×
If you are a current customer, please log in below or request access to the CanalConnect website.
If you are a current customer, please log in below or request access to the CanalConnect website.
Effective Date: July 7, 2025 Last Updated: July 7, 2025
This Privacy Policy (“Policy”) describes how Canal (“Canal,” “we,” “us” and “our”) collect, use, and disclose your information, including Personal Information, when you visit our website, including www.canalinsurance.com (the “Site”), or use any of our products or services that link to or otherwise reference this Policy (collectively, the “Services”). Depending upon your relationship with us, you may receive other privacy notices from us providing additional detail about our privacy practices. If you are a California resident, please see the Additional Notice to California Residents below for more information.
Your use of the Services is subject to this Policy and Canal’s Terms of Use, including applicable terms of limitations on liability and the resolution of disputes.
Our privacy commitments are fundamental to the way we run our business. These commitments apply to everyone who has a relationship with us – including customers, partners and Site visitors. Canal is committed to providing you with the best overall experience in all of our products and services. We strive to strike the right balance between using your data to ensure the quality of those experiences and protecting your privacy.
“Personal Information” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly – in particular, by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
“Sensitive Personal Information” either indicates Personal Information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and the processing of data concerning health or sexual orientation, or is Personal Information of which the sensitivity level has been assessed and classified, indicating potential severe impact on an individual when confidentiality of such data is breached.
We collect information that identifies, describes, or is reasonably capable of being associated with you. Personal Information does not include publicly available information, such as information lawfully made available from government records, information we have a reasonable basis to believe is lawfully made available to the general public by you or by widely distributed media, or by a person to whom you have disclosed the information and not restricted it to a specific audience, or deidentified or aggregated information.
As described below, we collect Personal Information directly from you, automatically through your use of the Site and Services, and from third-party sources. To the extent permitted by applicable law, we may combine the information we collect from publicly available or third-party sources. The Personal Information we collect varies based on your relationship with us.
Canal collects Personal Information about you in connection with many of our services, with the goal of improving our service to you and providing you with the best possible experience. You may be providing Personal Information when: (i) communicating with Canal via phone calls, chats, emails, web forms, social media, and other methods of communication; (ii) using our Site to create an account; (iii) subscribing to Canal’s marketing materials; or (iv) applying for a job. When communicating with Canal, all communications will be transmitted and stored by us. In order to access certain Services, we may collect Personal Information directly from you, including throughout the quoting, application, or claims handling processes. The Personal Information you provide directly to us may include:
As described below in the “Cookies and Other Tracking Mechanisms” section, when you visit our Site or use our Services, we may automatically collect certain Personal Information, including:
We may collect information about you through our affiliates, business partners, and vendors, including from administrators, adjusters, agents, brokers, or other representatives who provide services or products on our behalf. For example, we may collect information about your policies, including coverage or claim information, through these sources. We may also receive information from consumer reporting agencies, including motor vehicle reports or information about your credit or creditworthiness, and from other, publicly available sources.
We may use the Personal Information we collect for the following purposes:
We also may use automated processes and combine or aggregate any of the information we collect through the Services or elsewhere for any of these purposes or for analyzing usage statistics and trends.
When permitted by applicable law, including in cases that require your consent, we may disclose your Personal Information to our affiliates, business partners, vendors and services providers, and others as follows:
We also may disclose your Personal Information in the following circumstances:
Canal may collect Social Security numbers (“SSNs”) in the course of our business. We strive to protect the confidentiality and security of SSNs in our possession, custody or control by: (i) limiting access to SSNs and (ii) maintaining reasonable administrative, technical and physical safeguards to protect against the loss, misuse or unlawful disclosure of SSNs. We do not share SSNs for marketing purposes.
Canal regularly reviews this Privacy Policy and ensures that we process your information in a manner that in compliance with applicable regulations.
We may store the Personal Information in databases located outside of the United States. To protect your Personal Information, we will only transfer data to countries and vendors that provide an adequate level of Personal Information protection. If the data is transferred to countries without adequate protection, we will use additional safeguards to ensure your data is protected.
