Last Updated: May 6, 2026
This Privacy Policy and Notice ( “Privacy Policy”) describes how RLI Corp., RLI Insurance Company, Mt. Hawley Insurance Company, Contractors Bonding and Insurance Company, RLI Underwriting Services, Inc. (including the RLI Safety Solutions service), Safe Fleet Insurance Services, Inc., and Data and Staff Service Co. (“RLI” or “we” or “us” ) collect, use, share, retain, and protect information about you when you (1) visit one of our websites ; (2) communicate with us or one of our websites via email and other electronic messages; (3) create an account on one of our websites (4) submit a claim via one of our websites; and (5) otherwise interact with us online or offline, such as on the telephone and in written correspondence (collectively, our “Services”).
RLI does not control and is not responsible for the content or the privacy policies or practices of any third-parties, third-party websites, or third-party applications, including those that may link to or can be accessible via one of our websites. This Privacy Policy does not govern third parties’ collection and use of your information, except as specifically described in this Privacy Policy.
Before accessing, using, or interacting with the Services you should carefully review this Privacy Policy and our Terms of Use (https://www.rlicorp.com/terms-use), which are incorporated by reference and also govern use of the Services. We may change our Privacy Policy and Terms of Use from time to time and encourage you to review them whenever you interact with us.
User Consent: By choosing to interact with RLI, including through our Services, you consent to the collection and use of information as described in this Privacy Policy and you represent that you are at least 18 years old. If you are under the age of 18 or you do not consent to the collection, use and/or disclosure of your personal information as set forth in this Privacy Policy, please exit and do not use our Services.
What Personal Information Does RLI Collect?
For purposes of this Notice, unless noted otherwise, when we use the term “personal information,” we mean information that identifies, relates to, describes, references, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular person or household (“personal information”).
We may collect personal information that falls into the following categories:
How Does RLI Collect Information About Me?
We collect and store information that you give us directly. For example, when you:
We also receive and store certain types of information automatically when you interact with us online or with the Website.
RLI uses third-party services to better understand your needs and to optimize your experience, by assessing, for example, how much time you spend on which pages and which links you choose to click. These services use cookies and other technologies to collect data on your behavior and devices. This includes a device’s IP address (collected during your session device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. RLI’s third-party service providers store this information on our behalf in a pseudonymized user profile, and are contractually forbidden from selling the data collected on our behalf. RLI also uses other third-party service providers to collect and store data given to us directly via forms on our website. These service providers are contractually forbidden to sell any of the data collected on our behalf.
For purposes of our insurance policy information, RLI may also learn information indirectly about you, which you make publicly available, such as on a social network or shared with third parties. Please note, any content or information you share with or provide to third parties regarding RLI, your communications with RLI, or using or related to the Website may not be private or confidential and is not the responsibility of RLI.
How Does RLI Use Information About Me?
RLI may use and process information about you, including personal information, for one or more of the purposes described in this Privacy Notice. For example, RLI (and/or our Service Providers) may use information about you to:
Our Use of Artificial Intelligence in Underwriting
We may use external consumer data and information sources and artificial intelligence systems in our underwriting and pricing processes. We may also obtain information from external sources about you to inform our decisions. Policyholders have the right to request information about the specific data and sources that we may rely on to inform our underwriting or pricing decisions about insurance products we have offered to you. To make an information request, please send your request to privacy@rlicorp.com. Please identify the specific insurance product about which you are seeking information, including the date of the relevant coverage term and policy number.
Does RLI Share the Information It Receives About Me?
RLI may share or disclose information as described below:
How Does RLI Secure Information About Me?
We realize that you trust us to protect your personal information. We take that trust seriously and maintain physical, electronic and procedural safeguards that are consistent with industry standards to help protect the privacy, accuracy, and reliability of personal information and to protect it from loss, misuse, unauthorized access, disclosure, acquisition, exfiltration, alteration and destruction.
We also take commercially reasonable steps to ensure that our third-party service providers reasonably protect and secure your information. If RLI becomes aware that a third-party service provider is using or disclosing information improperly, we will take necessary and immediate steps to end or correct such improper use or disclosure.
While we attempt to protect the information in our possession and account for the protection of information provided to our third-party service providers through us, no security system is perfect and we cannot promise that information about you will remain secure in all circumstances. Please do your part to help us keep your information secure. You are responsible for maintaining the confidentiality of your password(s) and your Account(s), and for all activities that occur under your password or Account(s). RLI specifically reserves the right to terminate your access to your Account(s) and any contract you have with RLI related to the use of the Website in the event it learns or suspects you have disclosed your Account or password information to an unauthorized third party.
What Choices Do I Have?
To exercise these rights, as described above, please submit a request to us by either:
Communications from RLI
Users may opt-out of receiving certain communications from RLI by following the unsubscribe process described in our communications, changing your account settings, or by contacting us by using the contact information provided below. Please note that such requests may take some time to fulfill and that certain insurance policy and Website-related communications, including but not limited to account verification, changes or updates to Website features, or technical and security notices are non-optional.
Your Potential Rights under State Privacy Laws
If you live in California, Minnesota, Oregon, or another state that has adopted a data protection law, you may have certain rights to request information from us about our processing or your Personal Information, or to direct us to take certain actions related to your Personal Information.
RLI is subject to the Gramm-Leach-Bliley Act (GLBA), and as such, not all data protection laws may be applicable to us under GLBA exemptions. However, if you believe that a data privacy law applies to you and you would like to exercise a right it gives you, please contact privacy@rlicorp.com.
