Privacy Policy

Last modified: April 1, 2026

Introduction

Fortress Intermediaries LLC, DBA Citadel Insurance (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our websites (listed below), applications, products, and services that link to this policy (our “Services”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Our websites include the following:

https://citadelus.com/
- https://beeinsure.citadelus.com/
- https://cargoprotect.citadelus.com/
- https://idal.citadelus.com/
- https://wellnessproinsurance.citadelus.com/
  - https://bodyartinsure.com/
https://citadelconstructionins.com/
https://citadelcyberprotect.com/
https://citadeltransportation.com/
https://fortressinsurance.com/
https://www.inspectorproinsurance.com/
https://languageprotect.com/
https://nutrainsure.com/
https://paychex.citadelus.com/paychex
https://restoreinsure.com/
https://storinsure.com/

This policy applies to information we collect:

Through the Services.
In communications, including email, text, and other electronic messages between you and the Services.
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by the Company or any third party (including our affiliates and subsidiaries); or
Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services.

Please read this policy carefully to understand our practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children’s and Minors’ Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at legal@citadelus.com.

The Personal Data That We Collect or Process

“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, and email address, credit card number, social security number, or any other identifier we may use to contact you online or offline).

The types and categories of personal data we collect or process may include:

Account and contact information, including name, address (such as home address, work address, or other address), email address, phone number, username, password, and other contact information you provide us.
Employer-related information, such as your title and the company’s name, address, and phone number.
Career demographics (job title, role, profession, education, industry, years of experience, skills).
Career interests (career topics and areas of interest, expected date of graduation for current students, majors, locations interested in working, interests in upcoming events).
Topics you have expressed interest in.
Email activity (emails opened, email program used, clicks in email).
Profile information from social media sites.
Information you submit to us (e.g., submitted images, photos, videos; other items you submit; details about your requests made to us).
Job(s) applied for or interested in (including the job opening’s education and experience description).
Payment information, including credit card or debit card information and information about the payment methods and services (such as PayPal or Venmo) you use in connection with the Services.
Details of transactions you carry out through our Services and of the binding of your insurance coverage. You may be required to provide financial information before paying for coverage through our Services.
Account history, including information about your subscription, account, transactions, purchases, order history, or discounts.
Demographic information, including your age, gender, income level, education, or family or marital status, if you have consented to such information collection.
Location information, including general geographic location such as country, state or province, or city and precise geolocation, if you have enabled and consented to location information collection.
Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information.
Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us.
Your responses to surveys that we might ask you to complete for research purposes.
Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection.
Identity document information, such as Social Security and driver’s license numbers, if you have consented to such information collection.

Some of the information identified above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.

We also collect:

Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.
Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products or services that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), search queries, or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collection information about you when you interact with our Services, which may include:

Information that you provide by filling in forms through our Services. This includes information provided at the time of applying for our insurance services or requesting further services.
Records and copies of your correspondence (including email addresses) if you contact us.
Your responses to surveys that we might ask you to complete for research purposes.
Details of transactions you carry out through our Website and of the binding of your insurance coverage. You may be required to provide financial information before paying for coverage through our Website.
Your search queries through our Services.

Information Collected from Third Parties or Other Sources

We may obtain personal or other information about you from third parties or other sources and combine this information with the information we collect from you. This might include any other information obtained through companies that have business relationships with us, such as our licensees, affiliates, and business partners.

We may also obtain information about you from other online sources, including when you connect with the Company through its official corporate pages on third-party social networks (such as LinkedIn or Facebook) or other apps. This information may include your name, username, demographic information, updated address or contact information, interests, and publicly-observed data. We may combine this information with the information we collect from you through the Services.

For prospective employees and job applicants, in addition, we may obtain information about you from third parties, including without limitation, recruitment agencies, background check providers, credit reference agencies, and your references, where required or permitted to conduct such checks under applicable law.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information that may include personal information. Information collected automatically may include information about your equipment, browsing actions, and patterns, including:

Details of your visits with our Services, including traffic data, location data, logs, and other communication data and the resources that you access and use with our Services.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

The information we collect automatically does include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Services and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Services according to your individual interests.
Speed up your searches.
Recognize you when you return to our Services.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.
Flash Cookies. Certain features of our Services may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Services. Flash cookies are not managed by the same browser settings as are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see Your Rights and Choices About Your Information.
Web Beacons. Pages of our Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt-out from use of these automated technologies for such uses by contacting us at legal@citadelus.com. You can also opt-out of some third-party vendor’s use of cookies for personalized advertising by visiting aboutads.info. Please note that some Services features may be unavailable as a result.

