How We Collect, Use, and Protect Personal Information

Effective Date: October 8, 2026
Last Updated: October 8, 2026

1. Who We Are and What This Policy Covers

World Insurance Network, Inc., a Nevada corporation doing business as WIN Insurance Agency ("World Insurance Network," "WIN," "we," "us," or "our"), is an independent insurance agency and brokerage located at 11035 Lavender Hill Drive, Suite 160‑212, Las Vegas, Nevada 89135.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit this website, contact us, receive our communications, or request or receive insurance, risk management, or employee benefit services from us. Personal information means information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual or household.

This policy works together with our Consumer Health Data Privacy Policy, our HIPAA Notice, and our Cookie and Tracking Notice. Protected health information that we receive as a business associate of a health plan or other covered entity is governed by our business associate agreements and federal law as described in our HIPAA Notice. Where a written agreement with you or a notice delivered with an insurance application provides additional terms, those terms also apply.

2. Information We Collect

The information we collect depends on how you interact with us. We collect only the information reasonably necessary for the purposes described in this policy.

Category	Examples	When Collected
Identifiers and contact information	Name, business name, title, mailing address, email address, telephone number, mobile number	Website forms, email, telephone, text messages, applications
Business and professional information	Business type, ownership, locations, revenue, payroll, number of employees, professional licenses, medical director and National Provider Identifier information, services offered, products sold, supplier and distribution agreements	Coverage requests, coverage gap reviews, commercial insurance submissions
Insurance information	Current and prior policies, declarations, limits, loss runs, claims history, underwriting questionnaires, quotes, premiums, and policy documents	Coverage requests, applications, renewals, service and claims assistance
Personal lines information	Date of birth, marital status, household members, driver and vehicle information, property information, prior coverage, and claims history	Requests for home, auto, life, long term care, and other personal insurance
Sensitive personal information	Social Security number, driver's license number, government identification number, health or medical information required for life, disability, long term care, or health related coverage, and employee enrollment information for benefit programs	Only when required to obtain, administer, or service a product you or your employer requested, and only through a secure method we provide
Payroll and benefits information	Payroll registers showing employee names, gross pay, deductions, and taxes; employee census and eligibility data	Employer participation in the Cost Recapture Program and other employee benefit services
Communications and consent records	Messages you send us, call notes, text message and email consent records, opt out requests, and privacy requests	All communications with us
Internet and device information	Internet Protocol address, browser type, device type, operating system, pages viewed, referring page, date and time of visit, approximate location derived from Internet Protocol address, and interactions with forms, emails, and embedded services	Website visits and email interactions, as described in our Cookie and Tracking Notice

We do not collect payment card numbers or bank account numbers through this website. Premium payments are made to the insurer, a premium finance company, or another authorized payment processor under that party's own terms and security controls.

Our general website forms are not designed for health information, patient information, Social Security numbers, account credentials, or payment information. Please do not submit that information through a website form or ordinary email.

3. Sources of Information

We collect personal information from the following sources:

Directly from you, your business, or your authorized representative
Your employer or plan sponsor, when we provide employee benefit or Cost Recapture Program services
Insurance companies, managing general agents, wholesale brokers, program administrators, third party administrators, and premium finance companies
Prior insurance agents or brokers, with your authorization
Consumer reporting agencies, motor vehicle records, claims history databases, and public records, as permitted by law
Our website, emails, and the technologies described in our Cookie and Tracking Notice
Service providers that support our business operations

4. How We Use Information

Respond to your questions and requests and provide the services you ask for
Evaluate your insurance needs, perform coverage gap reviews, prepare submissions, obtain quotes, and place, renew, and service coverage
Assist with claims, endorsements, certificates of insurance, audits, and policy changes
Prepare proposals for and support employer participation in the Cost Recapture Program and other employee benefit services
Communicate with you by email, telephone, and text message, consistent with your choices
Send marketing communications where permitted by law and honor requests to stop them
Operate, secure, maintain, and improve our website and understand how it is used
Detect, prevent, and investigate fraud, security incidents, and misuse
Maintain records and comply with legal, regulatory, licensing, audit, and recordkeeping obligations
Establish, exercise, or defend legal claims

We use sensitive personal information only to provide the products and services you or your employer requested, to comply with law, to detect and prevent security incidents and fraud, and for other purposes that applicable law permits without a right to limit. We do not use sensitive personal information to infer characteristics about you, and we do not use it for advertising.

