Privacy Policy

Effective Date: April 1, 2026 Last Updated: July 27, 2026

Brolly Insurance Agency LLC ("Brolly," "we," "us," or "our") respects the privacy and security of the personal information entrusted to us.

As an independent insurance agency, the collection, use, and disclosure of personal information is an essential part of our business. We may collect substantial amounts of personal, financial, insurance, health, property, and other information when assisting individuals and businesses with insurance quotations, applications, underwriting, placement, servicing, renewals, claims, and related insurance services.

This Privacy Policy explains the categories of information we may collect, where we obtain information, how we use and disclose information, how we protect information, and the privacy choices and rights that may be available to individuals.

This Policy applies to information collected through www.brollyinsuranceagency.com, as well as information collected through our insurance operations, including by telephone, email, text message, electronic forms, insurance applications, carrier systems, agency management systems, in person, and through third parties.

1. Information We Collect

The information we collect depends upon your relationship with Brolly and the insurance products or services you request. We may collect information reasonably necessary to quote, obtain, administer, service, renew, modify, or otherwise assist with insurance coverage.

A. Identification and Contact Information

We may collect:

• Name;
• Mailing, residential, and property addresses;
• Email addresses;
• Telephone numbers;
• Date of birth;
• Age;
• Gender or sex where relevant to an insurance product and permitted by law;
• Marital status;
• Government-issued identification information;
• Driver's license number and information;
• Social Security number or other taxpayer identification information; and
• Other identifying information required by insurers, governmental authorities, or insurance transactions.

B. Insurance Information

We may collect:

• Existing and prior insurance coverage;
• Insurance carrier information;
• Policy numbers;
• Coverage types, limits, deductibles, endorsements, and premiums;
• Policy effective and expiration dates;
• Prior insurance history;
• Lapses in coverage;
• Cancellation or nonrenewal information;
• Claims and loss history;
• Loss runs;
• Insurance application information;
• Underwriting information;
• Quotes and proposals;
• Eligibility information;
• Beneficiary information;
• Information concerning additional insureds, household members, drivers, employees, dependents, or other persons associated with a policy; and
• Other information necessary to obtain or service insurance coverage.

C. Financial Information

Depending upon the insurance product or transaction, we may collect:

• Income information;
• Employment information;
• Business ownership information;
• Financial history;
• Banking or payment information;
• Credit or debit card information;
• Billing information;
• Premium payment information;
• Mortgage and lender information;
• Loan information;
• Financial account information;
• Insurance scores, credit-based insurance information, or similar underwriting information where permitted by law; and
• Other financial information relevant to underwriting, premium payment, eligibility, or insurance placement.

We do not disclose financial account numbers or similar access information to unaffiliated third parties for their independent marketing purposes except as permitted by applicable law.

D. Vehicle and Driver Information

For automobile, commercial auto, recreational vehicle, motorcycle, or similar insurance, we may collect:

• Vehicle identification numbers;
• Vehicle year, make, model, trim, and use;
• Vehicle ownership and financing information;
• Garaging location;
• Annual mileage;
• Driver information;
• Driving history;
• Motor vehicle records;
• Accidents;
• Citations and violations;
• License status;
• Claims history; and
• Other information used for insurance underwriting or rating.

E. Property Information

For homeowners, dwelling, renters, condominium, commercial property, and related insurance, we may collect:

• Property address;
• Ownership information;
• Mortgage or lienholder information;
• Property characteristics;
• Construction information;
• Square footage;
• Age of structures and systems;
• Roof information;
• Heating, plumbing, electrical, and other building information;
• Occupancy and use;
• Replacement cost information;
• Property values;
• Personal property information;
• Photographs;
• Inspection information;
• Prior losses and claims;
• Business activities conducted at the property;
• Safety, security, and protective devices; and
• Other information relevant to insurance underwriting.

