Privacy Policy

1. Introduction

Overview of Policy

Welcome to www.gallovichagency.com. We are dedicated to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines the types of information we collect from you when you visit the website (“Website”) or use the services provided (“Service”). It also describes how we use, share, and protect your information, and the choices you have regarding your information. This policy is designed to comply with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant telecommunication privacy standards.

Scope

This Privacy Policy applies to all individuals and entities who interact with the Website and the Service, regardless of their location. It encompasses the collection, use, and disclosure of personal information by us and our affiliates and subsidiaries. This policy covers information collected through our website, mobile applications, SMS/MMS communications, and any other electronic means of interaction. It is important that you read this policy carefully to understand our practices related to your information.

Through your interaction with us, you may engage in activities where additional or separate privacy notices are presented. Those notices will apply in conjunction with this policy to the extent of any inconsistencies.

SMS Privacy, Consent, and Mobile Information

We may collect your mobile phone number, SMS opt-in status, consent records, messaging preferences, and related information when you choose to receive text messages from us. This information may be collected when you submit an online form, request an insurance quote, communicate with us, or otherwise provide consent to receive SMS/text messages.

If you have opted in to receive SMS/text messages from us, you may receive messages related to insurance quotes, policy review reminders, renewal follow-ups, appointment reminders, customer care, billing or account-related inquiries, documentation requests, and marketing messages related to insurance products and services, including home and auto insurance bundle quote opportunities.

Message frequency may vary. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP to any text message you receive from us. For assistance, reply HELP or contact us. Consent to receive SMS/text messages is not a condition of purchase.

When collecting personal information, particularly for activities that involve telephony services such as SMS/MMS messaging, we adhere to stringent consent requirements. Explicit, informed, and unambiguous consent is obtained from all individuals prior to the collection of their personal data. This includes clear and conspicuous opt-in mechanisms for marketing communications and any telecommunication activities, ensuring compliance with regulatory standards set forth by bodies such as the CTIA, TCPA, and GDPR.

In certain circumstances, we may require your express written consent, particularly for automated messaging campaigns and any data-sharing activities that fall under strict regulatory frameworks. Your consent may be withdrawn at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw your consent, please contact us using the information provided in the “Contact Information” section of this policy.

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, and regulatory obligations. Your continued use of the Website and the Service constitutes your acceptance of any modifications to this policy. Notice of any significant updates will be provided through a prominent notice on our website or through direct communication channels.

Phone numbers provided for SMS opt-in will remain confidential and will not be shared with any third parties.

By using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and any other agreements that govern your use of our services.

2. Information We Collect

We are committed to transparency concerning the information we collect about you. This section outlines the various types of information we gather through our website and services, inclusive of telephonic interactions such as SMS/MMS communications, and provides clarity on the purpose and use of such information.

Personal Information

We collect personal information that can be used to identify you as an individual, collected either directly from you or through your interactions with our services. This includes, but is not limited to:

Name: Full legal name
Contact Details: Email address, postal address, telephone number, and other similar contact information.

Billing Information

For transactional and billing purposes, we collect specific financial information, which includes:

Credit Card Information: Card number, expiration date, and CVV
Address: Postal address associated with the payment method.

The collection of billing information is essential for processing payments and managing your subscription or purchases of services. This information is stored in compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Usage Information

To optimize and enhance your experience, we gather detailed usage data reflecting your interactions with our services and website:

IP Address: Internet Protocol address used to connect your computer or mobile device to the internet.
Service Usage: Data concerning features accessed, duration and frequency of use, service plan choices, and other metrics.
Calling History: Records of calls made and received via our services, including timestamps and call durations.
Click Patterns: Data on navigation and clicks on the Website, reflecting user interaction patterns.

Collection of such information is standard practice to improve service delivery, ensure security, and understand user preferences.

Anonymous Information

We also collect anonymized data that cannot be used to identify you personally. This aggregated data includes:

Aggregated Usage Data: Information compiled from multiple users in a manner that ensures individual anonymity.

The purpose of collecting anonymous data is to conduct market research, improve our services, monitor performance, and support commercial activities without compromising individual privacy.

Additional Information

In the course of providing our services, we may also collect supplementary information necessary for business operations:

Business Name: Company name and related details for enterprise clients.
Demographic Details: Age, gender, occupation, and other demographic characteristics.
Technology Preferences: Information about your preferred technologies and platforms.
Referral Information: How you discovered us, including referral sources.

