FLOODSMART INSURANCE INC.

PRIVACY POLICY

Effective Date: February 12, 2005

Last Updated: June 8, 2026

1. INTRODUCTION

FloodSmart Insurance Inc. (“FloodSmart,” “Company,” “we,” “our,” or “us“) is committed to protecting the privacy and security of the personal information entrusted to us by our customers, prospective customers, website visitors, business partners, and other individuals with whom we interact.

As a national insurance brokerage specializing in flood insurance solutions, we understand the importance of safeguarding the information necessary to provide insurance quotes, policy placement, customer service, and ongoing policy administration. We recognize that privacy is an essential component of the trust our customers place in us.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process information obtained through:

• www.FloodSmart.com;
• quote request forms;
• telephone conversations;
• electronic mail communications;
• SMS/text messaging communications;
• insurance applications;
• customer service interactions;
• payment submissions;
• social media interactions;
• cookies and similar technologies; and
• any other products or services offered by FloodSmart Insurance Inc.

This Privacy Policy is intended to satisfy applicable federal and state privacy laws, including, where applicable:

• the Gramm-Leach-Bliley Act (GLBA);
• the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA);
• the Colorado Privacy Act;
• the Connecticut Data Privacy Act;
• the Utah Consumer Privacy Act;
• the Virginia Consumer Data Protection Act; and
• other applicable privacy and consumer protection laws.

Nothing contained in this Privacy Policy modifies any rights or obligations contained within an insurance policy issued by an insurance carrier.

2. OUR COMMITMENT TO PRIVACY

Protecting consumer information is fundamental to our business.

We strive to collect only information reasonably necessary to:

• provide insurance quotations;
• place and service insurance policies;
• communicate with customers;
• process premium payments through insurance carriers;
• comply with legal and regulatory obligations;
• improve our products and services; and
• operate and maintain our website.

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. While we maintain security practices consistent with industry standards, no method of electronic transmission or storage can be guaranteed to be completely secure.

By using our website or requesting insurance services, you acknowledge that information may be transmitted electronically and processed in accordance with this Privacy Policy.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to information collected by FloodSmart Insurance Inc. through:

3.1 Website Visitors

Individuals who browse, visit, or otherwise interact with our website.

3.2 Quote Requests

Individuals requesting insurance quotations for residential, commercial, or other flood insurance products.

3.3 Customers

Current and former customers who purchase or maintain insurance through FloodSmart.

3.4 Communications

Individuals who communicate with us by telephone, email, SMS/text message, online forms, or other electronic means.

3.5 Business Contacts

Mortgage professionals, real estate professionals, insurance professionals, and other business partners interacting with FloodSmart.

This Privacy Policy applies regardless of the device used to access our services, including desktop computers, tablets, mobile devices, and future technologies.

4. INFORMATION WE COLLECT

The categories of information collected depend upon the services requested and the nature of the interaction.

4.1 Personal Identifiers

We may collect:

• full name;
• mailing address;
• property address;
• email address;
• telephone number;
• business contact information; and
• other identifying information voluntarily provided.

We do not intentionally collect Social Security numbers, Tax Identification Numbers, or driver’s license numbers through our standard quote and brokerage processes.

4.2 Property Information

Because flood insurance is property-specific, we collect information relating to insured or potentially insured properties, including:

• street address;
• city and state;
• ZIP code;
• occupancy type;
• construction characteristics;
• replacement cost information;
• building usage;
• prior insurance information;
• claims history;
• flood zone information;
• elevation information provided by applicants or third parties; and
• mortgage information relevant to obtaining or servicing coverage.

Some of this information may be obtained directly from customers, while other information may be obtained from publicly available records, insurance carriers, vendors, or other lawful sources.

4.3 Insurance Information

To provide quotations and insurance placement services, we may collect:

• existing policy information;
• requested coverage limits;
• deductible preferences;
• prior insurance history;
• prior claims history;
• underwriting information;
• property characteristics;
• occupancy information;
• insurance eligibility information; and
• communications relating to insurance products.

This information enables us to obtain quotations from multiple insurance carriers and wholesalers offering both National Flood Insurance Program (NFIP) and private flood insurance products.

4.4 Payment Information

When customers elect to purchase insurance coverage, payment information may be collected for submission to the applicable insurance carrier.

Depending upon the carrier and transaction, payment information may include:

• credit card information;
• debit card information;
• Automated Clearing House (ACH) information; and
• payment authorization details.

FloodSmart generally acts as an intermediary and submits payment information directly to the issuing insurance carrier or its designated payment processing service.

