Privacy Policy

MJ Insurance, Inc. dba The MJ Companies and our affiliates (hereinafter collectively referred to as “MJ” “us,” “we,” “our,” or “Company”) has created this Privacy Policy to disclose how we collect, use, share, and protect information about you, as well as to inform you of privacy rights you may have and how to exercise them. MJ is committed to protecting the privacy and security of your information. This Privacy Policy applies to anyone who interacts with MJ through our offices, websites, products, and services (collectively, our “Services”).

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we may use or disclose your information. By accessing or using our Services, you consent to the use of information that is collected, submitted, used or shared as described in this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Services. This Privacy Policy may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

This Privacy Policy applies to the personal information of users of our Services except as described below.

This Privacy Policy does not apply to information collected by or provided in connection with an individual’s current or former employment or independent contractor arrangement with MJ. If you are an MJ employee, independent contractor, or applicant for employment, please see the MJ Notice at Collection for California Employees and Applicants for information about how MJ collects, uses, processes, discloses, shares, and retains employment information not covered by this policy. 

This Privacy Policy applies to information collected from consumers or processed in MJ’s capacity as a data controller under applicable data protection laws. Data collected, used, or shared in MJ’s capacity as a data processor is governed by relevant contracts or service agreements and the data controller’s privacy policy and is outside of the scope of this Privacy Policy.

This Privacy Policy does not apply to the practices of third parties that we do not own or control even if you access the third-party site from our website(s) and/or application(s) (collectively, our “Website”).  We have no control over or responsibility regarding the information collected from you by others, such as third-party websites that you access through links on our Website. Instead, such information practices are governed by those entities’ privacy policies. Please review the privacy policies of any third-party websites for information on how those entities collect and use your information.

This Privacy Policy does not apply to Protected Health Information (“PHI”) as defined by HIPAA or other applicable laws. 

Personal information means any information that identifies, relates to, describes, or could be reasonably associated or linked with a particular person or household. It also includes other information that may be associated with you, such as your usage data, location, preferences, or interests, if that information can be used to identify you, your household, or your device, or any other information as otherwise defined under applicable law. Personal information does not include publicly available information from government records or deidentified or aggregated consumer information.

The types of personal information we collect about you depend on your interactions with us and are described in more detail below.

MJ collects the following types of information from you and other users who use our Website or Services:

We also collect your communications with us, preferences, and other information you provide to us, including any messages (including via online chat feature), opinions, and feedback that you provide to us, your user preferences (such as in receiving updates or marketing information), and other information that you share with us when you contact us directly (such as for customer support services).

Sensitive Information. We may process the following categories of sensitive personal Information when you use our Services:

In some instances, MJ collects or processes Sensitive Information to infer characteristics about you, among other purposes.  Depending on your place of residence, you may have the right to request that MJ limit the use and disclosure of your Sensitive Information by contacting us via the information in the CONTACT US section below.    

We generally collect personal information and create and maintain records about individuals for our legitimate business purposes and in relation to the Services we provide to you. We collect (1) information you provide to us; (2) information we may automatically collect; and (3) information we may receive from third parties. 

We collect any other information or content you provide to us, such as when you provide feedback about our products or services or make other submissions to us or use other features of our Services that may be offered from time to time, which may require the collection of certain personal information in order to utilize the features. Examples of user content data may include information about your opinions, feedback, preferences, and any other personal information you choose to provide in your interactions with us.

MJ may use the information it collects in a variety of ways for its business or commercial purposes, such as to:

We may disclose your personal information to third parties to help provide our Services to you. For instance, we may disclose your information with our service providers to respond to your requests or to provide customer service. We may also provide your personal information to third parties who assist us in providing certain services. For example, we may provide the information we collect from you to our cloud hosting service providers, or our payment card processing providers. We may also disclose your information to our affiliates. We may disclose aggregated information about our user and information that does not identify any individual without restriction.

We may also disclose your information for the following purposes:

We may disclose your information to the following types of entities and third parties:

We have “sold” or “shared” the following categories of Personal Information. For purposes of this Privacy Policy, “sold” or “sale” means the disclosure of Personal Information for monetary or other valuable consideration. “Shared” means disclosing Personal Information for cross context behavioral advertising.

Over the last twelve (12) months, we have disclosed for a business purpose the following categories of personal information:

MJ’s offices are located in the United States and our Services are not directed to clients in other jurisdictions.  If you are located in the European Economic Area (“EEA”) and you use our Services, this will involve transferring your personal information outside of the EEA. Many of our external third parties are based outside of the EEA, so their processing of your personal information will involve a transfer of information outside of the EEA. For example, MJ hosts the information it collects at its data center in the United States. As a result, your information may be subject to access requests from governments, courts, law enforcement officials and other lawful authorities in another jurisdiction according to its laws. Subject to the applicable laws, we will use reasonable efforts to ensure that appropriate protections are in place to maintain protections on the personal information.

