US Privacy Policy 

1. Introduction 

This Privacy Policy (“Policy”) describes how the Hadron Group of Insurance Companies, and our brands, affiliates, and subsidiaries in the US (“Hadron,” “we,” “us” and “our”) collect, use, and disclose your information, including personal information, when you visit our websites, including www.hadroninsurance.com (the “Sites”) or use any of our products or services that link to or otherwise reference this Policy (collectively, the “Services”). 

At Hadron we collect, use and process personal data on individuals, including the following individuals who are covered by this Policy: 

• (prospective) insured persons, insurance applicants and policyholders (“Insureds”); 

• beneficiaries and other persons named in the insurance policy (“Beneficiaries”); 

• persons filing a claim under an insurance policy (“Claimants”); 

• persons who serve as a witness in connection with an insurance claim (“Witness”); 

• Insureds, Beneficiaries, Claimants and Witnesses are collectively “Insurance Contacts;” 

• individuals working for one of our business partners (“Business Contacts”); 

• individuals who otherwise interact with us online or offline, for instance by visiting our offices or filing a general request for information via our website (“General Contacts”); and 

• individuals who use and visit our website (“Website Visitors”). 

This Policy does not apply to Hadron employees, job applicants, insurance brokers and agents or our Producers (as defined below). 

Hadron takes its responsibility to protect your personal data seriously. In that respect, we are committed to handling your personal data in accordance with all applicable data protection laws and being transparent as to how we collect, process and share that data. 

This Policy is designed to inform you how Hadron subsidiaries collect and use personal data when providing services as an insurance business. It explains how, why and when we collect, use, retain and disclose your personal data, as well as your own rights in relation to that data. 

2. Who are we? 

Hadron consists of different legal entities, including the licensed insurance carriers Hadron Specialty Insurance Company and The Guarantee Company of North America USA. 

As part of our core activities, we underwrite insurance business via Producers with binding authority. For this purpose, we work through a network of business relationships established with Insurance Market Participants (our Producers) who we may rely upon to underwrite, administer policies, and in some cases, adjudicate claims on our behalf. 

To the extent required by applicable Data Protection Regulation, Hadron may be considered to be a “controller” in connection with the processing of your personal data if you are an Insurance Contact, a Business Contact or General Contact or a Website Visitor. 

To consult with Hadron about these details, please contact Hadron at the contact below. In a number of instances, we do not collect the data from you directly (see Section 5: Where do we get your personal data from?). 

3. What types of personal data do we process? 

The personal data we process depends on your relationship with Hadron as set out above and whether collection is permitted by applicable law. We collect and process the following categories of personal data from you: 

We only process your special category and/or criminal personal data where strictly necessary. When we do, we (or our Producers) will ask for your explicit consent where such is required in accordance with applicable data protection law, or we will rely on a specific authorization in law that allows us to process this data. 

4. What happens if you do not provide us with your personal data? 

Depending on the capacity in which you interact with us as set out above, i.e. as a Website Visitor, Insurance Contact, Business Contact or General Contact, we need to process your Personal Data for different purposes including responding to your inquiry, communicating with you, handling  claims, assessing  risk and making decisions in regard to your insurance policy application. 

If we are not provided with your personal data, we are unable to undertake these activities and this may result in, e.g., us being unable to communicate with you or your insurance application being denied because we are unable to assess the risk involved. 

You have a right to object to the processing of your personal data where that processing is carried out for our legitimate interests. Please note however that we may not be able to fulfill this request in all instances.  You can request further details on this assessment by contacting us using the contact details listed in Section 9: Contact details below. 