FloodSmart does not maintain a payment processing platform for carrier premium payments and endeavors to minimize retention of payment information beyond what is reasonably necessary to complete authorized transactions.

4.5 Communications Information

We collect information contained in communications between you and FloodSmart, including:

• emails;
• SMS/text messages;
• telephone conversations;
• contact form submissions;
• quote requests;
• customer service inquiries; and
• correspondence relating to insurance transactions.

These communications may be retained for quality assurance, regulatory compliance, customer service, dispute resolution, training, and business recordkeeping purposes.

4.6 Technical and Device Information

When you visit our website, we may automatically collect information such as:

• Internet Protocol (IP) address;
• browser type;
• operating system;
• language preferences;
• device identifiers;
• referral URLs;
• pages visited;
• session duration;
• clickstream information;
• approximate geographic location derived from IP address;
• date and time of access; and
• diagnostic information.

This information assists us in improving website functionality, security, performance, and user experience.

4.7 Cookies and Similar Technologies

Our website utilizes cookies and similar technologies that may include:

• browser cookies;
• session cookies;
• persistent cookies;
• analytics technologies;
• advertising technologies;
• tags;
• scripts;
• pixels;
• local storage;
• software development kits (SDKs); and
• future technologies serving similar purposes.

These technologies help us:

• remember user preferences;
• measure website performance;
• understand visitor behavior;
• improve navigation;
• prevent fraud;
• maintain security;
• analyze traffic patterns; and
• evaluate advertising effectiveness.

This Privacy Policy is intended to be technology-neutral and applies to current and future tracking technologies reasonably used to operate and improve our services.

5. HOW WE USE INFORMATION

FloodSmart uses collected information only for legitimate business purposes consistent with applicable law.

5.1 Insurance Brokerage Services

We use information to:

• obtain insurance quotations;
• compare available coverage options;
• submit insurance applications;
• communicate with insurance carriers;
• service existing policies;
• assist with renewals;
• facilitate policy changes;
• support claims-related communications; and
• respond to customer requests.

5.2 Customer Communications

We use information to communicate regarding:

• requested quotations;
• policy updates;
• renewal notices;
• payment reminders;
• service requests;
• regulatory notices;
• website updates;
• security alerts; and
• other communications reasonably related to our services.

Where legally required, marketing communications are provided only with appropriate consent and include applicable opt-out mechanisms.

5.3 Website Operations

Information collected through our website is used to:

• maintain system functionality;
• improve website performance;
• personalize user experiences;
• diagnose technical issues;
• monitor security;
• prevent abuse;
• detect fraud; and
• develop future services.

5.4 Legal and Regulatory Compliance

FloodSmart may process personal information to:

• comply with insurance regulations;
• satisfy licensing requirements;
• respond to lawful governmental requests;
• maintain required business records;
• enforce contractual rights;
• resolve disputes;
• investigate suspected fraud;
• protect customers and the public; and
• fulfill other legal obligations.

5.5 Business Improvement

We may use aggregated or de-identified information to:

• evaluate market trends;
• improve customer service;
• analyze website usage;
• develop new insurance offerings;
• measure operational performance; and
• enhance our products and services.

Information used for these purposes is designed not to identify individual consumers whenever reasonably practicable.

6. PROFESSIONAL INFORMATION DISCLAIMER

The educational materials, articles, calculators, flood zone information, FAQs, and other content available through our website are provided solely for general informational purposes.

They do not constitute legal, tax, accounting, engineering, surveying, floodplain management, financial, lending, real estate, or other professional advice.

Users should consult qualified professionals before making decisions relating to property ownership, development, lending obligations, insurance requirements, floodplain compliance, tax consequences, or legal rights.

FloodSmart Insurance Inc. makes no representation that website content addresses every circumstance applicable to a particular property or transaction.

7. FLOOD MAPS AND INSURANCE INFORMATION

Flood hazard determinations, Flood Insurance Rate Maps (FIRMs), Base Flood Elevations (BFEs), flood zone designations, insurance requirements, and underwriting guidelines may change at any time due to governmental action, engineering studies, environmental conditions, legislative changes, or carrier underwriting decisions.

FloodSmart does not warrant that any flood zone determination, mapping information, insurance requirement, or educational content appearing on the website is continuously current or applicable to a particular property.

If any information presented on this website conflicts with the terms, conditions, exclusions, limitations, endorsements, or declarations contained within an insurance policy issued by an insurance carrier, the insurance policy and its governing documents shall control in all respects.