This additional information helps us tailor our services, improve customer interactions, and develop targeted marketing strategies.

3. How We Use Your Information

We are committed to ensuring that the information we collect from you is used in a manner that is transparent, secure, and compliant with applicable laws and regulations. Below is a detailed explanation of how we utilize your information to provide, enhance, and secure our services.

Regulating Access

Authentication: Verifying your identity when you log in to the Website or use our services.
Access Control: Ensuring that only authorized users access specific services and features.
Security Measures: Implementing security protocols to protect against unauthorized access, breaches, and other security threats.

Personalization

User Preferences: Tailoring content and service offerings based on your interests and previous interactions.
Service Customization: Personalizing user interfaces and features to improve usability and satisfaction.

Promotions and Marketing

Direct Marketing: Sending you promotional materials related to our products and services through email, SMS, and other communication channels, subject to obtaining your prior consent where required by law.
Marketing Analytics: Leveraging usage data and personal preferences to design and target effective marketing campaigns.

Partner and Sponsor Promotions

Customer Contact

Service Notifications: Informing you about important updates, changes, or issues related to our services.
Customer Support: Addressing your inquiries, resolving issues, and providing assistance through our customer service channels.
Surveys and Feedback: Collecting feedback to improve our services and customer satisfaction.

Internal and Administrative Purposes

Data Analysis: Conducting internal research and analysis to improve our products and services.
Audits and Compliance: Ensuring adherence to internal policies, procedures, and regulatory requirements.
Risk Management: Identifying and mitigating potential risks to our business operations and service delivery.

Billing and Support

Transaction Processing: Handling payments, refunds, and billing inquiries.
Account Management: Managing your account details, subscription plans, and service entitlements.
Technical Support: Providing technical assistance and troubleshooting to ensure seamless service usage.

Anonymous Information Uses

Aggregated Analytics: Combining anonymous data to analyze trends, usage patterns, and market demand without identifying individual users.
Business Development: Using analytical insights derived from anonymous information to make informed business decisions and develop new products or services.

Legal Compliance

Law Enforcement Requests: Disclosing information to comply with legal obligations, court orders, or official requests from law enforcement agencies.
Regulatory Requirements: Using and disclosing information as necessary to comply with industry regulations, telecommunication laws, and data protection legislation.
Enforcement of Terms: Ensuring compliance with our user agreements, terms of service, and other contractual obligations.

Mobile Opt-In, SMS Consent, and Phone Numbers

Mobile opt-in, SMS consent, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

SMS Consent Communication

The information (phone numbers) obtained as part of the SMS consent process will not be shared with third parties for marketing purposes.

Types of SMS Communications

If you have consented to receive text messages from us, you may receive messages related to the following:

Appointment reminders
Follow-up messages
Billing inquiries
Promotions or offers (if applicable)

Example: “Good [Time of Day], [First Name], here is the auto quote coming back at a great rate of [Value] for 6 months, although rates can change according to what coverages you want or don’t want. I do need to verify some information to finalize the quote and likely improve the premium further, so please reach out, and I will be happy to do that for you. Talk soon, have a blessed day! Reply STOP to opt out.”

Message Frequency

Message frequency may vary depending on the type of communication. For example, you may receive up to 5 SMS messages per week related to your appointments, billing, or account status.

Example: “Hi [First Name], this is [Customer Service Rep’s First Name]. It looks like your [Policy Type] insurance payment of [Amount Due] is still outstanding. Have you already taken care of it, or can we help you get it paid today? Reply STOP to opt out.”

Potential Fees for SMS Messaging

Please note that standard message and data rates may apply, depending on your carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally.

Opt-In Method

You may opt in to receive SMS messages from us by submitting an online form and selecting the SMS consent checkbox. The SMS consent checkbox is optional and is not required to submit the form. If you do not wish to receive SMS messages, do not check the SMS consent box.