F. Business and Commercial Information

For commercial insurance customers, we may collect:

• Business name and contact information;
• Business ownership and management information;
• Tax identification numbers;
• Revenue, payroll, and financial information;
• Employee counts and employee information;
• Business operations;
• Locations;
• Property and equipment;
• Vehicles and drivers;
• Contracts;
• Customers and vendors;
• Professional services;
• Licenses and certifications;
• Safety practices;
• Loss history;
• Claims information; and
• Other information necessary to evaluate or insure a commercial risk.

G. Health and Medical Information

When you request life, health, disability, long-term care, or other insurance for which health information is relevant, we may collect or facilitate the collection of health-related information as permitted by applicable law, including:

• Health history;
• Medical conditions;
• Prescription information;
• Tobacco or nicotine use;
• Height and weight;
• Medical treatment information;
• Physician information;
• Disability information;
• Family medical history where relevant and permitted;
• Health insurance information; and
• Other information required for insurance eligibility or underwriting.

Health information may be subject to additional restrictions under federal or state law. We use and disclose such information only as permitted or required by applicable law and as necessary for the insurance services requested.

H. Consumer Reports and Third-Party Information

Where permitted by law, insurers, Brolly, or authorized service providers may obtain information from third-party sources in connection with insurance underwriting or servicing.

Such information may include:

• Consumer reports;
• Credit-based insurance information;
• Insurance scores;
• Motor vehicle records;
• Claims databases;
• Loss history reports;
• Property records;
• Public records;
• Vehicle records;
• Prior insurance information;
• Business records;
• Inspection reports; and
• Other underwriting or eligibility information.

When consumer reports are obtained, their use is subject to applicable law, including the Fair Credit Reporting Act where applicable.

I. Website and Device Information

When you visit our website or interact with electronic services, certain information may be collected automatically, including:

• Internet Protocol (IP) address;
• Browser type;
• Device type;
• Operating system;
• Referring website;
• Pages viewed;
• Date and time of access;
• Website interactions;
• Approximate geographic information derived from an IP address;
• Cookies and similar technologies; and
• Diagnostic, security, and usage information.

2. Sources of Information

We may obtain personal information from:

• You;
• Members of your household or business;
• Authorized representatives;
• Insurance applications and forms;
• Insurance carriers;
• Managing general agents and managing general underwriters;
• Wholesalers and brokers;
• Insurance marketplaces;
• Prior insurers;
• Consumer reporting agencies;
• Motor vehicle and governmental records;
• Claims databases;
• Property databases;
• Inspection companies;
• Financial institutions and lenders;
• Employers or business entities where appropriate;
• Service providers;
• Publicly available records;
• Referral sources; and
• Other sources permitted by law.

Information concerning another person should be provided to us only when you are authorized to provide that information.

3. How We Use Personal Information

We may use personal information to:

• Identify and communicate with you;
• Evaluate insurance needs;
• Obtain insurance quotations;
• Complete and submit insurance applications;
• Determine eligibility for insurance products;
• Facilitate underwriting;
• Compare coverage and pricing among insurance markets;
• Place or bind insurance coverage;
• Issue, administer, and service policies;
• Process endorsements and policy changes;
• Facilitate premium payments and billing;
• Assist with renewals, cancellations, and reinstatements;
• Assist with insurance claims;
• Communicate with insurance carriers and other insurance-market participants;
• Maintain customer and policy records;
• Verify information;
• Detect, investigate, and prevent fraud or other unlawful activity;
• Protect customers, Brolly, insurers, and others;
• Operate and improve our business, website, and technology;
• Provide customer support;
• Analyze business performance;
• Maintain information security;
• Market Brolly's products and services where permitted by law;
• Communicate regarding products or services that may be relevant to you;
• Comply with insurance laws, licensing requirements, regulatory obligations, court orders, subpoenas, and other legal requirements;
• Establish, exercise, or defend legal rights;
• Perform contractual obligations; and
• Carry out other purposes disclosed to you or authorized by you.

4. Disclosure of Personal Information

Brolly does not sell customer personal information for monetary consideration.

Operating an independent insurance agency does, however, require us to disclose information to other organizations. The type and amount of information disclosed depends upon the insurance product, transaction, and services requested.

We may disclose personal information to the following categories of recipients.

