This privacy notice applies to Protective Insurance Corporation, Protective Insurance Company, Sagamore Insurance Company, Protective Specialty Insurance Company, B&L Brokerage Services Inc., and B&L Insurance Ltd. (Bermuda), B&L Management, Inc., Transport Specialty Insurance Agency, Inc. which are collectively referred to in this notice as “we,” “our” and “us.” This notice is addressed to all of our current and former policyholders, who are collectively referred to as “you,” “your” or “yours.”

We are committed to protecting your privacy. We will not share your nonpublic personal information with other companies for marketing purposes. There is no need to opt out. To learn more about how we collect, use, disclose and protect your personal information, please read the following Privacy Notice.

Why We Collect Information

We collect and use information to evaluate your request for our insurance or other products or services, to evaluate benefit claims, to administer our products or services and to process transactions requested by you.

Types of Information We Collect

We may collect the following types of information if you choose to provide it:

• Underwriting and Application Information. As an insurance company, we must research and evaluate insurance applicants. During this evaluation, we gather information on individual and corporate applicants from government and insurance industry bureaus, and financial information services, such as Standard and Poor’s, previous insurers and credit reporting agencies. This nonpublic personal information includes, but is not limited to, name, mailing address, email addresses, phone number(s), date of birth, household and additional driver information, occupation and place of employment, and vehicle information.

• Consumer Report Information. We use information from consumer reporting agencies to confirm or supplement information that we gather from your application. Consumer reports typically contain information such as motor vehicle reports, claim histories and other information. We will only disclose this information to service or underwrite your policy. We do not share this information with third parties; however, this information may be shared among our affiliated companies where permitted by law.
• Event Registration Forms. We periodically hold presentations for our customers and insureds. In order to register individuals for these events, we need to gather names, mailing addresses, phone numbers, fax numbers and email addresses. This information is only used to coordinate and plan these events and will not be shared with third parties except where permitted by law.

• Claims Reporting and Information. In order to quickly and fairly process claims, we need to collect names, mailing addresses, phone numbers, information pertinent to the claim, loss or accident, the names of witnesses, and information about individuals involved in the claim, loss or accident. We also collect information about your insurance coverage selections and premiums, claims history and past payments, and billing information. Additionally, we may compile personal information about you so that we can properly adjust, settle and investigate any claims made against your policy with us. This information is primarily collected to settle claims made against your policy and will not be shared with third parties except where permitted by law.

• Publication and Software Requests. Our customers and prospective clients occasionally express an interest in receiving software and safety publications from us. In order to process these requests, we need to collect names, mailing addresses, email addresses, fax numbers and phone numbers. This information is used only to satisfy publication and software requests and will not be shared with third parties except where permitted by law.
• Customer Service. In order to better service your account, we may need to collect names, mailing addresses, phone numbers, fax numbers, credit card and checking account numbers, or email addresses. This information is only used to assist our representatives in servicing your account with us and will not be shared with third parties except where permitted by law.
• Agency or Producer Service Information. Our independent producers and agents use Internet communication systems, to submit information to us regarding your account. This includes, but is not limited to, underwriting information as described above, endorsement requests, requests for certificates of insurance, additional insured requests, cancellation information and general requests for product information. We expect our independent agents and producers to follow our privacy policy when handling your personal information. However, your independent agent or producer is required by law to develop its own privacy policies. Please note that these privacy policies may significantly differ from ours. Thus, we recommend that you refer to the privacy policies of your independent agent or producer to safeguard your personal information.

The above list is not all-inclusive and we may collect other types of information about you. However, be assured that we are committed to protecting your privacy and the confidentiality of your personal and financial information and that we will make every effort to keep you updated on the types of information we are collecting about you.

We may use information about you to provide you with more personalized experiences. We also may use it to develop artificial intelligence (AI).  We design and use AI to help improve our products and services, to help fight fraud, and for other uses consistent with this notice. We are committed to responsible AI principles in our use of AI. You can learn more about AI at https://www.progressive.com/support/legal/ai-policy/.