8. INFORMATION SHARING AND DISCLOSURE OF INFORMATION

FloodSmart Insurance Inc. (“FloodSmart,” “we,” “our,” or “us”) values the trust our customers place in us and limits the disclosure of personal information to those circumstances necessary to provide insurance brokerage services, fulfill legal obligations, protect our business operations, or otherwise as described in this Privacy Policy.

We do not sell personal information for monetary consideration and do not knowingly share personal information for purposes inconsistent with applicable law.

8.1 Categories of Recipients

Depending upon the services requested, we may disclose personal information to the following categories of recipients.

Insurance Carriers

As an independent insurance brokerage, FloodSmart obtains quotations and places coverage with multiple insurance carriers.

Information may be shared with insurance carriers to:

• obtain premium quotations;
• determine underwriting eligibility;
• issue insurance policies;
• process endorsements and policy changes;
• facilitate renewals;
• assist with billing inquiries;
• support claims administration; and
• comply with regulatory requirements.

Information shared may include:

• customer contact information;
• property information;
• mortgage information;
• insurance history;
• claims history;
• requested coverage information; and
• payment information necessary to complete a transaction.

Wholesale Brokers and Managing General Agencies

Certain insurance products are available through wholesale brokers or managing general agencies.

When appropriate, FloodSmart may share information with wholesale insurance partners to obtain quotations or place coverage.

Examples include organizations that provide access to specialty flood insurance markets, excess flood insurance products, or National Flood Insurance Program (NFIP) servicing capabilities.

National Flood Insurance Program and Government-Related Vendors

To obtain or service flood insurance coverage, information may be disclosed to:

• National Flood Insurance Program servicing entities;
• authorized FEMA vendors;
• flood determination providers;
• policy administration vendors;
• governmental agencies when required by law; and
• other authorized organizations participating in the administration of flood insurance programs.

Mortgage Companies and Loan Servicers

When authorized by the customer or required to facilitate an insurance transaction, FloodSmart may communicate with:

• mortgage lenders;
• loan servicers;
• escrow companies;
• closing agents; and
• other financial institutions.

These communications may include:

• proof of insurance;
• declarations pages;
• premium information;
• policy status;
• effective dates; and
• other information reasonably necessary to satisfy lender requirements.

Customer Relationship Management Providers

FloodSmart utilizes business systems to organize customer communications and provide customer service.

Information stored within these systems may include:

• names;
• contact information;
• policy information;
• communication history;
• service notes; and
• transaction records.

These providers are contractually expected to protect information consistent with applicable law and industry practices.

Payment Processing

FloodSmart generally submits payment information directly to the applicable insurance carrier or the carrier’s designated payment processing platform.

Because premium payments are processed through carrier-authorized systems:

• FloodSmart does not operate its own payment gateway;
• payment information is transmitted only for authorized transactions; and
• FloodSmart seeks to minimize retention of payment information after submission.

8.2 Business Transfers

If FloodSmart undergoes a merger, acquisition, corporate reorganization, financing transaction, or sale of assets, customer information may be transferred as part of that transaction, subject to applicable legal obligations and confidentiality requirements.

8.3 Legal Disclosures

FloodSmart may disclose personal information when we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to subpoenas or court orders;
• satisfy regulatory requirements;
• cooperate with law enforcement;
• investigate suspected fraud;
• enforce our agreements;
• protect our rights;
• protect customer safety;
• protect property; or
• prevent illegal activity.

8.4 Professional Advisors

Information may be shared with attorneys, accountants, auditors, consultants, cybersecurity professionals, and other advisors who require access to perform services on behalf of FloodSmart and who are subject to confidentiality obligations.

8.5 De-Identified and Aggregated Information

FloodSmart may create aggregated or de-identified information that cannot reasonably identify an individual consumer.

Such information may be used to:

• evaluate market trends;
• improve products;
• enhance website functionality;
• analyze customer experience;
• develop new services;
• measure operational performance; and
• conduct business analytics.

FloodSmart will not intentionally attempt to re-identify properly de-identified information except as permitted by applicable law.

9. COOKIES, TRACKING TECHNOLOGIES, AND ONLINE ANALYTICS

FloodSmart uses cookies and similar technologies to improve website functionality, enhance user experience, maintain security, and better understand how visitors interact with our website.

This section is intended to apply broadly to current and future technologies performing similar functions.

9.1 What Are Cookies?

Cookies are small text files stored on a user’s browser or device that enable websites to recognize returning visitors and remember preferences.

Cookies may be:

• session cookies;
• persistent cookies;
• first-party cookies;
• third-party cookies; or
• similar technologies performing equivalent functions.

