---

Regarding personal information

Thank you for your recent request to know about your personal information — your privacy is very important to us. We are responding with both a file containing your specific pieces of personal information and information about the categories of your personal information collected, shared or disclosed. This response includes only personal information that InfoArmor, Inc. has in its records and not personal information held by corporate affiliates of InfoArmor such as Allstate Insurance Company. To learn more about the personal information from our affiliates, please see their online privacy statements which contain details about their privacy practices and how to submit a request.

Per your verified request, we are providing you a file containing the personal information about you that is subject to the California Consumer Privacy Act (CCPA).

Please also note the following about your personal information file:

• The amount and type of personal information included in the attached file will vary based on your relationship with InfoArmor. Based on the personal information about you that we located, it appears that you are an existing or former customer.
• The way the personal information is presented will vary based on how the information is kept in each system. Some of your information has been redacted or not returned due to risk of fraud as required by CCPA, such as your social security number, drivers' license number, financial account number or account passwords. We will let you know that we have collected it but will not provide you with the actual personal information in the response.
• For each piece of personal information returned, we have indicated the category in which that piece of personal information belongs. The categories are listed below with examples of the types of personal information that fall into each category. Those categories allow you to better understand the personal information that is shared and with whom it is shared.
• To protect consumer's privacy, we only return personal information that we are confident belongs to you. That would mean some data that might belong to an individual with a similar name or address may not be returned to you if we aren’t certain it is yours. We will also not return data that belongs to multiple parties on an account unless it otherwise meets the requirements for household data under the CCPA which means a verified request for all members of the household was properly submitted.
• If you are a current customer, you may also visit your identity protection portal or application to view some of your personal information.

To view your personal information, please refer to the attached document titled with your name.

As required by the CCPA, the following response, together with the information contained in the personal information file, explains the following for the personal information collected in at least the past 12 months:

1. The categories of personal information collected;
2. the categories of sources from which personal information was collected;
3. the business or commercial purposes for collecting personal information; and
4. the categories of third parties with whom we share personal information and the personal information shared with those categories of third parties.

The file of your personal information shows the category of personal information for each piece of information. These are the categories:

Personal information categories	Examples
Personal identifiers	Name, alias, signature, postal address, email address, unique personal identifier, online identifier, internet protocol (IP) address, phone number, date of birth, Social Security number, driver's license number, state identification number, passport number, or other similar identifiers.
Personal characteristics	Age, race, national origin, marital status, sex (including gender, gender identity, gender expression.
Service or product related information	Account name and payment history, credit information, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, bank account or credit card number or other payment or financial information, professional or employment‑related information and family member information. If you are using the Allstate Digital Footprint feature, we will access the emails in your inbox to find and analyze companies in your Digital Footprint.
Multimedia information	Audio, electronic, visual or similar information.
Internet or other electronic network activity information	Browsing history, search history, information regarding your interaction with our website, application or advertisement, links you use or web pages you visit while visiting our site or applications, browser type, internet service provider (ISP), cookies, and mobile device information including device identifier or other information.
Inferences	In some cases, we may draw inferences from the personal information collected to create a profile reflecting preferences, characteristics, trends, predispositions, heavier, attitudes, and aptitudes, which may also be considered to be personal information.

We collect personal information in different ways and from several sources based on your relationship with us including:

• Directly from you to provide you with and maintain our identity protection products and services for the business purposes described below,
• Automatically when you use one of our websites, mobile apps, view our emails or otherwise engage with us through a computer, or mobile device ("Sites") such as IP address, cookies, browsing history and other device or internet information, or contact us via telephone, and
• From other parties, such as service providers, platform partners, your employer (if receiving the services as an employee benefit), business partners, marketing companies, consumer reporting agencies and data providers

We use your personal and other information for business and commercial purposes based on your relationship with us including to:

• Provide and maintain your services and products. We may use your personal information to provide or maintain your service, products, plan or account including to (i) enroll you in our identity protection products or complete another transaction, (ii) carry out your requested identity protection services, which includes monitoring and identifying suspicious behavior related to your identity, (iii) respond to your customer service requests or other inquiries, (iv) perform identity and credit remediation processes, for fraud protection and risk reduction measures, and (v) administer your account or, make requested changes to your plan. We may also collect information about other parties from you to carry out necessary services and/or requests, including adding another family member to your existing plan. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.
• Improve, develop and analyze our Sites, services and products. We use your personal information and other information to:
  • analyze, improve, develop or deliver our Sites, products and services and develop new services, products or features using algorithms, analytics software and other similar methods,
  • conduct actuarial or research studies to maintain, protect and develop our networks, services, and products and protect our customers, and
  • analyze how visitors use our Sites to improve the Sites and enhance and personalize your experience.
  We collect some information used for these purposes using analytics software, cookies and other tracking technologies. For more information about the collection and use of this information, see Cookies and Other Tracking Technologies in our Privacy Statement found at https://www.infoarmor.com/privacy-policy.
• Communicate with you about your service or product. We may communicate with you about your product, service, or account, provide you transaction confirmations, payment alerts or other service or product related messages via mail, email or other available methods such as text messages, if requested, and push notifications. We may also send you educational material and blog posts to which you have subscribed.
• Provide marketing communications. We may use your personal information to send you promotional communications about products, services, features, and options we believe may be of interest to you. We may send communications via e-mail, regular mail or may send push notifications via a mobile device. Push notification preferences are controlled in your device. We may also use your information to serve you ads or customized content online.
• Comply with legal requirements and protect the safety and security of our business, services, and Sites. We may use your personal information to comply with laws, regulations or other legal obligations, to assist in an investigation, to protect and defend our rights and property or the rights of third parties or enforce terms and conditions. We may also use your personal information to prevent suspected fraud, threats to our network or other illegal activities, prevent misuse or for any other reason permitted by law. We may use your personal information to protect our company, our affiliates, our customers, our network and our Sites.
• Update or correct our records. We may receive personal information about you from other sources, including publicly-available databases or third parties from whom we have purchased data, and combine that personal information with other personal information we have about you to update our records. For example, we may obtain change of address information from public sources and use that personal information to update or correct your address information.

We do not sell your personal information. We may share your personal information with our affiliates for business purposes consistent with the uses described in our Privacy Statement. We may also share information about you with third parties whenever you consent to or direct such sharing.

The following table lists the categories of personal information that we may have collected from you and the categories of service providers or third parties to whom we have disclosed those categories of personal information for a business purpose. Please refer to your personal information file for the categories of information for the personal information we have collected from you specifically.

A checkmark (✓) below indicates we share the personal information with that category of service provider or third party.

* If you enrolled for our services through your employer, we may also share information with your employer for accounting and billing purposes.

For more information about our privacy practices, please review our Privacy Statement at https://www.infoarmor.com/privacy-policy.

Sincerely,

The InfoArmor Privacy Team