We retain the Personal Information we collect only as reasonably necessary for the purposes described in this Privacy Policy or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting and recordkeeping obligations, to administer certain policies and coverage, and for research, development and safety purposes, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations. From time to time, we may also deidentify your Personal Information, retain it and use it for a business purpose in compliance with applicable laws and regulations.
You have the right to access and limit the use and disclosure of your Personal Information. If you would like to express your point of view, challenge an explanation of data use, or otherwise obtain further information, contact us using the contact information provided below in this Policy. If at any time after registering for information, your Personal Information changes, notify us and we will update your contact information. Please note, at any time, if you desire to obtain or transfer your information, we will provide you with your Personal Information in a structured and commonly used electronic format.
We provide you with certain rights regarding your Personal Information, subject to certain exceptions and limitations. Those rights include:
Right to request access to the Personal Information we have collected about you, restrict the processing of specific pieces of Personal Information we collected about you and learn how we collect this information, our purpose in collecting it;
Right to correct or delete the Personal Information we have collected from you;
Right to opt-out of the sale or sharing of your Personal Information;
Right to limit use and disclosure of Sensitive Personal Information, if applicable; and
Right not to receive discriminatory treatment for the exercise of the relevant privacy rights conferred by applicable laws.
If you would like to exercise your rights, you may do so via any of the methods described below:
Via email at privacy@canal-ins.com.
Call us toll-free at 1-800-452-6911.
We will only collect, use and share your Personal Information where we are satisfied that we have a legal basis to do so. In these cases we will look after your information at all times in a way that is proportionate and respects your privacy rights.
We will not take any action that will have a significant impact on you based solely on automated decision- making, unless we have a lawful basis for doing so and we have notified you.
Customers may contact the Canal with any questions, concern, or inquiries about this Policy. If you would like to make a formal complaint, please contact us by using the contact information provided below in this Policy. All complaints will be evaluated and a reply will be sent as soon as appropriate. In some instances, Canal may have to cease services to you if necessary to satisfy your request.
We and our third-party service providers use cookies, pixels, tags, and other similar tracking mechanisms to automatically collect information about browsing activity, type of device and similar information within our Services and to target others through our Services, as well to identify and resolve bugs and errors in our Services and to assess, secure, protect, optimize and improve the performance of our Services.
Cookies. “Cookies” are alphanumeric identifiers we transfer to your device’s hard drive through your web browser for tracking purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within our Service.
Clear GIFs, Pixel Tags, and Other Technologies. In addition to cookies, we may also use pixel tags (sometimes called web beacons or “clear GIFs”) to collect information about you and your use of our
Services. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.
Third-Party Analytics and Tools. We use third party tools, such as Google Analytics, which are operated by third party companies. These third-party analytics companies may collect usage data (using cookies, pixels and similar tools) about our Services in order to provide us with reports and metrics that help us evaluate usage of our Services, improve our Site, and enhance performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/ . You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.
Cross-Device Tracking. We and our third-party providers may use the information that we collect about you within our Services and on other third-party sites and services to help us and these third parties to identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.).
Targeted Advertising. We work with third parties, such as ad networks, channel partners, mobile ad networks, analytics and measurement services and others ("Advertising Providers") to personalize content and display advertising within our Services. We and our Advertising Providers may use cookies, pixels tags, session replay and other tools to collect information within our Services such as IP address, location information, device ID, cookie and advertising IDs, and other identifiers, as well as browsing information such as web pages, videos and other content accessed by you. We and our Advertising Providers use this information to provide you more relevant ads and content within our Services, and to evaluate the success of such ads and content.
Do Not Track. We do not currently respond to web browser “Do Not Track” signals.
We make available several ways for you to manage choices about your Personal Information, including preferences regarding cookies, advertising, whether you want to receive marketing and promotional emails from us, and choices regarding your account and profile information.
Our Services are not designed for children, and we do not knowingly collect Personal Information from children under the age of thirteen (13). If we learn that we have received information directly from a child who is under the age of 13, we will delete such information from our systems. If you are a parent or legal guardian and you believe we have collected your child’s information in violation of applicable law, please contact us using the contact information below.
When you use our Services, you may find links to other websites that we do not own or control. We are not responsible for the privacy practices of these other sites, including their collection of your Personal Information. You should review the terms and conditions and privacy policies of these other sites before providing your information.
