MediaAlpha for Advertisers
Privacy Policy

Effective: January 1, 2023

QuoteLab, LLC, which does business as MediaAlpha, with offices at 700 S. Flower St., Suite 640, Los Angeles, California 90017 (“MediaAlpha”) provides online services in the form of advertising services offered via MediaAlpha’s online reporting and bidding system available at http://exchange.mediaalpha.com (called the “MediaAlpha Exchange”) as more fully described in the MediaAlpha for Advertising Terms and Conditions and as may be further detailed in the specifications contained in a written insertion order mutually agreed to and executed by Advertiser’s and MediaAlpha’s authorized signatories (“Insertion Order”) (collectively, the “Service” or “Services”). Below are some key things to know about this Privacy Policy, MediaAlpha, and the Services MediaAlpha provide:

• This Privacy Policy is applicable to the individual or organization who is receiving or using the Services (“Advertiser”).
• Users of websites and webforms owned and controlled by MediaAlpha or Publishers (collectively, such are referred to as “MediaAlpha Sites”) are called “Customers”.
• Third parties who own or control websites who have a contractual relationship with MediaAlpha or another Publisher are called “Publishers”.
• The MediaAlpha Sites allow Customers to provide their information (“Lead Information”) to MediaAlpha or a Publisher to learn more about, connect with, and get rates and/or quotes for specified products or services from the Advertiser (individually a “Lead” and collectively “Leads”).
• Each Lead contains the details of the Customer’s request for quotes or rates, including the Customer’s personal
  information (also known as personal data) and, depending on the type of products or services involved, may
  also contain the personal information of others including their family members or dependents.
• MediaAlpha does not provide rates, quotes, or the products or services advertised by the Advertiser. The rates
  and quotes shown to consumers are from participating advertisers.
• MediaAlpha does not act as an agent for nor does MediaAlpha sell the advertised products or services.

With the above in mind, MediaAlpha wrote this Privacy Policy to describe the information MediaAlpha collects, how MediaAlpha uses it, when and who MediaAlpha shares it with, and the controls available to Advertiser to manage Advertiser’s information in a way that is easier to read and understand. Of course, for any questions, feel free to contact MediaAlpha at 1-833-549-0351.

Please read this entire Privacy Policy. If Advertiser only has a few minutes and wants to know how to exercise Advertiser’s rights to manage the personal information MediaAlpha may have about Advertiser, MediaAlpha recommends Advertiser review Advertiser’s Choices and Controls to understand some of the basics. If Advertiser is a California or Nevada resident or wishes to exercise rights on behalf of someone else, read the additional information in Advertiser’s Privacy Rights. If Advertiser is outside the United States, MediaAlpha also recommends Advertiser read the additional information here and here].

Lastly, before Advertiser dives in, remember this Privacy Policy only applies to the Services (including use of MediaAlpha Exchange) that link to or reference this Privacy Policy. This Privacy Policy does not apply to MediaAlpha’s Customer facing MediaAlpha Sites or any other websites maintained by other companies that MediaAlpha may link to or those that can be accessed through MediaAlpha Sites including the websites on which MediaAlpha’s webforms are located. This means that the privacy policy (or such other terms as entered into by Advertiser) of such Publishers or companies apply to any information Advertiser provides directly to them or is collected automatically by them from Advertiser.

INFORMATION MEDIAALPHA COLLECTS

This Privacy Policy applies only to the following basic categories of information MediaAlpha collects:

• Information Advertiser provide to us through the Services or Insertion Orders or other documents.
• Information MediaAlpha collects automatically when Advertiser uses MediaAlpha Exchange or the MediaAlpha Sites.
• Information Advertiser provides to us when Advertiser call us or when MediaAlpha calls Advertiser.
• Information MediaAlpha gets from Advertiser’s personnel, agents, partners, contractors, and service providers and from other third party sources.
• Any other information Advertiser chooses to provide to MediaAlpha.

