Privacy & Security
Sections:
Privacy statement for consumers
California Consumer Privacy Act Disclosure
Travelers cybersecurity practices
California Consumer Privacy Act Disclosure
Last Updated: April 9, 2025
The Travelers Companies, Inc. and its affiliates (collectively, “Travelers,” “we,” or “us”) value your privacy. This California Consumer Privacy Act Disclosure explains how Travelers collects, uses, and discloses personal information relating to California residents, pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (as amended, the “CCPA”).
This Disclosure does not apply with respect to information about individuals who seek to obtain, obtain, or who have obtained an insurance product or service for personal, family, or household purposes, such as individuals applying for or purchasing personal insurance products or services, claimants under an insurance policy, and beneficiaries and insureds of an employee benefit product or workers compensation insurance policy. (“Consumer Customers”). For Consumer Customers, please refer to our Privacy Statement for Individual U.S. Personal Insurance Consumers, or to the privacy notice sent to your employer if you are a participant, beneficiary or claimant of an employee benefit product or workers compensation policy, for more information about how Travelers collects, uses, and discloses personal information.
Our collection, use, disclosure, sharing and retention of personal information
Under the CCPA, “Personal Information” is information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular California resident or household. The following describes how we collect, use, and disclose Personal Information relating to California residents based on the types of Personal Information listed in the CCPA.
We collect Personal Information relating to California residents in a variety of contexts, including, for example, collecting Personal Information relating to individuals who request or obtain our products or services, apply for employment with us or are our employees, vendors, contractors or similar personnel, and who visit our locations or facilities. The specific Personal Information that we collect, use, and disclose relating to a California resident will depend on our relationship or interaction with that specific California resident.
We collect the following categories of Personal Information:
- Identifiers, such as name and government-issued identifier (e.g., Social Security number, driver’s license, state identification card, or passport number), unique personal identifier, and IP address
- Personal information, as defined in the California disposal of records law, such as contact information, financial information, and medical information
- Characteristics of protected classifications under California or federal law, such as sex and marital status
- Commercial information, such as transaction information and purchase history
- Biometric information, such as fingerprints or facial biometrics, for certain employees
- Internet or network activity information, such as information regarding interactions with our websites
- Geolocation Data, such as approximate location based on IP address
- Audio, electronic, visual, and similar information, such as call recordings and information regarding your use of our websites
- Professional or employment-related information, such as work history and prior employer
- Education Information
- Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics
- Sensitive Personal Information:
- Personal Information that reveals an individual’s Social Security, driver’s license, state identification card, or passport number;
- Precise geolocation information;
- Racial or ethnic origin;
- Personal Information collected and analyzed concerning an individual’s health;
- Biometric information used for the purpose of uniquely identifying an individual;
- Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation
We may disclose all of the categories of Personal Information listed above to the following categories of third parties for our operational business purposes, including within the 12 months preceding the date this Disclosure was last updated: service providers, vendors, and third parties, as well as government agencies who regulate our business, law enforcement, and third parties who are involved in litigation with us. We also may disclose the following categories of Personal Information to authorized agents and brokers for our operational business purposes, including within the 12 months preceding the date this Disclosure was last updated:
- Identifiers
- Personal information, as defined in the California disposal of records law
- Characteristics of protected classifications under California or federal law
- Commercial information
- Internet or network activity information
- Geolocation Data
- Audio, electronic, visual, and similar information
- Professional or employment-related information
- Education Information
- Inferences
- Sensitive Personal Information
We, our service providers, and our marketing and advertising partners use cookies and related tracking technologies, such as web beacons, pixel tags, and flash objects, to collect information about your visits to our websites and third-party websites. In some cases, this information is used to deliver advertisements relevant to your interests, and to analyze our site. Third parties may combine this information with other information that you have provided to them or that they have collected from your use of their services. Under the CCPA, these disclosures constitute a “sale” when the personal information is exchanged for non-monetary consideration (anything of value), or “sharing” when the personal information is disclosed for cross context behavioral advertising purposes. We sell and share, including in the 12 months preceding the date this Disclosure was last updated, the following categories of Personal Information:
- Identifiers
- Commercial information
- Internet or network activity information
- Geolocation Data
- Audio, electronic, visual, and similar information
We may also disclose Personal Information to a third party in the event of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
We do not knowingly sell or “share” (for purposes of cross-context behavioral advertising, as defined by the CCPA) the Personal Information of minors under 16 years of age.
Purposes for the collection, use, “sale” and “sharing” of personal information
The purposes for which we use this Personal Information depend on our relationship or interaction with a specific California resident. We may use this information in order to operate, manage, and maintain our business, provide our products and services, for our employment and vendor management purposes, and to accomplish our business purposes and objectives, including, for example, providing quotes, underwriting and rating policies; responding to inquiries, fulfilling requests, completing transactions and otherwise servicing insurance policies; investigating and processing claims; personalizing or developing products and services; marketing; research and data analysis; risk and security control; fraud detection and prevention; identity verification; determining eligibility for an employment or other relationship with us; paying compensation and administering benefits; managing performance and other aspects of your relationship with us; accounting, audit, and other internal functions, such as internal investigations; maintaining our facilities and infrastructure; compliance with law, legal process, and internal policies; record keeping; and exercising and defending legal claims.