We may also collect information about you from other sources to help us correct or supplement our records, improve the quality or personalization of our services to you, and prevent or detect fraud. We work closely with third parties (for example, business partners, service providers, sub-contractors, advertising networks, analytics providers, search information providers, fraud protection services) in an effort to constantly improve our products and services, and may receive information about you from them.
We or our third party service providers may use artificial intelligence (AI) to provide products or services to you, which may involve the use of your Personal Information from the Sources described herein. We may use AI in connection with our products or services to facilitate and service our business (e.g., assist in underwriting, pricing, claims handling process or data management), as well as to enhance performance and user experience on our websites and applications. The type of AI we use varies based on your relationship with us and by product and service.
We have implemented safeguards designed to protect Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.
This Policy is current as of the Effective Date set forth above. We may change this Policy at any time and from time to time. Any amendments or modifications to this Policy will become effective immediately upon posting. We will let you know of amendments or modifications by appropriate means such as by posting the revised statement on this page with a new “Last Updated” date. Your continued use of any of our Services following the posting of a revised version of this Policy will constitute your acceptance of the revised Policy. If you do not agree with the revised Policy, do not use any of our Services.
If you have questions about this Policy or our privacy practices, please contact us at:
Canal Insurance Company
101 N. Main Street, Suite 400
Greenville, SC 29601
Attention: Legal Department
Telephone: 1-800-452-6911
Email: privacy@canal-ins.com
Canal gives you choices about the ways we collect, use, and share your Personal Information. You can choose what contact and financial information will be stored in your account and preferences. However, if you choose not to provide certain details, some of your experiences with us may be affected. If at any point in time you wish know what data we process about you, you can request to access the information by contacting us using the contact information above.
We strive to let you know in advance what will happen to your Personal Information. We will not use your Personal Information for a purpose that is materially different from the purposes listed in this Policy, or disclose it to a third party acting as a controller not previously identified, without first offering you the opportunity to opt-out of such uses and/or provide disclosures. If we intend to use your Sensitive Personal Information for a purpose not identified in this policy, we will reach out to you to get your explicit consent before doing so.
Additional Notice To California Residents
If you would like to exercise your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA"), please contact us via email at privacy@canal-ins.com, or call us toll-free at 1-800-452-6911.
You can find Canal's CCPA Notice at Collection below.
This section of our Privacy Policy provides additional information for California residents pursuant to the CCPA and applies to "Personal Information" as defined in the CCPA, whether collected online or offline. This section of our Privacy Policy applies to www.canalinsurance.com and other websites that link to this Privacy Policy (the “Services”), as well as offline activities where California residents are directed to this section of the Privacy Policy. As used in this section of our Privacy Policy, “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
There are a number of exemptions from the application of the CCPA. The following sets out some of the categories of Personal Information that are not subject to the CCPA, and therefore are not covered by this California section of the Privacy Policy. Note that other sections of the Privacy Policy may still apply in addition to other privacy notices that we may issue addressing our specific relationship with you, including privacy notices that are sent to individuals.
Health or medical information that we collect and that is subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the California Confidentiality of Medical Information Act or the Health Information Technology for Economic and Clinical Health Act. For example, where we provide you with a covered health insurance plan. Canal provides a separate HIPAA privacy notice to certain individual consumers as required under applicable laws and regulations.
Information we collect in connection with the issuance of financial products or services to you that are to be used primarily for your personal, family, or household purposes and that is subject to the Gramm-Leach-Bliley Act (“GLBA”) or the California Financial Information Privacy Act. For example, where we provide you with a personal insurance policy, or where we handle a claim from you as an individual. Note that this exclusion may not apply to all of your Personal Information, including to personal information collected before you become a customer. Canal provides a separate GLBA privacy notice to certain individual consumers as required under applicable laws and regulations.
Information we collect and provide for use that is subject to the Fair Credit Reporting Act.
Information we collect as a motor vehicle record and that is subject to the Driver's Privacy Protection Act of 1994.
Publicly available information from government records, and information we have a reasonable basis to believe is lawfully made available to the general public by you or by widely distributed media, or by a person to whom you have disclosed the information and not restricted it to a specific audience.
