隐私政策

We collect two categories of information: information you provide directly, and information collected automatically when you visit our site.

Information you provide directly:

• Identifiers: First name, last name, email address.
• Commercial & Travel Information: State or country of primary residence, destination country, travel dates, and relationship to the insured.
• Quote Context: Age at coverage start, selected plan name, quoted premium, coverage limit, deductible, and answers to pre-existing condition questions — collected only when you proceed to purchase a plan.
• Communications: Any optional message you include when contacting us.

Information collected automatically (only with your consent):

• Usage Data: Pages visited, time on page, referring URL, and browser/device type — collected via Google Analytics only after you accept analytics cookies. See Section 4 for full details.

我们收集两类信息：您直接提供的信息，以及您访问本站时自动收集的信息。

您直接提供的信息：
• 标识信息：名字、姓氏、电子邮箱地址。
• 商业与旅行信息：主要居住国家或州、目的地国家、旅行日期及与被保险人的关系。
• 报价信息：保障开始时的年龄、所选计划名称、报价保费、保额上限、免赔额，以及既往症相关问题的回答——仅在您进行购买时收集。
• 通讯内容：您联系我们时填写的任何选填留言。

自动收集的信息（仅在您同意后）：
• 使用数据：访问页面、停留时间、来源网址、浏览器及设备类型——仅在您接受分析性 Cookie 后通过 Google Analytics 收集。详见第4节。

We collect and use this information for the following business purposes:

• To determine your eligibility for specific travel medical insurance plans based on your jurisdiction.
• To redirect your inquiry to our contracted insurance partners to generate an accurate quote and process your application.
• To send you marketing and educational emails regarding insurance products — only if you have explicitly opted in via our marketing consent checkbox.
• To analyze aggregate site usage patterns to improve our content and user experience — only when you have accepted analytics cookies.

我们出于以下商业目的使用这些信息：
• 根据您的管辖区，评估您购买特定旅游医疗保险计划的资格。
• 将您的询价重定向至我们的签约保险合作伙伴，以生成准确的报价并处理您的申请。
• 向您发送关于保险产品的营销和教育邮件（仅限您通过营销授权复选框明确同意的情况下）。
• 分析汇总的网站使用规律，以改善内容和用户体验（仅在您接受分析性 Cookie 后）。

We do not sell your personal information, nor do we "share" it for cross-context behavioral advertising. In the preceding 12 months, we have only disclosed data for business purposes to the following essential third parties:

• Contracted Insurance Partners: Licensed carriers and brokers we partner with to provide your quote and policy (Treppy, Inc.; IMG Global; Trawick International; WorldTrips).
• CRM Service Providers: HubSpot, Inc. — used solely to store contact information and manage authorized email communications. Data is stored on HubSpot's servers in the United States.
• Analytics Providers: Google LLC (Google Analytics 4) — only when you have accepted analytics cookies. See Section 4 for details. Google may process data outside your country of residence. Google's privacy policy is available at policies.google.com/privacy.

我们绝不会出售您的个人信息，也不会为跨站点行为广告而"共享"您的数据。在过去12个月内，我们仅出于商业目的向以下必需第三方披露了数据：

签约保险合作伙伴：与我们合作提供报价和保单的持牌保险公司和经纪人（Treppy, Inc.；IMG Global；Trawick International；WorldTrips）。

CRM 服务提供商：HubSpot, Inc.——仅用于存储联系信息和管理授权电子邮件通信，数据存储于 HubSpot 位于美国的服务器。

分析服务提供商：Google LLC（Google Analytics 4）——仅在您接受分析性 Cookie 后使用。Google 可能在您所在国家以外处理数据，详见第4节。

We use Google Analytics 4 (GA4) to understand how visitors use our site in aggregate — which pages are most visited, how users navigate the quote flow, and where they leave. This helps us improve the experience for everyone.

How we handle consent:

We implement Google Consent Mode v2. When you first visit our site, GA4 runs in cookieless mode — it sends anonymous, non-identifiable pings and does not set any cookies or link data to your device. A cookie banner appears offering you a choice:

• "接受分析 Cookie" (Accept analytics): GA4 sets the _ga and _ga_* cookies with a two-year expiry and begins full session tracking.
• "仅必要" (Necessary only): GA4 remains in cookieless mode. No cookies are set. Google still receives anonymous, aggregated signals that do not identify you.

