Effective June 1, 2026
This Privacy Policy describes the types of personal information Alliant Insurance Services, Inc. on behalf of itself and its affiliates including AIS Administrators, Inc. ( collectively “Alliant” “us” “our” or “we”), in its capacity as both a licensed insurance broker and a licensed third-party administrator, collects from eligible individuals, including employees, former employees, members of participating affinity groups, and their respective dependents (“you” or “your”) in connection with your access and use of Alliant’s Affinity Benefits Portal (the “Portal”). This Privacy Policy also describes how we may use that information, the circumstances under which we may disclose it, and the measures we take to protect it.
We value your privacy and make this Privacy Policy easily available throughout the Portal to help you understand how information is handled in connection with your use of the Portal. By visiting the Portal, registering as a user, or otherwise accessing or using the Portal pursuant to Alliant’s User Terms (view here) your access and use of the Portal (the “User Terms”), you acknowledge and accept this Privacy Policy, which is incorporated into and made a part of the User Terms, and represent that you have the authority to bind yourself to this Privacy Policy. Please read this Privacy Policy carefully.
Please see your respective insurer’s/ Benefits provider’s Notice of Privacy Practices to understand how the collection, use, and disclosure of your protected health information (“PHI”), if any, is handled.
.
We may modify this Privacy Policy from time to time by posting an updated version on our website or by providing notice through the Portal. You are responsible for reviewing the revised Privacy Policy. CONTINUED USE OF THE PORTAL AFTER SUCH CHANGES WILL CONSTITUTE YOUR ACCEPTANCE OF THE CHANGES. We may change the Portal or delete any features or functionality, or any aspect of the Portal, in any way at any time for any reason.
Information You Give to Us
When you interact with us, you may provide us with the following information:
• Personal identifiers such as your first and last name, online identifier, internet protocol (IP) address, email address, phone numbers, or similar identifiers.
• Commercial Information such as any employee benefit, group insurance, or related program (the “Plan(s)”) made available by or through your employer or affinity group (each, an “Entity Sponsor”) that you may have enrolled in.
• Demographic information such as age, gender, race, ethnicity, estimated income, and household information, some of which may include characteristics of protected classifications under state or federal law.
• Job information such as work history, tax identification or other government identification number.
• Sensitive personal information as defined in the applicable U.S. state privacy laws and which may be collected solely to enroll you in the Plan(s) you have requested. Alliant does not use sensitive personal information for inferring characteristics about you.
• Registration information such as your social security number, date of birth, email address, mailing address, phone number, Plan(s) enrollment criteria, account log in and password, payment information, and other similar personal information.
You may also provide us with additional information at your sole discretion when you contact us or talk to a customer service representative.
Information Collected Automatically
Each time you visit the Portal, we may automatically collect certain types of information. Some examples of automatic information we may collect are as follows:
• Device information such as your internet protocol (IP) address, Media Access Control (MAC) address, browser type, operating system, device-identifying information, type of computer, and type of Web browser software, the specific webpages visited during your connection, and the domain name from which you accessed the Portal.
• Internet activity information such as the date and time you visit the Portal, the areas or pages of the Portal that you visit, the amount of time you spend viewing the Portal, the number of times you return to the Portal and other clickstream data.
• We may use “cookies” of different types to recognize your computer. A cookie is a small text file that a website, online application, or e-mail may save to your internet browser and/or your computer’s hard drive for use in subsequent visits to the Portal or other sites.
We may use web beacons, match scripts, pixel tags, clear GIFs or similar technologies that allow us to know if a particular web page was visited, an e-mail opened, or links in the email utilized. In some instances, these technologies may allow us to match activities with particular users.
We may combine the information we collect through cookies, web beacons, or other technology tools with other information we have collected from you or information from other sources.
We may use information about you for purposes described in this Privacy Policy or disclosed to you on the Portal. For example, we may use information about you:
• To provide and operate the Portal, including related features, functionality, and services;
• To support your enrollment in the Plan(s) you have requested;
• For editorial and feedback purposes;
• For marketing and promotional purposes;
• To develop new programs and outreach opportunities;
• For content improvement, analytics, and research;
• To customize the content and layout of the Portal;
• To notify you about updates to the Portal;
• To respond to your inquiries; or
• To take other actions in response to your inquiries or other website activities.
Your account may be sponsored or administered by an Entity Sponsor. We process the information you provide for purposes of employee benefits administration, in accordance with our agreement with the Entity Sponsor and as described in this Privacy Policy, as applicable.