For each of these categories, MediaAlpha uses the information to provide the Services to Advertiser, to communicate with Advertiser, to process Advertiser’s request(s), to understand how the Services are used, to improve the Services, and to comply with applicable laws. Additional details on each category is provided below.

Information Advertiser Provides to MediaAlpha Through the Services

When Advertiser uses the Services, MediaAlpha collects information that Advertiser chooses to provide to us to create an account and to use the Services including to buy Leads. For example, when Advertiser elects to create an account, MediaAlpha may allow Advertiser to provide Advertiser’s name, address, telephone number, email, carrier affiliation, payment information (such as a credit card) and other information in order to create Advertiser’s account and grant Advertiser access to the Services. Advertiser may also use the functionality provided in the Services to provide us with Advertiser’s Lead filtering parameters for geography and Customer types (e.g., premium, preferred, standard, non-standard, etc.) and to set Advertiser’s Lead purchase schedule and daily limits.

Information MediaAlpha Collects Automatically When Advertiser Uses the Services

When Advertiser uses the Services, MediaAlpha collects information about Advertiser’s use of the Services and how Advertiser used them, in addition to information about Advertiser’s activity, browser, and device. Like most online services, MediaAlpha may collect such information by using online tracking technologies, such as cookies, pixels, tags, and other unique identifiers (go to allaboutcookies.org or youronlinechoices.eu to learn more about such tracking technologies). Below is a more detailed explanation of the types of information MediaAlpha collect automatically when Advertiser uses the Services:

• Usage Information. MediaAlpha collect information about Advertiser’s activity through the Services. For example, MediaAlpha may collect information about:
  • How Advertiser interacts with the Services;
  • Which pages Advertiser visited and which ones Advertiser visited immediately before or after navigating to the Services or a MediaAlpha Site;
  • Advertiser’s access and use of Advertiser’s account including the Lead filtering parameters for geography and Customer types (e.g., premium, preferred, standard, non-standard, etc.), the Lead purchase schedule and daily limits functionality, the Leads Advertiser bid on, Advertiser’s bid price, which Leads Advertiser buy, and which Leads Advertiser return; and
  • Other demographic and usage information.
• Device, Browser, and Location Information. MediaAlpha collect information from and about the devices and browsers Advertiser uses and about Advertiser’s location. For example, MediaAlpha collects:
  • Device type, browser type, IP Address (which is treated as personal information in some jurisdictions, but which MediaAlpha use only to identify Advertiser’s geographic area and to comply with applicable laws); and
  • Identifiers associated with cookies or other technologies that may uniquely identify Advertiser’s device or browser.
• Interactions with Emails and other Communications. MediaAlpha may also collect information when Advertiser interacts with MediaAlpha’s emails and other communications that MediaAlpha send to Advertiser (including whether Advertiser opened, forwarded or selected a link or content in such email). For example, MediaAlpha may use information Advertiser submits to us through the Services placed on third-party websites to show Advertiser more relevant Leads and information on the use of the Services or other services MediaAlpha offers that Advertiser may be interested in.

Most web browsers are set to accept cookies by default. If Advertiser prefers, Advertiser can usually remove or reject browser cookies through the settings on Advertiser’s browser or device. Keep in mind, though, that removing or rejecting cookies could affects the availability and functionality of the Services. For instance, some cookies are essential (or are required) for Advertiser to access and use the Services. For example, if Advertiser reject all cookies, then Advertiser will not be able to access and use the Services as the technology MediaAlpha use will not be able to authenticate Advertiser as an authorized user. To learn more about Advertiser’s choices, please check out Cookies and Other Technologies.

Information Advertiser Provides to MediaAlpha When Advertiser Calls MediaAlpha or When MediaAlpha Calls Advertiser
MediaAlpha may collect information from Advertiser when Advertiser calls MediaAlpha or when MediaAlpha calls Advertiser. The categories of information MediaAlpha collects from Advertiser or that Advertiser can provide to MediaAlpha through phone calls depends on the nature of the purpose of Advertiser’s call and the Services Advertiser is calling about.

