Elpha Secure's Privacy Pledge
We take your data privacy and security very seriously.
Last Updated: October 20, 2025
We at Elpha Secure Technology Inc. (“Elpha Secure”, “we”, “us” or “our”) are committed to respecting your (“you” or “your”) privacy and recognize your need for appropriate protection and management of certain information you share with us. This privacy policy (this “policy” or “Privacy Policy”) describes how Elpha Secure collects, shares, and uses personal information about you and how you can exercise your privacy rights. This policy applies to the information we collect from you, including through your use of our software, products, and our website (www.ElphaSecure.com) and any other websites that we may control that display or link to this Privacy Policy, and other advertising mediums we may deploy, including, but not limited to, email and newsletters. This policy in no way applies to the practices of companies that Elpha Secure does not own or control or to people that Elpha Secure does not employ or control.
Information Collected By Elpha Secure
Personal information: In some cases, we collect information that you may choose to provide to us, and in other cases we may collect personal information automatically. In other cases, we may collect information about you under the authority and direction of our customers that are corporate entities. Personal Information does not include publicly available information, such as information lawfully made available from government records, information we have a reasonable basis to believe is lawfully made available to the general public by you or by widely distributed media, or by a person to whom you have disclosed the information and not restricted it to a specific audience, or deidentified or aggregated information.
Information collected through our website: Certain parts of our website may ask you to provide personal information voluntarily. We may, for example, ask you to provide your contact details (such as your name, email address, government-issued identifiers, and phone number) if you request a demonstration from us, or if you otherwise contact us by email using a contact form on the website. To access certain features of the website, we may collect login credentials to verify user authorization to access such features.
Information collected when you communicate with us: We collect personal information contained within, and associated with, your correspondence with us, including via email, mail, fax, or other means.
Information collected from our customers: We may collect personal information about you as a representative of our customers, which may be corporate entities, including business contact information such as your name, job title, company name, address, phone number, email address or username, and password, in the course of providing you with the requested services. We also may acquire personal information in other limited situations, such as for technical support requests or for product improvement purposes. We process such data strictly in line with the agreements in place with such customers, and such customers determine which information to upload.
Job applicants: We may also collect your contact details (such as your name, phone number, email address, and address) and employment details if you send us a CV, resume, or other details of your employment history in connection with an Elpha Secure job vacancy or a general enquiry regarding employment opportunities with us. If you are a California job applicant, please review our California applicant privacy notice. If you are a California resident and you believe you interacted with us in a different capacity, or if you have any questions, please contact us as provided below.
Office visitors: If you visit our offices, we may ask you to register as a visitor and to provide your name, email address, phone number, company name, and time and date of arrival. We may ask you to show proof of your identity. Additionally, to ensure the safety and security of our employees and to protect our confidential information against unauthorized access, our offices may use cameras to record video and audio at our offices’ access points and common-area corridors.
Claims And/Or Policy Information: We may also collect policy information, claim information, including materials you submit as part of your claim, information provided for pre-loss mitigation services, or other information you choose to provide us. If you are a claimant, we may collect information about you when you notify us of a claim, or if the claim is made by someone with a close relationship to you or who otherwise has authority to make a claim on your behalf. We may also collect personal information about you from others who are involved in the claim, including lawyers, witnesses, experts, and adjusters. Finally, we may consult other public sources to validate the claim or protect against fraud or other financial crime.
Audio, Visual or Similar Information: If you speak with our customer service team or other employees by phone or video conferencing tool, we may collect a recording for quality assurance and training purposes.
Information We Collect Automatically
We may collect data in the pursuit of identifying security risks and mitigating those high/critical risks. To do that, we use a variety of systems and sources - this includes for our Enhanced Policy and Extended Detection and Response (XDR) customers, using system-specific information collected by a driver and also logging functions for analysis. In addition we may use external scans to identify similarly high/critical risk items, which will allow removal of those risks, and verification that those risks are mitigated. For Enhanced and XDR customers both internal and external risk data elements including scans are collected, acted on, and verified.