We also may aggregate personal information and use such information to analyze the effectiveness of our services, improve our services, conduct research and for other related purposes.
We disclose your personal information to:
• Affiliates for business purposes, including providing and managing the Portal;
• Service providers that perform services on behalf of Alliant for ordinary business purposes, including, without limitation, cloud-hosting providers, data analytics providers, marketing assistance providers, and payment processors;
• Benefits providers, via secure file transfer, as directed by you through your Plan(s) enrollment;
• The Entity Sponsor, as required by our agreement and as necessary to provide you with access to the Portal;
• Third parties to protect the security and integrity of the Portal and to correct any technical problems and malfunctions; and
• With your consent.
We may also disclose your personal information:
• To the extent necessary to comply with applicable laws or valid legal processes, such as in response to subpoenas or court orders.
• To protect the rights and intellectual property of Alliant.
• To investigate, prevent or take action regarding illegal activities, suspected fraud, violations of our policies, or as otherwise required by law.
• In urgent circumstances, to protect Alliant or the personal safety of any individual.
The Portal uses “cookies,” which are small pieces of information stored by your browser or other application on your computer's browser or hard drive. The cookies are used to connect your computer with information stored about your online activity, searches and preferences both within the same website visit and from one visit to the next on the Portal and/or other websites. Some examples of this data include your account preferences, user specific information on pages accessed, searched terms or addresses entered, and previous visits to the sites. We use both session ID cookies and persistent cookies. A session cookie expires when your browser is closed, and a persistent cookie may stay on your hard drive for an extended period. Session cookies make it easier for you to navigate our site; persistent cookies can perform such activities as storing your password for forums or blogs so you do not have to sign in every time you visit those areas, and/or may be used to enable us to track and target the interests of our users so as to enhance the overall experience of using the Portal.
The “help” portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive new cookies or how to disable cookies altogether. If you reject cookies, you may not be able to participate in certain activities or receive a promotion tailored to you. The Portal does not control and does not guarantee the effectiveness of browser-based tools for managing cookies.
We also use Google Analytics to monitor activity on the Portal. To learn how Google Analytics collects and processes data, please visit: “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners.
We or our partners may also use Flash cookies (also known as Local Stored Objects) or other similar technologies. A Flash cookie is a small data file placed on a computer using Adobe Flash or similar technology that may be built into your computer or downloaded or installed by you to your computer. We use these technologies to personalize and enhance your online experience, facilitate processes, and personalize and store your settings. Flash cookies may help our website visitors to, for example, set volume preference associated with a video experience, play games and perform surveys. They help us improve the Portal by measuring which areas are of greatest interest to users. They may be recognized by other sites or by our marketing or business partners. Flash cookies are different from browser cookies and the cookie management tools provided by your browser may not remove Flash cookies. Click here to learn how to manage privacy and storage settings for Flash cookies. If you disable Flash cookies or other similar technologies, please be aware that you may not have access to certain features and services that make your online experience more efficient and enjoyable.
We may also use web beacons, which are electronic images that may be used on our websites or in our emails. We use web beacons to deliver cookies, count visits, understand usage and campaign effectiveness and to tell if an email has been opened and acted upon.
This website may contain links to other sites that are not controlled in any way by us. Please be aware of this when you click on any such links; we are not responsible for the privacy practices and/or policies of any website other than our own. Consequently, we strongly suggest that you review the Privacy Policy of every website you visit, whether or not they are linked to by our own site.
We use industry-standard techniques on the Portal to help to protect any personal information you have provided to us from loss, misuse or alteration. However, please be aware that no method of electronic storage can ever be 100% secure. Therefore, as is the case with any organization - we are not in a position to guarantee the absolute security of your information. In this regard, we urge you to take every precaution to protect your personal information while you are on the Internet. At a minimum, we encourage you to make sure that you are using a secure browser as you surf the Internet.
We maintain a social media presence, such as a Facebook page, an Instagram page and a Twitter feed. You can interact with us through social media, such as by entering our contests, posting content, sharing material from the Portal, and using our social media plug-ins. When you interact with us using social media, we may receive information such as your user ID, your profile picture, photos you post, and similar information, which is often determined by your privacy settings at social media sites. We may use the information for the same types of purposes we describe throughout this Privacy Policy. Your use of social media sites is primarily governed by the site operators’ privacy policies and terms of service, and the information you share with us and with others is largely controlled by the privacy settings you have established at those sites.