Information MediaAlpha Receives from Suppliers, Third Parties, and other Sources
MediaAlpha may receive information about Advertiser from suppliers, those businesses that provide MediaAlpha services (such as service providers, contractors, and consultants), third parties, or other online or offline sources. MediaAlpha may combine such information with the information Advertiser has provided to MediaAlpha in order to provide and improve the Services including, among other ways, to filter or select the best Leads to show to Advertiser or to measure the performance of services to Advertiser.

Any Other Information Advertiser Chooses to Provide to MediaAlpha
When Advertiser contact MediaAlpha, including by mail or email, or communicate with MediaAlpha in any other way, MediaAlpha collects whatever information Advertiser volunteers or that MediaAlpha needs to resolve Advertiser’s question or request. The categories of information MediaAlpha collects from Advertiser or that Advertiser can provide to MediaAlpha through mail, email, or other means depends on the purpose of Advertiser’s communication to MediaAlpha.

HOW MEDIAALPHA USES ADVERTISER’S INFORMATION

MediaAlpha uses Advertiser’s information to:

• Create Advertiser’s account and authenticate Advertiser to the Services.
• Process and fulfill Advertiser’s request for Leads.
• Process and fulfill the Services detailed in each Insertion Order.
• Communicate with Advertiser, including by phone calls, email, and mail about the Services (including additional services MediaAlpha think may interest Advertiser), Advertiser’s use of the Services (including Advertiser’s bids and purchases), or to respond to Advertiser’s inquiries. For example, if Advertiser requests to be added to any of MediaAlpha’s mailing lists, MediaAlpha will periodically send Advertiser newsletters and other emails with offers and promotions. If Advertiser bids on a Lead, MediaAlpha will communicate with Advertiser to process Advertiser’s bid request. MediaAlpha’s emails will always identify MediaAlpha as the sender. Advertiser may unenroll from MediaAlpha’s mailing lists and newsletters any time by selecting “unsubscribe” in MediaAlpha’s emails. Keep in mind, MediaAlpha may continue to communicate with Advertiser for the purpose of communicating information relating to Advertiser’s account, Advertiser’s use of the Services, Advertiser’s participation in MediaAlpha’s marketplace, general information regarding MediaAlpha, as well as to respond to any inquiry or request made by Advertiser.
• Provide and improve the Services and understand how the Services are used.
• To determine and provide ad placement, ad targeting, and ad campaign success and measurement of MediaAlpha’s marketing materials and advertisements to Advertiser, including through the use of Advertiser’s location information, both on and off the Services. See Cookies and Other Technologies to learn more about MediaAlpha’s advertising practices and Advertiser’s choices.
• Develop, operate, improve, deliver, maintain, and protect the Services.
• Monitor and analyze trends and usage of the Services.
• Enhance the Services and Advertiser’s experience with them by using information MediaAlpha collects automatically by cookies and other technologies.
• Enhance the safety and security of the Services.
• Verify Advertiser’s identity and prevent fraud or other unauthorized or illegal activity.
• Enforce MediaAlpha’s MediaAlpha for Advertising Terms and Conditions and other usage policies.
• Comply with legal requirements, including applicable laws, rules, regulations, and orders.

MediaAlpha may also combine Advertiser’s information with other information MediaAlpha collected from Advertiser or Advertiser provided to MediaAlpha with information collected from Advertiser or Advertiser provided directly to MediaAlpha’s third-party partners and service providers. MediaAlpha uses this information as detailed in this Privacy Policy.

Keep in mind that information collected through cookies and other online tracking technologies is also used along with other information MediaAlpha collects for the purposes outlined in this Privacy Policy including: remembering Advertiser’s settings and choices and providing Advertiser with a customized experience; monitoring, analyzing, and for improving the operation, delivery, performance, and usability of the Services, and for providing Advertiser with personalized ads based on Advertiser’s activity on the Services and on other sites and services not operated by MediaAlpha.