Protecting Nonpublic Personal Information

We restrict access to nonpublic personal information about you to the select employees and agents or producers who need that information to service your account, to provide you with our products and services, or to otherwise conduct our business. If your information is not necessary for an employee's job, it will not be made available to them.

The information we collect about you is kept within our companies and will not be disclosed except when required to service your account or where permitted by law. Your nonpublic personal information is not available to the general public. Access to our computer systems is limited by user code and department.

How and When We Disclose Nonpublic Personal Information

We will share information about you only as permitted by law. We will not share your nonpublic personal information with unaffiliated companies for marketing purposes. There is no need to opt out.

We may disclose information to our affiliates and unaffiliated third parties for the purpose of processing insurance claims and servicing your account with us. For instance, we disclose information to our claims representatives, appraisers, insurance producers and brokers, law enforcement, courts and government agencies. All other disclosures are made according to your authorization or as required or permitted by law.

We may disclose or contribute information to state agencies, insurance databases or rating organizations to prevent fraud, perform research, comply with federal, state or local laws, or to comply with civil, criminal or regulatory investigations. We may also share information with actuarial or reinsurance professionals.

We will not disclose your medical information without first obtaining your consent unless otherwise permitted by law and necessary to process your claim.

Website Information

You can browse our websites without divulging name, address or the like. However, we have created several customer service applications for our policyholders, potential customers, insureds, claimants and investors on our websites. If you would like to access these specific applications, you will need to submit information to us such as your name, home address, telephone number, email address, credit card or checking account information, or other personal identifiers so that we can service your account. By using any of our websites, you agree to the terms of this Privacy Notice.

We also provide links to other websites on the Internet. Please be aware that these links are provided as a benefit to you and we are not responsible for the privacy practices or the content of any other websites that you may be linked to through our websites. We recommend that you refer to the privacy policies of these linked sites as their privacy policies may significantly deviate from ours.

California Consumer Privacy Act Supplement to Privacy Policy

This Supplement ("Supplement") describes our collection and use of Personal Information (as defined in the "Notice at Collection" below) that is subject to the California Consumer Privacy Act (the "CCPA"). This Supplement also describes the rights of Consumers under the CCPA. This Supplement does not apply to information that is exempt from the CCPA. This Supplement controls if there is a conflict with our privacy policy.

Our Personal Information practices

We collected each of the categories of Personal Information listed in the "Notice at Collection" below during the twelve months preceding the date of this notice (the "past year").

We collect Personal Information for the Purposes listed in the Notice at Collection.

The categories of our sources for Personal Information about Consumers include:

• Advertising networks, lead sources or aggregators, or other third-party sites, web browsers or search engines
• Consumers or our observation of consumers
• Data analytics providers
• Data brokers
• Government entities
• Insurance agents and brokers
• Internet service providers
• Operating systems and platforms
• Our service providers
• Persons involved in insurance claims, litigation, or fraud prevention or detection
• Social networks
• Third-party product providers
• Other companies within our family of companies

We disclose each of the categories of Personal Information listed in the Notice at Collection. During the past year, we disclosed the following Personal Information to service providers or contractors for business purposes: Identifiers, CCR Categories, Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data and/or Sensitive Geolocation Information, Sensory Data, Professional or Employment-Related Information, Education Information, Inferences, Sensitive Identifiers, Sensitive Account Information, Sensitive Demographics, Sensitive Communications, Sensitive Health Information, Sensitive Genetics Information, Sensitive Neural Information, and Sensitive Sexual Information. All of this information may be disclosed within our family of companies.

We disclose Personal Information for the Purposes listed in the Notice at Collection.

During the past year, we sold or shared Identifiers, Internet or Other Electronic Network Activity Information, and Commercial Information to or with advertising networks, lead sources and aggregators, or other third-party sites, web browsers or search engines for purposes of marketing and advertising products and services offered by us or others, lead monetization, and associated research and analysis. This includes Cross-Context Behavioral Advertising purposes such as compensation for leads and analysis of advertising effectiveness. “ Cross-Context Behavioral Advertising” means targeting advertising to a Consumer based on the Consumer’s Personal Information obtained from that person’s activity across businesses, distinctly-branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the person intentionally interacts.

