Privacy Policy

Statewide Flood Insurance is a website operated by Rebecca Byrom Insurance Agency, Inc. RBIA is a licensed insurance producer and a Lloyd’s-approved coverholder.

1. Scope of This Policy

This Policy applies to personal information collected online and offline in connection with residential, commercial, condominium association, excess, private-market, and National Flood Insurance Program (NFIP) flood insurance inquiries, quotes, applications, policies, servicing, billing, renewals, and claims assistance.

This Policy does not replace privacy notices issued by an insurance carrier, premium finance company, claims administrator, lender, consumer reporting agency, government agency, or other third party. Their notices govern their independent processing.

Certain information processed in connection with insurance transactions may be subject to federal or state insurance privacy laws, including the Gramm-Leach-Bliley Act and state insurance privacy statutes. Where an exemption or different rule applies, we will handle the information as required by that law.

2. Personal Information We Collect

2.1 Identifiers and contact information

Name, business or association name, mailing and property addresses, email address, telephone number, IP address, online identifiers, signature, and account credentials.

2.2 Insurance and customer records

Quote requests, applications, policy numbers, coverage selections, premiums, bind requests, endorsements, renewal information, cancellation or lapse information, prior insurance, claims history, loss runs, certificates, and communications.

2.3 Property and flood-risk information

Property location; ownership and occupancy; building use; number of units; construction, foundation, basement, enclosure, and elevation characteristics; year built; square footage; replacement-cost or valuation information; contents values; improvements; photos; inspection data; flood zone; elevation certificates; FEMA map and community data; distance-to-water and catastrophe-model attributes.

2.4 Financial, billing, and lender information

Billing contacts, payment method and transaction status, premium finance information, mortgagee or lender name, loan number, escrow details, and limited payment-card or bank information processed by us or our payment providers. We generally do not retain full payment-card numbers when a payment processor handles the transaction.

2.5 Commercial and professional information

Business role, title, ownership or management relationship to a property, entity information, years in operation, property schedules, and records of products or services requested, considered, or purchased.

2.6 Internet, device, and interaction information

Browser, device, operating system, cookie or advertising identifiers, referring and exit pages, pages viewed, clicks, form activity, date and time, approximate location inferred from IP address, chat transcripts, call records, and similar usage information.

2.7 Communications and content

Emails, texts, call recordings where legally permitted and disclosed, chat messages, documents, photos, forms, and other content you provide.

2.8 Sensitive personal information

Government identifiers, account credentials, financial account information, precise property location, or other sensitive information when reasonably necessary for underwriting, payment, fraud prevention, legal compliance, or servicing. We do not use sensitive personal information to infer characteristics about you.

2.9 Inferences and derived information

Flood-risk indicators, likely coverage needs, quote eligibility indicators, and preferences derived from information you provide and third-party data.

3. Sources of Personal Information

• You, insureds, applicants, property owners, authorized representatives, agents, property managers, association representatives, and others involved in an insurance transaction.
• Insurance carriers, MGAs, underwriters, reinsurers, claims administrators, prior insurers, premium finance companies, payment processors, and inspection vendors.
• Lenders, mortgage servicers, escrow companies, real estate professionals, and other parties you authorize.
• Public and government sources, including FEMA and NFIP resources, flood maps, county assessor and recorder data, building and permit records, and sanctions or fraud-prevention lists.
• Property, geospatial, mapping, catastrophe-modeling, valuation, identity-verification, consumer-reporting, and data-enrichment providers, as permitted by law.
• Cookies, pixels, analytics tools, server logs, chat tools, and other technologies used when you interact with the Services.
• Affiliated websites operated by RBIA when you request that information be used across an insurance inquiry or customer relationship.

4. How We Use Personal Information

• Respond to inquiries and provide flood insurance education, comparisons, quotes, proposals, and applications.
• Evaluate submissions, obtain carrier indications, support underwriting, request supporting documents, and facilitate binding when authorized.
• Issue or help service policies, endorsements, certificates, renewals, billing, payments, premium financing, cancellations, reinstatements, and claims reporting.
• Communicate about quotes, application status, missing information, coverage, policy documents, payments, renewals, lapse or cancellation risk, service, and claims.
• Provide customer support and maintain records of instructions, consents, transactions, and communications.
• Authenticate users; secure accounts and systems; prevent fraud, abuse, money laundering, and other unlawful activity; and enforce our agreements.
• Operate, troubleshoot, measure, personalize, and improve the Services, forms, content, advertising, and customer experience.
• Comply with insurance, privacy, tax, accounting, litigation, sanctions, regulatory, and other legal obligations; respond to lawful requests; and establish, exercise, or defend legal claims.
• Send marketing communications where permitted and, when legally required, only with separate affirmative consent. You may opt out as described below.
• Create aggregated or de-identified information. We will not attempt to reidentify information maintained as de-identified except as permitted to test our de-identification processes.

