HD believes in the value of privacy; therefore, our privacy commitments are fundamental to the way we run our business. We intend to safeguard all personal information that is collected from you when you visit and use our websites and portals.
2. What information we collect from you?
3. Our use of “Cookies”
4. Our use of Personal Information
5. Sharing of Personal Information
6. International Transfers of Personal Information
7. How long do we keep Personal Information?
8. How do we protect Personal Information?
9. Links to Third Party Websites
10. How do we manage the information of a child?
11. Your Rights
12. Contacting us about privacy questions or concerns
These are examples of the personal information we may collect about you:
1. Information that identifies you, for example:
• First and last name
• Phone number
• IP address
• Device Information
• Information collected from cookies or other tracking technologies
2. Records and financial information, for example:
• Social Security Number
• Government-issued identification
• Bank account and routing numbers
• Credit and debit card information
• Financial information
3. Personal characteristics, for example:
• National origin
• Military status
4. Commercial information, for example:
• Online shopping cart information
• Purchase history
5. Internet or network activity, for example:
• Interactions with our services or sites
• Shopping history
6. Geolocation data, for example:
• Global Positioning System (GPS) information when you give us permission through your device settings
• IP-based geolocation
7. Audio, electronic, visual, biometric, or similar information, for example:
• Call recordings when you talk to customer service
• Voice identification, when you consent to this biometric method of authentication
• Photo IDs and profile pictures you provide
8. Professional or employment information, for example:
• Business information, contact emails and phone numbers
• Tax IDs
9. Information we infer based on your personal data, for example:
• Fraud and risk assessments
• Personalization preferences
Data collected directly from website visitors. In most instances, you can visit our websites without providing any personal data. However, on some pages, you may give us your personal data (i.e. information that identifies or reasonably can be used to identify you) by filling out forms. This includes personal data you provide when you:
• request information on our products or services
• create an account on our website
• subscribe to our blog or newsletter
• request marketing information
• enter a competition, promotion or survey
• give us feedback or contact us
• apply for employment
You are not required to provide any of the above-mentioned information. However, if you choose not to, we may not be able to provide you the requested service or complete your transaction.
Data collected from portal visits. In order to access the portals you will need to provide sufficient data to create an account. Additionally, and subject to your relationship with HD, you may make requests that involve collecting additional personally identifiable information, personal health information and personal financial information.
Data collected by automated means. We collect certain data about all visitors to our websites and portals, including what pages they view, the number of bytes transferred, the links they click, and other actions taken within our websites and portals. We may also use this information to improve our security measures. We also collect certain standard information that your browser sends to every website you visit, such as your Internet Protocol (IP) address, your browser type and capabilities and language, your operating system, the date and time you access the site, and the website from which you linked to our site.
Data collected from third parties. We may collect personal information about you from various sources, including:
Financial institutions, such as banks
Third-party data providers
Government agencies and contractors
If you have an account with us, we will associate information from all these sources with your account and we will use it for the purposes set out in this policy.
Cookies are small files that websites and portals save to your hard disk or to your browser’s memory. Our websites may use them to track the number of times you have visited the websites, to track the number of visitors to the websites, to determine and analyze visitors’ use of our websites, to store data that you provide (such as your preferences), and to store technical information related to your interactions with our websites. We may also use session cookies, which are deleted when you close your browser, to store your user ID, to facilitate your movement around our websites.
Our websites may also contain electronic images known as Web beacons—sometimes called single-pixel gifs—that allow us to count the number of users who have visited those pages.
We will use your personal data only for the purposes set forth below.
Services and transactions. We use personal data to deliver services or execute transactions you request, such as providing information about HD products and services, answering customer service requests, facilitating use of our website and portals, and so forth. In order to offer you a more consistent experience in interacting with HD, information collected by our websites and portals may be combined with information we collect by other means, i.e. phone, e-mail or paper.
Website and portal improvement. We may use data about you to improve our websites and portals (including our security measures) and related products or services, or to make our websites and portals easier to use by eliminating the need for you to repeatedly enter the same information, or by customizing our websites to your particular preference or interests.
Market products and sales activities. We use personal data to inform you of available products or services. HD may also use personal information to advertise its products and services or related products and services, and also to have our affiliated and non-affiliated entities market products and services to you. This includes sending you promotional communications, target advertising, and presenting you relevant offers.
When collecting information that might be used to contact you about our products and services, we give you the opportunity to opt-out from receiving such communications. Moreover, each email communication we send includes an unsubscribe link allowing you to stop delivery of that type of communication. If you elect to unsubscribe, we will remove you from the relevant list within 10 business days.
Employment Applications. In connection with a job application or inquiry, you may provide us with data about yourself, including your educational background, résumé or curriculum vitae, and other information, including your ethnicity where required or permitted by law. We may use this information throughout HD for the purpose of employment consideration. We will keep the information for future consideration unless you direct us not to do so.
Disclosure to service providers. HD contracts with other companies to provide services on our behalf, such as hosting websites, sending out information, processing transactions, and analyzing our websites. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using the personal data for any other purposes.
Disclosure for other reasons. We may disclose personal data if required to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or respond to court orders, to protect and defend our rights or property, or in urgent circumstances to protect the personal safety of any individual.
Third-Party Processing. We may share your personal data with HD distributors or resellers for further follow-up related to your interests, specific partners that offer complementary products and services or with third parties to facilitate interest-based advertising.
When we share Sensitive Information or other personal data with our business partners and other third parties for business or commercial purposes, we require them to exercise reasonable care to protect such information and restrict the use of such information to the purposes for which it was provided to them.
HD may share your personal data within the affiliates of Pan-American Life Insurance Group (it’s parent company) for a variety of purposes, for example to provide you with the latest information about our products and services and offer you our latest promotions.
The countries, including the U.S. (and the other countries around the world where our individual affiliates, suppliers, or business partners maintain offices), to which we may transfer such information may have different data protection laws than the countries from which the information was initially collected or from which individual website or portal visitors access the website or respective portal.
By choosing to use our websites and portals and to submit personal data to us through them, you consent to the transfer of such information outside of your country. To the extent required by applicable law, when we transfer your personal information to recipients in other countries, we will take measures to protect that information.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period if we have a legal obligation to do so (e.g. in the event of a complaint or if we reasonably believe there is a prospect of litigation, or regulatory investigation). .
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Our websites may contain links to other websites on the Internet that are owned and operated by third parties. These websites operate independently from ours, and we do not control and are not responsible for the content, security or privacy practices employed by other websites. You should review the privacy statements of those websites to determine how they protect and use personal data.
Our websites are not intended for children under 13 years of age. We do not knowingly gather information from anyone under age 13. If we find out that we have collected information from a child under age 13, we will delete that information immediately.
To the extent provided by the law of your jurisdiction, you may have rights such as to (1) access certain personal information we maintain about you; (2) request that we update, correct, amend, erase or restrict your personal information; or (3) exercise your right to data portability; or log a complaint with the appropriate regulator. Additionally, and where provided by the applicable law, you may withdraw consent you previously provided to us or object at any time to the processing of your personal information on legitimate grounds relating to your particular situation, and we will examine your request and, when applicable, update your preferences going forward as appropriate. To exercise these rights, please contact our Privacy Office at [email protected].
We try to respond to all legitimate requests within thirty (30) days. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.