WHEN AND HOW MEDIAALPHA SHARES INFORMATION
MediaAlpha may share the information MediaAlpha has about Advertiser in the following ways:

• With MediaAlpha’s Service Providers and Other Third Parties. To provide and protect the Services, MediaAlpha may share the information MediaAlpha has about Advertiser with those businesses that provide services to MediaAlpha including MediaAlpha’s third-party vendors, suppliers, service providers, and other third parties under the following circumstances:
  • To measure and optimize the performance of the Services. For more about the information collected by third parties on MediaAlpha Sites, visit Cookies and Other Technologies.
  • To optimize MediaAlpha’s ability to reach MediaAlpha’s target audience and markets by sharing aggregated, non-personally identifiable, de-identified, and aggregated information (i.e., information about Advertiser and other users collectively, but not specifically identifiable to Advertiser) with such providers and third parties that provide services to MediaAlpha or perform business purposes for MediaAlpha.
  • To help MediaAlpha and others prevent fraud, which may include sharing device, usage, and other information MediaAlpha have about Advertiser.
  • For legal, safety, and security reasons. This means MediaAlpha may share information about Advertiser if MediaAlpha reasonably believe that disclosing the information is needed to:
    • Comply with any valid legal process, governmental or law enforcement request, or applicable law, rule, or regulation (e.g., subpoenas, court orders, federal/state audits or similar circumstances, etc.).
    • Investigate, remedy, or enforce potential violations of MediaAlpha’s polices, applicable law, and the MediaAlpha for Advertising Terms and Conditions (including Insertion Orders).
    • Protect MediaAlpha’s rights, property, or safety or those of the carriers and agents, MediaAlpha’s suppliers, or others.
    • Detect and resolve any fraud or security concerns.
  • As part of a merger or acquisition, asset sale, financing, liquidation, or bankruptcy. If MediaAlpha become involved in any merger, asset sale, financing, liquidation or bankruptcy, or other acquisition of all or some portion of MediaAlpha’s business by another company, MediaAlpha may share Advertiser’s information with that company before and after the transaction closes.

Note that MediaAlpha has agreements with MediaAlpha’s third-party vendors, suppliers, and service providers requiring them to secure any personal information MediaAlpha provide to them, limit how they use such information, and comply with national, state, and other applicable privacy regulations.

THIRD-PARTY CONTENT, LINKS, AND INTEGRATIONS
As noted above, the Services may contain third-party content, links, and integrations. Through these integrations, Advertiser will be providing information to other third parties, as well as to MediaAlpha. MediaAlpha is not responsible for how any such third parties collect or use Advertiser’s information. As always, MediaAlpha encourages Advertiser to read the privacy policies of every third-party service that Advertiser visit or use.

HOW LONG MEDIAALPHA KEEPS ADVERTISER’S INFORMATION
How long MediaAlpha keeps Advertiser’s information (including the information that Advertiser submits through the Services (like Advertiser’s name, phone number, address, email address, etc.)) depends on the amount, type, nature, and sensitivity of the information, the purpose for which it is provided and used, whether we are able to obtain the
business objective by other means, the potential risk of harm from unauthorized use or disclosure of the information, our legal, regulatory, tax, accounting and other applicable obligations, and other similar factors. For example, MediaAlpha keeps Advertiser’s information:

• Until Advertiser asks for the information to be deleted.
• For the length of time reasonably needed to fulfill the purposes for which it was collected including the purposes outlined in this Privacy Policy (including for as long as need to provide Advertiser with the Services), unless a longer retention period is required or permitted by laws, rules, and regulations.
• For as long as necessary to resolve disputes and/or enforce MediaAlpha’s rights and agreements.
• If it is aggregated, anonymized, de-identified (i.e., not capable of identifying Advertiser) then indefinitely.
• In MediaAlpha’s backup or disaster recovery systems for a limited period of time or as required by applicable law.

