Privacy Policy
coveragefinderusa.com
Last Updated: September 4, 2026 | Effective Date: September 4, 2026
1. Who We Are
Sanare Lab Ltd (hereinafter 'we', 'us', 'our'), a company registered in England and Wales with its registered office at Kemp House, 160 City Road, London, EC1V 2NX, United Kingdom, operates the website located at coveragefinderusa.com (the 'Website').
For the purposes of the UK GDPR and the EU General Data Protection Regulation, we act as the Data Controller. For the purposes of the California Consumer Privacy Act (CCPA/CPRA) and other United States state privacy laws, we act as a Business with respect to the personal information described in this Policy.
Privacy contact: privacy@coveragefinderusa.com
Legal contact: legal@coveragefinderusa.com
2. Scope of This Policy and Nature of the Website
This Privacy Policy applies to all visitors of coveragefinderusa.com and explains what information we collect, why we collect it, with whom we share it, and what choices and rights you have.
The Website operates as an advertising and affiliate marketing platform in the U.S. auto insurance category. We publish educational guides and comparison content, and we operate an informational questionnaire (the 'Quiz'). At the end of the Quiz, you may be redirected to a third-party partner website where you can, if you choose, request quotes or purchase insurance directly from that provider. We receive compensation from partners for referred traffic and qualifying actions.
3. Information We Collect
3.1 Quiz Responses
Our Quiz is designed on a data-minimisation basis. It asks only general, non-identifying questions about your insurance needs, such as:
- Vehicle category or ownership status
- Type of coverage you are interested in
- Whether you currently hold an active policy
- General driver profile categories (for example, an age band or years of driving experience)
- Where requested, a five-digit ZIP code used only to route you to a relevant partner offer
Quiz responses may be passed to our partner as parameters appended to the redirect link, so that the partner can pre-fill or tailor the page you land on. Quiz responses are also recorded in our internal analytics and campaign-tracking system together with the technical data described in Section 3.2.
3.2 Information Collected Automatically
When you visit the Website, the following is collected automatically:
- IP address and approximate (city / state level) location derived from it
- Device type, operating system, browser type and version, screen resolution, language
- Pages viewed, time on page, scroll and click behaviour, referring URL, exit URL
- Advertising click identifiers passed to us by ad platforms (for example gclid, fbclid, ttclid, msclkid) and our own campaign sub-identifiers
- Cookie and pixel identifiers (see Section 8 and our Cookie Policy)
3.3 Information Collected by Third-Party Advertising and Analytics Tools
The following third parties may independently collect information about your visit through tags, pixels and SDKs embedded in the Website. Each acts under its own privacy policy in respect of that data:
| Tool | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google Analytics 4 | Google LLC | Website audience measurement | policies.google.com/privacy |
| Google Ads | Google LLC | Conversion tracking, remarketing | policies.google.com/privacy |
| Meta Pixel | Meta Platforms, Inc. | Conversion tracking, retargeting on Facebook / Instagram | facebook.com/policy.php |
| TikTok Pixel | TikTok Inc. | Conversion tracking, retargeting | tiktok.com/legal/privacy-policy |
| Microsoft UET | Microsoft Corporation | Bing Ads conversion tracking | privacy.microsoft.com |
| Taboola Pixel | Taboola, Inc. | Native ad performance measurement | taboola.com/privacy-policy |
| Outbrain Pixel | Outbrain Inc. | Native ad performance measurement | outbrain.com/privacy |
| NewsBreak Pixel | Particle Media, Inc. | Ad performance measurement | newsbreak.com/privacy |
| Snap Pixel | Snap Inc. | Conversion tracking, retargeting | snap.com/privacy/privacy-policy |
| Shopify | Shopify Inc. | Website hosting and platform operation | shopify.com/legal/privacy |
4. Information We Do Not Collect
We consider it important to be explicit about this. Through the Website and the Quiz we do not ask for, and do not knowingly collect:
- Your name
- Your email address
- Your telephone number
- Your street address
- Your date of birth
- Your driver's licence number or state ID number
- Your vehicle identification number (VIN) or licence plate
- Your Social Security number or taxpayer identification number
- Financial account, payment card, or credit information
- Precise (GPS-level) geolocation
- Any category of sensitive personal information as defined by the CCPA/CPRA or comparable state laws
If we ever change the Quiz so that it collects identifying information, we will update this Policy before that change goes live and, where the law requires it, obtain your consent.
