Privacy Policy

Purpose Of This Notice

This Privacy Notice ("Notice") applies to information Avoca Risk LLC ("Avoca Risk", "we", "us", or "our") and its parents, subsidiaries, and affiliates may collect and otherwise process, through our websites, any other mobile website, mobile application, portal, media channel, related or connected media form (including other sites that link to this Notice), or by any other means, such as email, telephone, text message, or otherwise (collectively, the "Platforms") about individuals who inquire about or obtain (or seek to obtain) products or services from us. This Notice is designed to help you understand how we collect, use, and protect the information we obtain through the Platforms and to assist you in making informed decisions when using our Platforms.

California residents can learn more about their rights and choices under California law in our
California Privacy Notice

Individuals can learn more about their rights and choices under the Gramm-Leach-Bliley Act in our Financial Privacy Notice

Contents

• Purpose Of This Notice
• What Information We Collect and From Whom We Collect It
• What Information We Disclose and To Whom We Disclose It
• Our Use of Cookies
• Our Practices Regarding Information Safeguards
• Information for Users Outside the United States
• Updates, Questions, and Contact Information
• Financial Privacy Notice
• California Privacy Notice

What Information We Collect and From Whom We Collect It

"Personal Data" includes Nonpublic Personal Information and Personal Information:

• "Nonpublic Personal Information" is nonpublic information about you that we obtain in connection with providing a financial product or service to you pursuant to the Gramm-Leach-Bliley Act ("GLBA").
• "Personal Information" means information that identifies, relates to, or could reasonably be linked with you or your household. Personal Data does not include: publicly available information; de-identified or aggregated consumer information; or information excluded from the scope of applicable state privacy law, such as health or medical information covered by the Health Information Portability and Accountability Act (HIPAA) or information covered by certain sector-specific privacy laws, such as the Fair Credit Reporting Act (FCRA), or the GLBA.

We may collect Personal Data about you, your family members, or members of your household (collectively "you") from the following sources:

• Directly from you, such as from applications, forms, our Platforms, personal interviews or otherwise
• Automatically about your interaction with the Platforms when you visit us
• Clients and partners, insurance carriers, (re)insurers, network partners, employers, benefit plan sponsors, benefit plan administrators, premium finance companies, health service providers, data/marketing list providers and third-party service providers
• Publicly available sources such as social media platforms, property and asset registers, and claims and convictions records
• Affiliate or subsidiary companies
• Government authorities, such as police and regulators
• Background check providers and screening tools
• Medical records or medical professionals
• Individuals who assist in handling claims
• Non-affiliated third parties such as HR Departments, employers, and insurance carriers
• Non-affiliated service providers, such as business, data, rating, information, and web services providers

Personal Data we may collect (depending on the nature of your interaction with us) includes:

• Identifying and demographic information, such as your name, date of birth, age, gender, marital status
• Contact information, such as your address, telephone number and email address
• Unique identifiers, such as identification numbers issued by government bodies or agencies
• Employment information, such as your job title, employer, employment status, salary information
• Financial information, such as your bank account numbers, credit card numbers, transaction information
• Policy and underwriting information
• Claim information
• Commercial information
• Events or meeting information
• Special category data and sensitive personal data
• Criminal records information
• Professional disciplinary information
• Marketing information
• Platforms and communication usage information

What Information We Disclose and To Whom We Disclose It

In the course of our general business practices, we use the Personal Data that we collect to provide products or services to you, as well as to facilitate internal business functions such as managing business operations, communicating and marketing to you, complying with legal obligations, monitoring and preventing fraud, improving our services, and mergers and acquisitions.

We may also disclose the information that we collect about you or others to various third parties including insurance institutions, agents, credit reporting agencies, TPAs, financial services companies, medical care institutions, insurance regulatory authorities, law enforcement, group policyholders, actuarial or research organizations, insurance carriers, your employer, third party analytics providers, and others as necessary to provide our services.

