Privacy Policy

Last Updated: October 21, 2026

Who We Are

OneShield ("OneShield," "we," "us," or "our") provides insurance software and technology solutions. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://www.oneshield.com and other OneShield webpages that link to this Policy (the "Site").

Scope of This Policy

This Policy applies to personal information OneShield collects in its own capacity through the Site and related website interactions. It does not apply to personal information we process on behalf of our business customers under customer agreements, to customer-hosted or customer-controlled environments, or to third-party websites and services that have their own privacy notices.

Personal Information We Collect

Depending on how you interact with the Site, we may collect the following information:

• Contact and request information, such as name, business email address, telephone number, company, job title, and the content of a message or request you submit.
• Device and network information, such as IP address, browser type and settings, device information, operating system, and referring or exit pages.
• Website activity information, such as pages viewed, approximate interaction data, traffic source, and information about how you use the Site.
• Preference and consent information, including cookie or tracking choices and records necessary to remember or demonstrate those choices.
• Other information you choose to submit to us. Please do not submit sensitive personal information through general website forms unless we specifically request it for a stated purpose.

Sources of Personal Information

We collect personal information directly from you, automatically from your browser or device when you use the Site, and from service providers that support Site hosting, analytics, consent management, security, and related functionality.

How We Use Personal Information

• Provide, operate, maintain, troubleshoot, and secure the Site;
• Respond to inquiries, demo requests, contact requests, and other communications;
• Send marketing or informational communications where permitted and manage communication preferences;
• Measure and understand Site usage and improve performance, content, and user experience;
• Detect, investigate, and prevent fraud, misuse, security incidents, and other harmful activity;
• Comply with law, legal process, and contractual obligations; establish or exercise legal claims; and enforce our terms; and
• Complete a corporate transaction such as a merger, acquisition, financing, reorganization, or sale of assets.

Cookies and Tracking Technologies

We use cookies, browser local storage, and similar technologies to operate the Site, remember preferences, understand Site usage, and improve performance. Where required by applicable law, non-essential technologies are controlled through our consent or privacy-preferences interface.

Consent Pro

We use Consent Pro as a consent-management platform to present privacy choices, record and apply those choices, and manage non-essential technologies based on applicable requirements. You may review or change available preferences through the Site privacy-preferences control. We configure our consent-management process to recognize qualifying browser-based opt-out preference signals, including Global Privacy Control (GPC), as described in the California section below.

Google Analytics

We use Google Analytics to understand how visitors interact with the Site. Google Analytics may use first-party cookies and collect information such as device and browser information, approximate location derived from network information, pages viewed, and session or interaction information. Google processes information under its own terms and privacy practices. Where our Site presents a choice for analytics technologies, you can use that control to manage analytics collection.

Webflow Analyze

Our Site is built and hosted using Webflow, and we use Webflow Analyze to measure Site performance and usage. According to Webflow, Analyze does not use cookies to recognize visitors; it uses browser local storage and anonymous identifiers and reports non-PII browsing data in aggregate. Webflow processes Site data as a platform and service provider under its applicable privacy terms.

Managing Your Preferences

You can use the Site privacy-preferences control to manage available non-essential tracking choices. You may also use browser settings to block or delete cookies. Blocking certain technologies may affect Site functionality. Browser “Do Not Track” signals are not standardized; where required by law, we recognize qualifying opt-out preference signals such as GPC.

California Privacy Notice (CCPA/CPRA)

This section supplements the rest of this Policy for California residents and describes our practices under the California Consumer Privacy Act, as amended ("CCPA"). Terms defined by the CCPA have the same meaning when used in this section.

Notice at Collection and Categories of Personal Information

The table below describes the categories of personal information that we collect through the Site, the examples associated with our Site practices, the sources, and the purposes for collection and use. We do not necessarily collect every example included in the statutory definition of a category.

California Disclosures for the Preceding 12 Months

The following disclosures describe our Site practices for the preceding 12 months.

• Categories collected: identifiers; California Customer Records information; internet or other electronic network activity; and professional or employment-related information, as described above.
• Categories disclosed for a business purpose: identifiers, contact information, internet/network activity, and professional information may be disclosed to service providers or contractors that support hosting, consent management, analytics, security, communications, and Site operations.
• Categories of recipients for business-purpose disclosures: website hosting/platform providers; analytics providers; consent-management providers; security and technology providers; professional advisors; and other vendors acting for OneShield under applicable contractual restrictions.
• Based on our current review of the site’s analytics and tracking configurations, OneShield does not sell personal information for monetary consideration, and we have not shared personal information for cross-context behavioral advertising in the preceding 12 months. California residents may exercise the right to opt out of sale or sharing through the Site privacy-preferences control or by using a qualifying opt-out preference signal, including Global Privacy Control (GPC).
• Consumers under 16: the Site is directed to business and professional audiences. OneShield does not knowingly collect personal information from children through the Site and does not knowingly sell or share personal information of consumers under 16 years of age.