A. Insurance Companies and Insurance-Market Participants

We may disclose information to:

• Insurance carriers;
• Managing general agents;
• Managing general underwriters;
• Wholesalers;
• Brokers;
• Reinsurers;
• Insurance exchanges or marketplaces;
• Premium finance companies; and
• Other organizations involved in quoting, underwriting, placing, issuing, administering, or servicing insurance.

These disclosures may be necessary to obtain quotations, determine eligibility, underwrite risks, bind coverage, issue policies, service coverage, process claims, or otherwise provide requested insurance services.

B. Technology and Service Providers

We may disclose information to organizations that perform services for Brolly, including providers of:

• Agency management systems;
• Customer relationship management systems;
• Comparative rating systems;
• Insurance software;
• Cloud hosting and data storage;
• Email and communications systems;
• Electronic signatures;
• Payment processing;
• Document management;
• Cybersecurity;
• Information technology;
• Data analytics;
• Website hosting;
• Customer support;
• Accounting;
• Legal and professional services; and
• Other operational services.

We expect service providers receiving personal information from us to use the information for appropriate purposes and to maintain safeguards appropriate to the information they receive, subject to applicable contractual and legal requirements.

C. Referral and Marketing Partners

Where permitted by law, we may share certain information with referral sources, marketing partners, or other organizations in connection with marketing, referrals, or products and services that may be relevant to you.

We do not disclose Social Security numbers, financial account credentials, medical information, or similarly sensitive information to unaffiliated parties for their independent marketing purposes except where specifically authorized by you or otherwise permitted by applicable law.

Where applicable law provides a right to restrict or opt out of certain sharing with nonaffiliated third parties, Brolly will honor that right.

D. Governmental, Regulatory, and Legal Disclosures

We may disclose information when we reasonably believe disclosure is necessary or appropriate to:

• Comply with federal, state, or local law;
• Comply with insurance regulatory requirements;
• Respond to a subpoena, court order, warrant, or other legal process;
• Cooperate with regulatory or governmental authorities;
• Investigate or prevent fraud;
• Protect the rights, property, or safety of Brolly, our customers, insurers, or others;
• Enforce contracts or legal rights; or
• Respond to an emergency.

E. Corporate Transactions

Information may be disclosed in connection with a merger, acquisition, financing, reorganization, sale of assets, transfer of a book of business, succession of an insurance agency, or similar business transaction, subject to applicable law.

5. Nonpublic Personal Information

In providing insurance services, Brolly may collect "nonpublic personal information" or similar categories of protected information under applicable insurance and financial privacy laws.

Such information may include information you provide on an insurance application, information resulting from transactions with us or insurance companies, and information obtained from other sources in connection with providing insurance products or services.

We collect, use, maintain, and disclose nonpublic personal information in accordance with applicable federal and state law.

6. Gramm-Leach-Bliley Act and Insurance Privacy Requirements

Insurance and financial-services privacy may be governed by the Gramm-Leach-Bliley Act ("GLBA"), applicable state insurance privacy laws and regulations, and other federal and state requirements.

Where these laws apply, Brolly maintains practices designed to:

• Protect the confidentiality and security of nonpublic personal information;
• Provide required privacy notices;
• Describe applicable information-sharing practices;
• Limit disclosure and use of protected information as required by law; and
• Provide applicable rights to limit certain disclosures.

Nothing in this Privacy Policy is intended to limit any privacy right provided by applicable law.

7. Your Privacy Choices and Rights

Depending upon where you reside, your relationship with Brolly, the type of information involved, and applicable law, you may have rights concerning your personal information.

These may include rights to:

• Request information concerning personal information maintained about you;
• Request access to certain personal information;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Request information concerning categories of information disclosed to third parties;
• Limit or opt out of certain disclosures to nonaffiliated third parties;
• Withdraw certain previously provided consents;
• Opt out of certain marketing communications; and
• Exercise other rights provided by applicable federal or state law.

These rights are not absolute. Insurance agencies and insurers are frequently required or permitted to retain and use information despite a deletion or restriction request.