We may also use cookies, pixels, tags, and similar tracking technologies to collect information about you, your device identifiers, such as an IP address, device type, browser type, and other identifiers, and geolocation. Elpha Secure may collect various types of information from you to better meet your needs and to provide you with a more relevant user experience and to target advertising and content across our services and third-party sites and services. Some of this information is collected automatically through cookies or other Internet tracking technologies.
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information. Cookies set by the website owner are called “first-party cookies”. Cookies set by parties other than the website owner are called “third-party cookies”. Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when you visit the website in question and also when you visit certain other websites.
We may use first-party and third-party cookies for several reasons. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as “essential” or “strictly necessary” cookies. Other cookies also enable us to track and target the interests of our users to enhance their experience on our website. Third parties use cookies through our website for performance and analytics.
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called “tracking pixels” or “clear gifs”). These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our website. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. This allows us, for example, to monitor the traffic patterns of users from one page within our website to another, to deliver or communicate with cookies, to understand whether you have come to our website from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of e-mail marketing campaigns. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.
Our website may utilize cookies to collect information about your website activities and to recall the personal information you previously shared with us. Most browsers allow you to control cookies, including whether to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser. Blocking cookies may result in a lower quality experience for you while you are visiting the website.
Third-Party Analytics and Tools. We use third-party tools, such as Google Analytics, which are operated by third-party companies. These third party analytics companies may collect usage data (using cookies, pixels and similar tools) about our services in order to provide us with reports and metrics that help us evaluate usage of our services, improve our sites, and enhance performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout
Cross-Device Tracking: We and our third-party providers may use the information that we collect about you within our Services and on other third-party sites and services to help us and these third parties to identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.).
Information We Obtain From Third Party Sources
From time to time, we may receive personal information about you from affiliates, brokers, business providers, and other third-party sources (including content syndication vendors, data aggregators, and advertisers), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. The types of information we collect from third parties may include name, company, role, location, and topics of interest, and we may use the information we receive from these third parties to maintain and improve the accuracy of the records we hold about you and to communicate with you about any relevant products or services.
How Collected Information Is Used
We may use the information that Elpha Secure collects for:
- operating our business;
- fraud and security purposes;
- providing you with products and services;
- communicating with you;
- evaluate and improving our services and products;
- analytics purposes;
- marketing and advertising;
- inferences;
- business transfers;
- legal requirements; and
- other operational and business purposes, including to refer you to our third-party partners as part of a referral program, to comply with contracts related to products or services that we provide to you.
In addition, the information set forth in this Privacy Policy may be combined with information collected from other sources for any of these purposes or for analyzing usage statistics and trends
Legal Basis For Processing Personal Information (European Economic Area Or The United Kingdom Visitors Only)
If you are a visitor from the European Economic Area or the United Kingdom, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third-party), we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contacting Us” heading below.
Sharing Information With Third Parties
We may disclose your personal information, when permitted by law, including in cases that require your consent, to the following categories of recipients:
- Affiliates and Subsidiaries. We may disclose the information we collect with our affiliates, subsidiaries, and agents and brokers. Elpha Secure also partners with other businesses to offer products and services, and we may disclose your information to those organizations, including those that play a role in insurance transactions such as independent claims adjusters, pre-loss mitigation services, and other claims related companies. If required by law, we will obtain consent prior to disclosing information.
- Third-party Service Providers and Partners. We may disclose to certain third-party services providers and partners who may perform certain functions on our behalf and who provide services to us (for example, to fulfill requests for information, to receive and send communications, to update marketing lists, to analyze data, to provide IT and other support services or other similar tasks) or who otherwise process personal information for purposes that are described in this Privacy Policy or notified to you when we collect your personal information. Types of companies who may provide such services include marketing and advertising partners, IT suppliers, service providers, insurance carriers, underwriters, brokers, and other professional advisors.
