Privacy Policy
Effective Date: 11/14/2025
Introduction
We at Derr Insurance Group are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. This policy covers the use of various plugins and tools on our website, including Gravity Forms, Elementor, WPMU, Defender Pro, SmartCrawl Pro, Google Site Kit, Google Analytics, and Google Tag Manager. We recognize the importance of protecting the privacy of individuals and are dedicated to ensuring that your personal data is handled responsibly and in compliance with applicable data protection laws.
Definitions
Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
Controller: The entity that determines the purposes and means of processing personal data.
Processor: The entity that processes personal data on behalf of the controller.
Data Subject: The individual to whom personal data relates.
Information We Collect
We collect various types of information in connection with the services we provide. The types of data we collect can be broadly categorized as follows:
Gravity Forms
Contact Information: Name, email address, phone number, and other contact details.
User Inputs: Any data you choose to provide through form submissions.
Technical Information: IP addresses, browser type, and other technical information automatically collected when forms are submitted.
Elementor & Elementor Pro
Contact Information: Name, email address, phone number, and other contact details.
User Inputs: Any data provided through form submissions created with Elementor.
Technical Information: IP addresses, browser type, and other technical information automatically collected during interaction with Elementor widgets.
WPMU Plugins (Defender Pro, SmartCrawl Pro)
Security Data: Logs of security-related events, such as login attempts, IP addresses, and activity logs.
SEO Data: Information related to SEO performance, keywords, website traffic, and analytics.
Google Site Kit
Site Performance Data: Metrics related to site performance, traffic sources, user interactions, and search engine results.
Google Analytics & Google Tag Manager
Usage Data: Information about how users interact with our website, including pages visited, time spent on pages, links clicked, geographic location, and other similar data.
Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
Consent: You have given clear consent for us to process your personal data for a specific purpose.
Contract: The processing is necessary for a contract you have with us, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: The processing is necessary for us to comply with the law.
Legitimate Interests: The processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.
How We Use Your Information
We use the information collected through these plugins for various purposes, including but not limited to:
To Respond to Your Inquiries and Provide Customer Support: We use your contact information and user inputs to respond to your requests, questions, and feedback.
To Improve Our Website and Services: We analyze technical information and user feedback to enhance our website’s functionality, user experience, and overall performance.
For Security Purposes: We use security data to protect our website and users from malicious activities, unauthorized access, and other security threats.
For Marketing Purposes: With your consent, we use your contact information to send newsletters, promotional offers, and other marketing communications.
To Analyze Website Performance and User Behavior: We use usage data to understand how users interact with our website, identify trends, and make data-driven decisions to improve our services.
Data Storage and Security
Your personal data is stored on secure servers, and we implement appropriate technical and organizational measures to protect your data from unauthorized access, use, or disclosure. These measures include:
Encryption: We use encryption to protect sensitive data both in transit and at rest.
Firewalls: We implement firewalls to prevent unauthorized access to our network and servers.
Access Controls: We restrict access to personal data to authorized personnel only, based on their job responsibilities.
Regular Security Audits: We conduct regular security audits and assessments to identify and address potential vulnerabilities.
Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
The duration of our ongoing relationship with you.
The necessity of retaining data to comply with legal obligations.
The necessity of retaining data for legitimate business purposes, such as maintaining accurate financial records and resolving disputes.
Your Rights Under GDPR and CPRA
You have the following rights under GDPR and CPRA:
Right to Access: You have the right to request access to the personal data we hold about you, including information about how we use and share it.
Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
Right to Erasure: You have the right to request the deletion of your personal data under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another controller.
Right to Object: You have the right to object to the processing of your personal data under certain conditions.
Right to Withdraw Consent: You have the right to withdraw your consent at any time where we are relying on your consent to process your personal data.
Right to Limit Use of Sensitive Personal Information (CPRA): You have the right to limit the use and disclosure of sensitive personal information.
Right to Opt-Out (CPRA): You have the right to opt-out of the sale or sharing of your personal information.
Right to Non-Discrimination (CPRA): You have the right not to receive discriminatory treatment for exercising your privacy rights.
