Last updated: August 2026
This notice is for California residents and is provided under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (together, the “CCPA”). It sits alongside our Privacy Policy and adds the specific disclosures the CCPA requires. Where the two differ on California rights, this notice governs.
The short version. CarRateHub does not sell your personal information, and does not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information beyond the purposes the CCPA permits without a right to limit. You can ask us what we hold, ask us to correct it, and ask us to delete it, at [email protected].
Over the past 12 months we may have collected the following categories, using the CCPA's own category names:
We do not collect biometric information, precise geolocation, government identifiers such as Social Security or driver's license numbers, financial account or payment card numbers, professional or employment information, or education records.
We do not intentionally collect sensitive personal information as the CCPA defines it, and we do not use or disclose any such information for purposes beyond those permitted under CCPA section 1798.121(a). Because of that, there is nothing for a request to “limit the use and disclosure of sensitive personal information” to restrict. If that changes, this notice will change with it and the right will be offered here.
We disclose personal information only to service providers and contractors that perform functions on our behalf — hosting, email delivery, and traffic measurement — and only for those functions. They are restricted by contract from using it for anything else. We also disclose information when the law requires it, to protect rights and safety, and in connection with a merger or sale of assets, in which case this notice travels with the data.
We do not sell personal information, and we have not sold personal information in the preceding 12 months. We also do not “share” personal information in the specific sense the CCPA uses that word — that is, we do not disclose it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Because we do not sell or share, there is no opt-out for you to exercise. That is also why you will not find a “Do Not Sell or Share My Personal Information” link on this site: the CCPA requires that link only of businesses that sell or share, and offering one where nothing is sold would be misleading rather than helpful. If the Site's practices ever change, that link will appear and this section will be rewritten before any such disclosure begins.
Some browsers and extensions transmit an opt-out preference signal such as Global Privacy Control (GPC). Because we do not sell or share personal information, there is no sale or sharing for such a signal to stop. We do not disregard the signal; there is simply nothing for it to switch off.
We keep each category only as long as needed for the purpose it was collected for, and then delete or de-identify it. Quote and contact details are retained for as long as needed to handle your inquiry and to keep a record that we handled it. Traffic and analytics data is retained in aggregate. We do not keep personal information indefinitely simply because we have it.
Email [email protected] with the request you are making. Please include enough information for us to find your records — typically the email address or telephone number you used on the Site — and tell us that you are a California resident. Do not send sensitive information such as a Social Security number; we do not need it and do not want it.
You may also write to us through the contact page.
We will verify your identity before acting on a request to know, delete, or correct, by matching the details you give us against what we hold. If we cannot verify you, we will tell you why rather than acting on an unverified request about someone else's data.
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need longer we will tell you within that period and may take up to 90 days in total. There is no charge for a request.
You may use an authorized agent to make a request for you. We will ask for written proof that you gave the agent permission, and we may still ask you to verify your own identity directly. An agent acting under a valid power of attorney does not need separate written permission.
Separately from the CCPA, California Civil Code section 1798.83 lets California residents ask a business once a year about personal information it shared with third parties for those parties' own direct marketing. We do not share personal information for that purpose, so there is nothing to report, but you are welcome to ask at the address above.
A growing number of states now give residents comparable rights to access, correct, delete, and opt out. We apply the practices described in this notice to every visitor rather than only to Californians, so the protections above are what you get wherever you live. If your state gives you a right this notice does not mention, write to us and we will honor it.
We will update this page and its “Last updated” date when our practices change. A change that begins any sale or sharing of personal information will be made here before the practice starts, not after.
Email [email protected] or use the contact page.
Hi! I can help you understand car insurance coverage, discounts, or the quote process. What's on your mind?
