Zywave Website Privacy Statement

Last modified: July 31, 2025

Introduction

Zywave, Inc. (“Zywave” or “we” or “us”) respects your privacy and is committed to protecting it through our compliance with this privacy statement.

This Privacy Statement (our “Privacy Statement“) describes the types of information we may collect, use, maintain, protect, disclose, or otherwise process about you when you visit the website zywave.com (the “Website“) and our practices for collecting, using, maintaining, protecting, disclosing, or otherwise processing that information.

This Privacy Statement applies to information we collect:

• on our Website;
• on or through our Products and Services;
• in email, text, and other electronic messages between you and Zywave through any medium; and
• any other information we may collect about you offline when you use our Products and Services.

It does not apply to information collected by:

• us through any other means, including on any other website operated by us or any third-party (including our affiliates and subsidiaries);
• us or any of our affiliates or subsidiaries related to your or any other individual’s employment or potential employment with us;
• us on behalf of one of our customers (for which we are acting as a vendor, business associate, or service provider);
• any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this Privacy Statement carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website and Products and Services. By accessing or using our Website or Products and Services, you agree to this Privacy Statement. This Privacy Statement may change from time to time (see Changes to Our Privacy Statement). Your continued use of our Website and Products and Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Statement periodically for updates.

Please note that our Website is intended only for individuals acting in a business-to-business context. It is not for general consumers acting in a personal or household context. In general, Zywave acts as a service provider on behalf of our customers, including where we offer to our customers various products and services through which our customers (or us on their behalf): (i) manage and request information in regard to health benefit plans and technology solutions for the insurance industry; (ii) sell or offer their own products, services and health benefit plan solutions; (iii) send electronic communications to other individuals; or (iv) otherwise collect, use, share, or process personal information via our products and services. To this end, if not stated otherwise in this Privacy Statement, or in a separate disclosure, we are a processor and process your Personal Information in the role of a vendor, business associate, or service provider on behalf of a customer (and/or its affiliates) who is the responsible business for your Personal Information. When acting as a vendor, business associate, or service provider, we will only collect, use, and otherwise process your Personal Information as directed by our customers and as otherwise permitted by applicable law.

If your data has been submitted to us by or on behalf of a Zywave customer and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable customer directly. Because we may only access a customer’s data upon instruction from that customer, if you wish to make your request directly to us, please provide to us the name of the Zywave customer who submitted your data to us. We will refer your request to that customer, and will support them as needed in responding to your request within a reasonable timeframe. If you are a consumer seeking privacy information related to collection and use of your data by or on behalf of one of our customers who uses our products and services, please reach out to the respective customer directly. We are not responsible for and have no control over the privacy practices of our customers, which may differ from those set forth in this Privacy Statement.

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or on the Website and Products and Services. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on our Website or on or through any of its features/register on or through the Website, make any purchases through the Website or Products and Services or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information directly from a child under 18, please contact us using the contact information listed at the end of this Privacy Statement.

Information We Collect About You and How We Collect It

Throughout this Privacy Statement, the term “Personal Information” means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or device. However, Personal Information does not include any deidentified or aggregated information.

Generally

We collect Personal Information from various sources, including:

• directly from you when you provide it to us;
• automatically as you navigate through or otherwise use the Website; and
• From third parties, for example, our business partners.

Information You Provide to Us

We may collect the following types of Personal Information directly from you when you access or use our Website: real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, signature, account name, financial information, title, employer name, employment history, browsing history, search history, information on an individual’s interaction with a website, application or advertisement, current or past job history or performance, and records of goods and services purchased, obtained, or considered to be purchased or obtained, or other purchasing or consuming histories or tendencies. In addition, we also collect other types of information that you may provide when you fill out a form or through your correspondence with us.

We may also collect:

• information that you provide by filling in forms on our Website. This includes information provided at the time of requesting product-related information or further services;
• if you contact us, records and copies of your correspondence (including email addresses); or
• details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain Personal Information about your interaction with our Website, including information about your equipment, browsing actions, and patterns. This includes:

• details of your visits to, and use of, our Website (including location data, and other communication data and the resources that you access, use, or otherwise interact with on or through the Website); and
• information about your computing device and internet connection, i.e., your IP address.