We will retain your personal information for as long as necessary to provide our Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected. Under applicable regulations, we will keep records containing client personal information, account opening documents, communications, and anything else as required by applicable laws and regulations. We will not retain your personal information or Sensitive  Information longer than reasonably necessary for the purposes for which the information was collected.

We may rectify or remove incomplete or inaccurate information, at any time and at our own discretion.

MJ uses reasonable, appropriate, and customary procedures and technologies to help protect the confidentiality of any personal information we collect.  MJ employs reasonable administrative, physical, and technical safeguards to protect the information we collect, process, and store.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

However, no website, network, or system can be absolutely protected against intentional or malicious intrusion attempts despite taking appropriate and reasonable precautions. Furthermore, MJ does not control the devices, computer, or network through which you access the Website or over which you may choose to send personal information or other information to us, and therefore cannot prevent potential interceptions or compromises to your information while in transit. MJ makes no guarantee as to the security, integrity or confidentiality of any information transmitted to or from the Website. MJ is committed to safeguarding your information to the best of its ability but cannot guarantee the security of electronic communications or transmission made over the Internet.

We and/or certain service providers operating on our behalf may collect information about your activity, or activity on devices associated with you over time, on our sites and applications, and across non-affiliated websites or online applications.  We may collect this Information by using certain technologies, such as cookies, web beacons, pixels, software developer kits, third party libraries, and other similar technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.  

You are in control of how you want to allow cookies to be used on your devices. Most internet browsers are initially set to accept cookies. You may set your browser to block or otherwise control what cookies your browser or device accepts via your settings. Additionally, you can choose to modify your settings and delete cookies that are otherwise stored on your device. Please note that, if you choose not to accept cookies, some Website features and the personalization of our Services may no longer work for you. You will continue to receive advertising material, but it will not be tailored to your interests. Please consult the instructions provided by your browser or your mobile device manufacturer to determine how you can limit the placement of and/or remove cookies or other similarly used technologies.

Our Website is not currently designed to respond to “Do Not Track” signals. “Do Not Track” is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable “Do Not Track” by visiting the “Preferences” or “Settings” page of your web browser. Do Not Track is different from Global Privacy Controls (“GPC”), which may notify websites of consumers’ privacy preferences regarding the sale or sharing of Personal Information, or the use of Sensitive Information.     

Third parties may collect data that relates to you. We cannot control third parties’ responses to Do Not Track signals or other such mechanisms. Third parties’ use of data relating to you and responsiveness to Do Not Track signals is governed by their respective privacy policies.

All of our Services, including our Website, are intended for adult audiences, and are not directed to or meant for individuals under the age of sixteen (16) (“Children”). As such, we do not knowingly collect personal information from anyone under the age of sixteen (16), and Children under sixteen (16) may not use our Website or any of our Services.  If you are under sixteen (16), do not attempt to register for or use any of our Services, including our Website, and do not provide us any personal information about yourself. We may collect information pertaining to Children under sixteen (16) only if provided by a parent or guardian in the course of adding the Child as a dependent with regard to the Services.

If you are a parent or guardian and you are aware that your child has violated this Privacy Policy and provided us with personal information, please contact us. If we become aware that we have collected personal information from Children without verification of parental consent, we will take steps to delete that information.

MJ does not knowingly sell or share data of consumers under the age of sixteen (16).

MJ has in place policies and procedures to facilitate the exercise of privacy rights available to California residents. To the extent any California data privacy law applies to the collection of your Information, this supplemental section of our Privacy Policy outlines the rights that California residents may have, and how they can exercise those rights.  This notice applies solely to California residents.  We provide the supplemental section below to comply with the California Consumer Privacy Act [as amended by the California Privacy Rights Act (referred to collectively hereinafter as CCPA)] and any terms defined in the CCPA have the same meaning when used below. 

Please contact us utilizing the methods listed in the “Contact Us” Section below in relation to exercising these rights. We may ask you to provide information about yourself so that we can verify your identity as part of this process. This information may include your name, email address, and any other information necessary to reasonably verify your identity, to ensure that your information is not shared with anyone impersonating you. We may ask for additional information if we have difficulty confirming your identity. Once we have verified your identity, we will work to fulfill your request in a timely manner. Please note there may be some situations in which we are unable to fulfill your request, such as if we cannot find any information about you within our systems. Additionally, we may not be able to honor a deletion request in some situations, such as if your information is necessary to fulfill the Services you requested or meet a legal obligation. We will inform you whether we can fulfill your rights request.

