Privacy Policy

Privacy Policy and Notice of Personal Information Practices

  1. Scope and Applicability

    ARAG North America Incorporated and its affiliated entities ("ARAG," "we," "us," or "our") respect your privacy and are committed to protecting personal information in accordance with applicable law. This Privacy Policy and Notice of Personal Information Practices ("Notice") describes how we collect, use, disclose, and safeguard personal information when you visit or interact with ARAGlegal.com, use our applications, enroll in, or participate in an ARAG legal plan, submit claims, communicate with us, or receive communications from us, including email or text messages.

    This Notice applies to policyholders, plan members, dependents, service providers, attorneys, website visitors, and other individuals whose personal information we process. It does not apply to information collected by other third parties, including through any application or content that may link to or be accessible from or through the website.

  2. Information We Collect

    We collect personal information:

    • through our website.
    • through our mobile and desktop applications.
    • through email, text, and other electronic messages from you.
    • from your employer; and
    • from other sources as permitted by law.

    Personal information may include identifiers and information reasonably linked to an individual, including but not limited to: contact information (such as name, address, email address, and phone number); account, enrollment, and policy information; claims and benefit information; payment and financial information; social security number; date of birth; gender; professional, employment, or employer-provided information; online identifiers, device information, IP address, and usage data; geolocation information when you choose to enable location-based services; information obtained from court records, government records, driving records, property information, public records or third parties as permitted by law; and inferences drawn from the information above to provide or improve services.

  3. Information We Collect Through Automatic Data Collection Technologies

    As you navigate through and interact with our website and applications, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

    • Details of your visits to our website and apps, including traffic data, location data, logs, other communication data, and the resources that you access and use.
    • Device and connection information, including IP address, operating system, browser type, mobile network information, and the device’s telephone number.
    • Technical metadata associated with files and application programming interface rules and protocols (APIs) that you choose to share with us through our applications, is limited to information that is reasonably necessary to provide the requested service (for example, file type, size, or creation date). We do not automatically access, collect, or scan photographs, audio or video clips, personal contacts, or address book information stored on your device. Access to such content, if any, occurs only with your permission through your device's operating system permission controls, and only to the extent required to deliver a specific feature you have actively requested.
    • Geolocation information from your device when you choose to use a location-based function in our apps. If you allow your location to be obtained using an ARAG app, ARAG will use the services of Google Maps to determine your approximate location. Use of this information is solely to distinguish your current location and not to identify you. ARAG does not automatically track your location when you use our apps. ARAG uses the services of Google Maps for location services. The Google current privacy policy is available at https://policies.google.com/privacy and is incorporated by reference into this Notice.

    We also may use these technologies to collect information about your online activities over time. You can opt out of certain tracking technologies through your browser settings (options vary by browser).

    The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. This information helps us improve our website and deliver a better and more personalized service by enabling us to:

    • estimate our audience size and usage patterns.
    • store information about your preferences to help us customize our website to your interests.
    • speed up your searches; and
    • recognize you when you return to our website.

    The technologies we use for automatic data collection may include:

    Cookies (or browser cookies): A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our website.

    Web Beacons: Pages of our website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

    You may manage cookie preferences through your browser settings. Additional information about cookies and tracking technologies used on ARAG websites may be provided through cookie banners or supplemental notices where required by law. Our applications may also use similar technologies (such as SDKs) for functionality, security, and analytics.

  4. How We Use Personal Information

    We use personal information to provide, administer, and service legal plans and benefits; process enrollments, payments, and claims; communicate with you about your plan, account, services, and update our website and mobile applications; respond to inquiries and provide customer support; improve our websites, applications, and services; conduct research, analytics, and product development; deliver targeted advertisements and marketing communications to individuals who may be eligible for our products and services; detect, prevent, and investigate fraud or security incidents; comply with legal, regulatory, and contractual obligations; and carry out any purpose disclosed at the time of collection or with your consent.

  5. How We Share Personal Information

    We do not sell personal information.

    We may disclose personal information, as permitted or required by law, to: (i) service providers and vendors that perform services on our behalf, who are contractually required to maintain the confidentiality and security of such information and to use it only for the purposes for which it was disclosed; (ii) affiliates and related entities for business, audit, or compliance purposes; (iii) attorneys, investigators, regulators, or governmental authorities as needed to administer benefits, investigate claims, prevent fraud, or comply with legal obligations; (iv) successors in interest in connection with a merger, reorganization, sale of assets, or similar transaction; and (v) any other party with your prior consent or as otherwise permitted by applicable law. ARAG is not responsible for the privacy practices of third parties to whom information is disclosed in accordance with this Notice.

    Information about our potential or former policyholders and plan members who have obtained quotes from us is safeguarded to the same extent as information about our current policyholders or plan members.

  6. Data Retention

    We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal, regulatory, and contractual obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is processed. When personal information is no longer needed, we take reasonable steps to securely delete, de-identify, or destroy it in accordance with our internal data retention policies and applicable law. ARAG reserves the right to retain information in anonymized or aggregated form that cannot reasonably be used to identify you.