If Advertiser ever decides to stop using the Services by closing Advertiser’s account, Advertiser can ask MediaAlpha to delete Advertiser’s information (see Advertiser’s Choices and Controls to learn more) and MediaAlpha will process Advertiser’s request where and to the extent possible subject to the terms of this Privacy Policy, the MediaAlpha for Advertising Terms and Conditions, and any exceptions under applicable law.

If necessary, however, we may retain the information we collect about Advertiser for longer periods of time after the set retention periods and deadlines expire such as where we are required to do so in accordance with legal, tax, and/or accounting requirements set by a legislature, regulator, or other government authority.

Keep in mind, when MediaAlpha process Advertiser’s request, while MediaAlpha’s systems are designed to carry out deletion automatically, MediaAlpha cannot promise or guarantee that deletion will occur within a specific timeframe. Also, as noted above, there may be legal (to comply with law or enforce MediaAlpha’s rights) and contractual requirements to keep and not delete Advertiser’s information when Advertiser makes a deletion request to MediaAlpha including to fulfill MediaAlpha’s obligations to Advertiser under the MediaAlpha for Advertising Terms and Conditions. This means MediaAlpha may suspend deletion of or not delete Advertiser’s information if MediaAlpha receives valid legal process asking MediaAlpha to preserve Advertiser’s information, if MediaAlpha receives reports of abuse or violations of MediaAlpha for Advertising Terms and Conditions, or if Advertiser’s use of the Services (including Advertiser’s use of any Lead) or Advertiser’s information is flagged by MediaAlpha’s automated systems for abuse or violations of MediaAlpha for Advertising Terms and Conditions.

HOW MEDIAALPHA KEEPS ADVERTISER’S INFORMATION SECURE

The security of Advertiser’s personal information is very important, and MediaAlpha take a number of steps to safeguard it. For example, MediaAlpha has implemented technical and organizational security measures that are designed to help protect Advertiser’s information from unauthorized access, disclosure, use, and modification. MediaAlpha also maintain physical, electronic, and procedural safeguards that comply with or exceed federal standards to guard Advertiser’s information, and MediaAlpha anonymizes or expunges data when it is no longer necessary to provide services to MediaAlpha’s users or substantiate records for an advertiser. From time-to-time, MediaAlpha reviews MediaAlpha’s security procedures to consider appropriate new technologies and methods.

Even so, despite MediaAlpha’s efforts, no security measures are perfect, impenetrable, or 100% secure. MediaAlpha cannot ensure, and does not warrant or guarantee, that the information Advertiser transmits to MediaAlpha will remain secure, nor does MediaAlpha guarantee that this information will not be accessed, disclosed, altered, destroyed, or used in an unauthorized manner. These are the risks of being online and conducting business online.

Of course, if MediaAlpha learns of a security breach, MediaAlpha may attempt to notify Advertiser electronically so that Advertiser can take appropriate protective steps. MediaAlpha may also post a notice on the Services if a security breach occurs. Depending on where Advertiser lives, Advertiser may have a legal right to receive a notice of a security breach in writing. If Advertiser has any questions about the security of Advertiser’s information, please call MediaAlpha at (213) 316-6256.

COOKIES AND OTHER TECHNOLOGIES
As discussed above, the Services providers (including any other third parties working on MediaAlpha’s behalf), and any other businesses (third parties) who collect information on the Services, may automatically receive certain information associated with Advertiser and/or Advertiser’s device(s) as part of Advertiser’s use of MediaAlpha Sites through browser or device-based tracking technologies such as cookies, pixels, tags, beacons, scripts, or other technology.

Many devices and browsers give Advertiser the option to manage and/or disable cookies and other online tracking technologies. To opt-out of the use of these technologies, Advertiser can change Advertiser’s browser options to stop accepting cookies or to prompt Advertiser before accepting cookies. To assist Advertiser, MediaAlpha compiled directions for some commonly used browsers and devices in the table below. Keep in mind that not all devices and browsers are the same so the methods described below may not work for Advertiser’s browser, browser version, or device and may change at any time. MediaAlpha encourage Advertiser to refer to the relevant instructions for Advertiser’s particular device or browser.

