Privacy Policy and SMS Communications Notice

Last updated March 25, 2026

This Privacy Policy and SMS Communications Notice (the “Notice”) describes how ACG Insurance Group, together with its parents, subsidiaries, affiliates, successors, and assigns (collectively, “ACG,” “we,” “our,” or “us”), collects, uses, discloses, retains, and otherwise processes information about individuals who interact with us, including individuals who visit our websites located at withacg.com and any affiliated or successor domains operated by ACG (the “Sites”), request a quote or consultation, communicate with our licensed insurance producers, or otherwise inquire about or purchase insurance products or services offered through ACG (collectively, the “Services”). By accessing or using the Services, by submitting a contact form, or by communicating with us by telephone, electronic mail, short message service (“SMS”), or any other means, you acknowledge that you have read and understood this Notice and consent to the practices described herein to the extent permitted by applicable law.

1. Scope and Application

This Notice applies to personal information that ACG collects in connection with the Services. This Notice does not apply to information collected by third parties, including but not limited to insurance carriers, underwriters, third-party administrators, marketing partners, comparison platforms, or other entities to which we may refer or transmit information at your request or with your authorization. The privacy practices of such third parties are governed by their own privacy policies, which we encourage you to review independently. Nothing in this Notice creates, or is intended to create, any contractual or other legal right enforceable by any party against ACG, and ACG expressly reserves the right to enforce or decline to enforce any provision hereof in its sole and absolute discretion.

2. Definitions

For purposes of this Notice, “personal information” means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, and shall be construed consistent with applicable federal and state privacy statutes, including but not limited to the Gramm-Leach-Bliley Act, 15 U.S.C. § 6801 et seq. (“GLBA”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), the Health Insurance Portability and Accountability Act of 1996, 42 U.S.C. § 1320d et seq. (“HIPAA”), the Telephone Consumer Protection Act of 1991, 47 U.S.C. § 227 (“TCPA”), the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq. (“FCRA”), and any successor or analogous statutes, regulations, or rules promulgated thereunder. “Processing” means any operation or set of operations performed upon personal information, whether or not by automated means, including but not limited to collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

3. Categories of Information Collected

We may collect the following categories of information from or about you, depending on the nature of your interaction with ACG:

• Identifiers. Full legal name, postal address, e-mail address, telephone number, date of birth, gender, marital status, and government-issued identifiers, including Social Security number or taxpayer identification number where required for the procurement of insurance coverage or compliance with applicable tax-reporting obligations.
• Insurance application information. Household composition and dependents, annual income, employment status, employer information, citizenship or immigration status as required for ACA eligibility determinations, prior or current insurance coverage, policy numbers, prior claims history, requested coverage type, beneficiary designations, and replacement information disclosed in connection with the replacement of an existing policy.
• Health-related information. Self-reported medical history, height and weight, tobacco or nicotine usage, current medications, pre-existing conditions, prescription history, and other health information that you voluntarily disclose in connection with an application for health, life, supplemental, or related insurance products. Such information will be treated in accordance with applicable confidentiality and nondiscrimination requirements, including those imposed by HIPAA and the Genetic Information Nondiscrimination Act of 2008.
• Financial information. Bank account or routing information, payment-card information, premium-financing terms, and similar financial data necessary to process premium payments or assess eligibility for premium-finance products.
• Communications. The substance and metadata of any written, telephonic, electronic, or SMS communications between you and ACG or our representatives, including call recordings where permitted by applicable law, transcripts, voicemails, message logs, and related records of consent.
• Online and device information. Internet Protocol (IP) address, browser type and version, operating system, device identifiers, referring and exit pages, pages viewed, dates and times of access, clickstream data, geolocation information at the city level, and information collected through cookies, web beacons, pixel tags, and other similar technologies.
• Inferences. Inferences drawn from any of the foregoing to create a profile reflecting your preferences, characteristics, predispositions, behavior, or attitudes for the purpose of identifying and recommending insurance products that may be appropriate for you or your household.

4. Sources of Information

We collect personal information directly from you when you submit a form, request a quote, call or correspond with us, or otherwise communicate with our representatives. We also collect information automatically through your use of the Sites, and from third parties including but not limited to insurance carriers, consumer reporting agencies (subject to the FCRA), the Medical Information Bureau, prescription drug databases, motor vehicle records, public records, marketing partners, lead aggregators, comparison-shopping platforms, and other commercially available sources, in each case as permitted by applicable law and as authorized by you in connection with your insurance inquiry or application.

