Autobody Alliance

1. Introduction

Quality Claims Solutions, Inc. "QCS” ABA Autobody Alliance is committed to protecting the privacy and security of the personal information of our website visitors, clients, business partners, and other individuals who interact with us online. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through our website and related online services (collectively, the "Services").

This Privacy Policy is designed to comply with applicable privacy laws in the United States and Canada, including, without limitation, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25 (Act respecting the protection of personal information in the private sector), and other applicable state and provincial privacy legislation.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Who We Are

Quality Claims Solutions, Inc. is an insurance technology company specializing in automotive insurance claims processing solutions. We provide technology platforms and services to insurance carriers, third-party administrators, repair networks, and related industry participants. Our principal place of business is in the United States.

For purposes of applicable privacy law, Quality Claims Solutions, Inc. acts as a "business" (under CCPA/CPRA), "organization" (under PIPEDA), and/or "controller" with respect to personal information we process through our public-facing website and marketing activities. Where we process personal information on behalf of our business clients, we may act as a "service provider" or "processor" as further described in Section 10 below.

3. Information We Collect

We may collect the following categories of personal information:

3.1 Information You Provide Directly

• Contact information such as name, email address, phone number, mailing address, and job title when you fill out a contact form, request a demo, or communicate with us.
• Account credentials if you register for an account or portal access.
• Business information such as company name, industry, and role when inquiring about our services.
• Communications content including the contents of emails, messages, or inquiries you send to us.
• Payment and billing information, which may be collected and processed by our third-party payment processors.

3.2 Information Collected Automatically

• Device and browser information such as IP address, browser type and version, operating system, and device identifiers.
• Usage data including pages visited, links clicked, referring URLs, time spent on pages, and navigation paths.
• Log data generated by our servers when you access our website, including timestamps and error logs.
• Geolocation information at the city or regional level derived from your IP address.
• Cookies and similar tracking technologies as described in Section 8 below.

3.3 Information from Third Parties

• Business contact information obtained from commercially available data sources, industry directories, or professional networks in connection with business development activities.
• Analytics and advertising data from third-party service providers who assist us in understanding website traffic and marketing performance.
• Information from publicly available sources, including corporate websites and professional profiles.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your inquiries, requests, or communications, and to provide customer support.
• To provide, operate, maintain, and improve our Services and website.
• To process transactions and manage our business relationship with you or your organization.
• To send administrative communications, including service updates, security alerts, and policy changes.
• To send marketing communications, promotional materials, and industry news, where you have provided consent or where permitted by applicable law. You may opt out at any time.
• To analyze usage patterns and improve the functionality, usability, and performance of our website and Services.
• To detect, prevent, and respond to fraud, security incidents, and other harmful or unlawful activity.
• To comply with legal and regulatory obligations, enforce our terms of service, and protect the rights and interests of QCS and our users.
• To fulfill any other purpose for which you provide information, or as otherwise disclosed at the time of collection.

Legal bases for processing under applicable law (including Canadian law) include: your consent, performance of a contract, compliance with a legal obligation, and our legitimate business interests where these are not overridden by your rights and interests.

5. Disclosure of Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors and service providers who perform functions on our behalf, such as hosting, analytics, email delivery, customer support, payment processing, and cybersecurity. These parties access personal information only as necessary to perform their services and are contractually obligated to protect it.

5.2 Business Clients

Where you interact with us as part of our delivery of services to a business client (e.g., an insurance carrier or repair facility), we may share relevant information with that client in accordance with our agreement with them and applicable law.

5.3 Corporate Transactions

In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as part of the transaction. We will notify you of any such change as required by applicable law.

5.4 Legal and Regulatory Disclosure

We may disclose information when required by law, subpoena, court order, or government request; to enforce our legal rights; to protect the safety, rights, or property of QCS, our users, or the public; or to detect and prevent fraud or illegal activity.

5.5 With Your Consent

We may share information with third parties when you have provided express consent to do so.

6. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

6.1 Rights for All Users

• Right to Know / Access: You may request information about the categories and specific pieces of personal information we have collected about you, as well as details about how we use and share it.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time using the unsubscribe link in our emails or by contacting us directly.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

6.2 Additional Rights for California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA and CPRA, including:

• Right to Know the categories of personal information collected, used, disclosed, or sold.
• Right to Opt Out of the Sale or Sharing of Personal Information. We do not sell personal information, but you may submit a request if you believe sharing has occurred.
• Right to Limit Use of Sensitive Personal Information where applicable.
• Right to Non-Discrimination for exercising your privacy rights.
• Right to Opt Out of Automated Decision-Making where applicable.