Before Advertiser dives in, please note, if Advertiser opts out of the collection and use of information via cookies and other tracking technologies, Advertiser may still see customized advertising displayed by advertising networks from which Advertiser have not opted out. In addition, Advertiser’s opt-out will not prevent any advertising network from displaying advertising that is not customized to Advertiser and Advertiser’s interests and, consequently, may be less relevant to Advertiser. Advertiser will need to make such choices on each browser and device Advertiser may use to visit the Services.

• Disabling Cookies in Browsers. When Advertiser elects to opt-out on a website, including MediaAlpha Sites, an opt-out cookie is placed on Advertiser’s device. Then when Advertiser visits the same website, the opt-out cookie tells the website Advertiser opted out. This means that blocking all cookies may then prevent the websites (including MediaAlpha Sites) from operating as expected and may also prevent Advertiser’s consent choices from being stored. This may mean that if Advertiser opts-out and then block cookies, MediaAlpha may not know about, or be able to honor, Advertiser’s opt-out. Advertiser should also be aware that blocking cookies on Advertiser’s computer will not affect Advertiser’s consent choices on a different device, such as a mobile device. Advertiser may want to keep this in mind when determining Advertiser’s browser cookie settings. For more information on how to disable cookies on the most common browsers see below.

• Other Options for Disabling Online Tracking. Blocking cookies in Advertiser’s browser may not prevent cross-site tracking of Advertiser’s online activity using other online tracking technologies. In addition to managing Advertiser’s cookie settings for Advertiser’s browser, Advertiser can opt-out of tracking directly with the businesses that operate the tracking technologies. To opt-out of certain analytic tracking by the Services providers visit the links below: 

• Do Not Track. Some web browsers may transmit “do not track” signals (go here to learn more). Web browsers may incorporate or activate these features differently, making it unclear if users have consciously activated them. As a result, MediaAlpha does not take steps to respond to such signals. 
• European Visitors. In connection with the General Data Protection Regulation (GDPR) applicable in the European Economic Area (EEA), MediaAlpha eliminates or limits the use of cookies and similar technologies with visitors from the EEA (excluding MediaAlpha’s corporate website available at www.mediaalpha.com, which continues to use cookies for all users with proper consent (see more information below)). Specifically:
  • If Advertiser visits a third-party site that serves MediaAlpha’s advertisements, MediaAlpha will not place any cookies on Advertiser’s device unless Advertiser has provided Advertiser’s consent and been provided with notice of MediaAlpha’s privacy practices and Advertiser’s ability to opt-out at any time.
  • MediaAlpha will not seek Advertiser’s consent to use cookies in this instance, though the advertiser or their website publisher may do so.
  • If Advertiser visits the Services, MediaAlpha will only place limited third-party cookies, such as those made available for analytics purposes by Google and Bing. In this case, MediaAlpha will seek Advertiser’s consent to use these third-party cookies and will only do so after Advertiser indicates Advertiser’s consent. If Advertiser does not consent, then no cookies will be written to Advertiser’s device.
  • If Advertiser is visiting MediaAlpha’s corporate website, mediaalpha.com, for the first time, or the first time after MediaAlpha makes a material change, MediaAlpha will seek Advertiser’s consent to use cookies.
  • If Advertiser does not consent, Advertiser will still be able to use the Services, but certain functionality may be limited. To enable this feature, MediaAlpha use third-party tools to determine Advertiser’s geographic location; if these tools indicate that Advertiser are in the EEA, then MediaAlpha treats Advertiser’s visit as above. If Advertiser feels that Advertiser is subject to GDPR, but MediaAlpha has nonetheless used cookies in connection with Advertiser’s visit without consent (which may be due to a failure of the third party geolocation tools, Advertiser’s use of a proxy server, Advertiser’s location outside of the EEA at the time of Advertiser’s visit, or some other factor beyond MediaAlpha’s control) please notify MediaAlpha at 1-833-549-0351 and make sure to include any relevant details so that MediaAlpha can ensure proper treatment of Advertiser’s data under GDPR.

