Privacy policy

Who this policy covers

This policy applies to valoroath.com, run under the name Valoroath, 5931 Greenville Ave, Suite 202, Dallas, TX 75206, United States (“Valoroath”, “we”, “us”). It covers the website, its forms and the emails we send. Questions go to [email protected] or the contact page.

What we collect and when

You can read every article, state page and calculator without giving us your name or contact details. We collect personal information in these situations.

When you request a coverage review

The coverage review form is on /coverage-review and at the end of articles and calculators. It has two steps and asks for:

• the ZIP code where the car is kept, which our server uses to look up your state;
• why you are asking: after a crash or claim, a premium increase, a cancellation or non-renewal, coverage gaps, or comparing your policy;
• accidents or claims in the last 3 years: none, one not at fault, one at fault, or two or more;
• how many cars are on the policy;
• what you carry now: liability only, liability with collision and comprehensive, no policy, or not sure;
• your name (first and last), a phone number and an email address;
• your consent to be contacted, given by checking a box that is unchecked until you check it.

If you start the request from a calculator, three figures from that calculator go with it: the claim or pay calculator sends the repair estimate, your yearly premium and its result; the total loss check sends the repair estimate, the car’s value and the estimated settlement; the rental coverage calculator sends the rental’s total cost, what the policy pays and what is left to you.

Alongside your answers, each request carries a short technical record: when it arrived, the IP address it came from, which page it was sent on, which version of the consent wording was on screen, and whether a Global Privacy Control signal was present. The user agent string that identifies your browser is not part of that record.

When you use the contact form

On the contact page we ask for a name, an email to reply to, a topic and the message itself, plus a checkbox confirming you understand that Valoroath cannot handle or advise on your claim.

When you subscribe to the newsletter

The newsletter form asks for your name and email address and keeps a record of your consent, dated by the version of the wording you accepted.

Visits from our emails

Some links in our emails carry a short campaign code at the end of the address, after #cid=. If you arrive on a page with such a code, a script on the page sends a short report to our own address, /collect, with the code, the page and the time. The server adds the IP address and browser type of the visit before handing the report to our email service provider, so we can count how many people opened a page from a given email. Pages you reach without a campaign code send no such report, and no cookie is involved.

Links in our emails also pass through a short address on valoroath.com before you land on the page: a click hands your IP address and browser headers from our server to our email service provider, which logs the click and replies with the address of the page you should land on. This also sets no cookie.

Technical information

Our pages are served by Cloudflare. Like any web host, Cloudflare processes your IP address and request details to deliver pages and protect the site from attacks. All our forms use Cloudflare Turnstile, a check that tells people from automated bots; Cloudflare receives information about your browser and device for that check. We do not use analytics or advertising cookies. The cookie policy lists exactly what is stored in your browser.

How we use the information

• Coverage review requests: to pass your request to the licensed insurance agents and insurers that will contact you about it, to contact you ourselves about the request if needed (for example to confirm details or pass on a stop request), and to keep a record of your consent.
• Contact messages: to answer you, fix errors you report, and act on opt-out and privacy requests.
• Newsletter: to send the emails you asked for and to see which emails readers find useful.
• Technical information: to run the site, block spam and abuse, and keep it secure.

We do not use your information to build advertising profiles, and we do not show ads based on it.

Who receives it

• Licensed insurance agents and insurers working with Valoroath. They receive your coverage review request, including your contact details and answers, the consent record and your Global Privacy Control signal. They may call, text or email you as your consent describes. They pay Valoroath for requests (see how we make money). Once they have your request, they use it under their own privacy notices, and we tell them not to sell or share it further.
• Web3Forms, the service that delivers each form submission to us by email.
• Cloudflare, which hosts the site and runs Turnstile.
• Our email service provider, which sends the newsletter and records visits and clicks from our emails.
• Others when the law requires it, for example in response to a valid subpoena or court order, or to protect people and the site from fraud.
• A buyer or successor if the site is ever sold or transferred, who would remain bound by this policy for the information it receives.

Contact messages and newsletter sign-ups are never passed to agents or insurers.

Sale and sharing of personal information

Some state privacy laws treat passing personal information to another business for something of value as a “sale”. Because agents and insurers pay us for coverage review requests, those laws may treat the hand-off of your request as a sale. We pass a request on only because you asked for it by filling in the form and submitting it. We do not sell or share contact messages or newsletter details, and we do not share information for targeted advertising.

Your privacy choices

Depending on where you live, state law (for example the California Consumer Privacy Act and the comprehensive privacy laws of Colorado, Connecticut, Texas, Oregon, Virginia and other states) may give you the right to:

• find out which personal information about you we have, and receive a copy;
• correct information that is wrong;
• have your information deleted;
• say no to the sale or sharing of your personal information, to targeted advertising and to profiling;
• not be treated differently for using these rights.

We extend these choices to every visitor, wherever you live in the United States.

How to ask. Email [email protected] or use the contact page, and tell us which right you want to use. We will ask you to confirm details that match our records, for example the email or phone you put on the form, so we do not give your information to someone else. An authorized agent can ask for you with your signed permission. Our reply comes within the period your state’s law allows, which is usually 45 days. If we turn down your request, we explain why, and you can appeal by replying to our answer; if the appeal does not resolve it, your state attorney general can hear your complaint.

Opting out of sale or sharing. Do not submit a coverage review request: without one, nothing about you is passed to agents or insurers. If you already sent one, email us or use the contact page and we will tell the agents and insurers that received it about your request.

Global Privacy Control. When your browser sends the Global Privacy Control (GPC) signal, we treat it as your instruction not to sell or share your personal information. If your browser sends it, we record it with any request you submit and pass it to the agents and insurers that receive the request, with the instruction not to sell or share your information further. Your request itself still goes to them, because sending it is what you asked us to do.

Stopping calls, texts and emails. Your consent to be contacted is not a condition of buying anything, and you may withdraw it whenever you like, in any reasonable way:

• answer a text with STOP, and that sender’s texts end;
• let a caller know you want no further calls;
• email [email protected] or write through the contact page giving the phone number and email from your request.

When you tell us, we forward your opt-out to every agent and insurer that received your request. Under the FCC’s rules, a revocation must be honored within 10 business days. Every newsletter has an unsubscribe link that works at any time.

How long we keep information

• Coverage review requests: 5 years. The request holds the record of your consent, and the federal Telephone Consumer Protection Act allows claims to be brought for 4 years.
• Contact messages: 2 years.
• Newsletter details: for as long as you stay subscribed.

Agents and insurers that receive your request keep their copy under their own retention rules.

How we protect it

Forms are sent over encrypted connections (HTTPS), Turnstile screens out automated submissions, and access to the inbox that receives the forms is limited to the people who need it. Even careful systems can fail, and we cannot rule out that information is ever exposed. Please do not send policy numbers, claim files, medical records or Social Security numbers through our forms: we do not need them.

Children

Valoroath is written for adult drivers. We do not knowingly collect information from children under 13, and the forms are not meant for anyone under 18. Tell us if a child may have sent us information, and we will delete it.

Visitors outside the United States

The site is meant for readers in the United States and is hosted there. If you use it from another country, your information is handled in the United States under this policy.

Changes to this policy

Any change to this policy moves the date at the top of the page. Changes that alter the use of information already in our hands are announced here ahead of the date they take effect.

Contact

Valoroath, 5931 Greenville Ave, Suite 202, Dallas, TX 75206, United States. Email [email protected] or use the contact page.