Privacy, Cookie, and Data Protection Policies
Effective 10/14/2026 | Last revised 10/14/2026 | Supersedes all prior versions
Engle-Hambright & Davies, Inc., which does business as EHD Insurance ("EHD," "we," "our," or "us"), places commercial and personal insurance, employee benefits, surety bonds, and provides risk control services from its four offices in Pennsylvania. To place and administer those policies (including the processing of claims submitted thereunder) and provide services to its clients, EHD must rely on information that our clients and others provide to us, much of which is personal and financial. The policies set out in this Privacy, Cookie and Data Protection Policy (the “Policy”) explains what we collect, including through our website at www.ehdinsurance.com, what we may do with it, who else may see it, and how we strive to keep it safe. This Policy applies to you whether you are a client or claimant under the insurance policies which we place or administer or whether you obtain services from us at your request or the request of your employer or another third party with whom you have some relationship. Regardless of your connection with EHD, we are committed to protecting your personal and financial information.
I. PRIVACY NOTICE AND POLICY AND GLBA NOTICE
We comply with a number of federal and state laws and regulations pertaining to your personal and financial information
Personal Information: Many states of the United States and other countries (like the United Kingdom and Switzerland) and groups of countries (like the European Union) have enacted laws, regulations and rules (“Laws”) which refer or relate to the privacy of your Personal Information and which may affect your rights regarding its collection, use and protection. Personal Information (which is the term we use here), also known as “Personal Data” and “Personally Identifiable Information” (“PII”), is defined differently in the various Laws. The New Jersey Data Privacy Act, for example, defines “Personal Data” as any information that is linked or reasonably linkable to an identified or identifiable person but notes that “Personal Data” does not include de-identified data or publicly available information. We have tried, in this Policy, to comply with American Laws in effect at the time that this Policy is published. To the extent that a new law is enacted which requires a different treatment of your Personal Information, we will, of course, comply with all applicable Laws and this Policy will be automatically revised.
Financial Information: Insofar as we collect financial information or health information related to your business with us, we must also comply with a number of federal Laws, including the Gramm-Leach-Bliley Act (the “GLBA”) as well as the rules of various state insurance regulators, and other standards our carriers set. The GLBA requires us to protect “Nonpublic Personal Information” or “NPI” which includes any information that is not publicly available and which relates to your financial condition (referred to here as “Financial Information”). Examples of Financial Information include:
- Personal Identification Information: Name, address, Social Security number, and date of birth.
- General Financial Information: Bank account numbers, credit card numbers, and income details.
- Transaction History: Records of transactions made by the consumer, including purchases and payments.
- Account Information: Details about the consumer's accounts, such as balances and payment history.
To the extent that new Laws are enacted or existing Laws are revised, we will of course, comply with them and this Policy will be automatically revised. Some of these Laws require us to send you notices of our privacy practices.
What Personal Data and Financial information do we collect?
The types of Personal Data and Financial Information that we collect depends on the nature of your relationship with us. For example, we may gather different Personal Data and Financial Information if you are a claimant under a policy that we administer than if you want a quote for insurance or our services. The Personal Data and Financial Information that we collect may include Personal Data and Financial Information collected in connection with our provision of insurance services, when you apply for such services, or resulting from other contacts with you. It may include the following:
- Names, companies, job titles, mailing addresses, email addresses and telephone numbers, generally from a quote request, contact form, or inquiry. information, such as your name, signature, Social Security Number, physical characteristics or description, address, telephone number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, financial information, medical information or health insurance information.
- Protected classification characteristics, including age, race, color, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, or veteran or military status.
- Business information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consumer histories and tendencies.
- Policy information, coverage questions, claims history, and billing preferences that you send us when asking for a quote, requesting a change, or getting help with an account.
- Motor vehicle records, claims data and loss history reports, and insurance credit scores obtained from consumer reporting agencies, where the law permits us to use them in underwriting.
- IP addresses, browser and operating system, referring pages, pages viewed, and device identifiers, which cookies and analytic tools gather automatically as you browse.
- Sensitive Data as defined by applicable Laws and used in conformity with such Laws.
How do we collect your Personal Data and Financial Information?