- To any law enforcement body, regulatory, government agency, court or other third-party where we believe disclosure is necessary (i) to comply with applicable law or regulation, (ii) to exercise, establish, or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
- To a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this privacy policy. Where possible we will do so under appropriate confidentiality agreements. Similarly, if all or part of our business, assets, or sites are merged with or sold to another company, or as part of a bankruptcy proceeding, your information may be transferred to the surviving or acquiring company.
- Aggregate and De-Identified Information. We may disclose aggregate or de-identified information about users with third parties for marketing, advertising, research or other purposes.
- To any other person or entity with your consent to the disclosure.
Our Privacy Policy And Outside Links
This Privacy Policy applies only to Elpha Secure’s activities. Any information you submit to any third-party websites, including but not limited to, links to other websites from our services, is not in our control or governed by this Privacy Policy. You should be sure that you review the privacy policy of any site to which you link or redirect your browser and should not assume that any such website is operated by Elpha Secure or governed by this Privacy Policy.
Security
Wherever your personal information may be held within Elpha Secure or on its behalf, we intend to take appropriate technical and organizational measures to protect the information you share with us from access or disclosure not in compliance with this Privacy Policy. We seek to use reasonable organizational, technical, and administrative measures to protect personal information within our organization. Unfortunately, no transmission or storage system can be guaranteed to be completely secure, and transmission of information via the Internet is not completely secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately.
Blogs and Other Features
We may offer blogs, online forums or other interactive features in connection with our website and services that enable you to share information about the website and services or other issues of interest. You should be aware that any communications you submit or post to any such interactive features on the website or services may be viewable by other participants or users. By submitting or posting to such interactive features you acknowledge and agree that you have no expectation of privacy or confidentiality in the content you submit for such features, whether or not it contains personal information about you.
Your Choice And Rights
You have the following data protection choice and rights:
- If you wish to access, correct, update, or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “Contacting Us” heading below and by providing us with the name of the service for which information was supplied, your full name, mailing address, phone number, and email address so that we may identify you.
- In addition, if you are a resident of the European Economic Area or the United Kingdom, you can object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information. You can exercise these rights by contacting us using the contact details provided under the “Contacting Us” heading below.
- You have the right to opt out of any marketing communications we might send you at any time. If you no longer wish to receive any newsletters, surveys, or promotional communications we may send via email, you may opt out of such communications and follow the instructions provided to unsubscribe. You can also exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you or by contacting us using the contact details provided under the “Contacting Us” heading below. Please be aware that even after you opt out from receiving any such marketing communications, you may continue to receive administrative messages from us – for example, in relation to other services you have requested from us.
- Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You have the right to complain to a data protection authority about our collection and use of your personal information if a data protection authority exists in your country. For more information, please contact your local data protection authority.
We will respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Children’s Privacy
Our website and services are not designed for children, and we do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have received information directly from a child who is under the age of 13, we will delete such information from our systems. If you are a parent or legal guardian and you believe we have collected your child’s information in violation of applicable law, please contact us using the contact information below.
Pursuant to Elpha Secure’s Terms of Use, you must be at least 18 years of age to use Elpha Secure’s website. The website and its content are directed to people who are at least 18 years of age or older. If you are under the age of 18, you may not use the website unless you have the consent of, and are supervised by, a parent or guardian.
Cross-Border Transfers
Due to the nature of our business, we may transfer your personal information may be stored and processed in any country where we engage service providers. Our website servers are located primarily in the United States and may also be located in Canada, but our third-party service providers and partners may operate outside of the United States and Canada. We may transfer information internationally to our group companies, service providers, business partners and governmental or public authorities. This means that when we collect your personal information, we may process it in countries outside of the United States and Canada. We have, however, taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Policy. By providing personal information and other information to us, including by sending a communication to an "elphasecure.com" e-mail address, you understand and consent to the collection, use, processing disclosure and transfer of such information in the United States and other countries or territories, which may not offer the same level of data protection as the country where you reside, in accordance with the terms of this Privacy Policy. Further, please note that any communication you send to an "elphasecure.com" e-mail address will be routed through the United States.