5. Automated Tools, AI, and Flood-Risk Data

We may use automated rating engines, data-matching tools, geospatial services, flood maps, catastrophe models, optical character recognition, workflow automation, and AI-assisted tools to organize information, identify missing fields, assist customer service, summarize communications, detect fraud, support underwriting, or generate quote indications and educational responses.

Automated outputs may be incomplete or inaccurate. A website quote, chat response, risk score, map result, or AI-generated response is not by itself a final underwriting decision, policy interpretation, binder, or guarantee of coverage. Final eligibility, pricing, terms, and coverage decisions are made by the applicable insurer or an authorized underwriter—including RBIA when acting within documented delegated authority—under the governing underwriting rules, binding authority, and policy forms.

Do not submit information through a general chat feature that you would not want included in an insurance record. We may retain chat content in accordance with this Policy.

6. How We Disclose Personal Information

We may disclose personal information for the business and insurance purposes described below. We do not disclose mobile opt-in data to third parties for their own marketing.

• Insurance transaction recipients: carriers, NFIP Write-Your-Own companies, MGAs, underwriters, reinsurers, surplus lines brokers, claims administrators, inspectors, premium finance companies, lenders, mortgage servicers, and other parties needed to quote, place, finance, administer, or service coverage.
• Service providers and contractors: hosting, cybersecurity, CRM, e-signature, document storage, payment, communications, call, SMS/MMS, email, analytics, mapping, valuation, rating, identity-verification, fraud-prevention, and professional-service providers acting for us.
• Affiliated operations: other RBIA-operated websites or internal teams when necessary to respond to your request, administer your relationship, maintain consistent records, or provide a product you requested. CaliforniaFloodInsurance.com is one such affiliated website.
• Legal and safety recipients: regulators, courts, law enforcement, government agencies, auditors, lawyers, accountants, and others when reasonably necessary to comply with law, protect rights or safety, investigate misconduct, or respond to legal process.
• Business transaction recipients: prospective or actual buyers, sellers, lenders, advisers, or successors in connection with a merger, financing, reorganization, sale, or transfer, subject to appropriate safeguards.
• At your direction: parties you authorize, including agents, lenders, property managers, association representatives, family members, or other designated recipients.
• Aggregated or de-identified recipients: where the information cannot reasonably be linked to you or a household.

6.1 Sale and sharing for targeted advertising

We do not sell personal information for money. We also do not currently share personal information for cross-context behavioral advertising as those terms are defined by the California Consumer Privacy Act (CCPA). If our practices change, we will update this Policy and provide legally required choice mechanisms.

7. Cookies, Analytics, and Preference Signals

We and our providers may use cookies, pixels, tags, local storage, session-replay or interaction-measurement technologies, and similar tools for security, functionality, form continuity, analytics, performance, attribution, and permitted advertising measurement.

You can manage cookies through browser settings and any cookie controls we make available. Blocking cookies may impair forms, portals, quote tools, or other features. Where required by applicable law, we will request consent before using non-essential cookies.

Because we do not currently sell or share personal information for cross-context behavioral advertising, we do not treat Global Privacy Control signals as sale/share opt-out requests at this time. If that practice changes, we will recognize legally required browser-based opt-out preference signals.

We do not respond to legacy browser “Do Not Track” signals because there is no uniform industry standard for interpreting them.

8. Email, SMS/MMS, and Electronic Communications

8.1 Service and transactional communications

We may send communications you request or that relate to an existing inquiry or insurance relationship, including quote follow-ups, underwriting requests, application status, policy documents, billing and payment reminders, renewal notices, lapse or cancellation warnings, claims communications, and customer-service messages, subject to applicable consent and insurance-notice requirements.

8.2 Text messaging

• If you affirmatively opt in, you may receive SMS or MMS messages from Statewide Flood Insurance, RBIA, or your servicing agent at the number provided.
• Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
• Messages may be sent using automated technology. Consent to marketing texts is not a condition of obtaining a quote, purchasing insurance, or receiving service.
• Reply STOP to opt out of the applicable text program and HELP for help. We may send a one-time opt-out confirmation.
• Opting out of marketing texts does not by itself cancel a policy, withdraw a pending application, or change legally permitted nonmarketing communications through other channels.

8.3 Mobile information privacy

No mobile information, including phone numbers, SMS opt-in data, or consent records, will be shared with third parties or affiliates for their own marketing or promotional purposes. We may provide this information to messaging vendors and other service providers only as necessary to operate the program, subject to contractual restrictions. Text-message originator opt-in data and consent will not be shared with any third parties for their own marketing.

8.4 Marketing email

Where permitted, we may send marketing email. Commercial email will identify the sender and provide an unsubscribe method. We will honor valid unsubscribe requests within the period required by law, although you may continue to receive transactional or relationship messages.