Your choice is saved in your browser's localStorage and remembered on future visits. You can change your preference at any time by clearing your browser's site data for chocobao.com, which will show the banner again on your next visit.

What GA4 does not do:

• We do not enable advertising features, remarketing, or any Google signal sharing. Ad-related consent (ad_storage, ad_user_data, ad_personalization) is permanently denied regardless of your cookie choice.
• IP addresses are anonymized before storage (anonymize_ip: true).
• We do not use GA4 data to build individual user profiles or serve targeted advertising.

Other storage:

• Quote session state is stored in sessionStorage under the key chocobao_quote. This is not a cookie — it exists only for your current browser tab and is deleted automatically when you close it.
• Cookie preference is stored in localStorage under the key chocobao_cookie_consent ("granted" or "denied"). Clearing site data resets this.

我们使用 Google Analytics 4（GA4） 来了解访客整体上如何使用本站。我们实施了 Google 同意模式 v2：首次访问时，GA4 以无 Cookie 模式运行，不设置任何 Cookie，也不关联您的设备身份。页面底部将出现一个 Cookie 横幅供您选择：

• 接受分析 Cookie：GA4 设置 _ga 等 Cookie（有效期2年），开始完整的会话追踪。
• 仅必要：GA4 保持无 Cookie 模式，不设置任何 Cookie，Google 仅接收无法识别您身份的匿名汇总信号。

您的选择将保存在浏览器的 localStorage 中并在下次访问时生效。清除 chocobao.com 的站点数据可重置此选择。

广告相关权限（ad_storage、ad_user_data、ad_personalization）始终设为拒绝，与您的 Cookie 选择无关——我们不投放广告，也不启用任何 GA4 广告功能。IP 地址在存储前已匿名化处理。

报价会话数据存储在 sessionStorage 中（非 Cookie），关闭标签页后自动清除。Cookie 偏好设置存储在 localStorage 中，清除站点数据即可重置。

To comply with California Department of Insurance regulations (Title 10, CCR § 2190.2), we are legally required to retain records of all insurance quotes and transactions for a minimum of five years. Contact data for users who opt into marketing is retained until you unsubscribe or request deletion from our marketing lists.

Google Analytics data is retained for 14 months within Google's infrastructure, after which it is automatically deleted. This is the minimum retention period Google allows.

为遵守加州保险局的规定（加州法规法典第10编第2190.2条），我们在法律上有义务保留所有保险报价和交易记录至少 5年。同意接收营销信息的用户联系数据将保留至您主动取消订阅或要求从我们的营销列表中删除为止。

Google Analytics 数据在 Google 的基础设施中保留 14个月，之后自动删除——这是 Google 允许的最短保留期限。

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to:

• Know & Access the specific pieces and categories of personal information we have collected.
• Delete personal information we have collected from you. (This right is subject to mandatory state insurance recordkeeping laws outlined in Section 5.)
• Correct inaccurate personal information.
• Opt-Out of the sale or sharing of personal information. (Chocobao does not engage in these practices.)
• Opt-Out of Analytics Cookies at any time by selecting "仅必要" in the cookie banner, or by clearing site data for chocobao.com in your browser settings to reset your preference.
• Non-Discrimination for exercising your privacy rights.

根据《加州消费者隐私法》(CCPA) 及《加州隐私权法》(CPRA)，加州居民有权：
• 知情与访问：了解并访问我们收集的具体个人信息及其类别。
• 删除：要求删除我们从您那里收集的个人信息（受第5节所述法律限制）。
• 更正：要求更正不准确的个人信息。
• 退出数据出售/共享：拒绝出售或共享您的个人信息（巧可保不从事此类行为）。
• 随时退出分析性 Cookie：在 Cookie 横幅中选择"仅必要"，或在浏览器中清除 chocobao.com 的站点数据以重置您的选择。
• 免受歧视：行使您的隐私权时免受歧视性对待。

To exercise your California privacy rights, or to unsubscribe from our communications, please contact us at: privacy@chocobao.com. We will verify your identity by matching the email address used in your original request and will respond within 45 days.

如需行使您的加州隐私权或取消订阅我们的通讯，请通过以下方式联系我们：privacy@chocobao.com。我们将通过核对您最初申请时使用的邮箱地址来验证您的身份，并在45天内作出回应。