Your California Privacy Rights

Subject to applicable exceptions, California residents may have the following rights:

• Right to Know / Access. Request the categories of personal information we collected, the sources, purposes, categories of third parties to whom information was sold, shared, or disclosed, and the specific pieces of personal information we maintain about you.
• Right to Delete. Request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct. Request correction of inaccurate personal information that we maintain about you.
• Right to Opt Out of Sale or Sharing. Direct us not to sell or share personal information as those terms are defined by the CCPA.
• Right to Limit Use and Disclosure of Sensitive Personal Information. Where a business uses or discloses sensitive personal information beyond purposes permitted without offering this right, California residents may direct the business to limit that use or disclosure. Based on the Site practices described in this Policy, OneShield does not request sensitive personal information for such purposes through general Site interactions.
• Right to Non-Discrimination. We will not unlawfully discriminate against you for exercising CCPA rights.

How to Exercise California Rights

You may submit a request to know/access, delete, or correct by using one of the methods below:

• Email: privacy@oneshield.com
• Online: use the Contact Us form at https://www.oneshield.com/about/contact-us and identify the request as a “California Privacy Request.”
• Telephone: (888) 663-2565.

For requests to know/access, delete, or correct, we may need information reasonably necessary to verify your identity and match you to records we maintain. We will use information submitted for verification only for verification, fraud prevention, security, or as otherwise permitted by law. We may deny or limit a request where permitted by law and will explain the basis when required.

Authorized Agents

You may designate an authorized agent to submit a CCPA request on your behalf. We may require proof that the agent is authorized to act for you and may require you to verify your identity directly with us, unless applicable law provides otherwise.

Opt-Out Preference Signals and GPC

Where the CCPA right to opt out of sale or sharing applies to our Site practices, we process qualifying opt-out preference signals, including Global Privacy Control (GPC), as a request to opt out for the browser or device sending the signal, as required by applicable law. You may also use the Site privacy-preferences control to manage available non-essential tracking choices. If we can associate an opt-out preference signal with a known consumer profile in a manner required by law, we will apply it as required by the CCPA.

Sensitive Personal Information

We do not request sensitive personal information through general Site forms and do not intentionally use Site-derived sensitive personal information to infer characteristics about individuals. If you voluntarily provide sensitive information in a free-text field, we will use it only as reasonably necessary to address the request, maintain security, comply with law, or for another purpose permitted by applicable law.

EEA/UK Privacy Rights and Legal Bases

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal data as applicable based on consent, our legitimate interests, performance of a contract or steps taken at your request, and compliance with legal obligations. Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, receive data in a portable format, and withdraw consent without affecting prior lawful processing. You may also lodge a complaint with your local data protection authority.

Who We Disclose Personal Information To

We may disclose personal information to:

• Service providers and contractors that support website hosting, analytics, consent management, communications, security, and other Site operations, including Webflow and Google where applicable;
• Professional advisors, auditors, insurers, and legal counsel where reasonably necessary;
• Government authorities, regulators, courts, law enforcement, or other parties where required by law or reasonably necessary to protect rights, safety, security, or prevent fraud; and
• A buyer, successor, or other party involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

Retention of Personal Information

We retain each category of personal information only for as long as reasonably necessary and proportionate to accomplish the purposes for which it was collected or processed, taking into account legal, contractual, security, fraud-prevention, dispute-resolution, and recordkeeping requirements. We do not retain personal information longer than reasonably necessary for a disclosed purpose.

Data Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, destruction, use, modification, or disclosure. No method of transmission or storage can be guaranteed to be completely secure.

International Data Transfers

OneShield is based in the United States and operates internationally. Personal information may be processed in the United States and other countries that may have different data protection laws. Where required by applicable law, we use appropriate safeguards for international transfers.

Embedded Content and Third-Party Services

The Site may include embedded content or links from third parties, such as videos, images, articles, or other services. Those third parties may collect information when you interact with their content and are governed by their own privacy notices. Their practices are not controlled by this Policy.

Children's Privacy

The Site is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from children through the Site. If you believe a child has provided us personal information, please contact us so that we can address the information as appropriate.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date. If required by law, we will provide additional notice or obtain consent for material changes to our practices.

Contact Us

If you have questions about this Privacy Policy or wish to exercise privacy rights, contact us at: