U.S. Multistate Privacy Notice
Privacy Notice for residents of the following states:
Last Updated: June 15, 2026
This Privacy Notice applies to the processing by The Baldwin Group and its affiliates, (“Baldwin” “we,” “us,” or “our”) of information that is linked or reasonably linkable to an identified or identifiable natural person (“Personal Data”) who is resident in a state that has passed a comprehensive consumer privacy law substantially similar to one of the following laws (to the extent such laws apply to Baldwin):
Connecticut Data Privacy Act
Minnesota Consumer Data Privacy Act
Montana Consumer Data Privacy Act
Oregon Consumer Privacy Act
This Privacy Notice does not apply to Personal Data collected pursuant to various exemptions including for (i) information related to an individual acting in a commercial or employment context, and (ii) de-identified or publicly available information.
How we process Personal Data
Please review the below chart for information about the categories of Personal Data we process; the purpose for processing Personal Data; the categories of Personal Data that we share with third parties, if any; and the categories of third parties, if any, with whom we share Personal Data.
| Category of Personal Information Collected | Category of Third Parties Personal Information is Sold or Shared for Advertising Purposes |
|---|---|
| Identifiers A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, or other similar identifiers. | Only online identifiers shared with: – Advertising networks – Data analytics providers – Social networks |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Personal Information does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records. Note: Some personal information included in this category may overlap with other categories. | N/A |
| Protected classification characteristics under California or federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | N/A |
| Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Online browsing and purchase history shared with: – Advertising networks – Data analytics providers – Social networks |
| Biometric information Physiological, biological, or behavioral, characteristics (including DNA) that can be used to establish individual identity, or imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template such as a faceprint, a minutiae template, or a voiceprint, can be extracted and keystroke patterns or rhythms, gait patterns, or rhythms, and sleep, health or exercise data that contain identifying information. We do not collect this category of personal information. | N/A |
| Internet or other electronic network activity Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. | – Advertising networks – Data analytics providers – Social network |
| Geolocation data Physical location or movements. | N/A |
| Sensory data Audio, electronic, visual, thermal, olfactory, or similar information. | N/A |
| Professional or employment-related information Current or past job history or performance evaluations. | N/A |
| Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99) Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | N/A |
| Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | – Advertising networks – Data analytics providers – Social network |
| Sensitive Personal Information Social Security Number, driver’s license, state identification card, or passport number; Account log-in financial account, debit card, or credit card number in combination with any required security access code, password, or credentials allowing access to the account; Precise geolocation; Racial or ethnic origin, religious or philosophical beliefs, or union membership; Contents of mail, email or text messages unless Company is intended recipient of the communication; or Genetic Information. | N/A |
We do not sell your Personal Data, as the meaning of “sale” is commonly understood, but we may disclose certain cookies information about you with our third party service providers who assist us with website operations. This may constitute a “sale” under applicable law. To opt-out, please see review your rights below. To learn more about our online collection of information, or to modify your cookies settings, please review our online privacy policy: [insert link to Baldwin online privacy policy].
We may use Personal Data we collect to train Artificial Intelligence models to support the processing activities described in this Privacy Notice.
Categories of Sources of Personal Information
Baldwin has collected Personal Data from the following sources: from you and from others including insurance companies that we work with; third party claims handlers who are involved in a claim or assist us in investigating or processing claims, including witnesses and external claims data collectors and verifiers; our business partners with whom we work to provide insurance products, public sources, such as public databases (where permitted by law); from our affiliates; from data brokers; insurance brokers or other intermediaries; third party evidence providers; healthcare service providers; financial institutions; and individuals that you may be associated with (e.g. joint account holders, company employees or directors, family members, etc.
Purposes of Processing Your Personal Information
Baldwin collects, discloses, and otherwise processess your Personal Data, both directly and through service providers, contractors, and third parties, your Personal Data for the following purposes: to provide our services and fulfil our contractual obligations to you and other third parties; to review, process and assist with claims; to conduct data analysis, which helps us assess risks, price our products appropriately and improve our services; to help us prevent and detect fraud, money laundering, terrorism and other crimes; to help develop new, and improve existing, services; to operate and expand our business activities; to carry out background checks, where lawful; to perform human resources and administrative activities in connection with our services; to exercise, defend and protect our legal rights or the rights of third parties; to comply with legal obligations and to cooperate with regulatory bodies to which we are subject; for research and development of new insurance products; to audit our business; and for marketing purposes.
Your Privacy Rights
Submitting Consumer Requests
You may submit a consumer request to us by email at LegalCompliance@baldwin.com or via phone at (888) 971-9520.
Only you, or someone legally authorized to act on your behalf, may make a consumer request related to your Personal Data. You may also make a consumer request on behalf of your minor child.
Making a consumer request does not require you to create an account with us.
When you submit a consumer request, we will take steps to verify your request by email or telephone call. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
We will only use Personal Data provided in a consumer request to verify the requestor’s identity or authority to make the request.
We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.
Right to Appeal
You may have the right to appeal our decision or response to your request. To exercise your right to appeal, you can submit an appeal request using the same method used to submit your original request, including by contacting us at any time as set forth below. If you wish to file a complaint related to your appeal, please visit the website of your state’s data privacy regulator.
Right to Know and Access
You have the right to request that we confirm whether or not we are processing your Personal Data and to request access to that Personal Data. To submit a request, please review the section above titled, “Submitting Consumer Requests.”
Right to Obtain a Copy of Personal Data
You have the right to obtain a copy of your Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller, where the processing is carried out by automated means. To submit a request please review the section above titled, “Submitting Consumer Requests.”
Right to Request Deletion
You have the right to request that we delete Personal Data about you that we process. To submit a request, please review the section above titled, “Submitting Consumer Requests.”
You should be aware, however, that we are allowed to retain your Personal Data under certain conditions, even if you have asked us to delete it, such as when retaining your Personal Data is necessary for us to complete a transaction with you or provide you with a good or service you have requested. We will notify you of any denial of your deletion request and the reason for such denial.
Right to Request Correction
You may have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. To submit a request, please review the section above titled, “Submitting Consumer Requests.”
Right to opt out of certain processing
Consumers have the right to opt out of certain categories of processing of Personal Data. These include the right to opt out for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To submit a request to opt-out, please review the section above titled, “Submitting Consumer Requests.” You may also withdraw your consent to our processing where such processing is permitted only based on your consent.
Contact for Additional Information
If you have questions about this policy, please contact us at:
Your journey begins here
When you decide to partner with us, you choose to protect your business and open the door to new ventures and opportunities.