9.2 Technologies We May Use

FloodSmart may utilize technologies including:

• cookies;
• pixels;
• tags;
• web beacons;
• JavaScript libraries;
• local storage;
• software development kits (SDKs);
• browser storage technologies;
• device identifiers;
• server logs; and
• future technologies developed for website functionality, analytics, advertising, personalization, or security.

This Privacy Policy is intended to remain applicable as technologies evolve.

9.3 Purposes of Cookies

Cookies may be used to:

• remember user preferences;
• maintain website sessions;
• improve navigation;
• enhance accessibility;
• measure website performance;
• understand visitor behavior;
• evaluate advertising effectiveness;
• identify technical issues;
• prevent fraud;
• improve security; and
• support future website enhancements.

9.4 Analytics

FloodSmart may utilize website analytics services that collect information regarding:

• page visits;
• referral sources;
• browser types;
• device characteristics;
• operating systems;
• approximate geographic locations;
• time spent on pages;
• click patterns; and
• general usage statistics.

Analytics information is generally used to understand overall website performance rather than identify individual users.

9.5 Advertising Technologies

FloodSmart may use advertising and remarketing technologies that assist in measuring the effectiveness of advertising campaigns or presenting advertisements to users who have previously visited our website.

These technologies may evolve over time and may include services provided by search engines, social media platforms, advertising networks, or future digital marketing providers.

9.6 Browser Controls

Most browsers permit users to:

• delete cookies;
• reject cookies;
• receive cookie notifications;
• restrict tracking technologies; or
• disable certain online tracking features.

Disabling cookies may impact website functionality or limit certain services.

9.7 Do Not Track Signals

Because industry standards continue to evolve, FloodSmart may not respond uniformly to browser-based “Do Not Track” signals.

Consumers may nevertheless exercise available privacy rights through the methods described elsewhere in this Privacy Policy.

10. DATA SECURITY

Protecting customer information is a core business priority.

FloodSmart maintains commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, or misuse.

10.1 Administrative Safeguards

Administrative safeguards may include:

• employee confidentiality obligations;
• privacy training;
• access management procedures;
• vendor oversight;
• documented policies;
• incident response planning;
• business continuity planning; and
• periodic security reviews.

10.2 Technical Safeguards

Technical safeguards may include:

• encrypted communications where appropriate;
• secure website protocols;
• authentication controls;
• access logging;
• firewalls;
• malware protection;
• vulnerability management;
• network monitoring; and
• other commercially reasonable cybersecurity practices.

10.3 Physical Safeguards

FloodSmart maintains physical protections designed to secure facilities, business records, and information systems against unauthorized access.

10.4 No Absolute Guarantee

Although FloodSmart implements reasonable safeguards, no internet transmission, electronic storage system, cloud environment, or cybersecurity program can guarantee absolute security.

Users acknowledge that electronic communications inherently involve some level of risk.

11. DATA RETENTION

FloodSmart retains information only for as long as reasonably necessary to:

• provide requested services;
• administer insurance policies;
• comply with regulatory obligations;
• maintain business records;
• resolve disputes;
• enforce agreements;
• respond to legal requests; and
• satisfy applicable statutes of limitation.

11.1 Retention Factors

Retention periods may vary depending upon:

• the type of information collected;
• the applicable insurance product;
• regulatory requirements;
• litigation holds;
• business needs;
• contractual obligations; and
• operational requirements.

11.2 Secure Disposal

When information is no longer reasonably required, FloodSmart seeks to securely destroy, anonymize, delete, or de-identify the information using commercially reasonable procedures appropriate to the nature of the information and applicable legal requirements.

11.3 Data Minimization

FloodSmart endeavors to collect and retain only the information reasonably necessary to provide insurance brokerage services, operate its business, comply with legal obligations, and improve customer experience.

We periodically evaluate our information practices to reduce unnecessary retention and promote responsible stewardship of customer information.

11.4 Incident Response

In the event FloodSmart becomes aware of unauthorized access to personal information, we will investigate the matter, take appropriate remedial measures, cooperate with applicable authorities where appropriate, and provide notifications required by applicable law.

Nothing in this Privacy Policy creates a contractual obligation to provide security measures beyond those required by applicable law or commercially reasonable industry practices.

12. CONSUMER PRIVACY RIGHTS

FloodSmart Insurance Inc. (“FloodSmart,” “we,” “our,” or “us”) is committed to providing transparency and respecting the privacy rights of consumers. Depending upon your state of residence and applicable law, you may have certain rights regarding your personal information.

FloodSmart will not unlawfully discriminate against any individual for exercising applicable privacy rights.

Nothing in this section limits or modifies rights provided under federal insurance laws, the Gramm-Leach-Bliley Act (“GLBA”), or other applicable statutes.