  7. Your Privacy Rights

    Depending on where you live, you may have certain rights regarding your personal information, subject to applicable legal exceptions and limitations. These rights may include the right to: (i) confirm whether we process your personal information; (ii) access or obtain a copy of your personal information; (iii) correct inaccuracies in your personal information; (iv) request deletion of your personal information, subject to our legal retention obligations; (v) obtain a portable copy of certain information; (vi) opt out of certain data processing activities, such as targeted advertising or profiling; and (vii) limit or withdraw consent for processing sensitive personal information where required by law. ARAG reserves the right to verify your identity and the identity of any authorized agent before fulfilling any privacy rights request. We may deny requests that we are unable to verify, that conflict with our legal obligations, or that are otherwise exempted under applicable law. We will respond to verifiable requests within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.

    You or your authorized agent may submit a privacy request or appeal by contacting ARAG North America Incorporated, Attention: Privacy Administration, 500 Grand Avenue, Suite 100, Des Moines, IA 50309; phone (800) 247-4184; or email legal@ARAGlegal.com.

  8. Additional State Privacy Disclosures

    Certain state laws provide additional privacy rights to residents. Where required, ARAG complies with applicable state privacy statutes, including those enacted in California and other U.S. states.

    Nevada residents may submit a request to opt out of the sale of personal information; however, ARAG does not sell personal information as defined under Nevada law.

  9. Google reCAPTCHA

    ARAG uses Google reCAPTCHA on certain pages of its websites to help protect against automated abuse, fraud, and unauthorized access. reCAPTCHA operates by collecting information about user interactions with the website, including IP address, browser and device characteristics, mouse movements, and other behavioral signals.

    This information is transmitted to and processed by Google under Google's own terms of service and privacy policy, which govern Google's independent use of that data. ARAG does not control Google's use of information collected through reCAPTCHA. Google may use this information for its own purposes, including security, fraud prevention, and improvement of Google's products and services, in accordance with the current Google Privacy Policy. ARAG's use of reCAPTCHA is solely to protect its systems and users from automated abuse and is not used by ARAG for advertising, profiling, or any purpose other than security. By using pages or features on which reCAPTCHA is enabled, you acknowledge that your interaction data will be processed by Google as described above.

  10. Text Messaging and SMS Communications

    If you provide your mobile phone number, ARAG may send you informational or transactional text messages related to your legal plan or account, including authentication messages. Message frequency varies based on account activity, and message and data rates may apply.

    You may opt out of receiving text messages at any time by replying STOP. Consent to receive text messages is not shared with third parties except as necessary to provide the messaging service.

    Email communications: If you do not wish to receive non-policy-related marketing emails, you may unsubscribe by following the instructions at the bottom of an ARAG email or by contacting us.

  11. Data Security

    We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These measures may include, but are not limited to, encryption of data in transit and at rest, access controls, and regular security assessments. While we strive to use commercially reasonable means to protect personal information, no method of transmission over the Internet or electronic storage is completely secure. ARAG does not warrant or guarantee the absolute security of any information you transmit to us, and you do so at your own risk. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law. If we have provided (or you have chosen) a password for access to certain parts of our website, you are responsible for keeping this information confidential.

  12. Third-Party Links and Services

    Our website and applications may contain links to third-party websites, applications, or services that are not operated or controlled by ARAG. This Notice does not apply to third-party websites or services. ARAG is not responsible for the content, privacy policies, or data practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link to a third-party website does not imply ARAG's endorsement of that site or its privacy practices.

  13. Children’s Privacy

    ARAG services are not directed to, and are not intended for, children under the age of 16. We do not knowingly collect, solicit, or maintain personal information from children under the age of 16. If we become aware that we have inadvertently collected personal information from a child under 16 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you believe we may have any information from or about a child under the age of 16, please contact us immediately at legal@ARAGlegal.com. Parents or guardians who believe their child has submitted personal information to ARAG without their consent may request its deletion by contacting us.

  14. Changes to This Notice

    We reserve the right to update or modify this Notice at any time and at our sole discretion. When we make material changes to this Notice, we will update the effective date at the top of this Notice and, where required by applicable law, provide you with additional notice (such as by posting a prominent notice on our website or sending you a direct communication). The effective date reflects the most recent revision. Your continued use of our services following the posting of an updated Notice constitutes your acknowledgment of, and agreement to, the revised Notice. We encourage you to review this Notice periodically to stay informed about our data practices.

  15. Contact Us

    If you have questions, concerns, or complaints regarding privacy or data security; or to exercise the privacy rights afforded to you in your state, you or your authorized agent may contact us at:
    ARAG North America Incorporated
    Attention: Privacy Administration
    500 Grand Avenue, Suite 100
    Des Moines, IA 50309
    Phone: (800) 247-4184
    Email: legal@ARAGlegal.com