Privacy Policy

Effective date: October 10, 2026

1. Who we are and scope

1.1 This Privacy Policy describes how Online Shipping Insurance Services, Inc., doing business as InsureShip ("InsureShip," "OSIS," "we," "us," or "our"), collects, uses, discloses, and protects personal information. InsureShip is a California corporation and a licensed insurance agency (California Department of Insurance license #0G55434). Coverage offered through InsureShip is underwritten by Navigators, a Hartford company.

1.2 This policy applies to information we collect through insureship.com, our claims portal at claims.insureship.com, our checkout integrations with participating stores, and our phone, email, and other communications. It covers people who buy shipping insurance through InsureShip, people who file or are involved in claims, website visitors, and business contacts at merchants and partners.

1.3 A store that offers InsureShip coverage at checkout has its own privacy policy, which governs the store's own handling of your information. Our insurer has its own privacy notice for information it holds. Neither is controlled by this policy.

1.4 Different laws apply to different information. Information we collect to provide insurance and handle claims is generally governed by insurance and financial privacy laws, including the federal Gramm-Leach-Bliley Act ("GLBA"), the California Financial Information Privacy Act, and the California Insurance Information and Privacy Protection Act (Insurance Code section 791 and following, "IIPPA"). Information that is not covered by those laws, such as most website, cookie, and marketing data, is also governed by the California Consumer Privacy Act as amended ("CCPA") and other state privacy laws, where they apply.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identifiers and contact information: name, postal and shipping address, email address, phone number, and account or reference numbers.
• Order and shipment information we receive from the store: order number, store name, items and their value, shipping method, carrier, tracking number, ship date, and delivery status.
• Claim information: the description of the loss, photographs, invoices, receipts, signed statements, correspondence, carrier records, and other documents you or others provide. Where needed to verify identity or prevent fraud, this may include a copy of an identification document.
• Payment information: details needed to charge premiums and to pay claims, such as card or bank account information. Card payments are handled by our payment processors; we generally receive only limited details such as card type, the last four digits, and transaction records.
• Device and online identifiers: IP address, browser and device type, operating system, cookie and pixel identifiers, pages viewed, referring pages, and approximate location derived from IP address.
• Cookie and pixel data: information collected by cookies, pixels, tags, and similar technologies on our website (see Section 7).
• Communications: emails, chat messages, form submissions, and notes of conversations with our team.
• Call recordings: recordings of phone calls, where we tell you a call is being recorded.
• Business contact information for merchants and partners: name, title, company, and contact details.
• Inferences we draw from the information above, for example that a claim needs additional review.

3. Where we get information

• From you, when you buy coverage, file a claim, contact us, or use our website.
• From the store where you made your purchase, which sends us order and shipment details so we can issue coverage and handle claims.
• From carriers and tracking services, such as tracking and delivery records.
• From our insurer, and from other people involved in a claim, such as a recipient or sender.
• From service providers, including payment processors, fraud-prevention and identity-verification services, and analytics providers.
• Automatically, through cookies, pixels, and similar technologies when you use our website.
• From public sources, where relevant to verifying a claim.

As permitted by IIPPA, we may collect personal information about you from persons other than you, such as the store, carriers, and others involved in a shipment or claim.

4. How we use information

• Issue and administer coverage: confirm eligibility, record coverage for a shipment, charge premiums, process cancellations and refunds, and send service messages.
• Process and investigate claims: receive, verify, evaluate, and pay claims; communicate with you, the store, the carrier, and the insurer; and pursue recovery from carriers or others.
• Prevent and detect fraud and abuse: including identifying unusual claim patterns, verifying identity, and protecting InsureShip, the insurer, stores, and customers.
• Underwriting and loss reporting: report premiums, claims, and loss experience to our insurer, and support pricing and underwriting.
• Comply with law: meet insurance, record-keeping, tax, sanctions, and regulatory requirements; respond to regulators and legal process; and establish, exercise, or defend legal claims.
• Customer service: answer questions, resolve complaints, and train and monitor staff for quality.
• Operate and improve our website and Services: including security, debugging, and analytics.
• Marketing: send information about InsureShip's services to merchants and business contacts, and advertise our services online. You can opt out at any time (see Section 13). We do not use information we receive from a store about its customers to market other products or services to those customers.

We may use automated tools to help detect possible fraud and to route or prioritize claims.