5. Why We Process Information (Purposes and Legal Bases)
| Purpose | Information Used | Legal Basis (UK/EU GDPR) |
|---|---|---|
| Operating, securing and displaying the Website | IP address, device data, essential cookies | Art. 6(1)(f) — legitimate interests in running a secure, functioning website |
| Presenting Quiz results and routing you to a relevant partner offer | Quiz responses, coarse location, click identifiers | Art. 6(1)(b) / 6(1)(f) — delivering the service you asked for |
| Measuring campaign performance and attributing conversions | Click identifiers, cookie identifiers, Quiz completion events | Art. 6(1)(a) — consent (EEA/UK); notice and opt-out (U.S.) |
| Audience measurement and improving our content | Aggregated analytics data | Art. 6(1)(a) — consent (EEA/UK); Art. 6(1)(f) elsewhere |
| Targeted and retargeted advertising | Cookie and device identifiers shared with ad platforms | Art. 6(1)(a) — consent (EEA/UK); notice and opt-out (U.S.) |
| Detecting invalid traffic, bots, click fraud and abuse | IP address, device fingerprint signals, request patterns | Art. 6(1)(f) — legitimate interests in fraud prevention |
| Handling privacy requests and maintaining compliance records | Contact details you supply in a request, consent logs | Art. 6(1)(c) — legal obligation |
6. How We Share Information
6.1 Insurance Marketing Partners (Redirect)
When you click a partner link or complete the Quiz, you are redirected to a third-party website. As part of that redirect we may transmit: our campaign and click identifiers, the fact that the Quiz was completed and the general answers you selected, your ZIP code where you provided one, and standard browser-supplied data such as your IP address and user agent.
Our partners act as independent controllers / independent businesses in respect of anything you subsequently do on their site. We are not a party to any relationship, quote, application or policy you may form with them. We strongly recommend that you read the partner's own privacy policy and terms before submitting information to them.
6.2 Advertising and Analytics Partners
We share pseudonymous identifiers (cookie IDs, device identifiers, click IDs, conversion events) with the platforms listed in Section 3.3 in order to measure and optimise our advertising. In the United States this activity may constitute 'sharing' for cross-context behavioural advertising, and in some cases a 'sale', under state privacy laws. See Section 7.
6.3 Service Providers
We use vendors who process information on our behalf and under contract, including our website platform (Shopify Inc.), our content delivery and security providers, and our self-hosted campaign tracking system. These vendors are permitted to use the information only to provide services to us.
6.4 Legal and Corporate Disclosures
We may disclose information where required by applicable law, court order, or a lawful request from a public authority, to establish or defend legal claims, or in connection with a merger, acquisition, financing or sale of assets, in which case the recipient will be bound by this Policy or provide notice of any change.
7. 'Sale' and 'Sharing' Under U.S. State Privacy Law
We do not sell personal information for money. However, U.S. state privacy laws define 'sale' and 'sharing' broadly. We set out our own assessment below in good faith:
| Data Flow | Our Classification | Your Control |
|---|---|---|
| Cookie and device identifiers shared with advertising platforms (Meta, Google, TikTok, Microsoft, Taboola, Outbrain, Snap, NewsBreak) | Sharing for cross-context behavioural advertising; may also be treated as a Sale | Opt out via banner, GPC, or the Do Not Sell page |
| Click identifiers and Quiz answers passed to a marketing partner in the redirect, for which we receive compensation | May constitute a Sale because valuable consideration is involved | Opt out before completing the Quiz; see Do Not Sell page |
| Analytics data used solely to measure our own site performance | Not a sale — service provider processing | Reject analytics cookies in the banner |
| Data held in our own self-hosted tracking system | Not a sale — internal processing only | Submit a deletion request |
We do not knowingly sell or share the personal information of consumers under 16 years of age.