12.1 Right to Know

Subject to applicable law and certain exceptions, consumers may request information regarding:

• The categories of personal information collected;
• The sources from which personal information is collected;
• The business or commercial purposes for collecting or processing information;
• The categories of third parties with whom information is shared;
• The categories of personal information disclosed for business purposes; and
• The specific pieces of personal information maintained by FloodSmart.

FloodSmart may provide this information in a portable and reasonably accessible format consistent with applicable law.

12.2 Right to Access

Consumers may request access to personal information maintained by FloodSmart.

For security purposes, we may require identity verification before responding to a request.

Access requests may be limited where disclosure would:

• violate applicable law;
• compromise another individual’s privacy;
• reveal proprietary business information;
• interfere with regulatory obligations;
• affect fraud prevention efforts; or
• otherwise fall within a statutory exception.

12.3 Right to Correct

If you believe personal information maintained by FloodSmart is inaccurate or incomplete, you may request that we correct the information.

Where appropriate, FloodSmart may request documentation or additional information necessary to verify the requested correction.

If information originates from an insurance carrier, governmental agency, or third-party source, FloodSmart may direct the request to the appropriate organization or coordinate with that organization when reasonably practicable.

12.4 Right to Delete

Subject to applicable law, consumers may request deletion of personal information maintained by FloodSmart.

Certain information may be retained when necessary to:

• complete insurance transactions;
• service existing policies;
• process renewals;
• satisfy regulatory obligations;
• comply with legal requirements;
• detect or prevent fraud;
• resolve disputes;
• enforce agreements;
• maintain required business records;
• protect consumer safety; or
• exercise or defend legal claims.

Because insurance producers are subject to numerous record retention requirements, complete deletion may not always be possible.

12.5 Right to Data Portability

Where required by law, consumers may request that certain personal information be provided in a portable format that allows transmission to another entity when technically feasible.

12.6 Right to Opt Out of Certain Processing

Where applicable law provides such rights, consumers may request to opt out of:

• targeted advertising;
• profiling in furtherance of decisions producing legal or similarly significant effects; and
• certain processing activities defined by applicable privacy statutes.

FloodSmart does not sell personal information for monetary consideration.

12.7 Right to Limit Sensitive Information

FloodSmart generally does not collect Social Security numbers, Tax Identification Numbers, or driver’s license numbers through its standard insurance brokerage processes.

To the extent sensitive personal information is processed in the future or received from authorized third parties, FloodSmart will process such information only for legitimate business purposes and in accordance with applicable law.

12.8 Right to Non-Discrimination

FloodSmart will not deny services, charge different prices, provide a different quality of service, or otherwise discriminate against consumers solely because they exercise privacy rights provided by applicable law.

However, certain services cannot be provided without information reasonably necessary to obtain insurance quotations, place coverage, or service policies.

12.9 Authorized Agents

Consumers may designate an authorized agent to submit requests on their behalf.

FloodSmart reserves the right to:

• verify the identity of the consumer;
• verify the authority of the authorized agent;
• request written authorization;
• request proof of agency; and
• communicate directly with the consumer when appropriate.

12.10 Verification Procedures

To protect customer information, FloodSmart may require verification before processing privacy requests.

Verification methods may include:

• confirming contact information;
• confirming policy information;
• verifying property information;
• responding to previously established communication channels; or
• other commercially reasonable verification procedures.

If FloodSmart cannot reasonably verify identity, we may deny the request to protect personal information from unauthorized disclosure.

12.11 Exercising Privacy Rights

Privacy requests may be submitted by contacting:

FloodSmart Insurance Inc.

1101 8th St A

Anacortes, WA 98221

Email: CustomerService@FloodSmart.com

Phone: 866-277-0055

FloodSmart will respond within the timeframes required by applicable law, subject to extensions permitted by law.

13. STATE-SPECIFIC PRIVACY DISCLOSURES

The following provisions supplement the remainder of this Privacy Policy and apply to residents of applicable states.

If a conflict exists between this section and another portion of this Privacy Policy, this section controls with respect to residents of the applicable jurisdiction.

13.1 California Residents (CCPA/CPRA)

California residents may have the right to:

• know what personal information is collected;
• know the sources of personal information;
• know the purposes for collection;
• know categories of recipients;
• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request portability of applicable information;
• limit the use of certain sensitive personal information where applicable; and
• exercise these rights without unlawful discrimination.

FloodSmart does not knowingly sell personal information or share personal information for cross-context behavioral advertising as those terms may be defined under California law.

