PRIVACY POLICY

Effective Date: March 15, 2026

Last Updated: March 23, 2026

Braddock Road Insurance Corporation (“BRIC,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website personalguaranteeinsurance.com (the “Site”) and use our services. This policy applies to information collected through the Site, by email, by telephone, and through any other interactions you may have with BRIC.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

(a) Contact information: name, email address, phone number, mailing address;

(b) Business information: company name, industry classification, NAICS code, state of operation, business structure;

(d) Financial information: business revenue, personal financial statements, net worth, assets, and liabilities as required for underwriting;

(e) Responses to eligibility questionnaires and insurance applications;

(f) Claims information, if you file a claim under a PGI policy; and

(g) Any other information you choose to provide through forms, emails, phone calls, or other communications.

1.2 Information Collected Automatically

When you visit the Site, we may automatically collect certain information, including:

(a) Device information: browser type, operating system, device type, screen resolution;

(b) Usage data: pages visited, time spent on pages, click patterns, referring URL, exit pages;

(d) Cookies and similar tracking technologies (see our Cookie Policy for details); and

(e) Log data: access times, server logs, and error reports.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

(a) Credit reporting agencies and consumer reporting agencies;

(b) Business verification and fraud prevention services;

(d) Surplus lines brokers and insurance intermediaries;

(e) Public records and commercially available databases; and

(f) Regulatory authorities and government agencies.

2. How We Use Your Information

We use the information we collect for the following purposes:

(a) Process, evaluate, and underwrite your insurance application;

(b) Administer PGI policies, including premium collection, policy issuance, and renewals;

(d) Communicate with you about your application, policy, claims, or account;

(e) Respond to your inquiries and provide customer support;

(f) Verify your identity and prevent fraud;

(g) Comply with legal and regulatory obligations, including surplus lines reporting, tax filings, and state insurance department requirements;

(h) Improve and optimize our Site, services, and business operations;

(i) Conduct actuarial and statistical analysis to improve our products;

(j) Send you marketing communications (with your consent, where required by law); and

(k) Fulfill any other purpose disclosed to you at the time of collection.

3. How We Share Your Information

We may share your information with the following categories of recipients:

Affiliates. We may share information with our affiliated companies for business purposes, including underwriting support, claims processing, and policy administration.

Service Providers. Third-party vendors who perform services on our behalf, including HubSpot (CRM and forms), payment processors, cloud hosting providers, data analytics providers, and IT support services. These providers are contractually obligated to protect your information.

Surplus Lines Brokers and Regulators. As required by applicable surplus lines laws, we share policy and premium information with licensed surplus lines brokers, state stamping offices, and state insurance regulatory authorities.

Lending Partners. With your authorization, we may share policy status and coverage information with SBA lenders in connection with your loan. This may include confirmation of coverage, policy effective dates, and coverage limits.

Reinsurers. We may share information with reinsurance companies as necessary for the placement and administration of reinsurance arrangements.

Consumer Reporting Agencies. We may obtain information from and share information with consumer reporting agencies in accordance with applicable law.

Professional Advisors. Attorneys, accountants, auditors, actuaries, and other professionals as necessary for business operations.

Legal Requirements. When required by law, regulation, subpoena, court order, legal process, or governmental request.

Business Transfers. In connection with a merger, acquisition, reorganization, sale of assets, or insolvency proceeding, your information may be transferred as part of that transaction. We will notify you of any such transfer as required by applicable law.

Fraud Prevention. We may share information with industry databases, law enforcement agencies, and other insurers for the purpose of detecting and preventing fraud.

We do not sell your personal information to third parties for their marketing purposes.

4. Gramm-Leach-Bliley Act (GLBA) Notice

As an insurance company, BRIC is subject to the Gramm-Leach-Bliley Act (GLBA) and applicable state privacy regulations. This section provides the disclosures required under GLBA.