5. How we disclose information

We disclose personal information only as described here and as permitted or required by law:

• Insurers and underwriters, including Navigators, a Hartford company, to provide coverage, handle claims, and report loss experience.
• The store where you made your purchase, to confirm coverage and share order and claim status.
• Carriers, to trace shipments, verify delivery, and pursue recovery.
• Service providers who work on our behalf, such as hosting, e-commerce platform, email, customer support, document handling, and analytics providers, under contracts that limit their use of the information.
• Payment processors, to charge premiums, issue refunds, and pay claims.
• Fraud-prevention services and, where permitted, other insurers or insurance-support organizations, to detect and prevent insurance fraud.
• Regulators, government agencies, and law enforcement, including the California Department of Insurance, when required or permitted by law, including to report suspected insurance fraud.
• Professional advisers, such as lawyers, auditors, and accountants.
• In a corporate transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
• Advertising and analytics partners, through cookies and pixels on our website (see Section 7).
• Others with your consent or at your direction.

6. Insurance privacy notice (GLBA and California)

6.1 Nonpublic personal information

We collect nonpublic personal information about you from the sources described in Section 3. We do not disclose nonpublic personal information about current or former customers to nonaffiliated third parties except as permitted by law, for example to process and service your coverage and claims, to prevent fraud, to comply with law, and to service providers acting on our behalf. We do not disclose it to nonaffiliated third parties for their own marketing, and we do not share it with affiliates for their marketing. If that changes, we will give you any notice and choices the law requires first.

6.2 Notice of information practices (California Insurance Code section 791.04)

• Collection from others. Personal information may be collected from persons other than you, as described in Section 3.
• Types and sources. The types of personal information we collect, and the sources and investigative techniques we may use, are described in Sections 2, 3, and 5 of this policy.
• Disclosures without your authorization. Personal information we collect in connection with an insurance transaction may be disclosed without your prior authorization only as permitted by Insurance Code section 791.13, including to verify information, to detect or prevent criminal activity or fraud, to perform functions in connection with an insurance transaction, to regulators and law enforcement, and in response to legal process.
• Insurance-support organizations. Information obtained from a report prepared by an insurance-support organization may be retained by that organization and disclosed by it to other persons.
• Pretext interviews. We do not use pretext interviews to obtain information in connection with an insurance transaction.
• Access and correction. You have the right to request access to recorded personal information about you that is reasonably locatable and retrievable, and to request that we correct, amend, or delete recorded personal information you believe is inaccurate. See Section 9.3.

Where IIPPA requires your written authorization for a disclosure, we will obtain it.

7. Cookies, pixels, and opt-out

7.1 Our website uses cookies, pixels, tags, and similar technologies, some placed by us and some by third parties such as our e-commerce platform and analytics and advertising partners. They help the website work, remember preferences, measure use, and show and measure ads for InsureShip on other sites.

• Strictly necessary: needed for the website, forms, and claims portal to work and stay secure.
• Functional: remember your choices.
• Analytics: help us understand how the website is used.
• Advertising: help us show and measure InsureShip ads on other websites and platforms.

7.2 Opt-out. The use of advertising and some analytics cookies and pixels may be considered "sharing" of personal information for cross-context behavioral advertising, or "targeted advertising," under California and other state laws. To opt out, visit https://insureship.com/pages/data-sharing-opt-out. Your opt-out applies to the browser and device you use; repeat it on each browser and device.

7.3 Global Privacy Control. We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of sale and sharing for that browser and, if we can associate it with you, for you.

7.4 Do Not Track. Our website does not respond to "Do Not Track" browser signals, which are different from GPC. We do honor GPC as described above.

7.5 You can also block or delete cookies in your browser settings. Some parts of the website may not work without them.

8. California privacy notice (CCPA)

8.1 This section applies to California residents and supplements the rest of this policy. It describes our practices in the past 12 months for personal information that is subject to the CCPA. Information covered by GLBA or the California Financial Information Privacy Act is exempt from much of the CCPA, and some rights below may not apply to it.

8.2 Sources, purposes, and retention are described in Sections 3, 4, and 11.

8.3 No sale for money; sharing for advertising. We do not sell personal information for money. In the past 12 months, we may have "shared" identifiers, internet activity, and approximate geolocation with advertising and analytics partners through cookies and pixels, as described in Section 7. We do not knowingly sell or share the personal information of consumers under 16.

9. Your rights and how to use them

9.1 California consumer rights

Subject to legal exceptions, California residents have the right to:

• Know what personal information we have collected about them, the categories of sources, the purposes, and the categories of third parties to whom we disclosed it, and to receive a copy of specific pieces of information;
• Delete personal information we collected from them;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information (see Section 7);
• Limit the use and disclosure of sensitive personal information (see Section 10); and
• Not be discriminated against for exercising these rights.

We may deny or limit a deletion request where we need the information, for example to administer coverage, investigate or pay a claim, prevent fraud, or comply with insurance record-keeping laws. If we deny a request, we will explain why, to the extent the law allows.