5. How We Disclose Information

We disclose personal information only as reasonably necessary for the purposes described in this policy and as permitted by law, to the following categories of recipients:

Insurance markets: insurers, managing general agents, wholesale brokers, surplus lines brokers, and program administrators, to obtain quotes and place and service coverage
Claims and policy service parties: claims adjusters, third party administrators, premium finance companies, and certificate holders you designate
Benefit program parties: plan administrators, third party administrators, payroll providers, and other parties necessary to operate employee benefit programs your employer selects
Service providers: companies that host our website and email, operate our forms, customer relationship management, email and text messaging platforms, scheduling and chat tools, secure file transfer, document storage, analytics, and information technology support. These providers are bound by written agreements that limit their use of personal information to services for us and require reasonable security safeguards.
Advertising and analytics partners: when you allow optional cookies, the providers described in our Cookie and Tracking Notice receive device and website activity information. We do not provide these partners with the content of forms, insurance information, health information, or the fact that you applied for or obtained insurance.
Professional advisers: attorneys, accountants, auditors, and insurers of our own business
Government and legal recipients: insurance regulators, law enforcement, courts, and other parties when required by law, subpoena, or legal process, or to protect the rights, property, or safety of our clients, our business, or others
Business transfers: a buyer, successor, or other party in connection with a merger, acquisition, sale of assets, or similar transaction, subject to the commitments in this policy
Others with your consent or at your direction

We do not sell personal information for money. We do not disclose personal information to third parties for their own direct marketing purposes. If you allow optional advertising cookies, some state laws may treat the resulting disclosure of device and website activity information as a "sale," "sharing," or "targeted advertising." You may opt out at any time as described in Section 11, and we honor Global Privacy Control browser signals as a valid opt out.

6. Notice of Insurance Information Practices

This notice applies when you apply for or receive personal, family, or household insurance through us, and it supplements the notices that insurers provide with their applications.

Personal information may be collected from persons other than you, including consumer reporting agencies, motor vehicle departments, prior insurers, medical professionals, and claims history databases, when needed to underwrite or service your insurance.
An insurer may request an investigative consumer report about you. You may ask to be interviewed in connection with that report and to receive a copy of it.
Personal or privileged information collected in connection with an insurance transaction may be disclosed without your prior authorization only in the circumstances permitted by the insurance information and privacy protection laws of your state, such as to process a transaction you requested, to detect or prevent insurance fraud, to comply with law or regulatory examination, or to an insurance support organization.
You may request access to recorded personal information about you that is reasonably locatable and retrievable, and you may request correction, amendment, or deletion of information you believe is inaccurate. Submit these requests in writing to the address in Section 19. If we do not make a requested correction, you may submit a concise statement of disagreement, which we will include with the disputed information and provide to persons who received it.
If an insurer declines or terminates coverage based on information we provided, you may request the specific reasons in writing from the insurer.

7. Financial Privacy Under Federal and State Insurance Law

As an insurance agency, we are subject to the Gramm Leach Bliley Act and the insurance privacy laws of the states where we are licensed. We collect nonpublic personal information only to provide insurance products and services. We do not disclose nonpublic personal information about current or former customers to nonaffiliated third parties except as permitted by law, such as to process and service transactions you request, to service providers bound by confidentiality obligations, to protect against fraud, to comply with law, or with your consent. Because we limit disclosures to those permitted exceptions, no opt out is required under those laws. If our practices change, we will provide you with a revised notice and any required opt out before making a new type of disclosure. We restrict access to nonpublic personal information to personnel and service providers who need it to serve you, and we maintain physical, electronic, and procedural safeguards designed to protect it.

8. Health Information and HIPAA

When we provide services to an employer health plan or other HIPAA covered entity that require us to receive protected health information, we act as a business associate under a written business associate agreement, and we use and disclose that information only as that agreement and the Health Insurance Portability and Accountability Act permit. Our HIPAA Notice explains this role. Health information that is not protected health information, such as information you provide to apply for life, disability, or long term care insurance, is protected under this Privacy Policy, applicable insurance privacy laws, and, where applicable, our Consumer Health Data Privacy Policy. We configure our website tools so that they do not collect health information.