4.1 Categories of Nonpublic Personal Information We Collect

We collect nonpublic personal information about you from the following sources:

(a) Information we receive from you on applications, forms, and other documents;

(b) Information about your transactions with us, our affiliates, or others; and

4.2 Categories of Information We May Disclose

We may disclose the following categories of nonpublic personal information about our customers and former customers:

(a) Information we receive from you on applications and other forms (e.g., name, address, income, loan details);

(b) Information about your insurance transactions with us (e.g., policy coverage, premiums, payment history); and

4.3 Categories of Parties to Whom We Disclose

We may disclose nonpublic personal information about you to the following categories of third parties:

(a) Our affiliated companies;

(b) Nonaffiliated service providers who assist with policy administration, claims processing, and other insurance functions;

(d) Regulatory authorities and government agencies as required by law; and

(e) Other parties as permitted or required by law.

4.4 Opt-Out Rights

If we intend to share your nonpublic personal information with nonaffiliated third parties for purposes other than those permitted under GLBA (such as servicing your account or as required by law), we will provide you with notice and a reasonable opportunity to opt out before doing so. To exercise your opt-out rights, contact us at privacy@braddockroadinsurance.com.

4.5 Confidentiality and Security

We restrict access to your nonpublic personal information to those employees and service providers who need the information to provide products and services to you. We maintain physical, electronic, and procedural safeguards that comply with applicable law to protect your nonpublic personal information.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

(a) Insurance applications (approved or denied): retained for a minimum of seven (7) years following the decision;

(b) Active policy records: retained for the life of the policy plus seven (7) years following expiration or cancellation;

(d) Website usage data: retained for up to two (2) years.

When personal information is no longer needed, we will securely dispose of it in accordance with our data retention policies.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include:

(a) Encryption of data in transit using TLS/SSL protocols;

(b) Encryption of sensitive data at rest;

(d) Regular security assessments and vulnerability testing;

(e) Employee training on data privacy and security practices; and

(f) Incident response procedures for data breaches.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee its absolute security. In the event of a data breach involving your personal information, we will notify you and applicable regulatory authorities as required by law.

7. Your Rights and Choices

Depending on your state of residence, you may have certain rights regarding your personal information, including:

(a) The right to know what personal information we collect, use, and disclose about you;

(b) The right to access the personal information we hold about you;

(d) The right to request deletion of your personal information (subject to legal retention requirements and exceptions);

(e) The right to opt out of the sale or sharing of personal information (we do not sell personal information);

(f) The right to opt out of certain automated decision-making or profiling;

(g) The right to receive your data in a portable format; and

(h) The right to not be discriminated against for exercising your privacy rights.

To exercise any of these rights, please contact us at privacy@braddockroadinsurance.com or call us at the number provided on the Site. We will verify your identity before processing your request and respond within the time frame required by applicable law.

8. State-Specific Privacy Disclosures

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These include the right to know what personal information we collect and how it is used, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under CPRA.

To submit a request, email privacy@braddockroadinsurance.com. You may also designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your CCPA/CPRA rights.

8.2 Virginia Residents (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to access, correct, delete, and obtain a copy of personal data, and the right to opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights, contact us at privacy@braddockroadinsurance.com. You may appeal a decision regarding your request by contacting us at the same address.

8.3 Colorado, Connecticut, and Other States

Residents of Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port personal data, as well as rights to opt out of targeted advertising and profiling. Please contact us for information specific to your state.

8.4 Global Privacy Control

We honor the Global Privacy Control (GPC) signal as a valid opt-out request where required by applicable state law. If your browser sends a GPC signal, we will treat it as a request to opt out of the sharing of personal information to the extent required by law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on the Site. For detailed information about the cookies we use, why we use them, and how you can control them, please refer to our separate Cookie Policy.

10. Children’s Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete that information. If you believe we may have collected information from a child, please contact us at privacy@braddockroadinsurance.com.

11. Do Not Track Signals

Some web browsers may transmit “Do Not Track” signals. Because there is no industry standard for how to respond to such signals, we do not currently respond to “Do Not Track” signals from browsers. However, we do honor the Global Privacy Control (GPC) signal as described in Section 8.4.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised “Last Updated” date. If we make material changes, we will provide prominent notice on the Site or through other communication channels. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Braddock Road Insurance Corporation

Privacy Inquiries

Email: info@personalguaranteeinsurance.com

Website: personalguaranteeinsurance.com