For example, we may retain information when necessary to:

• Maintain insurance and transaction records;
• Service an insurance policy;
• Process or document insurance transactions;
• Comply with insurance laws and regulations;
• Meet record-retention requirements;
• Detect or prevent fraud;
• Establish or defend legal claims;
• Comply with contractual obligations;
• Maintain security and business records; or
• Satisfy another legal obligation or permitted business purpose.

We will evaluate privacy requests under the laws applicable to the particular individual, information, and transaction.

We may take reasonable steps to verify your identity before fulfilling a privacy request.

8. Opting Out of Certain Information Sharing

Where applicable law gives you the right to opt out of certain disclosures of nonpublic personal information to nonaffiliated third parties, you may exercise that right by contacting us using the information in Section 18.

An opt-out request does not prevent Brolly from sharing information when the disclosure is necessary or permitted to provide insurance services or otherwise permitted by law.

For example, an opt-out generally will not prevent necessary disclosures to insurance carriers, wholesalers, brokers, service providers, fraud-prevention services, regulatory authorities, or other organizations involved in processing or servicing an insurance transaction where such disclosure is permitted by law.

We will apply an opt-out request to information sharing subject to the applicable opt-out right.

9. Marketing Communications

We may communicate with existing or prospective customers concerning insurance products and services.

You may request that we stop sending certain promotional email communications by using an unsubscribe mechanism contained in the communication, where provided, or by contacting us.

Opting out of marketing communications does not prevent us from sending non-promotional communications concerning quotations, applications, policies, claims, billing, security, legal notices, or other insurance services.

10. Cookies and Similar Technologies

Brolly and certain service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies (collectively, "Cookies") when you visit or interact with our website.

Cookies are small files or other technologies that enable websites and service providers to recognize a browser or device, remember certain information, operate website functionality, maintain security, understand how visitors use a website, and perform related functions.

Types of Cookies and Technologies We May Use

Depending upon the features and services implemented on our website, we may use the following categories of Cookies:

Strictly Necessary Cookies. These technologies are necessary for the website to operate or provide functionality requested by you. They may support functions such as security, network management, form submissions, session management, authentication, and fraud prevention.

Functional Cookies. These technologies allow the website to remember choices or preferences and provide enhanced functionality.

Analytics and Performance Cookies. These technologies help us understand how visitors interact with the website, such as pages visited, traffic sources, navigation patterns, errors, and general website usage. We may use this information to measure and improve website performance and our services.

Advertising and Marketing Cookies. If used, these technologies may help us measure marketing campaigns, understand the effectiveness of advertising, or provide advertising that may be more relevant to website visitors.

Information Collected Through Cookies

Information collected automatically through Cookies and similar technologies may include:

• IP address;
• Browser type and settings;
• Device type;
• Operating system;
• Device or online identifiers;
• Referring and exit pages;
• Pages viewed;
• Links or features used;
• Date and time of visits;
• Approximate location derived from an IP address;
• Website interactions;
• Advertising or campaign information; and
• Other technical and usage information.

Information collected through these technologies may be associated with other information we maintain where permitted by applicable law.

Third-Party Technologies

Certain Cookies or similar technologies may be provided by third parties that provide services to Brolly, such as website hosting, analytics, security, communications, customer-service, advertising, or marketing providers.

These third parties may collect information through technologies operating on our website and may process that information according to their respective privacy practices and our agreements with them.

Where required by applicable law, we provide appropriate choices concerning third-party technologies.

Your Cookie Choices

Most web browsers allow you to control Cookies through browser settings. Depending upon your browser, you may be able to block, restrict, or delete Cookies.

Disabling certain Cookies may affect website functionality or prevent portions of the website from operating properly.

Where required by applicable law, Brolly may provide additional mechanisms that allow you to manage preferences concerning certain nonessential Cookies or other online tracking technologies.

Browser and Device Privacy Signals

Certain browsers and devices may transmit privacy preference signals, including signals intended to communicate a request to opt out of certain forms of online tracking or data sharing.

Where Brolly is legally required to recognize a particular privacy preference signal, we will process supported signals in accordance with applicable law.

