E. Your California Privacy Rights
The CPRA grants you the privacy rights described in this section, subject to certain limitations and exceptions. Your CPRA rights do not apply to personal information protected by other laws, such as the Fair Credit Reporting Act (“FCRA”), the Gramm Leach Bliley Act (“GLBA”), the Health Insurance Portability and Accountability Act (“HIPAA”), and the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”).
- Right to Notice. The right to know about how we collect, use, disclose, sell, or Share your personal information. This policy is intended to satisfy that right.
- Right to Access. The right to know and access what personal information we have collected about you, including the categories of personal information, the categories of sources from which your personal information is collected, the business of commercial purpose for collecting, selling, or Sharing your personal information, the categories of third parties to whom we disclose your personal information, and the specific pieces of personal information that we have collected about you.
- Right to Delete. The right to delete personal information that we have collected from you, subject to certain exceptions.
- Right to Correct. The right to correct inaccurate personal information that we maintain about you.
- Right to Opt Out. The right to opt-out of the sale or Sharing of your personal information by us if we sell or Share personal information.
- Right to Limit. The right to limit the use or disclosure of your personal information by us to purposes permitted by the CPRA, if we use or disclose sensitive personal information.
- Right to Non-Discrimination. The right not to be discriminated against for exercising any of the privacy rights in this section. We do not use the fact that you have exercised or requested to exercise any CPRA right for any purpose other than facilitating a response to your request.
Exercising Your California Privacy Rights
You or your authorized agent may submit a California privacy rights request using one of the designated methods outlined below. When submitting your request, you must provide us with certain information so that we may locate your personal information in our systems and distinguish it from the personal information of others—for example, individuals who may have similar names or addresses to you. You may need to provide us with your name, email address, address, phone number, driver’s license number, Social Security number, or account information, depending on the information you would like to access.
Once we receive your request, we will acknowledge receipt within 10 business days and provide additional information about our verification process and the processing of your request. We will try to process your request within 45 days of receiving it. If we need more time (up to 45 days), we will notify you of our need for additional time and explain the reason why we need more time prior to the end of the initial 45-day period.
We do not generally charge a fee to fulfill any of your requests under CPRA; however, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, including repetitive requests. If we refuse to act on a request, we will notify you of the reason.
Identity Verification Requirements
Before we fulfill any requests submitted by you, we are required to verify that you are the person that is the subject of the request. Our verification process consists of you answering a series of questions correctly to verify your identity. If you experience technical errors with or are unwilling to verify your identity through our verification process, please contact us at 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays) or consumerprivacy@nationwide.com, and we will send to you a notary form that you must sign, notarize, and return to us by mail to the following address:
Consumer Privacy
P.O. Box 182189
Columbus, Ohio 43218-2189
Nationwide will reimburse you for any reasonable notarization fees. Failure to verify your identity may result in the rejection of your request.
Authorized Agent Requirements
Before we fulfill any requests submitted by your authorized agent (except requests to opt-out submitted via opt-out preference signal), we must receive either (1) a signed permission designating the authorized agent, or (2) a properly executed power of attorney that describes you, your designated authorized agent, and the purpose of the designation. If you provide the authorized agent with signed permission, we request that you also verify your own identity with us directly and confirm that you provided the authorized agent permission to submit the request. Signed permissions may be submitted as an electronic attachment to your request or via postal mail to the following address, and power of attorneys must be submitted via postal mail to the following address:
Consumer Privacy
P.O. Box 182189
Columbus, Ohio 43218-2189
Nationwide may reject a request from an agent that fails to submit proof that they have been authorized by you to act on your behalf.
Third-Party Vendors & Business Partners
This paragraph contains instructions for all third-party vendors providing services to and third-party business partners of Nationwide. This paragraph does not apply to individual consumers.
If a California consumer submits a CPRA rights request directly to one of Nationwide’s third-party vendors or business partners, the vendor or partner must instruct the consumer to visit this policy and submit the request through one of the approved methods listed below (webform or toll-free telephone number).
