and cookie providers, security service providers |
| Sensitive Personal Information | Only where explicitly required for the provision of Services and with prior Consent | Explicit Consent | Limited to service providers required by law or necessary for requested Services |
| General communications data (messages sent to the Company via email or contact forms) | To maintain correspondence, address User requests, and improve Services | Legitimate interests; Performance of contract | Email providers, CRM systems |
7. STORING AND DELETION OF PERSONAL INFORMATION
7.1 We will only store Your Personal information for as long as it is necessary for the purposes set out in the Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). Your Personal information is stored and Processed within the United States through Our CRM and hosting provider, GoHighLevel/LeadConnector, which hosts data on Amazon Web Services (AWS) and Google Cloud Platform (GCP) infrastructure located in the United States.
7.2 When We have no ongoing legitimate business need to Process Your Personal information, We will either delete or anonymize such Personal information, or, if this is not possible (for example, because Your Personal information has been stored in backup archives), then We will securely store Your Personal information and isolate it from any further Processing until deletion is possible.
7.3 Previous provisions shall not prevent any technical storage or access to Personal information for the sole purpose of carrying out the transmission of a communication or as strictly necessary for Us to provide the Platform, or the Services You requested.
7.4 Anonymized and aggregated Personal information may be stored and used indefinitely.
8. INFORMATION SECURITY
8.1 We take the protection of Your Personal information very seriously. We take all commercially reasonable measures to prevent unauthorized access to Your Personal information. Not only that, but We strive to protect Your Personal information by various means in order to preserve its confidentiality and integrity, prevent unauthorized use or disclosure of Your Personal information, and protect Your Personal information from loss, misuse, disclosure, alteration, and/or destruction. We strive to follow generally accepted and commonly used industry standards to maintain technical, physical, and administrative security measures.
8.2 We are committed to providing reasonable protection for information provided to Us, both during transmission and once We receive it. When Our contractors or We Process Your Personal information, We make reasonable efforts to make sure that Your Personal information is reasonably protected from unauthorized access, misuse, corruption, loss, manipulation, destruction, or unauthorized disclosure through the relevant measures.
8.3 We apply a variety of security measures appropriate to the possible risks.
| Organizational measures | |
|---|---|
| Internal policies and guidelines | Non-disclosure agreements (NDA) |
8.4 When accepting the Privacy Policy or providing Personal information to Us, please make sure You acknowledge that there is no 100% secure method of transmission over the Internet or electronic storage. We do Our best to protect Your Personal information, but We cannot provide, and We hereby disclaim any warranty or representation that the information You provide to Us will remain absolutely secure.
9. HOW WE SHARE PERSONAL INFORMATION
9.1 The Company may share Your Personal information with Third Parties in limited and specific circumstances, as outlined in this section. The Company does not sell, license, or otherwise transfer Your Personal information to Third Parties in exchange for monetary or other valuable consideration. Insurance inquiries are processed by the Company’s licensed insurance agents and are not sold or transferred to independent external agents. However, the Company does use, and plans to continue using, Your Personal information, online identifiers, Cookies, pixels, conversion events, and related advertising technologies for campaign attribution, conversion measurement, audience creation, remarketing, and targeted or behavioural advertising through advertising and analytics platforms, as further described in the Cookies and Other Tracking Technologies section and the Personal Information That We “Share”, “Sell”, or Use for “Targeted Advertising” section below. All sharing of Personal information is conducted in accordance with applicable laws and is subject to appropriate contractual and security measures to protect Your data.
9.2 Company Affiliates. We share Personal information with other Company-affiliated entities for purposes identified in the Privacy Policy.