Certain information maintained by insurance institutions and producers may be exempt from portions of the CCPA pursuant to applicable statutory exemptions, including information governed by the Gramm-Leach-Bliley Act.

13.2 Colorado Residents

Colorado residents may have rights to:

• access personal data;
• correct inaccuracies;
• delete personal data;
• obtain portable copies of certain information;
• opt out of targeted advertising;
• opt out of certain profiling activities; and
• appeal certain privacy request decisions.

13.3 Connecticut Residents

Connecticut residents may request:

• confirmation of processing;
• access to personal data;
• correction of inaccuracies;
• deletion of personal data;
• portability of applicable information;
• opt out of targeted advertising; and
• appeal certain decisions regarding privacy requests.

13.4 Utah Residents

Utah residents may have rights to:

• confirm processing;
• access personal data;
• delete certain information;
• obtain portable copies of applicable information; and
• opt out of targeted advertising where applicable.

13.5 Virginia Residents

Virginia residents may have rights to:

• confirm processing activities;
• access personal data;
• correct inaccuracies;
• delete personal data;
• obtain copies of personal data;
• opt out of targeted advertising;
• opt out of certain profiling; and
• appeal privacy request determinations.

13.6 Other States

FloodSmart reserves the right to extend similar privacy rights to residents of additional states as privacy laws evolve.

Nothing in this Privacy Policy shall be interpreted to reduce any rights provided by applicable law.

14. CHILDREN’S PRIVACY

FloodSmart’s website and services are intended for adults seeking insurance products and services.

We do not knowingly market to or solicit personal information from children.

14.1 Children Under 13

Our website is not directed toward children under the age of 13.

FloodSmart does not knowingly collect personal information from children under 13 years of age.

If we become aware that personal information has been collected from a child under 13 without appropriate authorization, we will take commercially reasonable steps to delete the information consistent with applicable law.

14.2 Minors Under 18

FloodSmart’s insurance brokerage services are intended for property owners, borrowers, business owners, and other adults capable of entering legally binding agreements.

Individuals under 18 years of age should not submit personal information through our website without the involvement of a parent or legal guardian.

14.3 Parent and Guardian Requests

Parents or legal guardians who believe a child has submitted personal information may contact FloodSmart using the contact information provided in this Privacy Policy.

Upon reasonable verification, FloodSmart will review the request and take appropriate action consistent with applicable law.

15. INSURANCE INFORMATION PRIVACY

Because FloodSmart operates as a licensed insurance brokerage, certain personal information is collected, maintained, and disclosed in connection with insurance transactions.

Insurance information may be subject to:

• federal insurance privacy laws;
• state insurance regulations;
• producer licensing requirements;
• underwriting obligations;
• claims administration requirements; and
• record retention obligations.

As a result, some privacy rights may be limited or modified by applicable insurance laws, regulatory requirements, or statutory exemptions.

FloodSmart endeavors to honor consumer privacy requests to the fullest extent permitted by law while maintaining compliance with its obligations as a licensed insurance producer.

16. PRIVACY POLICY INTERPRETATION

This Privacy Policy is intended to provide transparency regarding FloodSmart’s information practices.

It should not be interpreted to:

• create contractual rights beyond those required by law;
• expand statutory privacy obligations;
• waive legal privileges;
• limit applicable legal defenses; or
• alter the terms of any insurance policy issued by an insurance carrier.

If any provision of this Privacy Policy is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

In the event of any conflict between information contained on the FloodSmart website, this Privacy Policy, marketing materials, educational content, or other informational resources and the terms, conditions, exclusions, endorsements, declarations, or limitations contained in an insurance policy issued by an insurance carrier, the insurance policy and its governing documents shall control in all respects.

17. INSURANCE-SPECIFIC PROVISIONS

FloodSmart Insurance Inc. (“FloodSmart,” “we,” “our,” or “us”) operates as a licensed insurance agency and brokerage specializing in flood insurance products available through both the National Flood Insurance Program (“NFIP”) and private insurance markets.

The provisions contained in this section are intended to supplement the remainder of this Privacy Policy and provide additional transparency regarding the collection, use, and disclosure of information in connection with insurance brokerage services.

17.1 Independent Insurance Brokerage

FloodSmart acts as an independent insurance brokerage representing multiple insurance carriers and wholesale insurance markets.

As part of our brokerage services, we may:

• obtain insurance quotations from multiple carriers;
• compare available coverage options;
• submit insurance applications;
• facilitate policy issuance;
• process policy changes;
• assist with renewals;
• communicate regarding claims-related matters;
• provide customer service; and
• assist with lender compliance documentation.