The SMS opt-in language on our forms may include language substantially similar to the following:

“By providing your phone number and checking this box, you agree to receive SMS/text messages from us regarding insurance quotes, policy review reminders, renewal follow-ups, appointment reminders, customer care, and marketing messages related to insurance products and services, including home and auto bundle quote opportunities. You are opting into marketing texts if you select the marketing text message option. Message frequency may vary. Standard message and data rates may apply. Reply STOP to opt out. Reply HELP for help. We will not share or sell mobile information with third parties for promotional or marketing purposes. Consent is not a condition of purchase. For more information, please review our Privacy Policy and Terms & Conditions.”

Opt-Out Method

You may opt out of receiving SMS/text messages at any time by replying STOP to any SMS message you receive from us. After you opt out, you may receive one final confirmation message confirming that you have been unsubscribed. You may also contact us directly to request removal from our SMS messaging list.

Help

If you need assistance with SMS/text messages from us, reply HELP to any message you receive from us, call us, or email us.

Standard SMS Disclosures

Message and data rates may apply.
You can opt out at any time by texting “STOP.”
For assistance, text “HELP” or visit our Privacy Policy and Terms and Conditions pages.
Message frequency may vary.
Consent is not a condition of purchase.

Phone numbers provided for SMS opt-in will remain confidential and will not be shared with any third parties.

Enhanced Business SMS Guidelines

Compliance with TCPA’s Terms of Service and Acceptable Use Policy: Our use of Enhanced Business SMS services is strictly governed by TCPA’s Terms of Service and Acceptable Use Policy.

Message Limitations: We limit the number of messages sent per originating number to 50 messages per minute per originating number for regular use, up to 60 messages per minute for long-code numbers, and 180 messages per minute for toll-free numbers under our High Volume SMS solution.

Written Consent Requirements: For any marketing, promotional, or informational messaging, we obtain explicit written consent from recipients before sending messages, in compliance with the Telephone Consumer Protection Act (TCPA) and CTIA guidelines.

Phone numbers provided for SMS opt-in will remain confidential and will not be shared with any third parties.

Automated Messaging

Express and Logged Consent: Automated SMS messaging via our platform requires express and logged consent from the recipient.
Opt-Out Requirements: Every automated message includes clear opt-out instructions (e.g., “Reply STOP to end”). All opt-out requests are processed immediately.

Consent Tracking & Proof

Consent Tracking: Detailed records of consent are maintained, including timestamps and methods of opt-in, to provide proof of consent if requested by carriers or regulatory bodies.
Proof of Consent: In instances where carriers request proof of consent, we can provide comprehensive documentation detailing the opt-in process and recipient consent records.

Prohibited Campaigns and Content

The following types of campaigns are strictly prohibited:

Loan and mortgage advertisements
Credit repair offers
Debt relief offers
Debt collection attempts
Work from home advertisements
Secret shopper advertisements
Political advertisements and messages
Alcohol, tobacco, or firearms advertisements
Pharmaceutical, vitamin, or other drug advertisements
Illegal activities or terms of service violations
Pornographic or adult entertainment
Violence, hate speech, or abusive content
References to controlled substances (e.g., marijuana)
Fraudulent or deceptive behavior
Links intended to mislead or violate carrier policies

Compliance and Enforcement

Carrier Fees: We remain vigilant about adhering to carrier-imposed regulations and fees to avoid additional financial liability for non-compliance.
Account Restrictions: Accounts found in violation of carrier rules may face reduced deliverability rates, additional campaign registration fees, temporary suspension of services, or termination of account access.
Penalties and Fines: Non-compliance with guidelines and regulations may attract penalties and fines passed through by the carriers.

4. Information Storage and Security

Physical Procedures

Controlled Access: Access to our physical storage locations is restricted to authorized personnel only. We employ secure locks, ID badge verification, biometric systems, and surveillance cameras.
Environmental Protections: Our facilities are equipped with state-of-the-art fire suppression systems, climate control, and redundant power supplies.

Electronic Procedures

Network Security: We use robust firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to protect our servers from unauthorized access and cyber threats.
Data Redundancy and Backup: Regularly scheduled backups are performed and stored in secure, off-site locations.

Managerial Procedures

Access Control Policies: Authorized access is granted on a need-to-know basis, and access privileges are regularly reviewed and updated.
Employee Training: All employees undergo regular training on data protection laws, privacy practices, and security measures.

Encryption

Data at Rest: Personal information stored on our servers is encrypted using industry-standard encryption protocols, such as Advanced Encryption Standard (AES-256).
Data in Transit: Information transmitted between your device and our servers is protected using Transport Layer Security (TLS).

