Privacy Policy
Effective September 10, 2026
This Privacy Policy explains how Rate Hall (“we,” “us,” or “our”) collects, uses, discloses, and sells information when you visit this website or submit our rate-comparison form (the “Service”). It also serves as the notice required under several state consumer privacy laws and, out of an abundance of caution, under federal financial-privacy law discussed in Section 7.
Rate Hall is a free comparison and lead-referral service. We are not an insurance company, agency, or broker, and we do not issue quotes or policies. When you submit the form, we connect you with a third-party insurance marketplace and its participating insurance providers.
The Service is directed to and intended only for residents of the United States who are at least 18 years old. It is not directed to children, and it is not intended for use by, and we do not knowingly collect information from, individuals located outside the United States or subject to the privacy laws of another country (including the EU/UK GDPR). If you are located outside the United States, please do not use the Service.
1. Information We Collect
Information you provide: your name, email address, phone number, ZIP code, and the answers you give on the form (such as current insurance status and homeownership).
Consent and verification records: the exact consent language shown to you, a timestamp, a cryptographic hash of that consent text, a first-party record of how you interacted with the form (e.g., when the consent language became visible on your screen), and a third-party “TrustedForm” certificate that independently documents your form session. We also generate fraud-and-quality signals about your submission, such as whether your phone number and email address pass automated validity checks and whether the submission passed bot-detection checks (Cloudflare Turnstile).
Collected automatically: IP address, browser and device information, page timestamps, and advertising click identifiers (such as gclid or fbclid) passed in the URL when you arrive from an ad campaign.
What we do not collect: we do not ask for or knowingly collect Social Security numbers, driver’s license numbers, financial account numbers, precise (device) geolocation, government ID images, health information, or any other “sensitive personal information” as defined by the California Consumer Privacy Act. We ask only for a ZIP code, not precise geolocation.
For reference, using the categories defined by California law, we collect: identifiers (name, email, phone, IP address, online/advertising identifiers); commercial information (the type of insurance and coverage information you are requesting); internet or network activity (interaction with our form, referring campaign identifiers); geolocation data limited to ZIP code; and inferences we generate about submission quality and fraud risk. We do not collect any other statutory category.
2. How We Use Information
- To match your request with insurance providers and marketplaces.
- To verify the submission is genuine and to prevent fraud and abuse (including bot-detection and phone/email validation).
- To document consent as required by applicable law.
- To operate, secure, and improve the Service.
- To comply with legal obligations, respond to lawful requests from public authorities, and enforce our agreements.
We do not use the information you submit to make automated decisions that produce legal or similarly significant effects about you (for example, we do not decide whether to grant, deny, or price insurance coverage — only a licensed insurer can do that).
4. Your Consent to Be Contacted
By submitting the form, you provide express written consent for the named insurance marketplace and its partners to contact you at the phone number and email you provided — including by autodialer, prerecorded or artificial voice, and text message — even if your number is on a Do Not Call list. Consent is not a condition of purchase.
You can revoke this consent at any time by telling the party contacting you to stop, by replying STOP to a text, or by emailing us at privacy@ratehall.com. When you revoke consent with us directly, we add your phone number and email to our internal suppression list, which is checked before any future submission from you is sold — this stops us from selling a new lead for a number that has opted out. Revoking consent already given to a provider you were matched with may still require contacting that provider directly, since we do not control their systems.
5. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights under state privacy law (including the California Consumer Privacy Act as amended by the CPRA, the Texas Data Privacy and Security Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, and similar laws in other states):
- Right to know / access what personal information we have collected about you.
- Right to delete personal information we have collected from or about you.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing — including a standalone “Do Not Sell or Share My Personal Information” request.
- Right to non-discrimination for exercising any of these rights.
- Right to appeal a denied request, where required by your state’s law (email us at the address below and reference your original request; we will respond to appeals within 45 days).
How to exercise these rights: email us at privacy@ratehall.com with your name, the phone number or email you submitted, and the request you are making. We may need to verify your identity (typically by confirming the phone number or email on file) before acting on a request that goes beyond opt-out. You may also designate an authorized agent to submit a request on your behalf; we may require proof of that authorization.
Response time: we will confirm receipt within 10 business days and substantively respond within 45 calendar days, extendable by an additional 45 days when reasonably necessary (we will tell you if we need the extension). There is no charge to submit or have us respond to a verifiable request, and we will not discriminate against you (for example, by denying service or charging a different price) for exercising any of these rights.