To exercise your opt-out, use the Do Not Sell or Share My Personal Information page.
8. Cookies and Similar Technologies
We use cookies, pixels, local storage and similar technologies. Full details of every cookie we set, its provider, purpose and duration, together with instructions for managing your preferences, are in our Cookie Policy.
| Category | Description | Consent Required (EEA/UK) |
|---|---|---|
| Strictly necessary | Session handling, security, storing your consent choice | No |
| Analytics | Google Analytics 4 — audience measurement | Yes |
| Advertising | Ad platform pixels — conversion tracking and retargeting | Yes |
| Affiliate tracking | Our own click and conversion attribution | Yes |
9. How Long We Keep Information
| Category | Retention Period | Reason |
|---|---|---|
| Quiz responses and click tracking data | 24 months from collection, then deleted or aggregated | Campaign reporting and partner reconciliation |
| Server and security logs | 12 months | Security and fraud prevention |
| Advertising and analytics cookie data | Up to 13 months, or the platform's standard period | Consent duration and platform defaults |
| Consent and opt-out records | 3 years | Demonstrating compliance |
| Privacy request correspondence | 24 months minimum | Required record-keeping under CCPA/CPRA and comparable laws |
10. Your Privacy Rights — United States
10.1 States With Comprehensive Privacy Laws
If you are a resident of a U.S. state that has enacted a comprehensive consumer privacy law — currently including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia — you generally have the following rights, subject to the specific terms and exceptions of your state's law:
| Right | What It Means |
|---|---|
| Right to know / access | Confirm whether we process information about you and obtain a copy of it |
| Right to delete | Ask us to delete information we hold about you, subject to legal exceptions |
| Right to correct | Ask us to correct inaccurate information (available in most, not all, states) |
| Right to data portability | Receive your information in a portable, machine-readable format |
| Right to opt out | Opt out of the sale of your personal information, of sharing or processing for targeted advertising, and of certain profiling |
| Right to limit sensitive data use | Restrict use of sensitive personal information — noting that we do not collect any (see Section 4) |
| Right to non-discrimination | We will not deny you service, charge you differently or degrade your experience for exercising a privacy right |
| Right to appeal | If we decline your request, you may appeal our decision — see Section 11.3 |
10.2 Universal Opt-Out Signals (Global Privacy Control)
We honour the Global Privacy Control (GPC) signal. If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of the sale and sharing of personal information associated with that browser, and we suppress advertising tags accordingly. We apply this to all U.S. visitors, not only those in states where it is mandatory. Because GPC is browser-specific, you will need to enable it on each browser and device you use. Learn more at globalprivacycontrol.org.
10.3 California — Additional Rights
California residents have the additional rights described on our Do Not Sell or Share My Personal Information page, including the right to know the categories of personal information collected, the sources, the business purposes, and the categories of third parties to whom it is disclosed, as well as rights under the 'Shine the Light' law (Cal. Civ. Code § 1798.83).
10.4 Nevada
Nevada residents may submit a verified request directing us not to sell certain covered information, under Nevada Revised Statutes Chapter 603A. Send such requests to privacy@coveragefinderusa.com with the subject line 'Nevada Opt-Out'.
11. How to Exercise Your Rights
11.1 Submitting a Request
- Email privacy@coveragefinderusa.com with a clear description of your request
- Use the opt-out form on our Do Not Sell or Share page
- Enable GPC in your browser for an automatic opt-out
We respond to opt-out requests within 15 business days, and to access, deletion, correction and portability requests within 45 calendar days, extendable once by a further 45 days where reasonably necessary, in which case we will tell you why.
11.2 Verification
Because we do not collect names or email addresses through the Website, we generally cannot link a browsing session to a named individual. To act on an access or deletion request we may need identifiers such as the cookie ID or click ID associated with your visit, the approximate date of your visit, and the campaign or page you arrived from. We will only ask for what is necessary and will not use verification information for any other purpose. If we cannot verify a request, we will tell you and explain why.