Deidentified or aggregated information.
The following identifies the categories of Personal Information we may collect about you (and may have collected in the prior twelve (12) months). Note that our collection, use and disclosure of Personal Information about you will vary depending upon the circumstances and nature of our interactions or relationship with you. Depending on how you use our Services, we may collect the following categories of Personal Information:
We generally collect Personal Information from the following categories of sources:
Directly from you and automatically;
Our affiliates and subsidiaries;
Brokers and agents;
Corporate policyholders; and
Our vendors and service providers (e.g., third party administrators).
As described in the “How We Use Personal Information” section above, in general, we collect and otherwise process the personal information we collect for the following business or commercial purposes:
Operate our business;
Provide you products and services;
Communicate with you;
Evaluate and improve our products and services;
Analytics models to support our business;
Marketing and advertising;
Inferences;
Find locations on request;
Fraud and security purposes;
Legal requirements;
Business transfers; and
Other operational and business purposes.
Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.
We retain the Personal Information we collect only as reasonably necessary for the purposes described in this Privacy Policy or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our tax, accounting and recordkeeping obligations, to administer certain policies and coverage, and for research, development and safety purposes, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and to comply with our legal obligations. From time to time, we may also deidentify your Personal Information, retain it and use it for a business purpose in compliance with CCPA.
The categories of Personal Information we have disclosed for a business purpose in the preceding twelve
(12) months include: identifiers, online identifiers, customer records, financial information, characteristics of protected classifications, usage data, biometric information, education information, geolocation data, audio, video, and other electronic data, professional or employment-related information, inferences, and sensitive personal information.
The categories of third parties and other recipients to whom we may disclose personal information for a business purpose may include:
Affiliates, subsidiaries, and business partners;
Vendors and service providers;
Acquirers of business assets;
Advisors, auditors, consultants, and representatives;
Agents and brokers;
Reinsurers;
Regulators, government entities, and law enforcement;
Operating systems and platforms; and
Others as required by law.
Additionally, the CCPA defines “sale” as disclosing or making available personal information to a third- party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising. While we do not “sell” Personal Information, we may “share” the following categories of Personal Information: online identifiers, and usage data. We disclose this information to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising. We do not sell or share “sensitive personal information,” nor do we sell or share any Personal Information about individuals who we know are under sixteen (16) years old.
The CCPA provides California residents with specific rights regarding Personal Information. This section describes your rights under the CCPA and explains how to exercise those rights. Subject to certain exceptions, California consumers have the right to make the following requests:
Right to Know. With respect to the Personal Information we have collected about you in the prior (twelve) 12 months, you have the right to request from us (up to twice per year and subject to certain exemptions and carveouts):
The categories of Personal Information we collected about you;
The sources from which we have collected that Personal Information;
Our business or commercial purpose for collecting, selling, or sharing that Personal Information;
The categories of third parties to whom we have disclosed that Personal Information; and
A copy of the specific pieces of your Personal Information we have collected.
Right to Correct. Subject to certain restrictions, you have the right to request that we correct inaccuracies in your Personal Information.
Right to Delete. Subject to certain conditions and exceptions, you have the right to request deletion of your Personal Information that we have collected about you.
Right to Opt-Out. You have the right to opt-out of “sales” and “sharing” of your Personal Information, as those terms are defined under the CCPA. While we do not “sell” Personal Information, our use of certain third-party analytics and advertising cookies may constitute “sharing” under the CCPA. To exercise your right to opt-out of the “sharing” of your Personal Information, please use the Do Not Sell or Share My Personal Information link at the bottom of our Site.
You also have the right to opt-out of “sales” and “sharing” of your Personal Information through the use of an opt-out preference signal. If our Site detects that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control”—or GPC— signal, we will opt that browser or device out of cookies on our Site that result in a “sale” or “sharing” of your Personal Information. If you come to our Site from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well.
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not engage in uses or disclosures of Personal Information that would trigger the right to limit use of Sensitive Personal Information under the CCPA.
Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.
If you are a California resident and would like to exercise your CCPA rights, you may do so via any of the methods described below:
Via email at privacy@canal-ins.com.