9.3 Service Providers. In order to provide, communicate, market, and advertise the Services, We depend on service providers. These providers offer critical services spanning from providing cloud infrastructure, conducting analytics for the assessment of speed, accuracy, and/or security of Our Platform and Services, verifying identities, to providing customer service. We authorize these service providers to use or disclose the Personal information We make available to them to perform services on Our behalf and comply with relevant legal obligations. We mandate these service providers to contractually commit to ensuring the security and confidentiality of the Personal information they Process on Our behalf.
| Name of Service Provider | Category / Purpose of Processing | Personal information Processed | Location of Processing | Additional Information / Privacy Policy |
|---|---|---|---|---|
| GoHighLevel (HighLevel Inc.) | CRM, lead management, form hosting, and Platform hosting | Full name, email address, phone number, mailing address, insurance-related questionnaire responses, form and session data | United States (hosted on Amazon Web Services (AWS) and Google Cloud Platform (GCP)) | GoHighLevel Privacy Policy |
| LeadConnector (LeadConnector LLC) | CRM, lead management, form hosting, and Platform hosting | Full name, email address, phone number, mailing address, insurance-related questionnaire responses, form and session data | United States (hosted on Amazon Web Services (AWS) and Google Cloud Platform (GCP)) | LeadConnector Privacy Policy |
| Google LLC | Cloud services, storage, email, analytics | Email address, identifiers, usage data, files/documents, support messages | United States and other jurisdictions | Google Privacy Policy; Opt-out of analytics via Google Analytics Opt-out |
| Meta | Advertising campaign management, conversion tracking, audience creation, remarketing, and targeted advertising | Online identifiers, device/browser information, advertising interaction data | United States | Meta Privacy Policy |
9.4 Personnel and Advisors. We may share Your Personal information with Our professionals and other staff and contractors for their maintenance and support of the Platform and/or Service, related systems, service support, sales, and other related activities and purposes, as well as legal advisors for related activities. If We share Your Personal information with these Processors, We will require the recipient to keep it confidential and secure. We limit the information provided to such service providers to that reasonably necessary for them to perform their functions (a need-to-know basis).
9.5 Corporate Transactions. If We enter or intend to enter a transaction that modifies the structure of Our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or part of Our business, assets, or stock, We may share Personal information with Third Parties in connection with such transaction. Any other entity that buys Us or part of Our business will have the right to continue to use Your Personal information, but subject to the terms of the Privacy Policy.
9.6 Compliance and Harm Prevention. We share Personal information when We believe it is necessary to comply with applicable law; enforce Our contractual rights (Terms & Conditions); secure and protect the Platform, Services, rights, privacy, safety, and property of the Company, You, and others, including against malicious or fraudulent activity; and to respond to valid legal requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside Your country of residence.
9.7 With Your Consent. We may disclose Your Personal information to another Third Party with Your prior authorization.
10. YOUR PRIVACY RIGHTS
10.1 Residents of the United States may have specific privacy rights depending on the state in which they reside. These rights are established by state-specific privacy laws, which grant individuals certain control over their Personal information. The scope of these rights, as well as the procedures for exercising them, vary by state.
10.2 To ensure compliance with these laws, We recognize and provide for the rights afforded to residents of states with enacted privacy legislation, such as California, Virginia, Colorado, Connecticut, and others. For detailed information regarding the specific rights available to residents of each state, please refer to the State Privacy Rights Table below. This table outlines the privacy rights applicable to residents of different states, their definitions, and the methods available for exercising those rights.
| State Privacy Rights Table | |||
|---|---|---|---|
| Right | Description | State(s) | |
| Right to access | You have a right to confirm whether We Process Your Personal information and to request an explanation of the Processing of Your Personal information. | California; Virginia; Colorado; Connecticut; Utah; Florida; Oregon; Texas; Montana; Iowa; Delaware; | Nebraska; New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to correct | You have the right to request the change of the Personal information if it is inaccurate or incomplete. | California; Virginia; Colorado; Connecticut; Florida; Oregon; Texas; Montana; Delaware; Nebraska; | New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to delete | You can send Us a request to delete Your Personal information from Our systems. | California; Virginia; Colorado; Connecticut; Utah; Florida; Oregon; Texas; Montana; Iowa; Delaware; | Nebraska; New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to data portability | You may have the right to receive all Personal information about You from the Company in a structured, commonly used and machine-readable format, and also to require Us to transmit it to another entity (Controller) where this is technically feasible. | California; Virginia; Colorado; Connecticut; Utah; Florida; Oregon; Texas; Montana; Iowa; Delaware; | Nebraska; New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to opt out of sales | You have the right to opt out of the sale of Personal information to Third Parties. | California; Virginia; Colorado; Connecticut; Utah; Florida; Oregon; Texas; Montana; Iowa; Delaware; Nevada; | Nebraska; New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to opt out of certain purposes | You have the right to opt out of Processing for profiling / targeted advertising purposes. | California; Virginia; Colorado; Connecticut; Utah; Florida; Oregon; Texas; Montana; Iowa; Delaware; | Nebraska; New Hampshire; New Jersey; Tennessee; Minnesota; Maryland; Indiana; Kentucky; Rhode Island. |
| Right to opt out of / limit Processing of sensitive data or revoke Consent | You have the right to opt out of / limit Processing of sensitive Personal information. | California; Connecticut; Utah; Florida; Oregon; Montana; Iowa; | Delaware; New Hampshire; New Jersey; Minnesota; Rhode Island. |
| Right to opt in for sensitive data Processing | The right to opt in before Processing of sensitive Personal information. | Virginia; Colorado; Connecticut; Florida; Oregon; Texas; Montana; Delaware; Nebraska; | New Hampshire; New Jersey; Tennessee; Minnesota; Indiana; Kentucky; Rhode Island. |
| Right to obtain a list of the categories of Third Parties to which the Controller has disclosed Your Personal information | You have the right to request and obtain a list of the categories of Third Parties with whom the Company has disclosed Your Personal information. | Delaware; Maryland. | |
| Right to obtain a list of specific Third Parties to which the Controller has disclosed Your Personal information | You have the right to request and obtain a detailed list of specific Third Parties to whom the Company has disclosed Your Personal information. | Minnesota. | |
| Right to question the results of profiling and review the Personal information used | If Your Personal information is subject to profiling that leads to decisions with legal or similarly significant effects, You have the right to question the outcome. You may request to be informed of the reasons for the decision, actions You could have taken to secure a different outcome, and what steps You can take in the future to influence similar decisions. Additionally, You have the right to review the Personal information used in the profiling, and if the information is found to be inaccurate, You may request its correction and have the decision reevaluated based on the corrected data. | Minnesota. | |
| Private right of action | The right to seek civil damages from a controller for violations of a statute. | California. | |
| Please note! Some states do not have privacy laws. The rights of residents of such states are governed by U.S. federal law. |
10.3 The above rights are only exercisable by You where the applicable law grants You the right being exerted and where no exception or exemption under applicable law applies.
10.4 If You wish to exercise any of the mentioned rights, please contact Us via Our customer support at info@moreandsure.com. You shall send Us a letter or email to the address set out in the Privacy Policy, including the following: name, email address, and a copy of a valid proof of identity. We may further request any additional information We deem necessary to confirm Your identity. However, We may reject requests that are unreasonably repetitive, excessive, or manifestly unfounded.
10.5 If You reside in a U.S. state that has enacted, or may in the future enact, comprehensive privacy legislation not specifically listed in this Policy, please note that We are committed to respecting Your privacy rights and aligning with the highest industry standards. In particular, We aim to adhere to the principles set out in the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), which are currently among the most comprehensive and stringent privacy laws in the United States. Accordingly, even if Your state is not explicitly named in this Privacy Policy, We will make reasonable efforts to honor Your requests regarding access, correction, deletion, and limitations on the use of Your Personal information, consistent with those California requirements—unless doing so would conflict with Our legal obligations or result in a disproportionate burden.
10.6 The Company guarantees that You will not be treated unfairly or adversely for exercising any privacy rights granted under applicable laws. We are committed to providing equal access to Our Services, regardless of a User’s decision to exercise their rights related to the Processing of Personal information. In accordance with this commitment, We do not and will not engage in practices that could be considered discriminatory, such as denying Services, charging different prices or fees, providing a different level or quality of Service, or suggesting any form of disadvantage based on the exercise of privacy rights. If any concerns arise regarding the exercise of privacy rights and their impact on Your experience, You are encouraged to contact Us at info@moreandsure.com, and We will address the matter promptly.
10.7 As a general rule, the Company will respond to Your request within 45 (forty-five) days from the date of receiving the request. In cases where additional time is needed to process the request, the response period may be extended by an additional 45 (forty-five) days, with the User being notified of the extension and the reasons for the delay. However, the following states have specific response time requirements for certain types of requests:
10.7.1 Iowa: the Company will respond to Your request within 90 (ninety) days from the date of receipt. If necessary, this period may be extended by an additional 45 (forty-five) days, with the User being notified of the delay.
10.7.2 New Jersey: in cases where the request pertains to Personal information shared with Third Parties, the Company will respond within 60 (sixty) days regarding all transfers that occurred in the past 12 (twelve) months. For all other types of requests, the Company will respond within 45 (forty-five) days from the date of receipt. If additional time is required, the response period may be extended by an additional 45 (forty-five) days, provided that the User is notified of the extension and the reasons for the delay, in accordance with applicable laws.
10.8 Please note that response times for opt-out requests may differ from the general timelines mentioned above. For specific details regarding opt-out requests, please refer to the relevant section of the Privacy Policy.
11. USE OF AUTHORIZED AGENTS
11.1 You may designate an authorized agent to act on Your behalf in exercising the privacy rights under applicable laws. To ensure the security and validity of such requests, the Company may require the User and/or the authorized agent to provide written documentation proving the agent's authority, such as:
11.1.1 a power of attorney valid under the applicable laws from the User or his / her authorized agent; or
11.1.2 sufficient evidence to show that the User has:
- provided the authorized agent signed permission to act on his / her behalf;
- verified the User’s own identity directly with Us pursuant to the procedures set forth in the Privacy Policy;
- and directly confirmed with Us that the User provided the authorized agent permission to submit the request on his / her behalf.
11.2 The Company also reserves the right to verify the identity of the User and the authorized agent before processing any request. This may include requiring the User to directly confirm the request or provide additional information to substantiate the agent’s authority.
11.3 If the authorized agent acts on behalf of multiple Users, the Company reserves the right to request separate documentation for each User to ensure compliance with identity verification and authorization standards.
11.4 Requests submitted by unauthorized agents or those failing to meet the verification requirements will not be fulfilled.
11.5 Authorized agents must submit all requests through the methods provided in the Privacy Policy, and the Company retains the discretion to deny requests that do not comply with applicable legal and procedural standards.
11.6 The User remains responsible for ensuring the accuracy and completeness of the information provided by the authorized agent. Any discrepancies or delays caused by inaccurate documentation will not hold the Company liable for non-compliance or delays in processing the request.
12. APPEALS
12.1 If Your privacy request is denied or improperly handled, You may submit an appeal by contacting Us through the designated methods outlined in the Privacy Policy.
12.2 The appeal must include sufficient information to identify the User and the nature of the denied or improperly handled request, along with any supporting documentation the User believes is relevant to the appeal.
12.3 The Company shall notify the User in writing of any actions taken or not taken in response to the appeal, including a detailed explanation of the reasons for any decision made. If the appeal is denied, the notification shall include instructions for escalating the complaint, including filing a formal grievance with the Attorney General or other relevant regulatory authority in the User's state of residence.
12.4 Applicable timeframes for appeals.
12.4.1 For residents of Montana, Connecticut, Florida, Texas, Virginia, Iowa, Delaware, Nebraska, New Hampshire, Tennessee, Maryland, Indiana, Kentucky, and Rhode Island, the Company shall review and respond to such appeals within 60 (sixty) days of receipt.
12.4.2 For residents of Nevada, Colorado, Oregon, Washington and New Jersey, the Company shall review and respond to such appeals within 45 (forty-five) days of receipt.
12.4.3 For residents of Minnesota, the Company shall review and respond to such appeals within 45 (forty-five) days of receipt, with an extension of up to an additional 60 (sixty) days if reasonably necessary due to the complexity or volume of appeals, provided that the User is notified within the initial 45 (forty-five) days, including the reasons for the extension.
12.5 For residents of states where no explicit right to appeal is provided under applicable privacy laws, the Company is not obligated to accept or review appeals. However, Users may contact the Company to request clarification or additional information regarding any denied request. The Company will endeavor to provide a response where appropriate but does not guarantee action or reconsideration in such cases.
13. COOKIES AND OTHER TRACKING TECHNOLOGIES
13.1 Our Third-Party partners and We automatically collect certain types of usage information when You visit the Platform, read Our emails, or otherwise engage with Us. We typically collect this information through a variety of tracking technologies, including Cookies (collectively, «Tracking Technologies»). Some of these technologies store data in the browser or on Your device.
13.2 We use strictly necessary and functional Cookies to operate insurance quote forms, maintain user sessions, save form progress, process lead submissions, and support Our CRM and Platform integrations; Preference Cookies to remember cookie-consent choices and advertising opt out preferences; Statistics Cookies, including Google Analytics and Microsoft Clarity technologies, to measure Platform traffic, analyze visitor behavior, understand Platform performance, and generate aggregated statistical reports; and Marketing and Tracking Cookies, including technologies provided by Google Ads, Meta, Microsoft Advertising, TikTok Ads, LinkedIn Ads, Taboola, and Outbrain, for campaign attribution, conversion measurement, audience creation, remarketing, and targeted or behavioural advertising. We use both session and persistent Cookies; retention periods vary depending on the individual Cookie or technology.
13.3 For detailed information about the types of Tracking Technologies We use, their purposes, how You can manage them, and how We handle Your Personal information in relation to Cookies or other types of Tracking Technologies, please refer to Our Cookie Policy.
14. PERSONAL INFORMATION THAT WE SHARE, SELL, OR USE FOR TARGETED ADVERTISING
14.1 Certain U.S. states provide residents, or in some cases their authorized agents, with the right to opt out of the «selling» or «sharing» of their Personal information, or of «targeted advertising» based on their Personal information.
14.2 While We don’t sell or share directly identifying information like Your name, phone number or email address, We may share Your technical identifiers to provide more relevant Services, content, and ads to You. This may be deemed by applicable state laws as «targeted advertising», or a «sale» or «sharing» of Personal information.
14.3 To submit a request to opt out of targeted advertising, or the sale or sharing of Your Personal information, You may contact Us directly through any of the following methods: (a) by email at info@moreandsure.com; (b) during a phone conversation with one of Our Agents, by informing the Agent of Your opt-out request, or by contacting Our customer support by phone at +1 (732) 278-1858; or (c) by replying «STOP» or a similar opt-out keyword to any SMS message You receive from Us. Please ensure that Your request includes sufficient information to verify Your identity and specify the nature of the opt-out request. Once Your request is received, We will process it in accordance with applicable laws and update Our systems to reflect Your preferences.
14.4 Where applicable regulations require Us, We honor the opt-out signals You send to Us by universal opt-out mechanisms, such as Global Privacy Control. Universal opt-out mechanisms are tools designed to give You more control over Your online privacy by simplifying the process of opting out of data collection and sharing practices. Certain browsers and browser extensions support Global Privacy Control, which sends a signal to websites indicating Your choice to opt-out of the use of Your Personal Information for targeted advertising and «sales» or «shares» as defined under applicable law. We honor the GPC and, where required by law, similar user-initiated browser-based opt-out preference signals. To set up GPC, You can visit the Global Privacy Control page. You can set Your preferences through Your browser, and once it sends Your opt-out preferences to Us, We will honor Your request.