Data Retention
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to fulfill your orders or to comply with applicable legal, tax or accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will delete it; if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information securely and isolate it from any further processing until deletion is possible.
Your California Privacy Rights
If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA"), provides you with specific rights regarding your personal information. “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
The following identifies the categories of Personal Information we may collect about you (and may have collected in the prior 12 months). Note that our collection, use and disclosure of Personal Information about you will vary depending upon the circumstances and nature of our interactions or relationship with you. Depending on how you use our services, we may collect the following categories of Personal Information:
Categories of Personal Information Collected
Examples of such Personal Information
Identifiers
such as real name, alias, job title, address, email address, date of birth, policy number, salary information, social security number, driver’s license number, other government identifiers, credit card number, and tax ID.
Online Identifiers
such as unique personal identifiers, device IDs, ad IDs, IP addresses, and cookie data
Customer or Claimant Records
such as paper or electronic customer or claimant records containing Personal Information, as well as information provided by an insurance broker/agent or reinsurer for underwriting purposes and information included in a list of claims, such as name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, payment card number, gender, height, weight, medical information (including reports and medical bills), health insurance information, details about home address, security and travel plan arrangements, records of personal property, products or services purchased or obtained.
Financial Information
such as your bank account or credit card number and other payment details
Characteristics of Protected Classifications under California or Federal Law
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Customer or Claimant Records
paper or electronic customer or claimant records containing Personal Information, as well as information provided by an insurance broker/agent or reinsurer for underwriting purposes and information included in a list of claims, such as name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, payment card number, gender, height, weight, medical information (including reports and medical bills), health insurance information, details about home address, security and travel plan arrangements, records of personal property, products or services purchased or obtained.
Useage Data
such as Internet or other electronic network activity information regarding a California resident's interaction with portals, Internet websites, applications, or advertisements, including, but not limited to, browsing history, clickstream data, search history and content of public posts.
Biometric Information
such as individual biological or behavioral characteristics including measurements of physical characteristics such as height, weight and blood pressure, sleep, health, or exercise data that contain identifying information
Geolocation Data
such as physical location or movements
Audio, Video and Other Electronic Data
recordings, video and photographs, recorded meetings and webinars, and CCTV footage to secure our offices and premises
Professional or Employment-Related Information,
such as employment history, qualifications, licensing, and disciplinary record
Inferences and Preferences
such as inferences drawn from any of the information described in this section about a consumer including inferences reflecting the consumer’s preferences, characteristics, behavior and abilities.
Sensitive Personal Information
such as social security number, driver’s license number, racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, medical condition, and physical or mental disability.
Personal Information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, such as:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
Sources of Personal Information
We generally collect Personal Information from the following categories of sources:
- Directly from you and automatically;
- Our affiliates and subsidiaries;
- Brokers and agents;
- Corporate policyholders; and
- Our vendors and service providers (e.g., third-party administrators).
Purposes for Collecting and Disclosing
Purposes for Collecting and Disclosing Personal Information
As described in the “How Collected Information Is Used” section above, in general, we collect and otherwise process the personal information we collect for the following business or commercial purposes:
- Operate our business;
- Provide you products and services;
- Communicate with you;
- Evaluate and improve our products and services;
- Analytics models to support our business;
- Marketing and advertising;
- Inferences;
- Find locations on request;
- Fraud and security purposes;
- Legal requirements;
- Business transfers; and
- Other operational and business purposes.
Sensitive Personal Information
Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.