Call us toll-free at 1-800-452-6911.
Authorized Agent. You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that you directly verify your identity and the authority of your authorized agent.
Businesses operating as an authorized agent on behalf of a California resident must provide both of the following:
Certificate of good standing with its state of organization; and
A written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the business to act on behalf of the California resident.
Individuals operating as an authorized agent on behalf of a California resident must provide a written authorization document, signed by the California resident, containing the California resident’s name, address, telephone number, and valid email address, and expressly authorizing the individual to act on behalf of the California resident.
We reserve the right to reject (1) authorized agents who have not fulfilled the above requirements, or (2) automated CCPA requests where we have reason to believe the security of the requestor’s personal information may be at risk.
Verification. Before responding to your request, we must first verify your identity using the Personal Information you recently provided to us. The information we need in order to verify your identity differs depending on the request made and our relationship with you and might include (as applicable) your name, the email address you regularly use to interact with us, your phone number, your date of birth, and, if available, your policy number. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. In some cases, we may also carry out checks, including with third party identity verification services, to verify your identity before taking any action with your Personal Information. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.
We or our third party service providers may use artificial intelligence (AI) to provide products or services to you, which may involve the use of your Personal Information from the Sources described herein. We may use AI in connection with our products or services to facilitate and service our business (e.g., assist in underwriting, pricing, claims handling process or data management), as well as to enhance performance and user experience on our websites and applications. The type of AI we use varies based on your relationship with us and by product and service.
If you have any questions about this section of the Privacy Policy, our privacy practices, or if you wish to exercise your rights under California law, please contact us at:
Canal Insurance Company
101 N. Main Street, Suite 400
Greenville, SC 29601
Attention: Legal Department
Telephone: 1-800-452-6911
Email: privacy@canal-ins.com
New York Insurance Law 2612 provides victims of domestic violence with certain protections including prohibiting an individual, insurer or entity supervised by the Department of Financial Services, solely because a person is or has been a victim of domestic violence, from:
Refusing to issue or renew, deny or cancel any insurance policy or contract;
Demanding or requiring a greater premium or payment from any person;
Designating domestic violence as a preexisting condition for which coverage will be denied or reduced; and
Using as an underwriting criterion the fact that a person is or has been a victim of domestic violence.
New York Insurance Law 2612 also requires that certain insurers establish procedures to protect and limit access to certain personal information related to a victim of domestic violence.
New York Insurance Law 2612 provides that, if any person covered by an insurance policy delivers to the insurer a valid court order of protection issued by a court of competent jurisdiction in New York State against the policyholder or other person covered by the policy, then the insurer is prohibited for the duration of the order from disclosing to the policyholder or other person the address and telephone number of the insured, or of any person or entity providing the covered services to the insured. If a child is a covered person, then the right may be asserted by the child’s parent or guardian.
New York Insurance Law 2612 also requires a health insurer, as defined in that section of the law to include an accident and health insurer, to accommodate a reasonable request made by a person covered by an insurance policy to receive communications of claim-related information by alternative means or at alternative locations if the person clearly states that disclosure of the information could endanger the person. If the covered person is a child, then the right may be asserted by the child’s parent or guardian. The law further provides that, except with the express consent of the person making the request, a health insurer may not disclose to the policyholder: (1) the address, telephone number, or any other personally identifying information of the person who has made the request or child for whose benefit a request was made; (2) the nature of the health care services provided; or (3) the name or address of the provider of covered services.
To submit a valid court order of protection and/or a request to receive communications of claim-related information by alternative means or at alternative locations to Canal, please contact us at:
Canal Insurance Company
101 N. Main Street, Suite 400
Greenville, SC 29601
Attention: Legal Department (NY Confidentiality Request)
Email: privacy@canal-ins.com
Please include:
Policy information if available;
Any alternative address, telephone number or other method of contact; and
A valid court order of protection issued by a New York State Court and/or a statement that disclosure of claim-related information could endanger the person seeking confidentiality.
To revoke a request, please also include a sworn statement that confidentiality is no longer necessary.
For further information about domestic violence, you may contact the New York State Domestic and Sexual Violence Hotline by calling 1-800-942-6906.