We collect your Personal Information and Financial Information in a number of ways:
- We may collect it directly from you, whether submitted online or in writing.Help us protect your “Sensitive Data”
Please keep Social Security numbers, full bank account numbers, and detailed medical records off the contact forms on this site. Call your EHD account manager or use the secure channels we have set up to send us Sensitive Data. - We may collect it from your employer or from family members who may be included in your insurance policies or for whom you are seeking insurance or our services.
- We may collect it from others that you have authorized to provide us with information including your accountants, attorneys, financial advisors and sources of medical information.
- We may collect it from other insurance brokers and carriers, from consumer reporting and motor vehicle agencies and from others who have lawfully collected it for their own purposes.
- We may collect it in the course of investigating your applications and your claims or the claims asserted against you.
- We may collect it from social media and from other sources of publicly available information.
How we use your Personal Data and Financial Information?
We use your Personal Data and Financial Information for a number of purposes consistent with all applicable Laws. These include:
- We may use your information to market, sell and service insurance and our services.
- We may use your information to manage your claims or claims asserted against you.
- We may use your information to perform our day-to-day operations icluding to comply with regulatory and legal requirements.
- We may use your information to prevent, detect, investigate and remediate fraud and other unlawful activities and to work with regulatory and law enforcement authorities.
- We may use your information in conjunction with analytics to understand and manage our risks and streamline our business processes and to develop our advertising.
- We may use your information to provide and improve customer service and technical support.
- We may use your information in our efforts to improve your customer experience.
With whom do we share your Personal Data and Financial Information?
We use your Personal Data and Financial Information to quote, place, and service insurance, to answer the questions people send to us, and to keep the website running. We do not sell, rent, or trade personal information although we disclose your Personal Data and Financial Information only as the applicable Laws permit or require, and only to parties with a role in our work. We may disclose your Personal Data and Financial Information to:
- Carriers, underwriters, third-party administrators, claims adjusters, and surplus lines brokers who quote, bind, service, or adjust a policy.
- Accountants, attorneys (including prosecutors) , investigators, police and others involved in investigating, processing and litigating claims and unlawful activities.
- The IT, cloud hosting, CRM, and website vendors that keep our systems running, each of them under a confidentiality agreement.
- Professional advisors including law firms, accountants, auditors, actuaries and tax advisors.
- State insurance departments, law enforcement, and courts, when a statute, subpoena, or court order calls for it.
- Marketing service providers who market to you on our behalf or as part of a joint marketing agreement for products offered by us.
- As otherwise permitted or required by applicable Law.
If you stop doing business with us, this Policy continues to govern the nonpublic Personal Data and Financial Information which we hold about you as provided in our Data Protection Policy.
Links to other sites
Our pages contain links to client portals, carrier payment sites, and industry resources. Once you leave our website, the privacy and cookie policies of those websites apply, and we have no control over them.
CAN-SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
- Send information, respond to inquiries, and/or other requests or question;
- Process orders and send information and updates pertaining to orders;
- Send you additional information related to your product and/or service; and
- Market to our mailing list or continue to send emails to our clients after the original transaction has occurred or as otherwise requested or authorized.
To be in accordance with CAN-SPAM, we agree to the following:
- Not to use false or misleading subjects or email addresses.
- Identify the message as an advertisement in some reasonable way.
- Include the physical address of our business or site headquarters.
- Monitor third-party email marketing services for compliance, if one is used.
- Honor opt-out/unsubscribe requests quickly.
- Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails from us, please follow the instructions at the bottom of each email to be promptly removed from ALL correspondence.
Children's privacy
We do not intentionally collect Personal Data or Financial Information from individuals under the age of 13 but may collect Personal Data regarding them as necessary to perform our services. We request that these individuals do not provide Personal Data through our services unless it is requested by us. Should you learn of any collection of such Personal Data or Financial Information by or for use, we request that you immediately report it to us.
Your rights, and how to reach us
Depending on the state you live in, you may have additional rights to see, correct, or delete the Personal Data, Financial Information and other information which we hold about you. Nothing in this Policy asks anything of you. You are free to exercise one or more of those rights or change the way we contact you without any discrimination or retaliation by us.
You may write, call, or email us using the following:
| Method | Where to send it |
| privacy@ehdinsurance.com | |
| Telephone | (800) 544-7292 |
| EHD Insurance, Attn: Privacy and Compliance Officer, 1857 William Penn Way, PO Box 11600, Lancaster, PA 17605 |
II. COOKIE POLICY
As part of our website and, in order to provide you with customizable services, we use cookies and other online tracking technologies to store and sometimes track information, including Personal Information, about you.