We do not use or disclose the “Sensitive Personal Information” described in the “Notice at Collection” below for purposes other than those specified by the CCPA and its regulations.

To our knowledge, we do not sell Personal Information about Consumers under sixteen years old or share it with others for Cross-Context Behavioral Advertising.

Your rights to delete, discover and correct

To the extent provided by law, you are entitled to receive a “Notice at Collection,” which we have attached to this Supplement.

To the extent provided by law, you may request that we:

• delete Personal Information that we collected from you;
• correct inaccurate Personal Information that we maintain about you; and
• disclose the following to you free of charge:
  • the categories of Personal Information we collected about you;
  • the categories of sources from which it is collected;
  • our purpose for collecting, selling or sharing Personal Information;
  • the categories of third parties to whom we disclose Personal Information;
  • the specific pieces of Personal Information we collected about you;
  • the categories of Personal Information about you that we sold or shared and the categories of third parties to whom the Personal Information was sold or shared; and
  • the categories of Personal Information about you that we disclosed for a business purpose and the categories of persons to whom it was disclosed.

You may exercise the rights described above by using the form at privacyrequest.progressive.com or by calling us toll-free at 1-855-955-0742.

Your CCPA opt-out rights

You may opt-out of our sharing Personal Information about you for Cross-Context Behavioral Advertising purposes, as well as from any sales by us of that information. You may exercise this right at privacyrequest.progressive.com.

We will honor any Global Privacy Control (“GPC”) signals that indicate your preference to opt-out of sales or sharing of your Personal Information. You may enable this on many browsers’ settings or by downloading a GPC extension for applicable browsers. GPC opt-outs are applied at the browser level. If you clear the cookies cache on your browser, websites such as ours will not be able to recognize your prior GPC opt-out, but you may opt-out again by re-enabling or downloading the GPC setting extension or by notifying us at privacyrequest.progressive.com.

Nonretaliation

We will not retaliate against you for exercising your rights under the CCPA. However, we may charge a different price for goods or services if the difference is reasonably related to the value of your Personal Information.

Verifying requests

If you request to delete, correct, or discover Personal Information, we will attempt to verify your identity by trying to match identifying information provided by you to Personal Information about you that we have. If we do not have enough information to match, we may try to contact you to verify your identity. Examples of information you may be asked to provide include your name, address history, and information about your interactions with us. If you want us to disclose specific pieces of Personal Information that we collected about you or delete Personal Information that we collected from you, you may also be asked to provide a copy of the front and back of your driver's license or other government-issued identification card. We will notify you if we cannot timely verify that you are the consumer about whom we have collected Personal Information.

How an agent can make requests on your behalf

You may designate an agent to make requests on your behalf. To make such a request, your agent may use privacyrequest.progressive.com or call us toll-free at 1-855-955-0742. The agent must provide us with a power of attorney from you or your signed permission authorizing the agent to make the request for you. If the agent requests disclosure of specific pieces of personal information or deletion of personal information, the agent may also be asked to send us a copy of the front and back of your driver's license or other government-issued identification card. If the agent does not provide us with a power of attorney, we may contact you to directly verify with you your identity and that you gave the agent permission to submit the request.

Questions and concerns

If you want to access this notice in a different format because of disability, or if you have any other CCPA questions or concerns, you may contact us at privacyrequest.progressive.com or call us at 1-855-955-0742.

Date

The foregoing Supplement was last updated as of 12/16/2025.

Metrics regarding 2024 CCPA requests from Californians

We received 434 requests to know. We complied with 407 of those requests in whole or part. We denied 27 of those requests. The mean number of days for processing was 9.

We received 579 requests to delete. We complied with 543 of those requests in whole or part. We denied 36 of those requests. The mean number of days for processing was 8.

We received 1,149 opt-out requests. We complied with 1,088 of those requests in whole or part. We denied 61 of those requests. The mean number of days for processing was 4.

We received 81 requests to correct. We complied with 74 of those requests in whole or part. We denied 7 of those requests. The mean number of days for processing was 9.