Retention of Personal Information
We retain the Personal Information we collect only as reasonably necessary for the purposes described in this Privacy Policy or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting and recordkeeping obligations, to administer certain policies and coverage, and for research, development and safety purposes, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations. From time to time, we may also deidentify your Personal Information, retain it and use it for a business purpose in compliance with CCPA.
Disclosure of Personal Information to Third Parties and Other Recipients
The categories of Personal Information we have disclosed for a business purpose in the preceding twelve (12) months include: identifiers, online identifiers, customer records, financial information, characteristics of protected classifications, usage data, biometric information, education information, geolocation data, audio, video, and other electronic data, professional or employment-related information, inferences, and sensitive personal information.
The categories of third parties and other recipients to whom we may disclose personal information for a business purpose may include:
- Affiliates, subsidiaries, and business partners;
- Vendors and service providers;
- Acquirers of business assets;
- Advisors, auditors, consultants, and representatives;
- Agents and brokers;
- Reinsurers;
- Regulators, government entities, and law enforcement;
- Operating systems and platforms; and
- Others as required by law.
Additionally, the CCPA defines “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising. While we do not “sell” Personal Information, we may “share” the following categories of Personal Information: online identifiers, and usage data. We disclose this information to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising. We do not sell or share “sensitive personal information,” nor do we sell or share any Personal Information about individuals who we know are under thirteen (13) years old.
Rights Regarding Your Personal Information
The CCPA provides California residents with specific rights regarding Personal Information. This section describes your rights under the CCPA and explains how to exercise those rights. Subject to certain exceptions, California consumers have the right to make the following requests:
Right to Know. With respect to the Personal Information we have collected about you in the prior (twelve) 12 months, you have the right to request from us (up to twice per year and subject to certain exemptions and carveouts):
- The categories of Personal Information we collected about you;
- The sources from which we have collected that Personal Information;
- Our business or commercial purpose for collecting, selling, or sharing that Personal Information;
- The categories of third parties to whom we have disclosed that Personal Information; and
- A copy of the specific pieces of your Personal Information we have collected
Right to Correct. Subject to certain restrictions, you have the right to request that we correct inaccuracies in your Personal Information.
Right to Delete. Subject to certain conditions and exceptions, you have the right to request deletion of your Personal Information that we have collected about you.
Right to Opt-Out. You have the right to opt-out of “sales” and “sharing” of your Personal Information, as those terms are defined under the CCPA. While we do not “sell” Personal Information, our use of certain third-party analytics and advertising cookies may constitute “sharing” under the CCPA. To exercise your right to opt-out of the “sharing” of your Personal Information, please use the Do Not Sell or Share My Personal Information link at the bottom of our Site.
You also have the right to opt-out of “sales” and “sharing” of your Personal Information through the use of an opt-out preference signal. If our Site detects that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control”—or GPC— signal, we will opt that browser or device out of cookies on our Site that result in a “sale” or “sharing” of your Personal Information. If you come to our Site from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well.
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not engage in uses or disclosures of Personal Information that would trigger the right to limit use of sensitive personal information under the CCPA.
Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.
Exercising Your CCPA Rights
If you would like to exercise your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA"), you can:
- Call us at (845) 248-0955.
- Email us at support@elphasecure.com using “CCPA Request” in the subject line.
Your request must (1) provide sufficient information to allow us to verify that you are the person about whom we have collected personal information, and (2) describe your request in sufficient detail to allow us to understand, evaluate, and respond to it. We may not respond to requests that do not meet these criteria. We will only use personal information provided in your request to verify your identity and complete your request. As used in this section of our Privacy Policy, “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
You may also authorize an agent (an “Authorized Agent”) to exercise your CCPA rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.
Businesses operating as an authorized agent on behalf of a California resident must provide both of the following:
(1) Certificate of good standing with its state of organization; and
(2) A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the business to act on behalf of the California resident.
Individuals operating as an authorized agent on behalf of a California resident must provide a written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.
We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor’s personal information may be at risk.