Because we do not currently place cookies, pixels, or similar tracking technology that reads a browser-level opt-out signal, we do not yet receive Global Privacy Control (GPC) signals from your browser. If we add such tracking in the future, we will honor GPC as a valid opt-out of sale/sharing where required by law.
6. California & Other State-Specific Disclosures
Shine the Light (Cal. Civ. Code § 1798.83). California residents may request, once per year and free of charge, information about the categories of personal information we have disclosed to third parties for those third parties’ own direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. As described in Section 3, the marketplace disclosure described in this Policy is our only third-party disclosure of this kind. Submit a Shine the Light request to privacy@ratehall.com.
Sensitive personal information. We do not collect sensitive personal information as defined by the CCPA/CPRA, so there is no separate right to limit its use to disclose here.
Financial incentives. We do not offer any financial incentive, discount, or loyalty program in exchange for the collection, sale, or retention of your personal information.
Texas residents. Because our operating entity is organized in Texas, the Texas Data Privacy and Security Act applies to our processing of Texas residents’ personal data in the same way described throughout this Policy — access, correction, deletion, and opt-out-of-sale rights are available as described in Section 5.
7. Financial Privacy Notice
Federal law (the Gramm-Leach-Bliley Act and its implementing regulations) requires certain businesses involved in connecting consumers with financial products — including, under some interpretations, businesses that act as a “finder” bringing together insurance consumers and insurance providers — to provide this additional notice. We provide it here so you have it regardless of how that question is ultimately resolved for a business like ours.
Information we collect and disclose. As described in Section 1, we collect the identifying and coverage-interest information you submit on our form. As described in Section 3, we disclose that information to the insurance marketplace and providers you are matched with so they can respond to the request you made — this disclosure is made to complete the very transaction you asked us to initiate, and we do not disclose it to any other nonaffiliated third party for their own independent marketing purposes.
Opt out. If you would like to opt out of this disclosure before it happens, do not submit the form. You may also contact us at privacy@ratehall.com before submitting to ask questions about how your information will be used.
Security of financial information. We maintain administrative, technical, and physical safeguards designed to protect the information you submit, described further in Section 11.
8. Do Not Call & Do Not Track
Submitting our form and providing your express written consent as described in Section 4 permits contact even if your number is registered on the National Do Not Call Registry or a state Do Not Call list, consistent with the prior-express-written-consent exemption recognized under the Telephone Consumer Protection Act and the FTC’s Telemarketing Sales Rule.
Some browsers offer a “Do Not Track” signal. Because we do not currently operate cross-site tracking technology, there is nothing for that signal to opt you out of on this site today; we do not respond to Do Not Track signals as such.
9. Children’s Privacy
The Service is not directed to, and is not intended for use by, anyone under 18 years old, and we do not knowingly collect personal information from children under 13 within the meaning of the Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has submitted information to us, contact privacy@ratehall.com.
10. Data Retention
We retain lead and consent records for as long as needed to operate the Service, comply with legal and recordkeeping obligations (including proof-of-consent requirements, which can require multi-year retention), resolve disputes, and enforce our agreements. Consent and TrustedForm certification records are, in particular, retained for the period our consent-documentation vendor is configured to retain them, which we currently set at five years, so that proof of consent remains available for as long as a claim relating to that consent could reasonably be brought.
11. Data Security & Breach Notification
We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, role-based access controls limiting internal access to personal information to personnel who need it, and automated safeguards against unauthorized deletion of stored records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we experience a security breach that compromises your personal information in a way that triggers a legal notification obligation, we will notify affected individuals and any required regulators as required by applicable state breach-notification law, including Tex. Bus. & Com. Code § 521.053.
13. International Users
The Service is intended solely for United States residents. We do not direct the Service to, and this Policy does not address the requirements of, the European Union, the United Kingdom, Canada, or any other jurisdiction outside the United States. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law; your information will be processed in the United States.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by a new Effective Date on this page and, where required by law, by additional notice.
15. Contact
Questions or privacy requests: privacy@ratehall.com.
Rate Hall | RateHall.com, Operated by Run Syrup LLC145 Tyee Dr, PMB 58756, Point Roberts, WA 98281privacy@ratehall.com“Rate Hall” is a registered assumed name of Run Syrup LLC. Mailing address for privacy correspondence: 145 Tyee Dr, PMB 58756, Point Roberts, WA 98281.