We use and disclose Sensitive Personal Information only for the purposes specified under the CCPA, which include performing services for our business, providing our products and services, and ensuring the security and integrity of our business, infrastructure, and the individuals we interact with. This includes short-term transient use, such as displaying first party, non-personalized advertising, order processing and fulfillment, servicing accounts, establishing and maintaining employment relationships, providing customer service, verifying customer information, processing payments, and activities relating to quality and safety control or product improvement.
Retention of personal information
As an insurance company, the length of time we retain Personal Information we collect is regulated by state law. The legally required retention periods vary depending on, among other things, the type of information at issue and the purpose for which it was collected. Other criteria that we use to determine our retention periods include:
- The length of time we have an ongoing relationship with you and the length of time thereafter during which we may have a legitimate need to reference your Personal Information to address issues that may arise;
- For employees, the duration of your employment and the length of time we have an ongoing relationship with you or your dependents/beneficiaries;
- For job applicants, the duration of the job application process, whether your job application is approved, and whether you want to be notified of future job opportunities; and
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
Sources of personal information
We collect Personal Information directly from you, and from third parties, including from:
- Agents and brokers;
- Service providers and vendors;
- Other individuals, such as witnesses, and individuals involved in litigation with us;
- Your employer or other businesses that you have a relationship with;
- Publicly available sources;
- Consumer reporting agencies and insurance support organizations;
- References you provide when you apply for a job with us;
- Other businesses, such as other insurance companies, and businesses involved in litigation with us; and
- Government agencies.
Privacy rights requests
If you are a California resident, you have the following rights:
You may request that we disclose to you:
-
-
- the categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
- the business or commercial purpose for collecting or “sharing” Personal Information about you;
- the categories of Personal Information about you that we disclosed to third parties for a business purpose and the categories of third parties to whom we disclosed the Personal Information;
- the categories of Personal Information about you that we “shared” (for cross-context behavioral advertising, as defined by the CCPA) and the categories of third parties with which we “shared” such Personal Information; and
- the specific pieces of Personal Information we collected about you, including a copy of your Personal Information in a portable format.
-
- You may request that we delete Personal Information we collected from you (if applicable).
- You may request that we correct inaccuracies in the Personal Information we maintain about you.
- You may request to opt out of any future “sharing” (for cross-context behavioral advertising purposes) or “selling” of your Personal Information.
In some instances, we may not be required to honor your request where a CCPA exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of other individuals, or if you are a Consumer Customer.
You have the right to be free from unlawful discrimination for exercising your rights under the CCPA, including, if applicable, your right as an employee, applicant, or independent contractor not to be retaliated against for exercising your CCPA rights.
Right to opt-out of “Selling” and “Sharing” of Personal Information through cookies
You have the right to opt out of any future “selling” and “sharing” of your Personal Information for purposes of cross-context behavioral advertising. When you visit our websites, we use cookies and similar tools to automatically make certain data available to third-party marketing and advertising partners who help us improve and deliver advertising, as listed above. Under the CCPA, this activity constitutes “selling” or “sharing.”
You can opt out of ”sharing” or “selling” of your Personal Information through tracking technologies by using of an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). If we detect that your browser or device is transmitting an opt-out preference signal, we will opt that browser or device out of cookies that involve “sharing” or “selling” your Personal Information.
You can also opt out by clicking “Do Not Sell or Share My Personal Information” at the bottom of our website and following the instructions in the menu to opt out of certain cookies.
How to submit rights requests
If you are a California resident, you may make a request described above yourself, or you may have an authorized agent submit a request on your behalf. You or your authorized agent may use either of the following methods to submit a request:
- Web portal, for fast and easy service, at https://consumerprivacy.travelers.com; or
- Toll-free telephone number - 1.866.976.3041
When making a request, you will need to provide certain identifying information, such as your name, address, and email address to allow us to verify the request and locate your information. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request. If an authorized agent submits a request on your behalf, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity or confirm that you provided the agent permission to submit the request.
Deidentified information
Where we maintain or use deidentified information, we will continue to maintain and use the deidentified information only in a deidentified fashion and will not attempt to re-identify the information.
Changes to this California Consumer Privacy Act Disclosure
We may change or update this Disclosure from time to time. When we do, we will post the revised Disclosure on this page with a new “Last Updated” date.
Questions or concerns
If you have any questions or concerns about our privacy policies or practices, please write to: Travelers, One Tower Square, Hartford, CT 06183, Attn: Privacy Office.