8.5 Electronic delivery and signatures

If you separately consent to electronic delivery, records and disclosures may be delivered by email, secure portal, e-signature service, or text link where legally permitted. Your electronic-delivery consent, including hardware/software requirements, paper-copy rights, and withdrawal process, is governed by the disclosure presented when consent is obtained. This Policy does not itself replace any consent required under E-SIGN or state insurance law.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, which may include access controls, encryption in transit, monitoring, vendor oversight, authentication, backups, and workforce training. No method of transmission, storage, or security is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your devices, email and portal credentials, and for notifying us promptly if you suspect unauthorized access or if your contact information changes.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide and service insurance, maintain required producer and transaction records, document consent, comply with carrier and regulatory obligations, resolve disputes, prevent fraud, and enforce agreements.

Retention periods vary by record type, state, carrier, and legal obligation. Insurance application, policy, transaction, and communication records may be retained for at least seven years after the relationship or policy ends, and longer where required by insurance, tax, surplus lines, litigation-hold, or other legal requirements. We delete, destroy, or de-identify information when it is no longer reasonably necessary, subject to backup and legal-retention cycles.

11. Your Privacy Choices

• Update or correct account and contact information by contacting us.
• Opt out of marketing email using the unsubscribe link or by contacting us.
• Opt out of an SMS program by replying STOP; text HELP for assistance.
• Manage cookies through your browser and any site controls we provide.
• Request paper delivery or withdraw electronic-delivery consent using the process stated in the applicable electronic-consent disclosure.
• Exercise state privacy rights, where applicable, as described in Section 12.

12. U.S. State Privacy Rights

Depending on where you reside and subject to exemptions and exceptions, state privacy law may provide rights to confirm processing; access, correct, or delete personal information; obtain a portable copy; opt out of sale, targeted advertising, or certain profiling; limit certain uses of sensitive information; and appeal a denied request.

Insurance-regulated or financial information may be exempt from some comprehensive state privacy laws. We will apply the law that governs the information and request.

12.1 California notice at collection and rights

During the preceding 12 months, we may have collected the categories described in Section 2 from the sources in Section 3, used them for the purposes in Section 4, and disclosed them to the recipients in Section 6. We retain each category as described in Section 10. We do not use or disclose sensitive personal information for purposes that require a CCPA right to limit.

• Right to know/access: request categories and specific pieces of personal information, sources, purposes, and categories of recipients.
• Right to delete: request deletion, subject to legal and insurance-record exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not currently sell or share personal information as defined by the CCPA.
• Right to non-discrimination: we will not unlawfully discriminate against you for exercising a privacy right.

12.2 How to submit a request

Email agency.services@jumpins.com, call 855-225-3566, or write to Rebecca Byrom Insurance Agency, Inc., Privacy Request, 7960 Silverton Ave., Suite 203, San Diego, CA 92126. Describe the right you wish to exercise and provide enough information for us to locate the relevant records.

12.3 Verification, agents, and appeals

We may verify your identity by matching information you provide with our records and may request additional information when appropriate. Authorized agents must provide proof of authority, and we may confirm the request directly with you. We will respond within the time required by applicable law. If your state provides an appeal right, you may appeal a denial by replying to our decision or contacting us with “Privacy Appeal” in the subject line.

12.4 California Shine the Light

California residents may request information about certain disclosures of personal information to third parties for their direct marketing. We do not disclose personal information to third parties for their own direct marketing as contemplated by California’s Shine the Light law.

13. Consumer Reports and Insurance Decisions

Where permitted and relevant, we or a carrier may obtain consumer reports, loss-history reports, property reports, or similar information for underwriting, verification, or fraud prevention. The carrier or report provider may provide additional notices required by the Fair Credit Reporting Act or state law. If an adverse action is based on a consumer report, the responsible party will provide the notice required by applicable law.

14. Children’s Privacy

The Services are intended for adults seeking insurance information and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

15. Third-Party and Affiliated Websites

The Services may link to carriers, FEMA or NFIP resources, payment services, e-signature platforms, social networks, and affiliated RBIA websites, including CaliforniaFloodInsurance.com. A link does not mean that this Policy governs the other site. Review the privacy notice presented by the website or service you visit.

16. Data Location and Nationwide Operations

We operate in the United States and serve customers in states where we or our producers are licensed and the relevant product is available. Personal information may be processed in any U.S. state where we, a carrier, or a service provider operates. Availability varies by state, carrier, underwriting rules, and licensing.

17. Changes to This Policy

We may update this Policy to reflect legal, operational, or technology changes. We will post the revised version at the Privacy Policy URL and update the effective or last-updated date. If required, we will provide additional notice or obtain consent. Material changes apply prospectively unless otherwise permitted by law.

18. Contact Us

Statewide Flood Insurance is operated by Rebecca Byrom Insurance Agency, Inc. (California Insurance License #0L75450).

Website: https://www.statewidefloodinsurance.com

Email: agency.services@jumpins.com

Phone: 855-225-3566

Mail: 7960 Silverton Ave., Suite 203, San Diego, CA 92126