9. Cookies, Analytics, and Advertising

Our website uses necessary technologies to operate and secure the site. With your permission, we and our providers may also use analytics, functional, and advertising cookies, pixels, and similar technologies that collect information about your device and your activity on our website. Optional technologies remain inactive until you allow them through the cookie banner or Cookie Preferences, and you may change your choice at any time.

When optional technologies are enabled, third party providers may collect information about your online activities over time and across different websites and online services. We do not permit these providers to collect the content of website forms, health information, or insurance information.

Some browsers offer a Do Not Track setting. Because no common standard for Do Not Track signals has been adopted, our website does not respond to them. We do recognize and honor Global Privacy Control signals as described in Section 11. See our Cookie and Tracking Notice for details.

10. Email, Text Message, and Telephone Communications

Email. We send service emails related to your requests and policies. We send marketing emails, including newsletters, only where permitted by law. Every marketing email includes an unsubscribe link, and we process unsubscribe requests within 10 business days. Our marketing emails may contain technology that tells us whether an email was opened or a link was clicked.

Text messages. We send text messages only to people who have given the consent required by law. Consent to receive marketing text messages is never a condition of purchasing any product or service. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out or HELP for help. Mobile telephone numbers, text messaging opt in data, and consent records are not shared with or sold to any third party or affiliate for their own marketing or promotional purposes. We disclose them only to the service providers that deliver our messages. Additional text message terms appear in our Terms of Use.

Telephone. We respect the National Do Not Call Registry, applicable state do not call lists, and our internal do not call list. You may ask us to stop marketing calls at any time.

11. Your Privacy Rights and Choices

Many states give their residents rights over personal information. We extend the following rights to every individual in the United States, regardless of state of residence and regardless of whether a particular law applies to us, subject to the exceptions described below:

Know and access: confirm whether we process your personal information, learn the categories and specific pieces we hold, the sources, the purposes, and the categories of recipients, and obtain a copy in a portable and readily usable format
Correct: request correction of inaccurate personal information
Delete: request deletion of personal information we collected from or about you
Opt out: opt out of the sale of personal information, the sharing of personal information for cross context behavioral or targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in that type of profiling.
Sensitive information: we process sensitive personal information only as described in Section 4. Where state law requires consent to process sensitive personal information, we obtain it before processing, and you may withdraw it at any time.
Withdraw consent: withdraw any consent you gave us, including consent to text messages and optional cookies
Nondiscrimination: we will not deny services, charge different prices, or provide a different level of quality because you exercised a privacy right

How to Submit a Request

Submit a request by email to info@worldinsnetwork.com with "Privacy Request" in the subject line, by telephone at 725 269 2721, or by mail to World Insurance Network, Inc., Attn: Privacy Requests, 11035 Lavender Hill Drive, Suite 160‑212, Las Vegas, Nevada 89135. To opt out of optional cookies and targeted advertising, use the Cookie Preferences link in the website footer or enable Global Privacy Control in your browser. We apply a Global Privacy Control signal to the browser that sends it and, when we know who you are, to your account and records.

Verification and Authorized Agents

To protect your information, we verify your identity before fulfilling a request to access, correct, or delete, generally by matching information you provide with information in our records. We may ask for additional information when needed and will use it only for verification. Opt out requests do not require verification. You may use an authorized agent. We may require the agent to provide signed written permission from you and may ask you to verify your identity directly, unless the agent holds a valid power of attorney.

Response Timing

We confirm receipt of requests within 10 business days and respond within 45 days of receipt. When reasonably necessary, we may extend that period once by up to 45 additional days, and we will tell you of the extension and the reason within the first 45 days. We fulfill opt out requests as soon as feasible and no later than 15 business days after receipt. We respond to requests free of charge up to twice in a 12 month period.

Exceptions

We may decline or limit a request where permitted by law, for example where we must retain records under insurance, tax, or employment recordkeeping laws, where information is needed to complete a transaction or service a policy, to detect security incidents or fraud, to comply with legal obligations, or to establish or defend legal claims. Information we hold on behalf of an insurer or a health plan may need to be requested from that organization, and we will tell you when that is the case. If we decline a request, we will explain why.