5. Purposes of Use

We use personal information for the following purposes:

• to evaluate your eligibility for, recommend, quote, market, place, service, renew, replace, or terminate insurance products and related services;
• to communicate with you regarding your inquiry, application, policy, claim, or account, including transactional, administrative, service-related, and regulatory communications;
• to comply with our legal, regulatory, licensing, recordkeeping, anti-money-laundering, fraud-prevention, sanctions-screening, and tax obligations under federal, state, and local law;
• to operate, maintain, secure, debug, audit, analyze, and improve the Services and the technology and infrastructure that supports them, and to conduct research, planning, and quality-assurance activities;
• to detect, investigate, prevent, and respond to fraudulent, deceptive, unlawful, or otherwise harmful conduct, and to enforce our terms of use and other agreements;
• to defend, exercise, or assert legal claims, including responding to subpoenas, court orders, regulatory inquiries, civil discovery, or other lawful process; and
• for any other purpose for which you have provided your consent or as otherwise permitted or required by applicable law.

6. Disclosure of Personal Information

We may disclose personal information to the following categories of recipients, in each case only to the extent reasonably necessary to accomplish the purposes described in Section 5 and as permitted by applicable law:

• insurance carriers, reinsurers, underwriters, managing general agents, third-party administrators, claims adjusters, premium-finance companies, and other parties to or beneficiaries of an insurance transaction in which you are a participant;
• licensed insurance producers, brokers, and sub-producers affiliated with or appointed by ACG;
• service providers and processors that perform services on our behalf, including hosting, telecommunications, customer-relationship management, electronic-mail delivery, analytics, advertising attribution, identity verification, fraud screening, and payment processing, in each case subject to written confidentiality and data-protection obligations;
• professional advisors, including legal counsel, accountants, auditors, and consultants;
• regulatory and governmental authorities, including state departments of insurance, the Internal Revenue Service, the Centers for Medicare & Medicaid Services to the extent applicable, and other agencies with jurisdiction over ACG or its activities;
• parties to actual, contemplated, or proposed corporate transactions, including mergers, acquisitions, financings, reorganizations, sales of assets, joint ventures, or bankruptcy proceedings, together with their advisors; and
• any other person or entity with your consent or at your express direction.

7. SMS Communications

By providing a mobile telephone number to ACG or to any platform operated by or affiliated with ACG, you expressly consent under the TCPA and any analogous state statutes to receive recurring autodialed, prerecorded, artificial-voice, and manually-initiated SMS or MMS messages from ACG and its representatives related to your insurance inquiry, application, eligibility, policy, appointment scheduling, coverage information, billing, claims, customer-service matters, and similar transactional and informational communications. Consent to receive such messages is not a condition of any purchase. Message and data rates may apply, and such rates are determined by your wireless carrier and not by ACG. Message frequency varies based on the status and activity of your inquiry; you may receive between two (2) and ten (10) messages per month while your inquiry or relationship with ACG is active. To opt out of SMS messages at any time, reply STOP to any message; you will receive a single confirmation that no further messages will be sent under that program. For assistance, reply HELP or submit a request through the consultation form on our home page. Wireless carriers are not liable for delayed, undelivered, or misdirected messages. SMS service is generally available through all major U.S. wireless carriers, but ACG does not guarantee availability on any particular carrier or device. ACG does not transfer mobile telephone numbers or SMS opt-in consent data to third parties for those third parties’ own marketing purposes.

8. Cookies and Online Tracking

The Sites use cookies and similar technologies to operate the Sites, remember preferences, measure usage, conduct analytics, attribute marketing performance, and deliver advertising. Certain of these technologies are operated by third parties, including analytics providers and advertising networks, which may collect information about your visits to the Sites and other websites over time and across services. You may control the use of cookies through your browser settings, and you may opt out of certain interest-based advertising by visiting the Digital Advertising Alliance’s opt-out page at optout.aboutads.info or the Network Advertising Initiative’s opt-out page at optout.networkadvertising.org. Disabling cookies may affect the functionality of the Sites. Because no consistent industry standard exists for “Do Not Track” browser signals at this time, the Sites do not respond differently to such signals.