When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties may include:

Advertisers, ad networks, and ad servers.
Analytics companies.
Your device manufacturer.
Your internet or mobile service provider.

These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

From Business Partners and Service Providers

We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, content delivery services, payment processors, promotions services, gift card program providers, analytics, security and anti-fraud services, and data brokers. We also may receive personal data from business partners that we engage to share consumer information with us, including your personal preferences and demographic information such as age, gender, and income level so that we can better provide you with a personalized experience, including personalized content and services.

We may disclose the personal data we collect from you with the following categories of third parties and in the following ways:

With our affiliated companies;
As necessary if we believe that there has been a violation of our Terms of Use or of our rights or the rights of any third party;
To respond to judicial process or provide information to law enforcement or regulatory agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law; and
As otherwise described to you at the point of collection.

We may also share aggregate or anonymous non-personal data with third parties for marketing or analytics uses on behalf of the Company. We may also share your personal data in connection with a merger, financing, acquisition, dissolution, transaction, bankruptcy, or proceeding involving sale, transfer, or divestiture of all or a portion of our business or assets. If another entity acquires our business or assets, that entity will have your personal data collected by us and will assume the rights and obligations regarding your information as allowed by this Privacy Policy.

Third-Party Use of Cookies and Other Tracking Technologies

We do not sell your information to third parties.

Third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Services. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Your Rights and Choices About Your Information.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Services and its contents to you.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To provide you with notices about your account, including expiration and renewal notices.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Services or any products or services we offer or provide though it.
To allow you to participate in interactive features on our Services.
To administer a contest, promotion, survey, or other site feature.
To sign users up for newsletters.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

We may also use your information to contact you about our own services that may be of interest to you. For more information, see Your Rights and Choices About Your Information.

Who We Disclose Your Information To

We may disclose aggregated information about our users without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our parent company, subsidiaries, and related family of corporate entities.
To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about our Services users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including responding to any government or regulatory request.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.

Advertising, marketing, cookies, and other tracking technologies choices:

Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly. You can set preferences for how certain advertisers use your information. For example, if you use the Chrome browser, you can go to your change the selections in the “Cookies and other site data” in your browser’s settings. For more general information on cookie management and blocking or deleting cookies for a wide variety of browsers, visit www.allaboutcookies.org.
Promotional by the Company. If you do not wish to have your contact information used by the Company to promote our own products or services, you can opt out by clicking the “unsubscribe” button on the marketing emails we have sent to you. This opt out does not apply to information provided to the Company as a result of a product purchase, warranty registration, product service experience, or other transactions.
Targeted Advertising by the Company. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target audience preferences, you can opt out by clicking the “unsubscribe” button on the marketing emails we have sent to you.
Disclosure of Your Information for Third-Party Advertising. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. To learn more about opting out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”), including how to add the NAI Global Privacy Control (GPC) extension to your Chrome web browser, see NAI: How to Opt Out.

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.
You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.
Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights, please submit a request to this designated email address: legal@citadelus.com. To appeal a decision regarding a consumer rights request, please send an email to legal@citadelus.com or write us at: 2600 West Executive Parkway, Suite 500 Lehi, Utah 84048.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

California residents may have additional personal information rights and choices. Please see Your California Privacy Rights for more information. California’s “shine the Light” law (Civil Code Section § 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to legal@citadelus.com or write us at: 2600 West Executive Parkway, Suite 500 Lehi, Utah 84048.

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated email address: legal@citadelus.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

How We Retain Your Personal Data and Data Security

We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Services like message boards. The information you share in public areas may be viewed by any user of the Services.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Services home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us by mail at 2600 West Executive Parkway, Suite 500 Lehi, Utah 84048 or via email at legal@citadelus.com.