Under Age 13
Our Portal is not specifically directed toward children, and we do not knowingly collect personal information from persons under the age of 13 on the Portal without verifiable parental consent. If we learn that a child under the age of 13 has submitted personally identifiable information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information we have collected from children under 13, please contact us here or by calling (855) 608-6990
Under Age 18
Minors under 18 years of age may have the personal information that they provide to us through the Portal deleted by sending an email to alliant-privacy@alliant.com requesting deletion. Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.
Do Not Track (“DNT”) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. At the present time, the World Wide Web Consortium (W3C) has not yet established universal standards for recognizable DNT signals and therefore, Alliant and the Portal do not recognize DNT.
If you are a resident of California, the law in your state provides you with the following rights with respect to your personal information:
• The right to know what personal information we have collected, used, disclosed, and sold about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Alliant discloses personal information, and the specific pieces of personal information Alliant has collected about you.
• The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing.
• The right to request that we delete any personal information we have collected about you.
• The right to restrict use or disclosure of sensitive personal information for advertising and marketing purposes.
In addition to the above, and as set forth below, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we have “sold” or “shared” about you. Please be assured that we do not sell or rent your personal information to third parties. We do not use or disclose sensitive personal information, as defined in applicable laws, for any purposes other than those permitted by applicable law.
How to Exercise Your Rights
To exercise your rights set forth above, you may contact us at:
1. Calling toll-free
Only you, or a person legally authorized to act on your behalf, may make a request related to your personal information. You may also make a request on behalf of your minor child. You may only make a request for access or data portability twice within a 12-month period.
Your request must (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (2) describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identify or authority to make the request and confirm the requested personal information relates to you. Making a request does not require you to create an account with us. We will only use personal information provided in a request to verify the requester’s identity or authority to make the request.
Any disclosures we provide will only cover the 12-month period preceding our receipt of the request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination
We will not discriminate against you for exercising any of your rights under California law. Unless permitted by applicable law, we will not deny you services, charge you different rates for services, provide you with a different level or quality of services, or suggest that you may receive a different rate for services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted under California law that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describes the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
If you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Montana, Nebraska, Nevada, New Hampshire, Oregon, Rhode Island, Tennessee, Texas, or Virginia, the law in your state provides you with the following rights with respect to your personal information:
• The right to confirm whether we process your personal information and access your personal information.
• The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing.
• The right to delete personal information we have obtained about you.
• The right to obtain a copy of personal information we have obtained about you in a portable and, to the extent technically feasible, readily usable format.
• The right to opt out of sale or sharing of your personal information for the purposes of targeted advertising.
• The right to opt out of automated individual decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• If we deny your request, the right to appeal our decision.
How to Exercise Your Rights
To exercise your rights set forth above, you may contact us at:
1. Calling us at: (855) 608-6990
2. Emailing at: alliant-privacy@alliant.com
3. Submitting an online request at: https://alliant.com/about/contact-us/
When you exercise these rights and submit a request to us, we will verify your identity by asking you to log in to your account if you have one with us. Or if you do not, we may ask for your email address. We may also use a third-party verification provider to verify your identity. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under your state’s consumer privacy law.
Non-Discrimination
The fact that you have elected to exercise these rights will have no adverse effect on the price and quality of our products or services.
Appeals
To appeal a decision we have made regarding your request, you may contact us at:
1. Calling us at: (855) 608-6990
2. Emailing at: alliant-privacy@alliant.com
3. Submitting an online request at: https://alliant.com/about/contact-us/
We will respond to appeals from Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Montana, Nebraska, New Hampshire, Tennessee, Texas, and Virginia residents within 60 days. We will respond to appeals from Colorado, New Jersey, and Oregon residents within 45 days.
The “Oregon Consumer Privacy Act” requires disclosure of the controller and any registered business names that the controller uses in Oregon. We use the following registered business names in Oregon: Alliant Insurance Services, Inc., Alliant Insurance Services Houston, LLC, and Alliant Specialty Insurance Services, Inc.
If you have any questions or concerns regarding this Privacy Policy, or you wish to contact us by phone or postal mail, our contact information is as follows:
Mailing address Prior to Jan. 1, 2027:
Alliant Insurance Services, Inc.
701 B Street, 6th Floor
San Diego, CA 92101
Attn: DPO, Legal Department (EB)
Mailing Address on or after Jan. 1, 2027:
Alliant Insurance Services, Inc.
350 Camino De La Reina
STE #200-P
San Diego, CA 92108
The Press Building
Attn: DPO, Legal Department (EB)
Phone: (855) 608-6990
Email: alliant-privacy@alliant.com