The information we collect automatically may include Personal Information, or we may maintain it or associate it with Personal Information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service by enabling us to:

• estimate our audience size and usage patterns;
• store information about your preferences;
• provide you with targeted advertising, which is based on your activities on the Website[s] and other online activities;
• record your activities on our Websites for analytics and debugging purposes;
• customize our Website according to your individual interests;
• speed up your searches; and
• recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. Our Website may use both session cookies and persistent cookies:
  • Session Cookies. Each time you access the Website, a session cookie containing an encrypted, unique identifier is placed on your device. These session cookies allow us to uniquely identify you when you use the Website and allow us to maintain session information.
  • Persistent Cookies. Persistent cookies that may contain a unique identifier are placed on your device when you access the Website. These cookies are used to track aggregate and statistical information about user activity, maintain your preferences, and provide you with targeted or behavioral advertising based on your activities on the Website. The amount of time these cookies remain on your device may vary, depending on the cookie.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Website. You can find more information about cookies at http://www.allaboutcookies.org.

• Web Beacons. Pages of our Website, screens of our Application, and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
• Website Interaction and Performance Monitoring Tools. Our Website may also use interaction and/or performance monitoring tools (sometimes call tracking scripts, analytics tools, session replay tools, or heatmap tools). These tools execute code in your web browser to help us collect data about your use of and interactions with the pages and content on our Website. This may include recording your mouse movements, keystrokes, navigation pathways, other actions that you take on our Website, and information automatically transmitted from your web browser to our Website such as information about your operating system, computer hardware, and browser preferences.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website may be served by third-parties, including advertisers, ad networks and servers, content providers, analytics providers, social media companies, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

You can adjust your preferences regarding our use of cookies and tracking technologies through our cookie consent manager, which you may access by clicking the blue cookie icon on the bottom left of any page of our Website.

By ALLOWING us to use any of the above described technologies THROUGH YOUR CHOICE ON OUR COOKIE CONSENT MANAGER, you hereby consent to our recording your mouse movements, keystrokes, navigation pathways, use and communications you may have with our Website (including information related to your access to any audio-visual materials available on or through the website), and other actions that you take on or through the website and our disclosure of such recorded information to third-party providers of such tools.

Information We Create About You

We may also create certain information about you. When we associate this information with other Personal Information about you, we consider this information to be Personal Information. This information includes: unique identifiers, products, or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.

Information We Collect from Third Parties

We may collect Personal Information from third parties. When we associate this information with other Personal Information about you, we consider this information to be Personal Information. This information includes: real name, alias, current or prior postal address, unique personal identifier, email address, telephone number, account name, title, employer name, employment history, records of goods and services purchased, obtained, or considered to be purchased or obtained.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any Personal Information:

• to provide and personalize our Website and its content to you;
• to provide you with information, products, or services that you request from us;
• to support, develop, troubleshoot, and debug our Website, products, and services;
• to create, maintain, customize, and secure your account with us;
• to process your requests, purchases, transactions, and payments and prevent transactional fraud;
• to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;
• to personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and advertisements through our Website, third-party sites, and via email or text message (with your consent, where required by law);
• to contact or advertise to you about our own goods and services that may be of interest to you;
• to help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business;
• for internal testing, research, analysis, and product development, including to develop and improve our Website, and to develop, improve, or demonstrate our products and services;
• auditing relating to a current interaction with you and concurrent transactions, including, but not limited to, counting advertising impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with any applicable specification and other standards;
• detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• debugging to identify and repair errors that impair existing intended functionality;
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• to notify you about changes to our Website or any products or services we offer or provide though them;
• to allow you to participate in interactive features on our Website;
• in any other way we may describe when you provide the information;
• to fulfill any other purpose for which we have collected it; and
• for any other purpose with your consent.

We may anonymize or aggregate your Personal Information in accordance with applicable law such that it can no longer reasonably be used to identify you and use it without restriction.

