Privacy Policy:  Rhulen.com

Effective Date: August 20, 2026

Rhulen Specialty, LLC (“Rhulen,” “Rhulen Specialty,” “we,” “us,” or “our”) respects the privacy and confidentiality of the information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with www.rhulen.com, our communications, and certain professional and business services provided by Rhulen Specialty.

Rhulen Specialty works with insurers, reinsurers, managing general agents (“MGAs”), captives, pool managers, agents, brokers, insurance buyers, insured organizations, and other business partners. In the course of those relationships, Rhulen may receive confidential business, insurance, claims, underwriting, risk-management, and other information that is not collected through our public website.

Information received in connection with a particular client engagement, insurance program, claim, professional service, or business relationship may also be governed by applicable contracts, insurance arrangements, confidentiality obligations, legal requirements, or other terms. Where those obligations apply, they may supplement or govern our handling of such information.

1. Information We Collect Through Our Website

The information Rhulen collects depends on how you interact with us.

When you contact Rhulen through our website or otherwise communicate with us, we may collect information such as:

• First and last name

• Business email address

• Telephone number

• Company or organization name

• Job title or professional information

• Information included in your inquiry or message

• Other information you choose to provide

Information submitted through the Rhulen website's contact functionality may be shared with the principals of Rhulen so that an appropriate person can respond to the inquiry.

2. Website Hosting and Technical Information

The Rhulen website is hosted and operated using Squarespace.

Squarespace and other technology providers supporting the website may automatically process certain technical information when you visit the site, such as:

• Internet Protocol (“IP”) address

• Browser type

• Device type

• Operating system

• Date and time of access

• Pages requested or viewed

• Referring website

• Technical log information

• General website interaction information

This information may be used to operate, maintain, secure, troubleshoot, and improve the website.

3. Cookies and Similar Technologies

Rhulen.com and its technology providers may use cookies and similar technologies for purposes such as:

• Website functionality

• Security

• Session management

• Remembering preferences

• Website administration

• Technical performance

• Understanding general website usage

Your browser may allow you to limit or disable cookies. Disabling certain cookies may affect the functionality of the website.

Rhulen does not currently use online advertising to target website visitors and does not represent that it uses social-media advertising pixels or similar technologies for targeted advertising.

4. Client and Professional Services Information

Rhulen provides professional services to organizations involved in the insurance and risk-management industries.

In connection with these services, Rhulen may receive confidential or sensitive information that is provided outside the public Rhulen.com website.

Depending on the engagement, this information may include:

• Insurance program information

• Underwriting information

• Claims information

• Loss histories and loss experience

• Causes of loss

• Information concerning insured organizations

• Broker, agent, and distribution information

• Insurance policy and coverage information

• Program performance information

• Financial or business information

• Risk-management information

• Litigation or legal information

• Incident or crisis information

• Information concerning individual claimants, employees, witnesses, victims, or other persons

• Other confidential information relating to a client, insured, insurance program, claim, or professional engagement

Rhulen may use this information to provide services such as:

• Insurance program development

• Underwriting support

• Risk-management strategy

• Frequency and severity reduction

• Claims-management support

• Crisis-response and mitigation services

• Program analysis

• Loss analysis

• Marketing and distribution support

• Training and education

• Strategic consulting

• Other services requested by our clients and business partners

Access to confidential client and professional information is intended to be limited to individuals and organizations with a legitimate business or professional need for the information.

5. Claims, Incidents, and Crisis-Related Information

Certain Rhulen engagements may involve insurance claims, incidents, litigation, or crisis events.

Depending on the circumstances, Rhulen or one of its affiliated companies may receive information concerning:

• Insured organizations

• Employees

• Executives

• Claimants

• Victims

• Family members

• Witnesses

• Alleged responsible parties

• Other individuals involved in or affected by an incident

Such information may include information concerning injuries, deaths, medical expenses, allegations, witness accounts, investigations, litigation, claims, counseling needs, security matters, crisis communications, and other sensitive circumstances.

Information of this nature is used as reasonably necessary to provide the applicable professional services and may be subject to additional contractual, insurance, legal, confidentiality, or professional obligations.

6. Rhulen Affiliated Companies

Rhulen Specialty works with affiliated companies that provide specialized services as part of the Rhulen family of companies.

These include:

• CrisisRisk Strategies, LLC

• Firestorm

• Due Diligence Inc.

Depending on the particular engagement, Rhulen may share information with one or more affiliated companies when reasonably necessary to provide services, coordinate an insurance program, perform risk-management or crisis-related work, support claims activities, provide training, perform due diligence, or otherwise carry out the services requested by a client or business partner.

Similarly, an affiliated company may provide information to Rhulen when reasonably necessary to coordinate or provide services.

Information shared among Rhulen-affiliated companies is not sold and is not shared for the affiliate's unrelated independent marketing purposes.

Certain affiliated companies operate their own websites, platforms, programs, or services. Information collected directly through those websites or services may be governed by the applicable affiliate's privacy policy.

7. Other Professional Service Providers

Rhulen may work with outside professionals and service providers when necessary to provide services or operate our business.

Depending on the circumstances, these may include:

• Attorneys and law firms

• Investigators

• Risk-management professionals

• Crisis-management professionals

• Security professionals

• Counselors or other support professionals

• Insurance professionals

• Consultants

• Technology providers

• Website and communications providers

• Other vendors or specialists

Rhulen may provide these parties with information reasonably necessary for them to perform their services.

Where appropriate, information may also be shared with insurers, reinsurers, MGAs, brokers, agents, insureds, clients, or other parties involved in the applicable insurance program, claim, incident, or professional engagement.