Authorized Agent

Under California law a consumer can appoint an “authorized agent” to make certain verifiable requests upon their behalf, such as the right to know what information we collect about the consumer or to request deletion of the consumer’s information. An “authorized agent” may submit a request on behalf of a California resident who has authorized the agent to act on their behalf. Because the security and privacy of your information is paramount, we will ask that you identify such persons and directly confirm that such persons are authorized to act as your agent and exercise your applicable rights under California law in such situations. This may require us to contact you directly and alert you that an individual has claimed to be your agent and is attempting to access or delete your information. We will also independently verify your identity to ensure that an unauthorized person is not attempting to impersonate you and exercise your rights without authorization. We will not share your information or honor any other requests in those situations where you cannot or do not grant permission in writing for an identified authorized agent to act on your behalf, or where we cannot independently verify your identity.

To the extent any Colorado data privacy law applies to the collection of your Information, this supplemental section of our Privacy Policy outlines the individual rights guaranteed to Colorado residents and how to exercise those rights and applies solely to Colorado residents.  We provide the supplemental section below to comply with the Colorado Privacy Act (“CPA”) and any terms defined in the CPA have the same meaning when used below.   

Your Rights under CPA. Subject to certain exceptions you may be entitled to the following rights:

Where exercising your right to access, you have the right to request and obtain a copy of your Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Information to another data controller without hindrance (“data portability”).

You may make an authenticated consumer request free of charge under the CPA once within a twelve (12) month period.  We reserve the right to charge a reasonable fee for a second or subsequent request within the same twelve (12) month period. To exercise the rights described above, see the Exercising Your Rights section below.

Sensitive Data

We process sensitive data including sensitive data inferences.  When we process sensitive data, we do so with your consent.

Authorized Agent

You may use an authorized agent to submit verifiable consumer requests on your behalf.  An authorized agent is a natural person or a business entity that you have authorized to act on your behalf.  If you use an authorized agent, we will require: (1) proof of written permission for the authorized agent to make requests on your behalf, and identity verification from you; or (2) proof of power of attorney pursuant to Colo. Rev. Stat. § 15-14-705.  We may deny a request from an authorized agent that does not submit proper verification proof.

To the extent any Connecticut data privacy law applies to the collection of your Information, this supplemental section of our Privacy Policy outlines the individual rights guaranteed to Connecticut residents and how to exercise those rights and applies solely to Connecticut residents.  We provide the supplemental section below to comply with the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”) and any terms defined in the CTDPA have the same meaning when used below.   

Your Rights under CTDPA. Subject to certain exceptions you may be entitled to the following rights:

Where the processing is carried out by automated means, and subject to certain exceptions, you have the right to request and obtain a copy of your information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another data controller without hindrance.

Within sixty (60) days of receipt of your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions.  If we deny your appeal, you may contact the Connecticut Office of the Attorney General by:

You may make an authenticated consumer request under the CTDPA once within a twelve (12) month period.  To exercise the rights described above, see the Exercising Your Rights section below.

Authorized Agent

You may use an authorized agent to submit verifiable consumer requests on your behalf.  An authorized agent is a natural person or a business entity that you have authorized to act on your behalf.  If you use an authorized agent, we will require: (1) proof of written permission for the authorized agent to make requests on your behalf, including through technology means, and identity verification from you; or (2) proof of power of attorney.  We may deny a request from an authorized agent that does not submit proper verification proof.

Additional Information 

To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. 

To the extent any Utah data privacy law applies to the collection of your information, this supplemental section of our Privacy Policy outlines the individual rights guaranteed to Utah residents and how to exercise those rights and applies solely to Utah residents.  We provide the supplemental section below to comply with the Utah Consumer Privacy Act (“UCPA”) and any terms defined in the UCPA have the same meaning when used below.   

Your Rights under UCPA. Subject to certain exceptions you may be entitled to the following rights:

Where the processing is carried out by automated means, and subject to certain exceptions, you have the right to request and obtain a copy of your information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another data controller without hindrance (“data portability”).

You may make an authenticated consumer request free of charge under the UCPA once within a twelve (12) month period.  We reserve the right to charge a reasonable fee for a second or subsequent request within the same twelve (12) month period.  To exercise the rights described above, see the Exercising Your Rights section below.

To exercise any of the rights described above, please submit a verifiable consumer request to us via the methods described below.  The verifiable consumer request must:

To help protect your privacy and maintain security, if you request access to or deletion of your Information, we will take steps and may require you to provide certain information to verify your identity before granting you access to your Information or complying with your request.  In addition, if you ask us to provide you with specific pieces of Information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose Information is the subject of the request.  Only you or your authorized agent may make a verifiable consumer request related to your Information.  If you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us (as described above). You may also make a verifiable consumer request on behalf of your minor child. 

Contact Us

Please direct any questions you may have about this Privacy Policy to any one of the following:

MJ reserves the right to revise this Privacy Policy from time to time at our sole discretion. Our Website will link to our current Privacy Policy and any changes we make will be reflected in an update to our Privacy Policy and by revising the “last updated” date at the top of this Privacy Policy. You are advised to check back to this page periodically to learn of any changes made to our policies. Changes to this Privacy Policy are effective when they are posted on this page.  

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.