11.3 Appeals
If we decline your request, you may appeal by replying to our decision or emailing privacy@coveragefinderusa.com with the subject line 'Privacy Request Appeal' within 60 days. We will respond in writing within 45 days, explaining the reasons for our decision. If the appeal is denied, we will provide a method for contacting your state Attorney General.
11.4 Authorised Agents
You may use an authorised agent. The agent must supply written authorisation signed by you, or a valid power of attorney. We may contact you to confirm the authorisation before acting.
12. Your Rights — United Kingdom and European Economic Area
Where the UK GDPR or the EU GDPR applies, you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You may also lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In the EEA it is the data protection authority of your country of residence.
13. International Data Transfers
We are established in the United Kingdom, and our vendors and advertising partners are located principally in the United States. Information collected through the Website is therefore processed in both the United Kingdom and the United States, and may be processed elsewhere by our vendors.
Where we transfer personal data out of the United Kingdom or the EEA, we rely on appropriate safeguards, including the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses (Decision 2021/914), supported by transfer risk assessments where required. Copies of the relevant safeguards are available on request.
14. Security
We apply technical and organisational measures appropriate to the limited nature of the data we hold, including encryption in transit (TLS/HTTPS) across the Website, access controls and authentication on our tracking systems, restriction of access to personnel who need it, and data minimisation as a design principle. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, as required by the UK GDPR, and we will comply with applicable U.S. state breach-notification laws.
15. Children
The Website is intended for adults aged 18 or over. It is not directed to children, and we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). We also do not knowingly sell or share the personal information of consumers under 16 for targeted advertising.
If you believe a child has provided information through the Website, contact privacy@coveragefinderusa.com and we will delete it.
16. Telephone, Text and Email Marketing
We do not collect telephone numbers or email addresses through this Website. We do not place marketing calls, send text messages, or operate an email marketing list, and we do not authorise anyone to do so on our behalf using data obtained from this Website.
17. Consumer Reports and Financial Privacy
We do not obtain, request, use or resell consumer reports or credit information about you, and we are not a consumer reporting agency under the Fair Credit Reporting Act (FCRA). We do not access motor vehicle records and are not a permissible user under the Driver's Privacy Protection Act (DPPA).
Insurance carriers and agencies to which we may refer you are typically financial institutions subject to the Gramm-Leach-Bliley Act (GLBA) and applicable state insurance privacy regulations. They will provide their own privacy notices, which govern any information you give them directly.
18. Advertising and Compensation Disclosure
coveragefinderusa.com is an advertising-supported website. We receive compensation from third parties when visitors click through to their sites or complete qualifying actions. This compensation may affect which providers we feature, where they appear, and the order in which they are presented.
We do not review every insurance provider available in the market, and the offers you see are not a complete or objective ranking of all available options. Nothing on the Website is a recommendation to buy any particular policy, and nothing on the Website constitutes insurance, financial, legal or tax advice.
19. Changes to This Policy
We may update this Policy to reflect changes in our practices or in the law. When we do, we will revise the 'Last Updated' date above. Where changes are material — for example, if we begin collecting a category of information we previously did not — we will provide prominent notice on the Website and, where required, obtain fresh consent before the change takes effect.
We review this Policy at least once every twelve months, as required by the CCPA/CPRA.
20. Contact Us and Complaints
Sanare Lab Ltd
Kemp House, 160 City Road
London, EC1V 2NX
United Kingdom
Privacy requests: privacy@coveragefinderusa.com
Legal enquiries: legal@coveragefinderusa.com
If you are not satisfied with our response, you may contact the following authorities:
| Authority | Jurisdiction | Website |
|---|---|---|
| California Privacy Protection Agency | California | cppa.ca.gov |
| Your State Attorney General | All other U.S. states | naag.org/find-my-ag |
| Federal Trade Commission | United States (federal) | reportfraud.ftc.gov |
| Information Commissioner's Office | United Kingdom | ico.org.uk |