Verification. Before responding to your request, we must first verify your identity using the Personal Information you recently provided to us. The information we need in order to verify your identity differs depending on the request made and our relationship with you and might include (as applicable) your name, the email address you regularly use to interact with us, your phone number, your date of birth, and, if available, your policy number. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. In some cases, we may also carry out checks, including with third-party identity verification services, to verify your identity before taking any action with your Personal Information. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights, and we will not deny you goods or services, charge you a different price, or provide you with a lesser quality of goods or services if you exercise any of your CCPA rights.
Other California Resident Rights
Under California law, a California resident who has provided Elpha Secure with personal information is entitled to request certain information with respect to the types of personal information that Elpha Secure has shared with third parties for their direct marketing purposes. In accordance with California law, Elpha Secure will, in response to your written request, provide you with the means to choose not to have your information shared.
Except as otherwise stated in this Privacy Policy (including, but not limited to, sharing information with any third-party resellers), we will not share your personal information with third parties for their direct marketing purposes unless you affirmatively agree to such disclosure. To prevent further disclosure of your personal information from use in direct marketing by a third-party, do not opt in to such use when you provide personal information on our website. If you opt in to receive communication from a third-party, your personal information will be subject to the third-party ’s privacy policy. If you later decide that you do not want that third-party to use your personal information, you must contact that third-party directly, as Elpha Secure has no control over a third-party ’s use of personal information. You should always review the privacy policy of any party that collects your information to determine how that entity will handle your information.
California residents may request further information about our compliance with this law by emailing support@elphasecure.com. Please note that we are required to respond to only one request per individual per year and are not required to respond to requests made by means other than through this e-mail address.
Nevada Notice
We do not “sell” “covered information” of Nevada “consumers” as those terms are defined by Chapter 603A of the Nevada Revised Statutes. If you are a Nevada resident, you may contact us at support@elphasecure.com and register for us to provide you notice in the event that we change our practices in the future.
“Do Not Track Disclosure”
Certain U.S. state privacy laws require us to indicate whether we honor your browser’s “Do Not Track” settings concerning targeted advertising. We adhere to the standards set out in this Notice and do not monitor or respond to Do Not Track browser requests.
Artificial Intelligence
We or our third-party service providers may use artificial intelligence (AI) to provide products or services to you, which may involve the use of your personal information from the sources described in this Privacy Policy. We may use AI in connection with our products or services to facilitate and service our business (e.g., assist in underwriting, pricing, claims handling process or data management), as well as to enhance performance and user experience on our websites and applications. The type of AI we use varies based on your relationship with us and by product and service.
Updates To This Policy
We may occasionally update or modify this Privacy Policy and reserve all rights to do so. When we do so, we will also revise the “last updated” date at the beginning of the Privacy Policy. The then-current Privacy Policy will apply to all use of information retained by Elpha Secure after the effective date thereof. If we make any material changes in the way we treat personal information, we will notify you by including a notice in an email sent to the primary email address in your Elpha Secure account or by placing a prominent notice on our Privacy Policy or website with a new “last updated” date. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and disclose personal information. Your continued use of any of our services following the posting of a revised version of this Privacy Policy will constitute your acceptance of the revised Privacy Policy. If you do not agree with the revised Privacy Policy, do not use any of our services.
Contacting Us
For more information, or if you have questions or concerns regarding Elpha Secure’s Privacy Policy, you may email us at support@elphasecure.com, or you may mail us correspondence at the following address: 580 Fifth Avenue, Suite 820, New York, NY 10036.
Consent
By using the services or by consenting using a consent mechanism provided you signify your consent to this Privacy Policy and this site’s Terms of Use. If you do not agree to this Privacy Policy or the site’s Terms of Use, please do not use the services. The services are not for use within any country or jurisdiction or by any persons where such use would constitute a violation of law. If this applies to you, you are not authorized to access or use any of the services.