The Right to Access, Correct, and Delete Personal Information. Depending on your state of residence in the U.S., you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
Depending on your state of residence in the U.S., you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
Access, Correction, and Deletion
You can submit a request to access, correct, or delete your personal information, or withdraw consent, by:
In the case that we are legally required to fulfill your request, we’ll use commercially reasonable efforts in order to comply with it. Upon our receipt of a verifiable request to delete personal information we will delete the personal information from our records and will direct any Service Providers to delete your personal information from their records.
Please note: we may deny your deletion request (and need not ask Service Providers to comply with a deletion request) if retaining the information is necessary to perform certain functions or commitments, including: completing the transaction for which the personal information was collected; providing a service requested; otherwise performing our contract with you or taking reasonably anticipated actions within the context of our ongoing business relationship with you; detecting security incidents and protecting against malicious, deceptive or otherwise illegal activity or to prosecute those responsible for those activities; complying with a legal obligation or otherwise using the personal information, internally, in a lawful manner; fulfilling the terms of a written warranty or product recall conducted in accordance with federal law; or, for a purpose otherwise contemplated in applicable laws where you reside.
Response timing and format.
Once you have submitted your request, we will respond within the time frame permitted by the applicable law. If we require more time to provide a response, we will inform you of the reason and extension period in writing.
If your right to access information is made under the CCPA’s “right to know,” we are only required to provide you information we have collected on or after January 1, 2022. If we are not able to comply with your requests, our response will include reasons as to why. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Identity Verification
We cannot comply with your requests to access, correct, or delete if we cannot verify your identity. A verifiable request must:
We reserve the right to require additional information from you to verify your request before we respond. Any personal information provided to us in a verifiable customer request will be used only to verify the requestor’s identity to make the request.
Authorized Agent
Depending on your state of residence in the U.S., you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
Appealing Requests
Depending on your state of residence in the U.S., you may be able to appeal our decision to your request regarding your personal information. To do so, please contact us at privacy@rlicorp.com. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.
Additional Information for California Residents
The California Consumer Privacy Act (the “CCPA”) provides California Residents specific rights regarding their personal information. For purposes of the CCPA, personal information does not include: publicly available information from government records; de-identified or aggregated consumer information; and, information excluded from the CCPA’s scope, including: health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data, certain information covered by sector-specific privacy laws, such as the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994 (DPPA). Any terms defined in the CCPA have the same meaning when used in this Notice.
The rights conferred by the CCPA apply solely to visitors, users, and others who reside in the State of California.
Categories of Personal Information We Collect and its Use
You can find a list of the categories of personal information that we collect in the “What Personal Information Does RLI Collect?” section above. For details regarding the sources from which we obtain personal information, please see the “How Does RLI Collect Information About Me?” section above. We collect and use personal information for the business and commercial purposes described in the “How Does RLI Use Information About Me” section above.
Categories of Personal Information Disclosed and Categories of Recipients
The CCPA grants California Residents the right to ask RLI about its collection and use of the personal information it has collected on or after January 1, 2020. Instructions on how a California Resident can submit a verifiable consumer request for access to this information (referred to as a “Request to Know”) are below. Once we receive and confirm that you have made a verifiable consumer Request to Know, we will make an individualized disclosure to you about:
No Retaliation
You have the right not to receive discriminatory treatment by us for your exercise of the privacy rights conferred on you by the CCPA.
Other Rights Not Applicable
In some cases, the CCPA gives California consumers the right to opt out of sales to third parties and automated decision making technology (ADMT), and to limit the disclosure of their sensitive information. These rights do not apply because: 1) we do not sell or share your information (as those terms are defined in the CCPA), 2) we do not use ADMT, and 3) we do not disclose sensitive information for any purpose that is not set forth in section 7027(m) of the CCPA Rules.
How to Exercise Your Rights if You Reside in California
You may make a verifiable request to exercise your right to access or data portability twice within a 12-month period. To exercise the access, data portability, deletion, and correction rights described above, please submit a verifiable consumer request to us by either:
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to the personal information about you. If the request is made through an agent, we reserve the right to require a signed authorization or verification of the agent’s identify from you in order protect the privacy of the personal information requested. You may also make a verifiable consumer request on behalf of your minor child.
We cannot provide you with the information sought in a Request to Access, or comply with a Request to Delete or Correct, if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. A verifiable request must:
We reserve the right to require additional information from you to verify your request before we respond. Any information provided to us in a verifiable customer request will be used only to verify the requestor’s identity or authority to make the request.
Other California Privacy Rights
privacy@rlicorp.com with "Request for California Privacy Information" on the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response.
Changes to Our Privacy Notice
RLI may modify this Privacy Notice from time to time. The most current version of this Privacy Notice will govern our use of your information and will be located at https://www.rlicorp.com/rli-privacy-policy. You may contact us to obtain prior versions. We will notify you of material changes to this policy by posting a notice at the Website or by emailing you at an email address associated with your Website Account, if applicable, and provide an “at a glance” overview of any changes.
Contact for More Information
RLI Corp. is located at 9025 N. Lindbergh Dr., Peoria, IL 61615. Should you have any comments or questions about how we collect and use your personal information, communication can be directed to RLI’s postal address, via email to privacy@rlicorp.com or by telephone to 1-833-473-1468.