FloodSmart is not the insurer issuing an insurance policy unless expressly stated otherwise.

Coverage obligations arise solely under the insurance policy issued by the applicable carrier.

17.2 National Flood Insurance Program (NFIP)

FloodSmart offers insurance products available through the National Flood Insurance Program.

NFIP policies are administered pursuant to federal law and applicable regulations.

Policy forms, underwriting rules, waiting periods, exclusions, limits, endorsements, claims procedures, and premium calculations are determined by the applicable federal program and authorized servicing carrier.

FloodSmart cannot modify federal insurance requirements or guarantee eligibility for any NFIP product.

17.3 Private Flood Insurance

FloodSmart also offers private flood insurance products through participating insurance carriers and specialty insurance markets.

Private flood insurance products may differ significantly from NFIP policies with respect to:

• eligibility;
• underwriting;
• premiums;
• deductibles;
• exclusions;
• waiting periods;
• available limits;
• replacement cost provisions;
• additional living expense coverage;
• basement coverage;
• loss settlement provisions;
• cancellation rights; and
• renewal requirements.

Consumers should carefully review policy documents before purchasing coverage.

17.4 No Guarantee of Coverage or Availability

Submission of information through the FloodSmart website does not guarantee:

• insurance availability;
• underwriting approval;
• premium amounts;
• coverage limits;
• policy issuance;
• policy renewal;
• lender acceptance; or
• eligibility for any insurance product.

Insurance availability depends upon numerous factors including:

• carrier underwriting guidelines;
• property characteristics;
• flood zone determinations;
• claims history;
• location;
• regulatory requirements;
• market conditions; and
• other risk factors.

17.5 Quotes Are Estimates Only

Any premium indication, estimate, comparison, illustration, or quotation provided through the website, email, SMS communication, telephone conversation, or other communication is intended solely as an estimate.

Actual premiums may change due to:

• underwriting review;
• inspection results;
• updated property information;
• revised flood determinations;
• carrier rule changes;
• legislative changes;
• rating modifications; or
• correction of submitted information.

No quotation constitutes a binding offer of insurance.

17.6 Coverage Is Not Bound

Insurance coverage is not effective solely because:

• a quote is generated;
• an application is submitted;
• payment information is provided;
• premium funds are transmitted;
• documents are electronically signed;
• a representative is contacted; or
• website confirmation is received.

Coverage becomes effective only when:

• approved by the issuing carrier;
• all underwriting requirements are satisfied; and
• confirmation is provided in writing by the issuing carrier or an authorized representative of FloodSmart.

17.7 Mortgage and Lender Requirements

FloodSmart may assist customers with lender insurance requirements by providing declarations pages, certificates, or other insurance documentation.

However, FloodSmart does not determine:

• lender flood insurance requirements;
• escrow requirements;
• force-placement decisions;
• loan compliance obligations;
• loan underwriting decisions;
• federally regulated lending requirements; or
• mortgage servicing requirements.

These determinations remain the responsibility of the applicable lender, loan servicer, governmental authority, or regulatory agency.

17.8 Flood Maps and Flood Determinations

Flood hazard determinations and flood zone information may originate from governmental agencies, third-party vendors, insurance carriers, engineering studies, or publicly available information.

FloodSmart does not guarantee:

• the accuracy of flood maps;
• the completeness of flood determinations;
• future flood zone classifications;
• Base Flood Elevations (BFEs);
• Special Flood Hazard Area designations;
• lender requirements; or
• future regulatory interpretations.

Flood zones, flood maps, and insurance requirements may change without notice.

Customers should independently verify information relevant to their specific property.

17.9 No Fiduciary Relationship

Except as expressly required by applicable law, FloodSmart does not undertake a fiduciary duty to customers by virtue of providing quotations, educational information, insurance comparisons, or brokerage services.

Nothing contained within this Privacy Policy creates:

• a fiduciary relationship;
• an attorney-client relationship;
• an accountant-client relationship;
• an engineering relationship;
• a consulting relationship; or
• any other professional advisory relationship.

18. PROFESSIONAL DISCLAIMERS

18.1 Informational Purposes Only

All information provided through:

• the FloodSmart website;
• educational articles;
• calculators;
• newsletters;
• FAQs;
• blog posts;
• videos;
• emails;
• SMS messages; and
• customer communications

is provided solely for general informational purposes.

18.2 No Legal Advice

FloodSmart does not provide legal advice.

Consumers should consult licensed legal counsel regarding:

• property rights;
• contractual obligations;
• regulatory compliance;
• insurance disputes;
• claims litigation;
• real estate transactions; or
• other legal matters.