Disclosure of Your Personal Information

We do not share, sell, or otherwise disclose your Personal Information for purposes other than those outlined in this Privacy Statement. However, we may disclose anonymized or aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose Personal Information that we collect or you provide as described in this Privacy Statement:

• to our subsidiaries and affiliates;
• to contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them. These entities provide IT and infrastructure support services and payment processing services;
• to a potential or actual buyer or other successor in the event of a planned or actual merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Zywave’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Zywave about our Website’s users is among the assets transferred;
• to third parties to market their products or services to you if you have not opted out of these disclosures;
• to third-party cookie and other tracking technology providers for the purpose of providing analytics and cross-context behavioral advertising services to us;
• to fulfill the purpose for which you provide it;
• for any other purpose disclosed by us when you provide the information; and
• with your consent.

We may also disclose your Personal Information:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• to enforce or apply our terms and conditions; and
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Zywave, our customers, or others.

Choices About How We Use and Disclose Your Information

We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information. When reasonably possible, these organizations are under contractual obligations to use this data only for providing the services to us and to maintain strict confidentiality of the information. These third parties may, however, aggregate the information they collect with information from their other customers for their own purposes.

In addition, we strive to provide you with choices regarding the Personal Information we have collected about you. We have created mechanisms to provide you with control over your Personal Information:

• Tracking Technologies. We may use certain tracking technologies that may record your activities on our Website and your other online activities, and such recordings may be disclosed and processed by third-parties who provide such technologies. This helps us understand our users and the use of our Website. You may disable these technologies through our cookie consent manager, which you may access by clicking the blue cookie icon on the bottom left of any page of our Website.
• Targeted and Behavioral Advertising. Our Website may use certain technologies, including cookies, to tailor advertising to you based on your activities of our Website and other online activities. You may disable these technologies through our cookie consent manager, which you may access by clicking the blue cookie icon on the bottom left of any page of our Website.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative (“NAI“) on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info).

California residents may have additional rights and choices. Please see our California Notice at Collection for more information.

Accessing, Correcting, and Deleting Your Personal Information

You may send us an email at [email protected] to request access to, correct, or delete any Personal Information that we have collected about you. We cannot delete your Personal Information except by also deleting your user account. We may not accommodate a request to change or delete your Personal Information if we believe the change or deletion would violate any law or legal requirement or cause the information to be incorrect.

The jurisdiction in which you are a resident or are located may provide you with additional rights and choices regarding your Personal Information. Please see Jurisdiction-Specific Privacy Rights for more Information.

Jurisdiction-Specific Privacy Rights

The law in some jurisdictions may provide you with additional rights regarding our use of Personal Information. To learn more about any additional rights that may be applicable to you as a resident of one of these jurisdictions, please see the privacy addendum for your jurisdiction that is attached to this Privacy Statement.

Your California Privacy Rights

If you are a resident of California, you have the additional rights described in the Zywave Website Privacy Addendum for California Residents.

Do Not Track Signals and Global Privacy Control Signals

We also may use automated data collection technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such a signal is broadcast or received by us.

Some web browsers and browser extensions permit you to broadcast the Global Privacy Control signal (“GPC Signal“) as specified at https://www.globalprivacycontrol.org. Our Website is designed to honor the GPC Signal and we may limit the Personal Information or other information we collect and how we use your Personal Information or other information based upon whether such a signal is transmitted by your browser or device and received by us.

Data Security

We are committed to the security of your Personal Information and have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure.

Unfortunately, the transmission of information via the internet is not completely secure. Although we have implemented measures to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures deployed on the Website.

Consent to Processing of Personal Information in the United States

In order to provide our Website to you, we may send and store your Personal Information outside of the country where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Information. Your Personal Information may be processed and stored in the United States and federal, state, and local governments, courts, or law enforcement or regulatory agencies in the United States may be able to obtain disclosure of your information through the laws of the United States. By using our Website, you represent that you have read and understood the above and hereby consent to the storage and processing of Personal Information outside the country where you reside or are located, including in the United States.

Changes to Our Privacy Statement

We may change this Privacy Statement at any time. It is our policy to post any changes we make to our Privacy Statement on this page. The date this Privacy Statement was last revised is identified at the top of the page. You are responsible for periodically visiting this Privacy Statement to check for any changes.

Your continued use of our Website following the posting of changes constitutes your acceptance to such changes.

Contact Information

If you have any questions, concerns, complaints, or suggestions regarding our Privacy Statement or the ways in which we collect and use your Personal Information described in this Privacy Statement, have any requests related to your Personal Information pursuant to applicable laws, or otherwise need to contact us, you may contact us at the contact information below.