ADVERTISER’S PRIVACY RIGHTS

To manage or make choices about the personal information (as known as personal data) MediaAlpha have about Advertiser, review Advertiser’s Choices and Controls. If Advertiser is a resident of California, Nevada, Colorado, Connecticut, Utah, Virginia, or a citizen of a European Economic Area (EEA) Member State, review the applicable sections below to learn more about the privacy rights that may be available to Advertiser.. If Advertiser is a parent or legal guardian or a representative, review the sections identified below to learn more about how Advertiser may exercise rights on behalf of Advertiser’s child or another person.

When we use the term “personal information” (also known as personal data) in this Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household. It does not include aggregated, anonymized, or de-identified information (subject to applicable laws, rules, or regulations) that is maintained in a form that is not capable of being associated with or reasonably linked to an individual.

•  State Specific Disclosures. The following State Specific Disclosures supplement the above information in this Policy by providing additional information about MediaAlpha’s personal information practices relating to individual residents of the States of California, Colorado, Connecticut, Nevada, Utah, and Virginia. Unless otherwise expressly stated, all terms defined and used in this Policy retain the same meaning in these disclosures.
  • Rights Regarding the Personal Information MediaAlpha has about Advertises. Depending on your state of residency and the laws, rules, and regulations that apply, Advertiser may have the right to request the following:
    • Right to know about the personal information we have collected about Advertiser;
    • Right to delete personal information we have collected about Advertiser;
    • Right to correct inaccurate personal information we have collected about Advertiser;
    • Right to access and receive a copy of the personal information we collected about Advertiser;
    • Right to opt-out of the sale or sharing of the personal information we have collected about Advertiser;
    • Right to limit the use or disclosure of the sensitive personal information we have collected about Advertiser; and
    • Right to know certain information about our data practices in the preceding 12 months.

Right to Know. Depending on Advertiser’s state of residence and the applicable laws, rules, and regulations, Advertiser may have the right to know about what personal information MediaAlpha collects and the sources from which we collect, how MediaAlpha uses the personal information we collect and for what business purposes we use it, how, when, and with whom we share the personal information we collect, and the criteria we use to determine the length of time we intend to retain personal information. MediaAlpha provides this information in this Policy (with additional details provided below). We may also provide additional notices and disclosures to Advertiser at the point of collection. For example, when Advertiser sign up for an account or in your account. In this Policy, to learn more about:

• What categories of personal information we collect and the categories of sources from which we collect such information, review Information We collect.
• How we use and the business purposes for which we use the categories of information we collect, review How We Use Your Information.
• How, when, and with what categories of parties we share the information we collect, review When and How We share Your Information.
• The criteria we use to determine the length of time we intend to retain each category of personal information we collect about Advertiser, review How Long We Keep Your Information.

Your Right to Access and Receive a Copy of the Personal Information We Have About Advertiser. Depending on your state of residence, Advertiser may have the right to request the following from us:

• Specific pieces of personal information we collected about Advertiser;
• Categories of personal information we collected about Advertiser;
• Categories of sources from which the personal information is collected;
• Categories of personal information we sold or disclosed for a business purpose about Advertiser;
• Categories of third parties to whom the personal information was sold or disclosed for a business business purpose; and
• The business purpose for collecting or selling personal information.

WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION. Depending on your state of residence and subject to certain exceptions, the right to opt-out may include the right to direct a business that collects your personal information to not “sell” your personal information to third parties for monetary or other valuable consideration or “share” your personal information to third parties for cross-context behavioral advertising purposes and targeted advertising purposes. As described in Information We Collect and When and How We Share Your Information, and subject to the limitations we describe in this Policy, we may share your personal information for the described business purposes with strict restrictions on how our business partners and other third parties can use and disclose the information we provide, at your direction, or in ways that are otherwise in accordance with applicable laws, rules, and regulations. We do not sell or share any of your personal information.