Right to Correct Inaccuracies (CPRA): You have the right to request corrections to inaccurate personal information.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
To exercise these rights, please contact us at:
Email: {{Company Email}}
Phone: 5708547658
Address: 300 Edgar Ave, Bloomsburg, PA 17815
Third-Party Integrations
Our use of various plugins involves sharing data with third-party services only to the extent necessary to provide our services. For more information, please review the privacy policies of these third-party services:
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance user experience, personalize content, and analyze website traffic. This includes:
Functional Cookies: Necessary for the website to function properly, such as maintaining session information and enabling secure login.
Analytical Cookies: Used by Google Analytics and Google Tag Manager to track user behavior on our site, including pages visited, time spent on pages, and other interaction data.
Marketing Cookies: Used to track visitors across websites and deliver relevant ads based on user preferences and behavior.
You can manage your cookie preferences through your browser settings. Most browsers allow you to block cookies or notify you before a cookie is placed on your device. For more detailed information, please refer to our [Cookie Policy].
Changes to This Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this privacy policy, please contact us at:
Derr Insurance Group
Email: ederr@derrinsurancegroup.com
Phone: 5708547658
Children’s Privacy
Our website is not intended for children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.
International Data Transfers
If we transfer personal data outside the European Economic Area (EEA) or California, we ensure an adequate level of protection for the rights of data subjects based on:
Adequacy decisions of the European Commission.
Standard contractual clauses approved by the European Commission.
Binding corporate rules.
Other applicable data transfer mechanisms.
We implement additional safeguards as required to ensure that your personal data is protected in accordance with applicable data protection laws.
Profiling and Automated Decision-Making
We do not engage in profiling or automated decision-making that produces legal effects concerning you or similarly significantly affects you without your explicit consent or unless it is necessary for the performance of a contract with you.
Data Breach Notification
In the event of a data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, if there is a risk to the rights and freedoms of individuals. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.
Legal Disclaimers and Limitation of Liability
Use of our website and services is subject to our terms of service. We disclaim all liability to the extent permitted by law for any damages arising from the use of our website or services. This includes, but is not limited to, direct, indirect, incidental, punitive, and consequential damages.
User Consent for Policy Updates
For significant changes to this privacy policy, we may seek your explicit consent where required by applicable law. We will notify you of any material changes via email or through prominent notices on our website. Your continued use of our services after the changes have been implemented constitutes your acceptance of the updated policy.
Links to Other Websites
Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Governing Law
This Privacy Policy shall be governed and construed in accordance with the laws of the state of Pennsylvania, without regard to its conflict of law provisions. You agree to submit to the personal jurisdiction of the courts located in Pennsylvania for any actions for which we retain the right to seek injunctive or other equitable relief in a court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of our data, intellectual property, or other proprietary rights.
Additional Information for California Residents
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have additional rights regarding their personal information. This section provides details about the information we collect, the purposes for which we use it, and your rights under California law.
Categories of Personal Information Collected:
Identifiers such as name, email address, and phone number.
Commercial information such as transaction records.
Internet or other electronic network activity information such as browsing history and interactions with our website.
Geolocation data.
Professional or employment-related information.
Purposes for Collecting Personal Information:
To provide and manage our services.
To improve our website and services.
For security purposes.
For marketing and promotional activities.
To comply with legal obligations.
Your California Privacy Rights:
Right to Know: You have the right to request information about the personal information we collect, use, disclose, and sell.
Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
Right to Opt-Out: You have the right to opt-out of the sale of your personal information.
Right to Non-Discrimination: You have the right to not be discriminated against for exercising your privacy rights.
Right to Correct: You have the right to request correction of inaccurate personal information.
To exercise these rights, please contact us using the contact information provided in this Privacy Policy. We may verify your request by asking you to provide certain information to confirm your identity.
Final Provisions
We are committed to ensuring the privacy and protection of your personal data. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided above. Your trust is important to us, and we will take all necessary steps to ensure your data is handled securely and in accordance with applicable laws and regulations.