Secure Access Controls

Multi-Factor Authentication (MFA): MFA is required for accessing sensitive systems and data.
Regular Audits: We conduct regular security audits and vulnerability assessments to identify and rectify potential security risks.

Data Retention

Business and Operational Needs: Data is retained for the duration necessary to provide ongoing services, support business operations, and fulfill contractual obligations.
Legal and Regulatory Requirements: Retention periods are determined by legal requirements, which may vary depending on jurisdiction and the nature of the data.

Deletion Policies

Secure Deletion: Data is securely deleted from our systems using industry-standard methods such as data wiping and degaussing.
Anonymization: In cases where ongoing data analysis is required, personal data may be anonymized, allowing us to retain it for statistical purposes without compromising individual privacy.

No Sale or Sharing of SMS Information

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.

All categories of personal information described in this Privacy Policy exclude text messaging originator opt-in data and consent. This data will not be sold or shared with any third parties or affiliates for their own promotional or marketing purposes.

We may share your personal information, including your mobile phone number, SMS opt-in status, or consent records, with service providers only as necessary to provide our messaging services (messaging platform providers, phone companies, carriers, technology vendors). These service providers are not permitted to use your SMS information for their own marketing or promotional purposes.

Legal Requirements

Compliance with Laws: Disclosures necessary to comply with any applicable law, regulation, legal process, or governmental request.
Protection of Rights: Disclosures necessary to protect the rights, property, or safety of the company, our users, employees, or the public.
Legal Proceedings: Disclosures necessary to enforce our terms of service, agreements, or policies, or to respond to claims or litigation.

5. Cookies and Tracking Technologies

Types of Cookies Used

Essential Cookies: Fundamental to the operation of our website and services, enabling security, network management, and accessibility.
Performance Cookies: Collect anonymized information about how visitors interact with our website.
Functionality Cookies: Remember choices you make to provide a more personalized experience, such as login details and language preferences.
Targeting/Advertising Cookies: Used to deliver relevant advertisements based on your browsing habits.

Purpose of Cookies

Improving User Experience: By remembering your preferences and past actions, cookies enhance the usability and functionality of our services.
Analytics and Performance: Cookies help us understand how users engage with our website.
Targeted Advertising: With your consent, cookies enable us to deliver personalized advertisements.

Web Beacons

Email Tracking: To understand whether emails sent by us are opened and if recipients engage with the content.
Website Analytics: To track user behavior on our website, such as pages visited and actions taken.

Log Files

IP Addresses: Help determine the geographical location of users and assist in maintaining website security.
Browser Type and Version: Aids in compatibility and optimization efforts.
Internet Service Provider (ISP): Useful for troubleshooting connectivity issues.
Referring/Exit Pages: Helps us understand traffic patterns and referral source effectiveness.
Date and Time Stamps: Assist in tracking user behavior and peak usage times.
Clickstream Data: Enables us to optimize the site layout and navigation.

6. User Rights and Choices

Access and Update Information

Access Requests: You can request a copy of the personal data we maintain about you by contacting us.
Update and Correction Requests: If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request corrections.

Opt-In/Opt-Out Choices

Marketing Communications — Opt-In: You may opt-in to receive marketing communications, including emails, newsletters, and promotional offers.
Marketing Communications — Opt-Out: Each marketing email will include an “unsubscribe” link.

SMS/MMS Messages — Opt-In: To receive SMS/MMS messages, you must provide explicit consent, typically through a double opt-in process.
SMS/MMS Messages — Opt-Out: You can opt-out by replying with keywords such as “STOP” or “UNSUBSCRIBE.”

Request for Data Deletion

Submission of Requests: To request the deletion of your personal information, please contact our Data Protection Officer.
Deletion Process: Upon verifying your request, we will delete your personal data from our active databases. Residual copies may be retained in backup archives for a specified period to comply with legal obligations.

Complaint Resolution

Submission of Complaints: Contact our Data Protection Officer immediately with detailed information.
Internal Review: We will conduct a comprehensive review involving relevant departments and personnel.
Resolution and Response: We will provide a formal response outlining corrective actions taken. If unsatisfied, you have the right to lodge a complaint with the relevant data protection authority.