LIMIT THE USE OR DISCLOSURE OF YOUR SENSITIVE PERSONAL INFORMATION. Depending on your state of residence and subject to certain exceptions, Advertiser may have the right to limit the use or disclosure of the categories of sensitive personal information a business collects about Advertiser. We do not collect sensitive personal information as part of your use of our services.

Right to Non-Discrimination. Depending on your state of residence and subject to certain exceptions, should Advertiser wish to exercise its rights, we will not discriminate against Advertiser by showing Advertiser different products or services based solely upon Advertiser’s request.
Shine the Light (California Only). California residents may, no more than once per calendar year, request from us information about our disclosure of certain categories of personal information to third parties for direct marketing purposes. To be valid, requests must be submitted to us by contacting our Customer Success Team at agentsupport@mediaalpha.com. Please identify that Advertiser are submitting a “Shine the Light Request” request. We will provide Advertiser within 30 days of receiving your request, a list of the categories of personal information (also known as personal data) disclosed to third parties for direct marketing purposes during the immediately preceding calendar year and the names and addresses of the third parties.

• How to Exercise Your Rights With Us. To exercise any of these rights, please contact MediaAlpha at 1-833-549-0351 to submit Advertiser’s request. In the request, please specify which right Advertiser is seeking to exercise and the scope of the request. MediaAlpha will confirm receipt of Advertiser’s request within 10 days. MediaAlpha may also ask Advertiser for specific information to verify and process Advertiser’s request. Kindly note, if MediaAlpha does not have information that permits MediaAlpha to verify Advertiser’s identity, MediaAlpha may deny Advertiser’s requests to know or delete.Keep in mind, Advertiser is responsible for keeping Advertiser’s information with MediaAlpha up-to-date and accurate including Advertiser’s account information. If Advertiser wishes to update or correct Advertiser’s information, if Advertiser have an account, first log into Advertiser’s account to update Advertiser’s information in Advertiser’s account settings, and if Advertiser does not have an account, please contact MediaAlpha at 1-833-549-0351. For any information that cannot be updated in Advertiser’s account, or if Advertiser’s credit card information is lost or stolen or Advertiser’s account credentials are compromised contact MediaAlpha 1-833-549-0351.

• How to Use an Authorized Agent to Submit Your Rights Requests. In certain circumstances, advertiser may be permitted to use an authorized agent to submit your rights requests to MediaAlpha on Advertiser’s behalf through the designated methods details in this Policy where we can verify the authorized agent’s authority to act on Advertiser’s behalf. In order to verify the authorized agent’s authority, MediaAlpha generally requires evidence of either: (i) a valid power of attorney; or (ii) a signed letter containing Advertiser’s name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and Advertiser’s state of residency, MediaAlpha may still need to separately reach out to Advertiser to confirm the authorized
• Visitors Outside the United States. This Privacy Policy is intended to cover collection of information on the Services from residents of the United States. The data protection and other laws of the United States might not be as comprehensive as those in Advertiser’s country. By visiting the Services or otherwise using the Services in any other way, Advertiser acknowledges and agrees that Advertiser’s information may be transferred to MediaAlpha’s facilities and those third parties with whom MediaAlpha shares it as described in this Privacy Policy, regardless of the laws of Advertiser’s country of residence. To the extent the laws of another jurisdiction apply to Advertiser’s data or use of the Services, MediaAlpha will comply with such laws. For example, for European Visitors, read the European Visitors section of Cookies and Other Technologies to learn more about MediaAlpha’s use of cookies and similar technologies with visitors from the EEA.
• Children’s Information. As noted in the MediaAlpha for Advertising Terms and Conditions, Advertiser must be at least 18 years old to use the Services. MediaAlpha does not knowingly collect, use, or disclose personal information about visitors under 18 years of age. If Advertiser is under 18, Advertiser may not use the Services.