Hallahan, McGuinness & Lorys Ltd.

Hallahan, McGuinness & Lorys Ltd. is committed to protecting your privacy. This policy explains how we collect, use, share, and secure your information in accordance with New York State regulations, including the NYDFS Cybersecurity Regulation 23 NYCRR 500, federal laws such as the Gramm-Leach-Bliley Act (GLBA), and applicable U.S. privacy standards.

1. Information We Collect

We collect information to provide insurance services, process quotes, manage policies, and support customer service. This includes:

Personal Information

• Full name
• Phone number
• Email address
• Mailing address
• Date of birth (if provided for insurance quoting)
• Insurance policy details
• Claims or loss history
• Any other information you choose to share with us

Sensitive or Financial Information (GLBA-protected)

May include:
• Driver’s license number
• Vehicle information
• Property details
• Social Security number (if an insurer requires it for underwriting)
• Payment or billing information

Note our website and backend website data does not collect this data and please do send that data via our website.

Technical Information

Collected through cookies or website analytics:
• IP address
• Device information
• Browser type
• Pages visited
• Time spent on the site

We collect only what is necessary to deliver insurance products, comply with legal requirements, and improve our services.

2. How We Use Your Information

We use your information to:

• Provide insurance quotes and policy options
• Service existing policies and communicate updates
• Process claims or requests on your behalf
• Respond to inquiries or customer support messages
• Comply with state and federal legal requirements
• Prevent fraud and protect our systems
• Improve our website performance and user experience
• Maintain NYDFS-compliant cybersecurity and record-keeping standards

We do not sell your personal information.

We may share your information only in the following situations:

Insurance Carriers & Partners

We share data with insurers and authorized partners strictly for quoting, underwriting, or servicing your policy.

Service Providers

Third-party vendors may assist with:
• Website hosting
• Email or communication services
• Data security support
• Customer relationship tools

These providers must safeguard your data under GLBA and NYDFS standards.

Legal or Regulatory Requirements

We may share information if required by:
• NYDFS
• Courts or legal processes
• Law enforcement
• Other regulatory agencies

We do not share information with unaffiliated third parties for marketing.

4. Your Rights Under New York & Federal Law

You have the right to:

Access

Request a copy of the personal information we have about you.

Correction

Ask us to update inaccurate or incomplete data.

Deletion

Request deletion where legally permissible (certain insurance and regulatory retention rules may apply).

Opt-Out of Marketing

We will honor any request to stop receiving marketing messages.

GLBA Notice Rights

You will receive annual notices describing how financial information is handled and your right to limit certain types of sharing.

To exercise any rights, contact us at the information below.

5. Cookies and Tracking Tools

Our site may use cookies to improve performance. Cookies help with:

• Site analytics
• Navigation
• Load speed
• Form functionality

You can disable cookies in your browser settings, though some site features may not work properly without them.

We do not use cookies to collect sensitive personal information.

6. Data Security (NYDFS-Compliant)

We follow the cybersecurity requirements under NYDFS 23 NYCRR 500, which may include:

• Multi-factor authentication
• Encryption of data in transit and at rest
• Regular system monitoring
• Secure data retention and disposal
• Annual risk assessments
• Access controls for employee accounts
• Incident response procedures

While no system can guarantee perfect security, we work to protect your data with industry-standard safeguards.

7. Data Retention

We retain information only as long as required for:

• Insurance underwriting
• Policy servicing
• Legal obligations
• NYDFS or federal compliance
• Fraud prevention

Once retention periods expire, information is securely deleted or anonymized.

8. Children’s Privacy

We do not knowingly collect information from children under 13. If we become aware that data was submitted by a child, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or business practices. The “Effective Date” above will always note the latest version.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:

Hallahan, McGuinness & Lorys Ltd.
Phone: (914) 939-8895