14.5 Please note that Your opt-out choice is specific to the device and browser You are using. If You are using other devices or browsers, You will need to make a separate election for each. Also, if You clear Your Cookies on Your browser or use another browser or device, You may need to opt out again.
14.6 The Company is committed to addressing all opt-out requests promptly and without unnecessary delay, in accordance with applicable legal requirements. While We strive to respond as quickly as possible, the response time will be within the timeframes specified by the relevant laws of each jurisdiction. We will respond within the timeframes required under applicable state law, generally within 45 days (15 days in California, 60 days in Nevada, 30 days in Maryland). If permitted by law, We may extend Our response period and will notify You of the extension and the reason for it.
14.7 If no specific response time for opt-out requests is provided under the applicable law in Your state, the Company will adhere to the general response timeframes outlined for User requests, as specified in the relevant section of the Privacy Policy.
14.8 We will make every effort to comply with these timeframes and provide timely responses to Your requests. If further information or clarification is needed, or if there are any delays, We will promptly notify You and provide an explanation. Should You have any questions or concerns regarding Your opt-out request, please use any of the three methods specified in clause 14.3 above.
15. CONTROLS FOR DO-NOT-TRACK FEATURES
15.1 Do Not Track («DNT») is a privacy preference that Users can set in certain web browsers. DNT is a way for Users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.
16. ADDITIONAL U.S. DISCLOSURES
16.1 Categories of Personal information We collect.
16.1.1 We have collected the following categories of Personal information in the past 12 (twelve) months:
| Category | Examples as set forth by the CCPA | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name. | YES: name, email address, telephone or mobile number. |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | Name, contact information, education, employment, employment history, and financial information. | YES: name, contact information. |
| C. Protected classification characteristics under state or federal law | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex (including gender, gender identity/expression, pregnancy), sexual orientation, veteran or military status, genetic information. | YES: limited to age (for eligibility/Consent confirmation). |
| D. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES: records of consuming histories or tendencies. |
| E. Biometric information | Genetic, physiological, behavioral, and biological characteristics. | NO |
| F. Internet or other similar network activity | Browsing history, search history, interactions with Our and other websites, apps, systems, and ads. | YES: cookies. |
| G. Geolocation Data | Physical location, approximate location derived from IP address or movements. | YES: approximate location derived from IP address. |
| H. Sensory Data | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
| I. Professional or employment-related information | Current or past job history or performance evaluations. | NO |
| J. Non-public education information (per FERPA) | Education records maintained by an educational institution. | NO |
| K. Inferences drawn from collected Personal information | Profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, aptitudes. | YES: limited to usage preferences and interests inferred from interaction with the Platform. |
| L. Sensitive Personal Information | Government-issued identifiers, financial account details, precise geolocation, racial/ethnic origin, religious beliefs, union membership, biometric data, health data. | YES: health/medical information (general health information, medical information) and financial information (income, assets, savings and investments, budget, retirement information) provided in the insurance questionnaire. |
16.2 Disclosures of Personal information for a Business Purpose.
16.2.1 We may disclose Your Personal information to a contractor or service provider for a business purpose. The types of Personal information We share for a business purpose vary, depending on the purpose and the function provided by the Third Party to whom We disclose such information. When We disclose Personal information for a business purpose, We enter a contract that describes the purpose and requires the recipient to both keep that Personal information confidential and not use it for any purpose except performing the contract. We further restrict the contractor and service provider from selling or sharing Your Personal information.