Changes to Our Use of Cookies

The Cookies and technologies used on our website may change as we modify our website, technology providers, analytics services, or marketing practices. We may update this Privacy Policy to reflect material changes in our use of these technologies.

11. Data Security

Because of the sensitive information involved in insurance transactions, protecting customer information is important to Brolly.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, alteration, disclosure, destruction, or use.

Depending upon the information and systems involved, safeguards may include:

• Access controls;
• Authentication measures;
• Encryption or encrypted transmission;
• Secure systems and service providers;
• Password protections;
• Device and network security;
• Employee and contractor access restrictions;
• Security monitoring;
• Data backup and recovery procedures;
• Vendor management;
• Employee security practices; and
• Incident-response procedures.

No information system, electronic communication, or method of data storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

12. Security Incidents and Data Breaches

If Brolly becomes aware of a security incident involving personal information, we may investigate the incident, take measures to contain and remediate it, and evaluate our notification obligations.

Where notification is required, we will provide notice to affected individuals, regulators, law enforcement, consumer reporting agencies, insurance authorities, or other parties as required by applicable law.

13. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and as necessary to operate our insurance business.

Retention periods may depend upon:

• The duration of the customer relationship;
• Insurance policy periods;
• Renewal activity;
• Claims;
• Carrier requirements;
• Applicable statutes of limitation;
• Insurance regulatory requirements;
• Licensing and compliance requirements;
• Litigation or anticipated disputes;
• Fraud-prevention needs;
• Accounting and tax requirements; and
• Other legal or legitimate business requirements.

When information is no longer reasonably necessary and applicable requirements permit disposal, we may delete, destroy, anonymize, or otherwise dispose of the information using methods appropriate to its sensitivity.

14. Information Concerning Other Individuals

Insurance applications frequently require information concerning spouses, household members, children, dependents, beneficiaries, employees, drivers, business owners, or other individuals.

If you provide personal information concerning another person, you represent that you are authorized to provide the information to us for the relevant insurance purpose or otherwise have a lawful basis for doing so.

We may use that information for the same insurance and business purposes described in this Policy.

15. Children's Privacy

Our website and services are not directed toward children under 13, and we do not knowingly solicit personal information directly from children under 13 through our website.

Information concerning minors may nevertheless be collected from a parent, guardian, policyholder, employer, or other authorized person when reasonably necessary for legitimate insurance purposes, such as identifying household members, drivers, dependents, insureds, or beneficiaries.

Such information will be handled in accordance with applicable law.

16. Third-Party Websites and Services

Our website, communications, or insurance services may contain links to or integrate with websites and services operated by insurance carriers and other third parties.

Brolly does not control the privacy practices of independent third parties. Information submitted directly to another organization may be governed by that organization's privacy policy.

You should review the privacy practices of organizations to which you provide information.

17. Changes to This Privacy Policy

We may modify this Privacy Policy periodically to reflect changes in our business practices, technology, insurance relationships, legal requirements, or other circumstances.

When we modify the Policy, we will update the "Last Updated" date above.

When required by law, we will provide additional notice concerning material changes or obtain consent before applying a new practice to information.

18. Contact Us and Privacy Requests

Questions, privacy requests, opt-out requests, and other communications concerning this Privacy Policy may be directed to:

Brolly Insurance Agency LLC 226 W 2230 N Provo, Utah 84604

Email: hayden@brollyinsuranceagency.com Phone: 801-615-0279 Website: www.brollyinsuranceagency.com

When submitting a privacy request, please provide sufficient information for us to identify you and understand your request. We may request additional information when reasonably necessary to verify identity or determine the privacy rights applicable to the request.

19. Applicable Law

Brolly's collection, use, disclosure, retention, and protection of personal information is subject to applicable federal and state laws and regulations, which may include insurance privacy laws, data-security laws, consumer-reporting laws, and financial privacy requirements.

To the extent this Privacy Policy conflicts with a requirement imposed by applicable law, the applicable legal requirement will control.

This Privacy Policy is intended to describe Brolly's privacy practices and does not create contractual rights beyond those provided by applicable law.