Privacy policy
Last updated [DATE]. Version 1.0.
The short version. You tell us about your collision and what you need. We pass that to providers in the categories you picked, and they pay us a flat fee for the connection. That is the whole business model, and under California law it counts as selling your information. You can opt out at any time.
What we collect
What you give us
Your name, phone number, and email address. The date and state of the collision, what kind it was, whether the vehicle can be driven, which services you asked for, whether anyone was injured and treated, whether another driver was involved, whether a police report exists, and whether a lawyer already represents you. Anything else you tell us on a call.
Health information
Your injuries and your treatment are health information about you. Several states, including California, treat that as sensitive personal information and give it extra protection.
We only route you to a medical provider if you explicitly ask for medical care. Telling us someone was hurt does not by itself send your information to any medical provider, because injury is relevant to several categories and we do not treat it as a request you did not make.
Collision Bureau is not a healthcare provider and is not covered by HIPAA. That means HIPAA's protections do not apply here, which is a reason to tell us less rather than more. Save the detail for the attorney.
What we collect automatically
Your IP address, browser and device information, the pages you visited, and the advertisement or link that brought you here. When you submit the form we capture a timestamped record of the consent language exactly as it appeared on your screen, through a third party certification service. That record exists to prove what you agreed to and when.
Who gets it
Participating providers in the categories you selected, and only those categories. If you asked for a tow and a rental, your information goes to towing and rental providers. It does not go to attorneys or medical providers. The consent box you check names the categories before you submit, and it changes as your answers change.
Service providers who run our phone system, email, hosting, and consent certification, and who may only use the information to do that work.
Law enforcement or a court, if we are legally required. A buyer or successor, if the business is sold.
We do not sell your information to data brokers, marketing list companies, insurers, or anyone outside the attorney network.
This counts as a sale
California's privacy law defines a sale broadly. Because providers pay us for the connection, passing your information to them is a sale, and uploading a hashed version of your email to an advertising platform is sharing for cross context behavioral advertising. We are telling you this plainly rather than burying it, because that is the part of this business people are usually surprised by.
You can opt out. Use the do not contact page or tell whoever calls you. Opting out of the sale means we cannot connect you with any provider, since the connection is the sale, but we will not penalize you in any other way and you can still call us for general information.
Your rights
Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, opt out of sale or sharing, limit how we use sensitive information, and not be discriminated against for exercising any of these.
To use any of them, email privacy@collisionbureau.com or call (800) 555-0199. We respond within 45 days and will tell you if we need longer. We may need to verify your identity, and we will only ask for what is necessary to do that.
An authorized agent may act for you with written permission.
Stopping contact
Reply STOP to any text and the texts stop immediately. Click unsubscribe in any email. Tell anyone who calls you to remove you. Or use the do not contact page, which covers every channel at once.
Stopping contact and deleting your record are different things. Ask for deletion if that is what you want, and say so explicitly.
How long we keep it
Consent records are kept five years. The window for a claim under the federal telephone law is four years, and the record is the evidence that you agreed to be contacted, so it outlives the rest of your file on purpose.
Everything else is kept while your matter is active and for two years after, then deleted or stripped of anything identifying. Request deletion sooner and we will honor it unless we are required to keep something.
Security
Encrypted in transit and at rest, with access limited to the people who need it. No system is perfectly secure, and anyone who claims otherwise is selling something.
Children
This site is not directed at children and we do not knowingly collect information from anyone under 18. If a minor was hurt, a parent or guardian should contact us. If we learn we have collected a minor's information without a guardian, we delete it.
Changes
If this policy changes materially we will post the new version here with a new date and version number. Old versions are archived rather than overwritten, so if you ever need to know what you agreed to on a particular day, it still exists.
Contact
Collision Bureau
[STREET ADDRESS], [CITY], [STATE] [ZIP]
privacy@collisionbureau.com
(800) 555-0199