8. Microsoft 365 and Business Communications

Rhulen uses Microsoft 365 for business email and related communications.

Information sent to Rhulen by email or transmitted internally by email may therefore be transmitted, received, maintained, or processed using Microsoft 365.

Communications received through the Rhulen website may also be distributed to appropriate Rhulen principals or personnel so that inquiries can be addressed.

9. Email Communications and Future Marketing

Rhulen does not currently maintain an active email marketing program.

Rhulen may in the future send professional communications such as:

• Newsletters

• Educational information

• Webinar invitations

• Insurance or risk-management updates

• Service announcements

• Event invitations

• Other business or professional communications

If Rhulen implements such a program, it may use Squarespace's email marketing functionality or another appropriate service provider.

Recipients will be provided with an appropriate means to unsubscribe from marketing communications.

Operational, contractual, service-related, or other non-marketing communications may still be sent when appropriate.

10. How We Use Personal Information

Rhulen may use personal information to:

• Operate and maintain our website

• Respond to inquiries

• Communicate with clients and business partners

• Develop and support insurance programs

• Provide underwriting support

• Provide claims-management support

• Perform risk and loss analysis

• Provide crisis-response and mitigation services

• Provide training and educational services

• Coordinate services with affiliated companies

• Coordinate outside professional resources

• Maintain professional and business records

• Manage business relationships

• Protect our systems and information

• Prevent fraud, misuse, or unauthorized access

• Comply with contractual obligations

• Comply with applicable laws, regulations, legal processes, or court orders

• Establish, exercise, or defend legal rights

• Support investigations, litigation, insurance claims, and related matters

• Perform other legitimate business activities related to the services we provide

11. Sale of Personal Information

Rhulen does not sell personal information.

Rhulen does not sell, rent, or exchange client, insured, prospect, or contact information or mailing lists to third parties for their independent marketing purposes.

Rhulen's affiliated entities likewise do not sell personal information.

Disclosures to affiliated companies, insurers, reinsurers, brokers, agents, attorneys, investigators, consultants, technology providers, or other professionals in connection with our services or business operations are not sales of personal information.

12. Information Security

Rhulen takes reasonable administrative, technical, and organizational measures intended to protect personal and confidential information against unauthorized access, disclosure, alteration, misuse, or loss.

Access to confidential professional information is intended to be limited to personnel, affiliated companies, and service providers with a legitimate business or professional need.

Because no internet transmission, email platform, website, cloud service, or electronic storage method can be guaranteed to be completely secure, Rhulen cannot guarantee absolute security.

13. Retention of Information

Rhulen may retain personal information and professional records for as long as reasonably necessary for the purposes for which they were collected and to satisfy legitimate business, contractual, insurance, legal, regulatory, security, or professional requirements.

Retention periods may vary depending upon the nature of the information and circumstances involved.

Rhulen may retain information when necessary to:

• Provide ongoing professional services

• Maintain client and insurance-program records

• Support underwriting or claims matters

• Document professional services

• Support litigation or investigations

• Comply with legal holds

• Meet contractual requirements

• Meet legal or regulatory obligations

• Resolve disputes

• Establish, exercise, or defend legal rights

When information is no longer reasonably necessary, Rhulen may delete, destroy, anonymize, or otherwise dispose of it consistent with applicable requirements and business practices.

14. Privacy Requests and Individual Rights

Depending on applicable law and the circumstances, an individual may contact Rhulen to ask about certain personal information maintained by Rhulen, request correction of inaccurate information, or raise a privacy concern.

Certain requests may be subject to limitations or exceptions.

For example, Rhulen may be unable or legally prohibited from deleting, disclosing, or changing information when it must be retained or protected because of:

• An insurance claim

• An underwriting or insurance-program matter

• A crisis-response matter

• An investigation

• Litigation or anticipated litigation

• Attorney-client privilege or attorney work product

• A legal hold

• Contractual obligations

• Regulatory obligations

• Security requirements

• The rights and privacy of other individuals

• The need to establish, exercise, or defend legal claims

Rhulen may take reasonable steps to verify the identity and authority of an individual making a privacy request before responding.

15. Children

The Rhulen website and Rhulen's services are intended for insurance, business, professional, and organizational users.

Rhulen does not market its services to children and does not knowingly solicit personal information directly from children under 13 through Rhulen.com.

If Rhulen receives information concerning a minor in connection with an insurance claim, incident, crisis, investigation, or other professional engagement, that information is handled in the context of the applicable professional matter and not through services directed toward children.

16. Third-Party Websites

Rhulen.com may contain links to websites operated by affiliated companies and other third parties.

Rhulen is not responsible for the privacy, security, content, or information-handling practices of websites that Rhulen does not operate.

Information you provide directly through another company's website or service may be subject to that company's applicable privacy policy and terms.

We encourage users to review the applicable privacy policies of third-party websites before providing personal information.

17. No Payment Information Collected Through the Website

Rhulen does not currently accept payments or collect credit-card or payment-account information through Rhulen.com.

If this practice changes, this Privacy Policy may be updated accordingly.

18. Changes to This Privacy Policy

Rhulen may revise this Privacy Policy from time to time to reflect changes in our website, services, affiliated companies, technology providers, business practices, or legal obligations.

When material changes are made, Rhulen will post the revised Privacy Policy on its website and update the effective date above.

19. Contact Us

If you have questions about this Privacy Policy, Rhulen's privacy practices, or a privacy-related request, please contact:

Rhulen Specialty, LLC

Email: crisis@crisisrisk.com

This email address is currently used for Rhulen privacy inquiries.