We may use these technologies to:
- Provide you with personalized content based on your use of our site.
- Enable you to more easily use our site by remembering and using contact information, purchasing information, and registration information.
- Evaluate, monitor and analyze the use of our site and its traffic patterns to help improve our site and services.
- Assist us with ad reporting functions such as learning which ads are bringing users to our website.
Cookies
A cookie is a small text file that a website stores on your computer or phone. Cookies keep a site working the way it should, hold your settings between visits, and tell the people who run the site which pages visitors actually read. ehdinsurance.com uses cookies and similar technologies for four purposes.
There are several types of cookies:
- Necessary cookies are required to enable the basic features of this site, such as providing secure log in or adjusting your consent preferences these cookies do not store any personally identifiable data
- Functional cookies help perform certain functions like sharing the content of the website with social media platforms, collecting feedback, and other third-party features.
- Analytical cookies are used by us to understand how you interact with the website. These cookies help provide information for metrics such as the number of visitors, bounce rate, traffic source, etc.
- Performance cookies are used to understand and analyze the key performance indexes of the website which help us deliver a better user experience to you and other visitors.
- Advertisement cookies are used to provide you with customized advertising based upon the webpages that you visited previously and to analyze the effectiveness of advertising campaigns.
- Uncategorized cookies are cookies that have yet to be evaluated and classified into one of the categories.
Some cookies are “persistent cookies.” They are used by us each time you access our website. Other cookies are called “session cookies.” Session cookies are used only during a specific browsing session. We may use a session cookie, for example, to remember that you have already navigated through a particular menu, or that you have already registered with us. We may also use “analytical cookies” that allow web analytics services to recognize your browser or device and, for example, identify whether you have visited our website before, what you have previously viewed or clicked on, and how you found us. This information is provided anonymously for statistical analysis only. Analytical cookies are usually persistent cookies.
Our website offers visitors the option of accepting or “de-selecting” certain cookies on our website saving their preferences. Of course, you cannot de-select necessary cookies and if you de-select others it may make certain functions or features of the website unavailable or less accessible.
When you save your cookie preferences on our website, it may not automatically remember the settings for the next visit. Cookies are temporary files that may only last until your browser session is closed. You should confirm your preferences each time that you visit our website.
Your saved cookie preferences may affect your interaction with our website and prevent you from using certain of its features.
Web beacons
We may also employ a software technology called clear GIF Graphics Interchange Format, also known as a pixel tag or web beacon. A clear GIF is a line of code that we place on our website or in e-mails which allows us to analyze our advertising and the general usage patterns of visitors to our website. These help us better manage content on our website by informing us as to what content or promotions are more or less effective. Unless you consent, we do not collect personally identifiable information from you through the use of web beacons. You may not disable web beacons. If you object to our use of web beacons, you must discontinue your use of our website.
Log Files.
Like most standard websites, we use log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the site, prevent fraud, track website navigation in the aggregate, and gather broad demographic information for aggregate use. You may not disable log files. If you object to our use of log files, you must discontinue your use of our website.
If you have questions about cookies or any of these technologies, send them to info@ehdinsurance.com.
III. DATA PROTECTION POLICY
How do we keep your Personal Data and Financial Information safe?
We maintain physical, electronic, and procedural safeguards to protect your non-public personal information. These safeguards comply with applicable laws. Our employees and agents are authorized to access your data only for legitimate business purposes.
How long do we retain your Personal Data and Financial Information?
We retain your information in accordance with our legal obligations, our records retention policies, or as otherwise permitted by law. For example, we may have a legal obligation to retain information relating to your policies or claims with us. We will delete your data once the legal obligation expires or after the period of time specified in our records retention policies. The period of retention is subject to our review and alteration.
Special Safeguards under the Gramm-Leach-Bliley Act
Financial and health information collected to issue or administer a policy falls under the protections afforded by the Gramm-Leach-Bliley Act. We maintain physical, electronic, and procedural safeguards that meet its requirements. Access is limited to the employees and licensed professionals who need your information in order to serve you.
Our internal networks are protected. A message sent through a general contact form on a public website is not encrypted end to end, and that difference matters.
IV. CHANGES TO THESE POLICIES
Regulations change, technology changes, and so does our business. When any of that happens we revise these policies and post the current version on this page under a new effective date.