5. Where do we get your personal data from? 

The source from which we get your personal data will always depend on your specific circumstances. In most cases, we obtain your personal data from Insurance Market Participants (i.e., our Producers) and other third parties such as your insurance agent or broker. On occasion, we may also receive/collect your personal data directly from you, such as when you are a Website Visitor or where you are otherwise in direct contact with us. We may also receive your personal data from the following sources: 

• Persons and companies you are affiliated with or related to including your family members, employer or representative; 

• Credit reference agencies; 

• Reinsurance companies and other third-party insurance companies with whom you have, had, are applying for, or have filed a claim under an insurance policy; 

• Anti-fraud databases and Auto Insurance Anti-Fraud databases, sanctions lists, court judgements and other public databases; 

• Government agencies (such as the Driver and Vehicle Licensing Agencies, Revenue departments and Customs); 

• Open electoral registers and other publicly available registers such as company registers; 

• Supervisory, regulatory and other public authorities; 

• In the event of a claim, third parties including the other party to the claim (claimant/defendant), witnesses, experts (including medical experts), loss adjustors, external counsel, and claims handlers; 

• Service providers such as organizations operating our website; and 

• Other public and non-public sources including information that is publicly available online. 

6. Retention of your personal data 

We will retain your personal data only for as long as is necessary for the purpose for which it was originally obtained, to comply with our legal and regulatory obligations, and to defend our rights, and always in line with the data retention periods set forth in the laws and regulations applicable to us. 

7. Who do we share your personal data with? 

We share your personal data with other Hadron Companies.  Hadron employees only have access and process your personal data on a “need to know” basis, i.e., only where such access and processing is necessary for such employees to perform the tasks and responsibilities allocated to them. 

We also share your personal data with the following categories of third parties: 

• Our service providers (e.g., IT vendors supporting our information security and technology, external counsel and other legal advisors, consultants, auditors, website and data hosting providers, marketing agencies, accountants, etc.); 

• Governmental authorities including our supervisory regulatory authorities and law enforcement agencies; 

• Our Insurance Market Participants (our Producers); 

• Contractors, brokers or financial institutions; and 

• Other third parties (i) upon your request; (ii) to protect and defend our rights and properties; (iii) to detect and/or prevent fraud or money laundering; (iv) in the event of a sale, merger or reorganization of our assets or other restructuring; and/or (v) where we are, or believe in good faith that we are, under a legal obligation to share your data. 

8. Your state privacy rights 

Depending on your state of residency, you may have certain rights related to your personal data, including:  

• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request. 

• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose. 

• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.   

• Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes. 

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request. 

To exercise any of these rights or to appeal a decision regarding a consumer rights request, please contact us using the details in Section 10, below.   

9. International data transfers 

We only transfer your personal data to jurisdictions in compliance with applicable data protection law and transfer restrictions, and we implement appropriate safeguards where required. 

10. Contact Details 

For all details regarding compliance with data protection laws or to exercise any of your rights under this Policy, please contact our Legal Department by using the following contact details: 

Postal Address: 

CALIFORNIA CONSUMER PRIVACY ACT DISCLOSURE 

Last Updated: September 1, 2025 

HADRON and its subsidiaries (collectively, “HADRON,” “we,” or “us”) value your privacy. This California Consumer Privacy Act Disclosure explains how HADRON collects, uses, and discloses personal information relating to California residents, pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and the regulations thereunder (collectively “CCPA”). 

Our Collection, Use, and Disclosure of Personal Information   

Under the CCPA, “Personal Information” is information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular California resident or household. The following describes how we collect, use, and disclose Personal Information relating to California residents based on the types of Personal Information listed in the CCPA. 

We collect Personal Information relating to California residents in a variety of contexts, including, for example, collecting Personal Information relating to individuals who request or obtain our products or services, apply for employment with us or are our employees, vendors, contractors or similar personnel, and who visit our locations or facilities. The specific Personal Information that we collect, use, and disclose relating to a California resident will depend on our relationship or interaction with that specific California resident. 

We may collect (and may have collected in the prior 12 months) the following types of Personal Information relating to California residents and the business or commercial purpose for the collection include the following: 

• Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers; 

• Personal information, as defined in subdivision (e) of Section 1798.80 of the California Civil Code, such as signature, telephone number, insurance policy number, bank account number, credit card number, physical description, financial information, medical information; 

• Characteristics of protected classifications under California or federal law, such as race, sex, color, religion, national origin, and marital status; 

• Commercial information, such as transaction information and purchase history; 

• Internet or network activity information; 

• Geolocation data; 

• Audio, electronic, visual, and similar information, such as call recordings; 

• Professional or employment-related information, such as work history and prior employer; 

• Education information; 

• Sensitive personal information, such as social security number, driver’s license number, racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, medical condition, and physical or mental disability; and 

• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics. 

