California Privacy Notice

This California Privacy Notice supplements the information contained in our Privacy Policy and applies solely to California residents. This Notice is intended to comply with the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), and related implementing regulations.

As used in this Notice, "personal information" has the meaning assigned under California law.

Scope

Insurance, Financial, and Health Information Privacy

Information We Collect

Sources of Information

How We Use Personal Information

Disclosure of Personal Information

Sale and Sharing of Personal Information

Retention of Personal Information

California Privacy Rights

Authorized Agents

Verification of Requests

Service Provider and Contractor Relationships

Exercising Privacy Rights

Changes to This California Privacy Notice

Contact Us

Forrest T. Jones & Co, Inc.® (“FTJ”, "Company," "we," "our," or "us") is a licensed insurance agency and broker that markets, administers, services, and supports insurance products and association-sponsored insurance programs.

Depending on the circumstances, we may collect and process personal information:

• As an insurance broker;
• As a licensed insurance agency;
• As an administrator of insurance programs;
• As a service provider or contractor acting on behalf of insurers, associations, trusts, employers, or other program sponsors; or

Certain personal information collected, processed, maintained, or disclosed in connection with insurance transactions, financial products and services, insurance administration activities, healthcare operations, employee benefits, and related services may be governed by federal and state privacy laws that differ from the CCPA/CPRA.

These laws may include:

• The Gramm-Leach-Bliley Act ("GLBA");
• The California Insurance Information and Privacy Protection Act ("IIPPA");
• The Health Insurance Portability and Accountability Act ("HIPAA"); and
• Other applicable federal and state privacy laws.

Information collected in connection with insurance applications, underwriting, enrollment, eligibility determinations, policy issuance, policy servicing, claims administration, customer service, fraud prevention, and other insurance transaction activities may qualify for exemptions under applicable federal or state law. As a result, certain California privacy rights described in this Notice may not apply to all information we maintain. Where applicable, we process and protect personal information in accordance with those laws.

This Notice primarily describes our privacy practices and California privacy rights with respect to personal information that is not otherwise exempt from the CCPA/CPRA, including information collected from visitors to our websites, individuals who interact with our marketing and advertising activities, job applicants, employees, and former employees. California residents in these categories may have privacy rights under the CCPA/CPRA, subject to applicable exceptions and limitations, including the rights to know, access, correct, delete, and obtain information regarding the collection, use, disclosure, retention, and sharing of their personal information.

During the preceding twelve (12) months, we may have collected the following categories of personal information:

Identifiers

• Name
• Mailing address
• Telephone number
• Email address
• Online identifiers
• IP address

Personal Records Information

• Insurance application information
• Enrollment information
• Customer account information
• Financial information

Protected Classification Information

• Age
• Gender
• Marital status (where relevant to insurance products)

Commercial Information

• Insurance products purchased or considered
• Coverage information
• Transaction history

Internet or Electronic Network Activity

• Browser information
• Device information
• Website usage information
• Cookie and analytics information for operational and performance-related purposes

Geolocation Data

• Approximate location information derived from IP address or device data

Professional or Employment Information

• Employer information
• Occupation
• Employment-related information

Sensitive Personal Information

Where necessary and permitted by law:

• Social Security number
• Driver's license information
• Financial account information
• Certain health-related information
• Insurance eligibility information

We may collect personal information from:

• Directly from you;
• Insurance applications and forms;
• Insurance carriers;
• Associations and membership organizations;
• Employers and plan sponsors;
• Third-party administrators;
• Service providers;
• Website interactions;
• Cookies and similar technologies; and
• Publicly available sources.

We may collect, use, retain, and disclose personal information for the following purposes:

• Providing insurance products and services;
• Quoting and underwriting insurance coverage;
• Processing applications and enrollments;
• Administering association-sponsored insurance programs;
• Determining eligibility;
• Servicing policies;
• Supporting claims administration;
• Communicating with consumers and members;
• Operating and improving our websites;
• Security and fraud prevention;
• Auditing and compliance activities;
• Meeting legal and regulatory obligations; and
• Other business purposes permitted by applicable law.

We may disclose personal information to:

• Insurance carriers;
• Reinsurers;
• Third-party administrators;
• Claims administrators;
• Insurance support organizations;
• Associations and program sponsors;
• Professional advisors;
• Technology and hosting providers;
• Payment processors;
• Government agencies or regulators when required by law.

Where required, we maintain contractual protections governing such disclosures.

We do not sell or share personal information as those terms are defined under California law.

We retain personal information only for as long as reasonably necessary to:

• Provide products and services;
• Administer insurance programs;
• Comply with legal obligations;
• Meet regulatory and record-retention requirements;
• Resolve disputes;
• Enforce agreements; and
• Protect our legal interests.

Retention periods vary based upon the type of information collected, the purpose for which it was collected, applicable legal and regulatory requirements, contractual requirements, claims administration needs, and business necessity.

Subject to applicable exemptions and limitations, California residents may have the following rights:

Right to Know

You may request information regarding:

• The categories of personal information collected;
• The sources from which personal information was collected;
• The purposes for collection, use, disclosure, sale, or sharing;
• The categories of third parties receiving information; and
• The specific pieces of personal information maintained about you.

Right to Access

• You may request a copy of personal information maintained about you.

Right to Correct

• You may request correction of inaccurate personal information maintained about you.

Right to Delete

• You may request deletion of personal information, subject to applicable exceptions.

Right to Opt Out of Sale or Sharing

• To the extent applicable, you may direct us not to sell or share your personal information. (See “Sale and Sharing of Personal Information” provision within this policy.)

Right to Limit Use of Sensitive Personal Information

• Where applicable, you may request limitations on certain uses of sensitive personal information. Certain uses and disclosures of sensitive personal information may be exempt from this right under applicable federal or state law.

Right to Data Portability

• You may request that certain personal information be provided in a portable and readily usable format.

Right to Non-Discrimination

• We will not discriminate against you for exercising any rights available under California privacy law.

Unless permitted by law, we will not:

• Deny goods or services;
• Charge different prices or rates;
• Provide a different level or quality of service; or
• Otherwise treat you differently for exercising your privacy rights.

Nothing in this section limits our ability to process personal information as necessary to underwrite, issue, administer, service, investigate, or pay claims under insurance products or as otherwise permitted or required by applicable law.

You may designate an authorized agent to submit a request on your behalf.

We may require verification of:

• Your identity;
• The agent's identity; and
• The agent's authority to act on your behalf.

We may take reasonable steps to verify your identity before responding to privacy requests to protect personal information from unauthorized access, deletion, or disclosure.

In certain circumstances, we process personal information solely on behalf of insurers, associations, trusts, employers, program sponsors, or other customers. In those circumstances, we may act as a service provider, contractor, or administrator and process personal information only for authorized business purposes consistent with our contractual and legal obligations.

California residents may submit requests to know, access, correct, delete, or otherwise exercise applicable California privacy rights using the contact methods below:

Privacy Office
Forrest T. Jones & Co, Inc.
2600 Grand Blvd. Suite 900
Kansas City, MO 64108
Phone: 800-821-7303
Email: Compliance@ftj.com

We may update this Notice periodically. Any revised Notice will be posted with a revised effective date.

Privacy Office
Forrest T. Jones & Co, Inc.
2600 Grand Blvd. Suite 900
Kansas City, MO 64108
Phone: 800-821-7303
Email: Compliance@ftj.com

Last Revised 07/28/2026