Your Privacy Choices

Effective August 4, 2026  ·  Last updated August 4, 2026

1. Who this applies to

This notice supplements our Privacy Policy and applies to residents of California under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have comparable rights under their own state laws and may use the same form and the same contact details. Where the wording differs between statutes, we apply whichever gives you the broader right.

It does not apply to job applicants or to our own personnel, which are handled separately.

2. What we collect and why

In the twelve months before the date of this notice, we have collected the following categories of personal information.

3. Who we disclose it to

In the twelve months before the date of this notice, we have disclosed each of the categories above, other than sensitive personal information, for a business purpose to: licensed insurance carriers and licensed agencies; marketing partners that place business with those carriers; hosting, analytics, telephony, email, SMS, validation, and lead certification service providers; and professional advisers, where required.

We do not disclose personal information to any party for that party's own independent marketing of unrelated products.

4. Sale and sharing

The CCPA defines "sale" to include disclosure of personal information for monetary or other valuable consideration, and "sharing" to include disclosure for cross-context behavioural advertising. Under those definitions:

• We sell identifiers, customer records, protected characteristics, commercial information, geolocation, and inferences, in the sense that we transmit your quote request to insurance carriers, agencies, and marketing partners and receive a referral fee.
• We share identifiers and internet activity information for cross-context behavioural advertising through advertising and analytics cookies and pixels.

We do not sell or share the personal information of consumers we know to be under 16 years of age. We do not sell or share sensitive personal information for the purpose of inferring characteristics.

5. Retention

We retain each category for as long as reasonably necessary for the purposes described, and then for up to five years, which reflects the limitation periods applicable to telemarketing claims. Consent records and do-not-contact records are retained for at least five years because deleting them would destroy the evidence of your consent or the instruction not to contact you.

6. Your rights

• Right to know. Ask what categories and specific pieces of personal information we have collected about you, where it came from, why we collected it, and to whom we disclosed, sold, or shared it.
• Right to delete. Ask us to delete personal information we collected from you, subject to statutory exceptions.
• Right to correct. Ask us to correct inaccurate personal information.
• Right to opt out of sale and sharing. Direct us to stop selling or sharing your personal information.
• Right to limit sensitive personal information. Available where a business uses sensitive personal information beyond permitted purposes. We do not, so there is nothing to limit, but you may still make the request.
• Right to non-discrimination. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.
• Right to appeal. Where your state provides one, if we refuse a request we will tell you how to appeal when we respond.

7. Global Privacy Control

We honour a valid Global Privacy Control signal as a request to opt out of the sale and sharing of personal information for the browser and device that sent it. Because a browser signal is not tied to an identified person, it will not by itself stop transmission of a request you submitted earlier. To cover that, use the form below.

8. Authorised agents

You may use an authorised agent to make a request on your behalf. We will ask for written permission signed by you, and we may still ask you to verify your own identity directly. An agent acting under a valid power of attorney does not need separate written permission.

9. How we verify requests

We verify by matching at least two data points in your request against what we already hold, usually an email address and a phone number from a previous submission. For deletion requests we may apply a higher standard. If we cannot verify you, we will tell you and explain why. We do not charge for requests unless they are manifestly unfounded or excessive, and we will tell you before charging anything.

We acknowledge requests within 10 business days and respond within 45 calendar days, extendable once by a further 45 days where necessary, in which case we will tell you why.

10. Submit a request

Use this form, email privacy@covrcar.com, or call (501) 131-1002. Give us the same email address or phone number you used when you submitted a quote request, so we can find your record.

11. Contact

MIND SPOT INC, attn: Privacy
3476 Shallow Cove Lane
Clermont, FL 34711, United States
Email: privacy@covrcar.com
Phone: (501) 131-1002