The purposes for which we use this Personal Information depend on our relationship or interaction with a specific California resident. We may use this information in order to operate, manage, and maintain our business, provide our products and services, for our employment and vendor management purposes, and to accomplish our business purposes and objectives, including, for example, providing quotes, underwriting and rating policies; responding to inquiries, fulfilling requests, completing transactions and otherwise servicing insurance policies; investigating and processing claims; personalizing or developing products and services; marketing; research and data analysis; risk and security control; fraud detection and prevention; identity verification; determining eligibility for an employment or other relationship with us; paying compensation and administering benefits; managing performance and other aspects of your relationship with us; accounting, audit, and other internal functions, such as internal investigations; maintaining our facilities and infrastructure; compliance with law, legal process, and internal policies; record keeping; and exercising and defending legal claims.  We will provide you with notice and obtain your explicit consent if we collect additional categories or personal information or use the personal information we previously collected for materially different purposes. 

We may disclose the following categories of Personal Information relating to California residents to third parties for our business purposes: 

• Identifiers; 

• Personal information, as defined in subdivision (e) of Section 1798.80 of the California Civil Code; 

• Characteristics of protected classifications under California or federal law; 

• Commercial information; 

• Internet or network activity information; 

• Geolocation data; 

• Audio, electronic, visual, and similar information; 

• Professional or employment-related information; 

• Education information; and 

• Inferences drawn from other Personal Information. 

We have not sold Personal Information relating to California residents. For purposes of this Disclosure, “sold” means the disclosure of Personal Information for monetary or other valuable consideration as defined in the CCPA. 

Sensitive personal information 

Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you. 

Requests Under the CCPA  

If you are a California resident, you may request that we: 

• Disclose to you the following information covering the 12 months preceding your request: 

• the categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information; 

• the business or commercial purpose for collecting Personal Information about you; 

• the categories of Personal Information about you that we disclosed to third parties for a business purpose and the categories of third parties to whom we disclosed the Personal Information; and 

• the specific pieces of Personal Information we collected about you; and 

• Correct any information about you that is incorrect or inaccurate. Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you directed. 

• Delete Personal Information we collected from you (if applicable). 

• Stop selling or sharing your personal information at any time, including through a user-enabled opt-out preference signal.  As we do not sell [or share] consumers' personal data, we do not currently provide these consumer rights. 

In some instances, we may not be required to honor your request where a CCPA exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of other individuals. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA. 

How to Make Requests  

If you are a California resident, you may make a request described above using either of the following methods: 

• Email [email protected]; or 

• Calling 888-831-HSIC (888-831-4742); or 

• Mail: HADRON Data Privacy, 12600 Deerfield Pkwy, Suite 100, Alpharetta, GA 30004.  

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. 

The verifiable consumer request must: 

• provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and 

• describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. 

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.  If you use an authorized agent to submit a request to know, delete or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.  This requirement does not apply if you have provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130. 

Responding to Your Requests to Know, Delete, or Correct 

We will confirm receipt of your request within ten business days. If you do not receive confirmation within the ten-day timeframe, please contact us using the contact details in Section 10, above. 

We endeavor to substantively respond to a verifiable request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. We will deliver our written response to the email or postal address you provided. Our substantive response will tell you whether or not we have complied with your request. If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, deleted, or made your personal information anonymous in compliance with our record retention policies and obligations.  

Any disclosures we provide will cover information for the 12-month period preceding the request's receipt date. We will consider requests to provide a longer disclosure period, unless providing the longer timeframe would be impossible or involves disproportionate effort. 

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. 

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.  

Consumers under the age of 16 

We do not sell or share the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to personal information sales or sharing may opt-out of future sales at any time. 

Changes to This California Consumer Privacy Act Disclosure  

We may change or update this Disclosure from time to time. When we do, we will post the revised Disclosure on this page with a new “Last Updated” date. 

This Privacy Policy was last updated: 9/1/2025.