7. International Data Transfers

Compliance with Global Standards

General Data Protection Regulation (GDPR): For individuals located in the EEA, we comply with the GDPR.
California Consumer Privacy Act (CCPA): For residents of California, we comply with the CCPA.
Other Applicable Laws: We also comply with other relevant international data protection laws.

Transfer Mechanisms

Adequacy Decisions: Where applicable, we rely on adequacy decisions by relevant data protection authorities.
Standard Contractual Clauses (SCCs): In the absence of an adequacy decision, we use SCCs approved by the European Commission.
Binding Corporate Rules (BCRs): For intra-group transfers, we may implement BCRs.
Privacy Shield Framework: We ensure any data transferred to the U.S. adheres to equivalent data protection standards through SCCs or BCRs.

Specific Considerations for Telephony and Insurance

Telecom Regulations: We ensure compliance with telecommunications-specific regulations for voice, SMS, and MMS data.
Insurance Regulations: We adhere to specific regulations governing the transfer of policyholder information, claims data, and actuarial records.
Security Measures: We implement extensive security measures including encryption, pseudonymization, and secure data transmission protocols.
Transparency and Control: You have the right to request further information about the specific safeguards we utilize.

8. Children’s Privacy

Age Restrictions

Our services and website are not intended for use by children under the age of 13. Aligned with the Children’s Online Privacy Protection Act (COPPA).

Prohibition of Collection: We explicitly prohibit registration or use of our services by children under 13.
Verification of Age: During registration, we may implement age verification mechanisms.

Parental Guidance

Parental Consent: In jurisdictions where mandated, we may require verifiable parental consent.
Parental Rights: Parents and guardians have the right to review, amend, or request deletion of their child’s personal information.
Educational Resources: We provide educational resources to help parents and guardians understand our data collection practices.

Compliance with Telephony & Insurance Regulations

Telemarketing and Communications: We comply with telephony regulations that prohibit telemarketing to minors.
Data Protection Standards: We adhere to strict data protection standards to safeguard minors’ information.
Insurance Policies and Services: We ensure all insurance-related services comply with applicable laws governing minors.

9. Changes to this Privacy Policy

Notification of Changes

Website Notification: A prominent notice will be displayed on the website.
Email Notification: We will send an email notification about the changes.
In-App Notifications: We may utilize in-app notifications to alert you to changes.

Effective Date

Effective Date Specification: All changes will take effect on the date specified in the notification.
Review Period: We may provide a review period before the new Privacy Policy takes effect.
Historical Versions: Previous versions may be retained and made available upon request.

10. Contact Information

Company Details

Frank J Gallovich Insurance Agency, Inc
Phone: 972-398-0001
Address: 630 N. Central Expy Ste 630C, Plano, TX 75074
Website: www.gallovichagency.com

Data Protection Officer (DPO)

Name: Frank Gallovich
Email: frank@gallovichagency.com
Phone: 972-398-0001
Mailing Address: 630 N. Central Expy Ste 630C, Plano, TX 75074

Contact Methods

Email: support@gallovichagency.com — typically within 2-3 business days.
Phone: 972-398-0001, Monday to Friday, 9 AM to 5 PM CST.
Mail: Frank J Gallovich Insurance Agency, Inc, 630 N. Central Expy Ste 630C, Plano, TX 75074
Web Form: A secure web form is available on our website for submitting inquiries.
In-Person Visits: We recommend scheduling an appointment.
Regulatory Authorities: For the EEA, contact your national supervisory authority. For California residents, contact the California Attorney General’s Office.

11. Miscellaneous

Dispute Resolution

Informal Resolution: We encourage you to contact us directly to resolve any concerns informally.
Mediation and Arbitration: If unresolved, we may agree to mediation or arbitration through the American Arbitration Association (AAA).
Litigation: As a last resort, disputes may be resolved in court.

Governing Law

Applicable Law: This Privacy Policy is governed by the laws of the State of Texas.
Jurisdiction and Venue: Legal actions shall be brought exclusively in the courts of Collin County, Texas.

Industry-Specific Considerations

Telecommunications Regulations: We comply with FCC and other relevant telecommunications regulations.
Insurance Regulations: We adhere to state insurance regulatory authority guidelines.
Cross-Border Disputes: We endeavor to comply with applicable international laws for cross-border transactions.