Privacy Policy
Granite Student Insurance Services Inc.
Privacy Policy
Granite Student Insurance Services, Inc.
California Insurance License #6010392
Effective date: July 29, 2026 · Last updated: July 29, 2026
Granite Student Insurance Services, Inc. (“Granite,” “we,” “our,” or “us”) is a California-licensed insurance brokerage. We arrange accident and health coverage for schools, colleges, camps, and educational programs, and health plans for international and study-abroad students.
This policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and what choices and rights you have. It applies to this website, to our services, and to our communications with you.
This policy is available in an alternative format on request. Contact us through our website.
Who this policy covers
Most of our clients are institutions rather than individuals. We therefore often receive information about students, athletes, and program participants from the school, district, college, camp, or program that is purchasing coverage, rather than directly from the individuals themselves. This policy covers both situations.
If you are a student or participant and your school or program arranged your coverage through us, we hold your information at that institution’s direction and for the purpose of arranging and administering the coverage it requested.
Information we collect
Information you provide to us
We collect information you give us when you complete a form on this website, request a quote, register for an account, apply for coverage, file a claim, contact us, subscribe to a newsletter, or take part in a survey. Depending on what you are doing, this may include:
-
Name, mailing address, email address, and telephone number
-
Employer, job title, and business contact information
-
Date of birth and gender
-
Student status and information about your school or program
-
Payment information used to process premiums
-
Health information, when it is needed to apply for coverage or to process a claim
-
Social Security number or other government-issued identification, where an insurance carrier requires it
Information we receive from schools and program sponsors
When an institution purchases coverage for a group, it may provide us with rosters and participant details names, dates of birth, enrollment status, and, in connection with a claim, injury or treatment information. We use this information only to arrange and administer the coverage that institution has requested, and only as that institution directs. We do not use it for marketing and we do not use it to build profiles about individuals.
Information collected automatically on this website
When you visit this website, we and our website provider (Wix) may automatically collect your IP address, browser type and version, operating system, device information, the pages you visit and time spent on them, the site that referred you, and similar browsing statistics.
Cookies, tracking technologies, and your choices
This website is built on the Wix platform and uses cookies and similar technologies in the following categories:
-
Strictly necessary — required to operate the site, keep it secure, and remember your cookie preferences. These cannot be switched off.
-
Functional — remember choices you make so the site behaves the way you expect.
-
Analytics — help us understand how the site is used so we can improve it. This website uses Wix Analytics.
We do not use advertising or social media tracking technologies on this website.
Your choices. You can accept or decline non-essential cookies using the cookie banner or preference center on this site, and you can change your choice at any time. Most browsers also let you refuse or delete cookies through their settings; if you block them, some parts of this website may not work as intended.
Do Not Track and opt-out preference signals. This website does not currently respond to “Do Not Track” browser signals, because no common industry standard for responding to them has been adopted. You can control cookies on this site through our cookie preference center.
Third-party tracking. We do not permit third parties to collect personally identifiable information about your activity across different websites through this website.
How we use your information
We use the information we collect to:
-
Provide, maintain, and improve our services
-
Process quote requests, applications, claims, and payments
-
Communicate with you about your coverage, your account, or your inquiry
-
Send policy updates and administrative notices
-
Send marketing communications about our services to business and institutional contacts who have not opted out. We do not use health information, claim information, or student roster information for marketing.
-
Understand what our clients need and improve what we offer, using information other than student roster information received from an institution Detect and prevent fraud and address technical problems
-
Meet our legal, regulatory, and licensing obligations
How we share your information
We do not sell your personal information, and we do not disclose it for cross-context behavioral advertising.
We share information in the following circumstances:
-
Insurance carriers and underwriters who issue and administer the coverage
-
Third-party administrators who handle enrollment, claims, or customer service on our behalf — including Administrative Concepts, Inc. (ACI), which administers enrollment and claims for the international student plans
-
Service providers who support our business, such as payment processing, website hosting and analytics (Wix), data hosting, and email delivery
-
The school, district, college, or program that purchased the coverage, where it needs the information to administer its program
-
Public authorities, when we are required to respond by law, subpoena, court order, or regulatory request
-
A successor organization, if Granite is involved in a merger, acquisition, or sale of assets
We require our service providers by contract to protect the information we share with them, to maintain reasonable security procedures and practices, and to use the information only for the purposes we specify.
Websites we link to
Enrollment for some plans takes place on websites operated by insurance carriers or their administrators, not by Granite. Once you leave our site, the privacy policy of that website governs the information you provide there. We encourage you to read it.