Our Use of Cookies

We may use cookies, web beacons, tracking pixels, and other tracking technologies (collectively, "Cookies") when you visit the Platforms to help customize the Platforms and improve your experience.

We use Cookies on the Platforms to, among other things, keep track of services you have used, record registration information, record your user preferences, keep you logged into the Platforms, track the pages you visit, and provide marketing and advertising services.

Types of Cookies we may use:

• Advertising Cookies
• Analytics Cookies
• Functional and Performance Cookies
• Security Cookies
• Location Cookies

You may manage your Cookie preferences through your browser settings. Most browsers allow you to review and delete Cookies. Please note that disabling Cookies could affect the availability and functionality of the Platforms.

Our Practices Regarding Information Safeguards

We restrict access to your Personal Data to those employees who need to know that information in order to provide products or services to you and your household. We maintain physical, electronic, and procedural safeguards to protect your Personal Data.

While we attempt to protect all Personal Data, we cannot ensure or warrant that Personal Data will be completely secure from misappropriation by hackers or from other nefarious or criminal activities, or in the event of a failure of computer hardware, software, or a telecommunications network.

Information for Users Outside the United States

If you are visiting the Platforms from outside the United States, please be aware that information we obtain about you will be processed in the United States or other jurisdictions. By using the Platforms, you acknowledge your Personal Data may be transferred to and processed in jurisdictions outside your own as described in this Notice.

Updates, Questions, and Contact Information

We reserve the right to change our privacy policies, practices and this notice at any time. Updated copies of this notice will be posted at this location.

If you have a comment, question, or request related to the Privacy Notice or your Personal Data, please contact us:

Privacy Management
c/o Compliance Department
Unison Risk Advisors
950 Main Ave., Suite 1800
Cleveland, Ohio 44113
Email: compliance@unisonriskadvisors.com
Phone: 1.855.467.9253

Financial Privacy Notice

The Gramm-Leach-Bliley Act (GLBA) generally prohibits any financial institution, directly or through its affiliates, from sharing Nonpublic Personal Information about you with a third party unless the institution provides you with a notice of its privacy policies and practices.

What Does Avoca Risk Do With Your Personal Information?

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.

What? The types of personal information we collect and share depend on the product or service you have with us. This information can include Social Security number, employment information, account balances, transaction history, medical information, and insurance claim history.

How? All financial companies need to share customers' personal information to run their everyday business.

Reasons we can share your personal information	Does Avoca Risk share?	Can you limit this sharing?
For our everyday business purposes	Yes	No
For our marketing purposes	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates' everyday business purposes	Yes	No
For our affiliates' everyday business purposes—information about your creditworthiness	Yes	Yes
For our affiliates to market to you	Yes	Yes
For nonaffiliates to market to you	Yes	Yes

To limit our sharing: Call 1.855.467.9253 or visit unisonriskadvisors.com

California Privacy Notice

This section applies to Personal Information that is not covered by the GLBA or other applicable law for residents of California. This California Privacy Notice is provided pursuant to the California Consumer Privacy Act ("CCPA").

Your Privacy Rights

If you are a resident of California, you have the right to submit certain requests relating to your Personal Information:

• Know: You have the right to know what Personal Information that we hold about you
• Accuracy: You have the right to request that we correct any inaccurate or out of date Personal Information
• Deletion: You have the right to request that we delete your Personal Information, with some exceptions
• Non-Discrimination: You have the right to equal treatment regardless of your exercise of your privacy rights
• Sensitive Personal Information: You have the right to direct us to limit our use and disclosure of your Sensitive Personal Information
• Opt Out: You have the right to opt out of the sale of your Personal Information and the sharing of your Personal Information for cross-context behavioral advertising

We do not presently sell, use for profiling, or share Personal Information for targeted or cross-context behavioral advertising.

To exercise your rights, please contact us:

Privacy Management
c/o Compliance Department
Unison Risk Advisors
950 Main Ave., Suite 1800
Cleveland, Ohio 44113
Email: compliance@unisonriskadvisors.com
Phone: 1.855.467.9253

Revision date: 9/2025