Right to Access
Consumer: You may submit a request to access using the Personal Information Access Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
Authorized Agent: Your authorized agent, on your behalf, may submit a request to access using the Personal Information Access Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
For your security, your request, and our responses to it, will be available for you to access for 30 days, after which they will be deleted. If you would like to access your personal information again, please submit another request.
Please note that the CPRA does not require us to search for personal information if we:
- Complete the transaction for which the personal information was collected, provide a good or service requested by you, conduct activities reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between Nationwide and you;
- Ensure the security and integrity of information (such as detecting security incidents and protecting against and prosecuting malicious, deceptive, or illegal activity like fraud);
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent;
- Enable solely internal uses that are reasonably aligned with a consumer’s expectations based on their relationship with Nationwide; or
- Comply with a legal obligation; or
Additionally, we may retain your personal information in our backup or archive systems until the retention period of those systems expire, as permitted by the CPRA.
Right to Delete
Consumer: You may submit a request to delete using the Personal Information Deletion Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
Authorized Agent: Your authorized agent, on your behalf, may submit a request to delete using the Personal Information Deletion Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
Please note that the CPRA does not require us to delete your personal information if it is necessary for Nationwide to:
- Complete the transaction for which the personal information was collected, provide a good or service requested by you, conduct activities reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between Nationwide and you;
- Ensure the security and integrity of information (such as detecting security incidents and protecting against and prosecuting malicious, deceptive, or illegal activity like fraud);
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent;
- Enable solely internal uses that are reasonably aligned with a consumer’s expectations based on their relationship with Nationwide; or
- Comply with a legal obligation; or
Additionally, we may retain your personal information in our backup or archive systems until the retention period of those systems expire, as permitted by the CPRA.
Right to Correct
Consumer: You may submit a request to correct using the Personal Information Correction Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
Authorized Agent: Your authorized agent, on your behalf, may submit a request to correct using the Personal Information Correction Request webform or by calling 1-844-541-4300 (12 p.m. – 6 p.m. ET, weekdays).
In order to effectively evaluate your request, we require that you provide us with documentation supporting your request by uploading it to our secure online portal or via postal mail to the following address:.
Consumer Privacy
P.O. Box 182189
Columbus, Ohio 43218-2189
If you provide supporting documentation via postal mail, please do not send us the original; we request that you only send a copy.
We will only use documentation provided by you for the purpose of responding to your request.
Right to Opt-Out of Sale/Sharing
Nationwide does not believe that it sells or shares the personal information of California consumers. However, we, our vendors, and third parties, such as advertising networks, social networks, and data analytics providers, may use cookies and related tracking technologies, such as web beacons, pixel tags, and flash objects (collectively, “Cookie(s)”), to collect information about your visits to our websites and third-party websites and then use that information to deliver advertisements relevant to your interests. Information collected about you on our websites by third parties could be combined with other information that you have provided to them or that they have collected from your use of their services. To opt out of the collection of your personal information using Cookies for advertising purposes, you can modify your Cookie settings using the Cookie Preference Center, which may be accessed through the banner on our websites. To effectively manage Cookies via this tool, you must set Cookie preferences on all web browsers that you use. If you clear the Cookies on your web browser(s), you may need to set your Cookie preferences again.
You can also opt out of the collection of your personal information via Cookies by enabling a Global Privacy Control (“GPC”) signal, which may be accessed by installing a supported web browser or browser extension. Please refer to the help section of your browser or visit the official Global Privacy Control website for more information.
This information may also be reviewed in our Notice of Right to Opt-out of Sale/Sharing, which may be accessed by selecting “Manage settings” on the Cookie Preference Center banner when first visiting our websites. On subsequent visits to our websites, the Notice may be accessed by clicking the Do Not Sell My Personal Information link in the footer of our websites. It may also be viewed in the Preferences section within the Settings on our mobile app.
Right to Limit Use/Disclosure
Nationwide does not use or disclose your sensitive personal information for purposes other than as permitted by the CPRA, so there is no need for you to request to limit the use or disclosure of your sensitive personal information.