16.2.2 In the preceding 12 (twelve) months, We disclosed the following categories of Personal information for a business purpose*:*
| Category (corresponding with the table above) | Category of Recipient | Business Purpose |
|---|---|---|
| Category A (Identifiers) Category B (Customer Records info) Category C (Protected classification characteristics) Category G (Geolocation Data) Category K (Inferences) Category L (Sensitive Personal Information) | Cloud computing and storage vendors | Data storage, hosting, and infrastructure support |
| Category A (Identifiers) Category B (Customer Records info) | Customer support providers | Customer and technical support services |
| Category A (Identifiers) Category F (Network activity data) Category G (Geolocation) Category K (Inferences) | Analytics and marketing providers | Usage analytics, performance measurement, improving user experience |
17. MARKETING AND INFORMATIONAL COMMUNICATIONS
17.1 We may use Your email address or other contact details to send You marketing communications, including promotional materials, special offers, product updates, invitations to participate in surveys, or information about new features and Services. In accordance with applicable U.S. laws, including the CAN-SPAM Act, We do not require Your prior Consent to send You marketing emails, but You have the right to opt out of receiving such communications at any time. Each marketing message We send will include a clear and functional «unsubscribe» mechanism, and once You opt out, We will honor Your request without unnecessary delay. Please note that for marketing text messages (SMS) or automated calls, We will obtain Your express Consent beforehand, as required by the Telephone Consumer Protection Act (TCPA).
17.2 During your interaction with the Platform, after You provide Your first name, last name, and email address, You are shown the following disclosure: «By entering Your email and clicking «Continue», You agree that We may email You about Your insurance request, including reminders if You do not finish the form. You can unsubscribe at any time. View our Privacy Policy». If You proceed to the next step but do not complete the questionnaire, You may receive up to four automated reminder emails, sent approximately 5 minutes, 30 minutes, 24 hours, and 48 hours after abandonment. Before submitting the completed questionnaire, You must actively check the required consent checkbox(es) confirming Your agreement to the Processing of Your Personal information in accordance with this Privacy Policy and Our Terms & Conditions, and You must complete a One-Time Password (OTP) verification to confirm ownership of the phone number You provided.
17.3 In addition to marketing communications, We may also send You informational or service-related communications that are not of a marketing nature. These messages are essential for the use of the Services and may include, but are not limited to: updates to this Privacy Policy or Terms & Conditions; changes to the functionality or availability of the Services; technical notices about scheduled maintenance or unexpected Service disruptions; security-related alerts concerning potential risks to Your Personal information. While these communications are necessary for the operation and security of the Platform, You may choose to opt out of receiving certain non-essential informational communications where this option is provided. However, please note that opting out of some communications may affect Your ability to remain informed about important updates and operational matters related to the Services.
17.4 If You wish to opt out of marketing or informational communications, or if You have any questions about the nature of these messages, You may do so by using the unsubscribe link provided in Our communications or by contacting Us directly using the details set out in this Privacy Policy.
18. CHANGES TO THE PRIVACY POLICY
18.1 From time to time for any reason, We may make changes to the Privacy Policy by posting a new version of the Privacy Policy. Please check back periodically and review this Privacy Policy to keep Yourself always up-to-date on Our privacy practices. We may notify You about the most significant changes to the Privacy Policy concerning Your rights, but We assume no obligation for such.
18.2 A revised version of Our Privacy Policy will come into effect upon posting on the Platform. Your continued access to or use of the Platform shall be considered Your acceptance of the revised version of the Privacy Policy, and its application to all information gathered before and after its effective date.
18.3 If You do not agree with any changes made to the Privacy Policy, You must stop using the Platform, and You can also request the deletion of Your Personal information.
19. CONTACT US
19.1 Please contact Us via Our customer support at info@moreandsure.com to provide feedback or request to resolve any of Your questions, suggestions, or concerns. We will try to answer You as soon as possible, but no longer than within 30 (thirty) calendar days.
19.2 Notices relating to the Privacy Policy may be sent to You to the email address You provided. You expressly authorize Us to contact You via such email address in the event We (or Our affiliate) are required by law to notify You of a data security incident or data breach.