Appeals

If we decline your request, you may appeal by emailing info@worldinsnetwork.com with "Privacy Appeal" in the subject line within 60 days of our decision. We will respond in writing within 45 days of receiving your appeal and explain the action taken and the reasons. If we deny your appeal, you may contact the Attorney General of your state.

12. Additional Information for California Residents

The categories of personal information we collect, the sources, the purposes, and the categories of recipients are described in Sections 2 through 5. In the preceding 12 months, we disclosed identifiers, commercial and insurance information, professional information, and the sensitive information described above for business purposes to the recipients described in Section 5. We have not sold personal information for money. When optional advertising cookies are enabled, internet and device information may be shared with advertising partners for cross context behavioral advertising, and you may opt out as described in Section 11. We do not knowingly sell or share the personal information of consumers under 16 years of age. Retention periods appear in Section 15. Personal information that we collect and process under the Gramm Leach Bliley Act, the California Financial Information Privacy Act, the California Insurance Information and Privacy Protection Act, or HIPAA is governed by those laws.

Under California Civil Code Section 1798.83, California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make those disclosures.

13. Additional Information for Nevada Residents

We do not sell covered information as that term is defined in Nevada Revised Statutes Chapter 603A. Nevada residents may nonetheless submit a verified request directing us not to sell covered information that we have collected or will collect about them by emailing info@worldinsnetwork.com with "Nevada Do Not Sell Request" in the subject line. We will respond within 60 days of receipt and may extend that period once by up to 30 days when reasonably necessary, with notice to you. Nevada residents may review and request changes to covered information collected through this website using the methods in Section 11.

14. Security and Incident Response

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we hold, including access controls limited to personnel who need the information, encryption of personal information that we transmit outside our secure systems or store on portable devices, secure file transfer methods for sensitive documents, workforce confidentiality obligations, and contracts that require service providers to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security breach involving your personal information occurs, we will investigate, take steps to contain it, and notify you, regulators, and others as required by the laws of the state where you reside and by our contractual obligations.

15. Retention and Destruction

Record	Retention Period
Website inquiries that do not result in a client relationship	3 years after our last communication
Client, application, policy, and transaction records	The duration of the client relationship plus 7 years, or longer where an insurance regulator or law requires
Payroll and benefit program records	The duration of the employer's participation plus 7 years, or as required by our business associate agreement
Protected health information	As required by the applicable business associate agreement, after which it is returned or destroyed
Email, text message, and telephone consent and opt out records	5 years after our last message to you
Privacy request records	24 months after the request is closed
Website analytics and advertising data	Up to 14 months, or the shorter duration stated in our Cookie and Tracking Notice
Security and system logs	Up to 12 months

We keep records longer when needed for an open claim, dispute, audit, regulatory examination, or legal hold. When retention ends, we destroy records by shredding, erasing, or otherwise modifying the personal information to make it unreadable or undecipherable.

16. Children

This website and our services are intended for adults. We do not knowingly collect personal information from children under 13 through this website, and we do not knowingly sell or share the personal information of anyone under 18 for targeted advertising. Information about minors, such as dependents or household drivers, is collected only from a parent, guardian, or employer when needed for an insurance or benefit transaction. If you believe a child has provided personal information through this website, contact us and we will delete it.

17. Outside Websites and Location of Processing

Our website may link to insurers, regulators, and other websites that we do not control. Their privacy practices are governed by their own policies. This website is intended for individuals and businesses in the United States, and we store and process personal information in the United States.

18. Changes to This Policy

We review this policy at least once every 12 months and update it when our practices change. The Effective Date and Last Updated date at the top of this page show when it was last revised. Before a material change takes effect, we will post a prominent notice on our homepage and, where we have your email address and the change affects you, notify you by email. Where the law requires your consent to a change, we will obtain it before applying the change to information collected earlier.

19. Contact Us

World Insurance Network, Inc., dba WIN Insurance Agency
Attn: Privacy
11035 Lavender Hill Drive, Suite 160‑212
Las Vegas, Nevada 89135
Email: info@worldinsnetwork.com
Telephone: 725 269 2721