How long we keep information
We keep personal information only as long as we need it for the purposes described in this policy, and afterward for as long as required by California law governing licensed insurance producers and by our agreements with the insurance carriers. Where a claim involves a person who was a minor at the time of injury, we keep the file until the applicable time limit for bringing a claim has run, which does not begin during the individual’s minority. We keep marketing contact lists until you opt out, and we keep website analytics data only for the limited period our website platform retains it. When a retention period ends, we delete the information or dispose of the records securely.
How we protect information
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, and we require our service providers by contract to do the same. No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security.
If you need to send us health information, a Social Security number, or claim documents, please contact us first and we will provide a secure method. Please do not send this information to us by ordinary email.
Children’s and students’ privacy
Many of the programs we insure — K-12 athletic programs, summer camps, and college-access programs such as Upward Bound and other TRIO programs — include participants under 18. In those cases we receive information about minors from the school, district, or program sponsor purchasing the coverage, under its authority and for the purpose of arranging that coverage. We use it only for that purpose, and we do not use it for marketing or advertising.
This website and our online forms are intended for adults: school administrators, athletic directors, business officers, parents, and guardians. We do not knowingly collect personal information submitted directly to us online by a child. If you believe a child has provided us with personal information directly, please contact us through our website and we will take appropriate steps to address it.
Where we receive student records from an educational institution, we act as a school official of that institution with a legitimate educational interest, under the institution’s direct control as to the use and maintenance of those records, and we do not redisclose them except as the institution authorizes or the law requires.
Your rights and choices
If your information relates to an insurance transaction
Granite is a licensed California insurance agent. The California Insurance Information and Privacy Protection Act (Insurance Code § 791 et seq.) gives you the following rights with respect to information we hold in connection with an insurance transaction. Within 30 business days of receiving your written request, and after we have verified your identity, we will:
-
Tell you the nature and substance of the recorded personal information we hold about you;
-
Let you see and copy that information, in person or by mail, as you prefer, and give you a plain-language translation if it is recorded in coded form;
-
Tell you who we disclosed that information to during the two years before your request, or, where we have not recorded the specific recipients, the types of recipients to whom such information is normally disclosed; and
-
Explain how you can ask us to correct, amend, or delete the information.
If you ask us to correct, amend, or delete information, we will respond within 30 business days and, if we make the change, notify the people we previously gave the information to.
Two limits apply. Medical record information that came to us from a medical professional or medical care institution will be provided either directly to you or to a medical professional you designate, as you prefer; mental health record information can be provided directly to you only with the approval of the professional responsible for your treatment. And the access right does not extend to information collected in connection with, or in reasonable anticipation of, a claim or a legal proceeding involving you. We may charge a reasonable fee for copies.
We will also give you a written notice of our information practices when we begin collecting information about you for an insurance transaction, or when your policy or certificate is delivered, as the law requires. That notice is a separate document from this policy.
Additional choices for everyone
Marketing. You can opt out of marketing emails at any time using the unsubscribe link or by contacting us through our website.
Cookies. You can manage non-essential cookies through the preference center on this site.
Correcting your contact information. Contact us through our website at any time and we will update it.
We will not treat you differently for exercising any of these rights. To make a request, use the contact form on our website. We will verify your identity before acting on a request by matching information you provide against information already in our records; we will not ask you for new sensitive information in order to verify you.
California residents
Based on our size and how we handle information, the California Consumer Privacy Act does not currently apply to Granite. We nonetheless honor requests for access, correction, and deletion as described above, and we will update this policy if that changes.
International students and visitors
We arrange coverage for students who come to the United States from other countries and for American students studying abroad. If you provide us with information from outside the United States, that information will be transferred to and processed in the United States, where privacy laws may differ from those in your home country.
Changes to this policy
We may update this policy from time to time. When we do, we will post the revised version on this page and update the “Last updated” date above. If the changes are significant, we will provide a more prominent notice, such as a banner on this website or an email to affected clients.
Contact us and how to raise a concern
If you have questions about this policy, or if you want to exercise any of the rights described above, please use the contact form on our website at granitesis.com/contact. That page also lists a mailing address and email if you would rather reach us that way. Written requests may be submitted through any of these channels.
If you are not satisfied with our response, you may contact the California Department of Insurance at 1-800-9274357 or insurance.ca.gov.
This Privacy Policy provides general information about our privacy practices. It does not create contractual rights or obligations. The terms of your insurance policy govern your coverage.