9. Data Retention

We retain personal information for the period reasonably necessary to fulfill the purposes for which it was collected, including for the duration of any insurance policy or relationship between you and ACG, and thereafter for such additional period as is required by applicable law, regulation, statute of limitations, or our internal recordkeeping policies. Records relating to insurance transactions are generally retained for the longer of (i) the period required by the producer licensing laws of the applicable state, or (ii) seven (7) years following the termination of the relevant policy or relationship. Following the applicable retention period, we will delete, destroy, anonymize, or de-identify the information in accordance with our then-current data-disposal procedures. We may retain de-identified or aggregated information for any period and for any lawful purpose without further notice to you.

10. Information Security

We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information, consistent with applicable legal requirements, including the GLBA Safeguards Rule and applicable state insurance data-security laws, and consistent with industry-standard practices. Notwithstanding such safeguards, no method of electronic transmission or storage is completely secure, and we cannot and do not guarantee the absolute security of any information. In the event of a security incident involving personal information, ACG will provide notice to affected individuals and to applicable regulatory authorities as and to the extent required by applicable law.

11. Your Choices and Rights

Subject to applicable law and subject to verification of your identity in a manner reasonably acceptable to ACG, you may request that we (a) confirm whether we are processing personal information about you and provide access to such information; (b) correct inaccurate personal information; (c) delete personal information, subject to applicable exceptions, including exceptions for compliance with legal obligations, exercise or defense of legal claims, and recordkeeping requirements applicable to insurance producers; (d) limit our use of certain sensitive personal information; and (e) provide a portable copy of personal information in a structured, commonly used, and machine-readable format. You may also withdraw any consent you previously provided, opt out of marketing communications, and exercise any additional rights afforded to you under applicable law. Certain rights apply only to residents of specific U.S. states; nothing in this Notice purports to grant rights to any individual who is not entitled to them under applicable law. We will respond to verified requests within the period required by applicable law and may decline a request to the extent permitted or required by applicable law.

12. State-Specific Provisions

California

If you are a California resident, the CCPA affords you specific rights with respect to your personal information, including the right to know, right to delete, right to correct, right to limit the use of sensitive personal information, and right to opt out of certain disclosures. To exercise these rights, please submit a request through the consultation form on our home page and identify the request as a California privacy request. ACG will not discriminate against you for exercising any of your CCPA rights. Personal information collected, used, or disclosed in connection with insurance transactions may, in whole or in part, be exempt from certain provisions of the CCPA pursuant to Cal. Civ. Code § 1798.145(e) and the federal GLBA exemption set forth at Cal. Civ. Code § 1798.145(c).

Other States

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia may have additional rights with respect to their personal information under applicable state law. We will respond to verified consumer requests in accordance with applicable law and applicable exemptions, including those available for licensed insurance producers and information processed pursuant to GLBA.

13. Children’s Privacy

The Services are not directed to, and we do not knowingly collect personal information from, children under the age of thirteen (13). If we become aware that we have collected personal information from a child under thirteen without verifiable parental consent, we will take steps to delete such information. Parents or guardians who believe their child has provided personal information to us may submit a request through the consultation form on our home page.

14. International Users

The Services are intended for residents of the United States. If you are accessing the Services from outside the United States, you acknowledge that your information will be transferred to, processed, and stored in the United States, where data-protection laws may differ from those in your jurisdiction, and you consent to such transfer and processing.

15. Changes to This Notice

We may amend this Notice from time to time in our sole discretion. The revised Notice will be effective as of the date set forth above as the “Last updated” date. Material changes will be communicated as required by applicable law. Your continued use of the Services following the effective date of any such amendment constitutes acceptance of the revised Notice.

16. Governing Law and Construction

This Notice and any dispute arising out of or relating to it shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict-of-laws principles, except to the extent that the laws of another jurisdiction are mandatorily applicable. The headings used in this Notice are for convenience only and shall not be used in the interpretation or construction of any provision hereof. If any provision of this Notice is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect.

17. Contact

For questions concerning this Notice, to submit a request regarding your personal information, or to communicate with the office of the ACG Privacy Officer, please submit a request through the consultation form on our home page and identify your inquiry as a privacy or data-rights matter. We will respond within the period required by applicable law.