9.2 Other U.S. state rights

Depending on where you live, you may have similar rights to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, or certain profiling. Many state privacy laws do not apply to information governed by GLBA or to licensed insurance businesses. We will honor rights that apply to you under your state's law.

9.3 Insurance access and correction rights (IIPPA)

If you are a California resident (or as otherwise provided by law), you may submit a written request to see and obtain a copy of recorded personal information about you that we hold in connection with an insurance transaction, and to learn the identity of persons to whom we disclosed it within the prior two years where we have that record. We will respond within 30 business days of receiving your request. You may also request in writing that we correct, amend, or delete recorded personal information. Within 30 business days, we will either make the change or tell you why we refused and how you can file a concise statement of what you believe is correct, which we will include with your file and provide as the law requires. Medical information, if any, may be provided through a medical professional you designate. We may charge a reasonable fee for copies as permitted by law.

9.4 How to submit a request

• Email hello@insureship.com with the subject "Privacy Request," or
• Call toll-free 1-866-701-3654, or
• Write to InsureShip, Attn: Privacy, 3211 Cahuenga Blvd W, 2nd Floor, Los Angeles, CA 90068.

To opt out of sharing, use our opt-out page or a GPC signal. You do not need an account to make a request.

9.5 Verification

To protect you, we verify requests to know, delete, and correct by matching information you give us (such as your name, email, order number, store name, or claim number) with information we hold. We may ask for more information if needed. We do not need to verify opt-out requests, but we may deny one we believe is fraudulent. We respond to CCPA requests within 45 days and may extend that by another 45 days with notice.

9.6 Authorized agents

You may use an authorized agent. We may require signed written permission from you and may ask you to verify your identity directly with us, unless the agent has a valid power of attorney under California Probate Code sections 4121 to 4130.

9.7 Appeals

If we decline your request, you may appeal by replying to our decision or emailing hello@insureship.com with the subject "Privacy Appeal" within 60 days. We will respond within the time required by your state's law. If you are not satisfied, you may contact your state attorney general or other regulator. California residents may also contact the California Department of Insurance about insurance privacy concerns.

9.8 Non-discrimination

We will not deny coverage, charge a different price, or provide a different level of service because you exercised a privacy right, except as permitted by law. Some requests, such as deletion of information needed to process a claim, may affect our ability to provide a Service.

10. Sensitive personal information

We use and disclose sensitive personal information (such as payment details, account credentials, and identification numbers provided for a claim) only for purposes permitted by law, including providing the Services you request, verifying claims, preventing fraud, ensuring security, and complying with law. We do not use it to infer characteristics about you. Because we use sensitive personal information only for these permitted purposes, we do not offer a separate "limit" link, but you may contact us with any request or question about it.

11. Retention

We keep personal information as long as needed for the purposes described in this policy: to administer coverage, handle and defend claims, prevent fraud, and comply with insurance record-retention and other legal requirements. Coverage and claim records are generally kept for at least the period required by applicable insurance laws, which is often five years or more after a transaction or claim closes, and longer if needed for an active dispute or legal hold. Website and analytics data is generally kept for a shorter period based on its purpose. When information is no longer needed, we delete it or de-identify it.

12. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls that limit access to people who need it, and vendor oversight. No system is completely secure, and we cannot guarantee security. Please do not send full card numbers or passwords by email. If you believe your information has been compromised, contact us right away.

13. Marketing communications

You can opt out of marketing emails at any time by using the unsubscribe link in the email or by emailing hello@insureship.com. We will still send service messages about your coverage, claims, and account. Insured customers who come to us through a store do not receive marketing from InsureShip about other products or services.

14. Children

Our website and Services are not directed to children under 16, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it as appropriate.

15. Users outside the United States

InsureShip is based in the United States and offers its Services from the United States, including coverage for some international shipments. If you use the website or submit information from another country, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, where data protection laws may differ from those in your country. Where the law of your country gives you additional rights, such as rights to object to processing or to complain to a local data protection authority, you may contact us to exercise them, and we will respond as required by that law.

16. California "Shine the Light"

California Civil Code section 1798.83 lets California residents request information about disclosures of certain personal information to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. You may send a request to hello@insureship.com with the subject "Shine the Light Request" or by mail to the address below.

17. Changes to this policy

We may update this policy from time to time. We will post the updated policy here with a new effective date and, where required by law, notify you directly. If a change materially affects how we use or disclose information we already hold, we will provide any notice or obtain any consent the law requires.

18. Contact us

Online Shipping Insurance Services, Inc. (InsureShip)
Attn: Privacy
3211 Cahuenga Blvd W, 2nd Floor, Los Angeles, CA 90068
Toll-free: 1-866-701-3654
Email: hello@insureship.com
Opt out of sharing: https://insureship.com/pages/data-sharing-opt-out