JA Risk Solutions protects your personal information used for insurance purposes, collects only what is necessary to underwrite and service policies, and provides GLBA- and Colorado-compliant privacy notices and rights.

Privacy Notice — JA Risk Solutions

This notice explains how JA Risk Solutions ("we", "us", "our") collects, uses, discloses, retains, and protects nonpublic personal financial and health information in connection with insurance products and services for Colorado consumers and customers.

We collect only information necessary to evaluate applications, underwrite and price risk, issue and service policies, process claims and payments, and prevent fraud. Typical categories include:

• Identity and contact data
• Policy and claims information
• Payment and billing data
• Consumer reports (e.g., driving, credit, CLUE)
• Health/medical information when relevant

Primary uses include underwriting, policy administration, claims handling, fraud prevention, regulatory compliance, and customer service. We may share information with affiliates, reinsurers, brokers, service providers, other insurers for fraud prevention, and regulators as required. When we share with vendors, we require contractual privacy and security obligations and limit redisclosure consistent with law. We do not sell personal information for marketing purposes.

Initial and annual notices: We provide an initial privacy notice when a customer relationship is established and an annual privacy notice during the continuation of that relationship as required by federal GLBA implementing rules and Colorado insurance regulations.

Opt-outs and access: Where applicable under Colorado law and GLBA, you may opt out of certain non-affiliate disclosures, request access or correction of your information, and obtain information about our privacy practices. Colorado consumers may also have additional rights under the Colorado Privacy Act; our notice identifies how to exercise those rights.

Security: We maintain administrative, technical, and physical safeguards (encryption, access controls, monitoring) to protect personal information and limit access on a business-need basis.

Retention: We retain information only as long as necessary for business or legal purposes and in accordance with regulatory guidance.

Breach response: We follow industry best practices for breach detection and notification and will notify affected individuals and regulators as required.

We follow Colorado Division of Insurance rules on privacy notices, delivery methods, content, and annual disclosure timing, and we align our practices with applicable state privacy standards and the Colorado Privacy Act where it applies. Our notices are clear, conspicuous, and provided in the formats required by Colorado regulation.

Privacy Officer — JA Risk Solutions
Email: aiden@jarisksolutions.com

To exercise rights, request copies, correct information, opt out where permitted, or ask questions, contact the Privacy Officer by email or via our privacy portal.

Important: This notice is a summary of our privacy practices for Colorado consumers and customers and is provided to satisfy GLBA and Colorado regulatory requirements; a full privacy policy and the specific Colorado disclosures are available at the link above.