To submit a California privacy request, please contact us using the information in Section 13. We will respond within 45 days of receipt of a verifiable consumer request, with a possible extension of an additional 45 days where reasonably necessary.

6.3 Rights for Canadian Residents (PIPEDA and Quebec Law 25)

Canadian residents have rights under PIPEDA and, if located in Quebec, under Law 25, including:

• Right to access personal information we hold about you.
• Right to challenge the accuracy and completeness of your personal information and to have it amended.
• Right to withdraw consent for the collection, use, or disclosure of your personal information, subject to legal and contractual restrictions.
• Right to make a complaint to the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information (CAI) in Quebec.
• Right to data portability (under Quebec Law 25) for personal information collected with your consent or necessary to provide a service.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our Services, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period depends on the category of information and the purpose for which it is used.

When personal information is no longer needed, we securely delete, anonymize, or destroy it in accordance with our internal data retention policies and applicable law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) to enhance your browsing experience, analyze website traffic, and support our marketing activities.

Types of cookies we use include:

• Strictly Necessary Cookies: These are essential to enable you to navigate the website and use its features. They cannot be disabled.
• Analytics and Performance Cookies: These help us understand how visitors interact with our website by collecting information in aggregate. We use this data to improve website performance and user experience.
• Functionality Cookies: These allow us to remember your preferences and settings to provide an enhanced experience.
• Marketing and Targeting Cookies: These may be used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

You may control your cookie preferences through your browser settings or our cookie preference center (if available). Please note that disabling certain cookies may affect the functionality of our website. For Canadian residents, we obtain your consent before placing non-essential cookies in accordance with applicable law.

9. Data Security

Quality Claims Solutions, Inc. implements commercially reasonable technical, administrative, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure network architecture, and employee training on data protection practices.

While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of information transmitted over the internet. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

10. Personal Information Processed on Behalf of Clients

In providing our insurance technology services to business clients (such as insurance carriers, third-party administrators, and repair networks), QCS may process personal information about claimants, policyholders, vehicle owners, and other individuals on behalf of those clients. In these contexts, QCS acts as a service provider or data processor, and our clients are the data controllers responsible for the collection and use of that personal information.

If you are an individual whose personal information was processed by QCS in connection with an insurance claim or related service and you wish to exercise your privacy rights, please contact the insurance carrier or other business that engaged us directly. We will cooperate with such requests as required by our agreements and applicable law.

11. Children's Privacy

Our Services are not directed to individuals under the age of 16 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information without appropriate consent, please contact us immediately and we will take steps to delete such information.

12. International Data Transfers

Quality Claims Solutions, Inc. is headquartered in the United States. If you access our Services from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other countries, which may have different data protection laws than your home country.

For transfers of personal information from Canada to the United States, we ensure that appropriate contractual protections are in place in accordance with PIPEDA and applicable provincial privacy legislation, including Quebec's Law 25 requirements relating to privacy impact assessments for cross-border transfers.

13. How to Contact Us / Submitting a Privacy Request

If you have questions, concerns, or requests related to this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please contact our Privacy Team using the information below:

• Quality Claims Solutions, Inc.
• Attn: Privacy Officer
• Email: Support@qcsdirect.com
• Website: www.qcsdirect.com

We will acknowledge your request promptly and respond within the time frames required by applicable law. We may need to verify your identity before processing certain requests.

If you are a Canadian resident and are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or, if you are in Quebec, with the Commission d'accès à l'information at www.cai.gouv.qc.ca.

If you are a California resident and are not satisfied with our response, you may contact the California Privacy Protection Agency at https://cppa.ca.gov.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, provide additional notice (such as a banner on our website or an email notification).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

15. Glossary of Key Terms

• • "Personal Information" means any information that identifies, relates to, or is reasonably capable of being associated with a specific individual, as defined by applicable privacy law.
• • "Sensitive Personal Information" includes information such as Social Security numbers, financial account credentials, racial or ethnic origin, health data, and precise geolocation.
• • "CCPA/CPRA" means the California Consumer Privacy Act (Cal. Civ. Code §§ 1798.100 et seq.) as amended by the California Privacy Rights Act.
• • "PIPEDA" means the Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) and its regulations.
• • "Law 25" means An Act to modernize legislative provisions as regards the protection of personal information (Quebec), amending the Act respecting the protection of personal information in the private sector.