18.3 No Tax Advice

FloodSmart does not provide tax advice.

Consumers should consult qualified tax professionals regarding deductions, business treatment of insurance premiums, casualty losses, or other tax matters.

18.4 No Engineering or Floodplain Management Advice

FloodSmart does not provide:

• engineering services;
• surveying services;
• elevation certifications;
• structural analysis;
• floodplain management advice;
• building code interpretations; or
• construction recommendations.

Questions relating to floodplain development or property improvements should be directed to qualified engineers, surveyors, architects, or governmental authorities.

18.5 No Lending or Financial Advice

FloodSmart does not provide:

• mortgage advice;
• loan compliance advice;
• escrow advice;
• investment advice;
• financial planning services; or
• lending recommendations.

Consumers should consult their lender or qualified financial professionals regarding loan-related matters.

18.6 No Guarantee Against Flood Loss

The purchase of flood insurance does not guarantee:

• that flooding will not occur;
• that all losses will be covered;
• that policy limits will be sufficient;
• that exclusions will not apply; or
• that every claim will be paid.

Coverage is governed exclusively by the applicable insurance policy.

19. CONTACT INFORMATION

Questions regarding this Privacy Policy or FloodSmart’s privacy practices may be directed to:

FloodSmart Insurance Inc.

1101 8th St A

Anacortes, Washington 98221

Customer Service: 866-277-0055

Email: CustomerService@FloodSmart.com

Privacy requests should include sufficient information to enable FloodSmart to reasonably verify identity and process the request.

FloodSmart reserves the right to request additional information necessary to protect customer privacy and prevent unauthorized disclosure.

20. CHANGES TO THIS PRIVACY POLICY

FloodSmart may update this Privacy Policy from time to time to reflect:

• changes in applicable law;
• changes in insurance regulations;
• new products or services;
• technological developments;
• cybersecurity enhancements;
• operational changes; or
• business practices.

The revised Privacy Policy will become effective upon posting unless otherwise specified.

Continued use of the website or services after publication of a revised Privacy Policy constitutes acknowledgment of the updated version.

21. GENERAL PROVISIONS

21.1 Entire Privacy Policy

This Privacy Policy constitutes the complete statement of FloodSmart’s privacy practices for information collected through its website and insurance brokerage services and supersedes prior online privacy statements.

21.2 Severability

If any provision of this Privacy Policy is determined to be invalid, unlawful, or unenforceable, the remaining provisions shall remain valid and enforceable to the fullest extent permitted by law.

21.3 No Waiver

Failure by FloodSmart to enforce any provision of this Privacy Policy shall not constitute a waiver of that provision or any other rights.

21.4 Governing Law

To the extent permitted by applicable law, this Privacy Policy shall be governed by and construed in accordance with the laws of the State of Washington, without regard to its conflict of laws principles.

Nothing contained herein shall be interpreted to limit rights provided by mandatory federal or state privacy statutes applicable to individual consumers.

21.5 Accessibility

FloodSmart is committed to making its website and digital services accessible to the broadest possible audience and endeavors to support accessibility consistent with the principles of the Web Content Accessibility Guidelines (WCAG) 2.2 Level AA.

Individuals experiencing accessibility barriers are encouraged to contact FloodSmart so that reasonable efforts can be made to provide information or services through alternative methods.

21.6 Electronic Communications

By interacting with FloodSmart through electronic means, users acknowledge that communications may occur electronically and that notices, disclosures, and records provided electronically may satisfy legal requirements for written communications to the extent permitted by applicable law.

Additional terms relating to electronic communications and electronic signatures may be contained in separate agreements or disclosures.

21.7 Controlling Documents

Educational materials, FAQs, articles, calculators, blogs, marketing materials, website content, quote summaries, emails, SMS communications, and other informational resources are intended solely to provide general information.

If any conflict exists between:

• this Privacy Policy;
• website content;
• educational materials;
• quote summaries;
• marketing materials;
• customer communications; or
• other informational resources,

and the insurance policy, declarations, endorsements, exclusions, limitations, or other policy documents issued by the applicable insurance carrier, the insurance policy and its governing documents shall control in all respects.

21.8 Reservation of Rights

FloodSmart expressly reserves all rights, remedies, defenses, privileges, and protections available under applicable federal law, state law, insurance regulations, common law, and equity.

No provision of this Privacy Policy shall be interpreted to expand FloodSmart’s legal obligations beyond those imposed by applicable law or to create a private right of action where none otherwise exists.

FloodSmart Insurance Inc.

Privacy Policy

Effective Date: February 12, 2005

Last Updated: June 8, 2026