Requests were denied due to unverifiable consumer identity or valid CCPA exemption.

For ensuing-year updates to these numbers, see the California privacy policy at https://www.progressive.com/privacy/.

California Notice at Collection

This Notice applies only to California residents (“Consumers”) concerning Personal Information that is subject to the California Consumer Privacy Act (“CCPA”). This Notice does not apply to information that is exempt from the CCPA.

"Personal Information" is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or household in California. It includes the following categories:

• "Identifiers" such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
• "CCR Categories,” which may include the following categories of Personal Information described in the California Customer Records statute: name, signature, Social Security number, physical characteristics or description, address, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• "Protected Classification Characteristics" under California or federal law such as age, marital status, and gender.
• "Commercial Information," which may include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• "Internet or Other Electronic Network Activity Information," which may include website information, browsing history, search history, information on a Consumer’s interaction with an internet website, application, or advertisement.
• "Geolocation Data" about physical location or movements.
• "Sensory Information" consisting of audio, electronic, visual or similar information.
• "Professional or Employment-Related Information" such as information about current or past employment.
• "Education Information" such as education level.
• "Inferences" drawn from other Personal Information to create a profile about a Consumer reflecting the Consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Personal Information also includes the following categories of “Sensitive Personal Information”:

• “Sensitive Identifiers,” meaning Personal Information that reveals a Consumer’s Social Security, driver’s license, state identification card, or passport number.
• “Sensitive Account Information,” meaning Personal Information that reveals a Consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
• “Sensitive Geolocation Information,” meaning Personal Information that reveals a Consumer’s geolocation within an area that is equal to or less than the area of a circle with a radius of 1850 feet.
• “Sensitive Demographics,” meaning Personal Information that reveals a Consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership.
• “Sensitive Communications,” meaning the contents of a Consumer’s mail, email, and text messages unless we are the intended recipient of the communication.
• “Sensitive Genetics Information,” meaning a Consumer’s genetic data.
• “Sensitive Health Information,” meaning Personal Information collected and analyzed concerning a Consumer’s health.
• “Sensitive Sexual Information,” meaning Personal Information collected and analyzed concerning a Consumer’s sex life or sexual orientation.
• “Sensitive Neural Information” means information generated by measuring the activity of a consumer’s central or peripheral nervous system that is not inferred from nonneural information.

We may collect and use the preceding Personal Information (including Sensitive Personal Information) about you and your household for the following purposes (the “Purposes”):

• Analytics, research & development, pricing, and improving or upgrading our offerings.
• Auditing and quality control.
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions.
• Claims and litigation.
• Compliance and related purposes, including, without limitation, making disclosures required by law or regulation, for governmental investigations or processes, or to our attorneys, accountants and auditors.
• Helping ensure our ability to detect security incidents, resist malicious, fraudulent or illegal activity, and report and help prosecute such activity and help protect people’s physical safety.
• Maintaining and protecting our data, systems and ourselves, including, without limitation, debugging to identify and repair errors.
• Marketing and advertising products and services offered by us or others, lead monetization, and associated research and analysis.
• Provide, process and service our products or offerings (e.g., maintaining or servicing policies, providing other consumer service, processing or fulfilling transactions and payments, verifying consumer information, communications, etc.)
• Sharing information with throughout our family of companies or with companies in which we invest.

The minimum length of time for which we will retain the Personal Information we collect varies based on applicable statutes of limitations and whether we think we might need the information for court or other official proceedings.

We may sell, or share for Cross-Context Behavioral Advertising Purposes, Identifiers, Internet or Other Electronic Network Activity Information, Professional or Employment-Related Information, and Commercial Information. “Cross-Context Behavioral Advertising” means targeting advertising to a Consumer based on the Consumer’s Personal Information obtained from that person’s activity across businesses, distinctly-branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the person intentionally interacts. You can opt-out of such sharing at privacyrequest.progressive.com.

We may allow third parties to collect personal information from our websites.

This Notice is incorporated into our Privacy Policy.