Privacy policy

Effective date and last revised: July 29, 2026

SFM Mutual Insurance Company and its subsidiaries, including CompRehab, Inc. and SFM Risk Solutions, Inc., also doing business as Superior Point (collectively, “SFM,” “we,” “us,” or “our”) operate the websites at www.sfmic.com, www.comprehab.com  , and www.superiorpoint.com   and their successor URLs (each, a “Website,” and collectively, the “Websites”), along with associated web apps and online services (each, a “Service,” and collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect information from users who visit or interact with the Websites and Services, and your choices regarding that information. Throughout this Privacy Policy, “Personal Information” means any information that may be considered “personal information” or “personal data” under applicable privacy and/or data security law.

We may provide additional, different, or supplemental privacy notices for specific services or other business activities that we offer or in which we are engaged.

BY USING OR ACCESSING ANY WEBSITE OR SERVICE, YOU ACKNOWLEDGE AND AGREE TO THIS PRIVACY POLICY AND THE TERMS OF SERVICE (“TOS”). IF YOU DO NOT AGREE, DO NOT USE THE WEBSITES OR SERVICES.

1. What Information Do We Collect and How Do We Collect It?

We collect information from or about you when you use or access our Websites or Services, communicate with us, apply for employment, request or receive insurance or insurance-related products or services, interact with our online portals, make payments, report or manage claims, complete forms, upload documents, participate in surveys or evaluations, or otherwise provide information to us.

  • Personal Information: name, title, telephone number, email address, postal address, claim number, agency number, provider information, tax identification number, FEIN, Social Security number or the last four digits of a Social Security number, date of birth, and zip code.
  • Account, policy, claim, billing, and transaction information: information used to register accounts, manage policies or claims, complete premium audits, download certificates of insurance, report injuries, request referrals, submit appeals or reconsiderations, process payments, or conduct other insurance or insurance-related transactions.
  • Recruiting information: application materials, profile information, resumes, cover letters, and voluntary self-identification information.
  • Payment Personal Information: username and password, policy number, bank account information, payment card information, and related billing details, where applicable.
  • Health, injury, employment, and claims-related information: information submitted in connection with claims, injury reporting, medical provider interactions, prior authorization requests, appeals, reconsiderations, rehabilitation services, or similar activities.
  • Communications and interaction information: information submitted when you contact us, report suspected fraud, ask questions, request information, participate in surveys or evaluations, use interactive features, or report an issue with a Website or Service.
  • Online activity, device, and technical information: browser, device, IP address, general location, pages viewed, content viewed or downloaded, forms completed or partially completed, search terms, access dates and times, error logs, email engagement information, or similar information.
  • Call, text, anonymized and aggregate information: call/text metadata and content where applicable, and anonymized or aggregated information.

We collect information directly from you, through your use of the Websites or Services, and from affiliates, subsidiaries, service providers, business partners, public sources, or other third parties.

We and others may also collect such information automatically through cookies, web beacons, tags, application analytics software, and other technologies.

We may combine information collected from different sources and use or disclose it as described in this Privacy Policy.

2. Cookies and Other Technologies; Do Not Track

We and our service providers may use cookies, web beacons, tags, analytics tools, and other technologies for site functionality, tracking, analytics, and personalization.  These technologies may collect information about your activity over time and across different websites and online services.

You can instruct your browser to stop accepting cookies. But if you do not accept cookies, you may not be able to use all portions or all functionality of a Website or Service. Please see www.allaboutcookies.org for additional information about cookies.

Below are links to resources regarding online tracking.

For Google Analytics, please see https://policies.google.com/privacy  , https://policies.google.com/technologies/partner-sites, https://www.google.com/analytics/terms/  , and https://tools.google.com/dlpage/gaoptout  .

For Hotjar, see https://www.hotjar.com/legal/policies/privacy/   and https://trust.contentsquare.com/?product=hotjar  .

For Siteimprove, please see https://www.siteimprove.com/privacy/   and https://www.siteimprove.com/legal/  .

  • Do Not Track. We do not currently respond to “Do Not Track” browser signals or similar mechanisms.

    3. How We Use the Personal Information We Collect

    We may use the information that we collect from and about you to conduct our business, provide the Websites and Services, and for any of the purposes described in this Privacy Policy, subject to applicable law. Examples are as follows:

    • Provide, operate, maintain, troubleshoot, and improve the Websites, Services, products, accounts, payments, claims, policies, and other insurance-related transactions.
    • Communicate with you and respond to requests, inquiries, transactions, surveys, evaluations, comments, or suggestions.
    • Send marketing or advertising communications, provided that SFM will not use health, injury, or claims-related information for marketing or advertising purposes.
    • Conduct analytics, research, development, product and service improvement, error correction, fraud prevention, security, and other lawful business operations.
    • Support legal, compliance, safety, dispute resolution, regulatory response, TOS enforcement, and fraud prevention activities.
    • Create, process, use, or disclose anonymized or aggregated information for any lawful purpose.
    • Use automated tools to assist with quoting, underwriting, pricing, fraud detection, and claims processing, with human review for automated decisions that produce legal or similarly significant effects.
    • Use information with notice or with your consent, where required.

    4. To Whom Do We Disclose Your Personal Information?

    We may disclose information as described below, subject to applicable law. You may choose not to provide certain information, but doing so may limit your ability to use certain Websites, Services, products, or features.

    • Service providers, business partners, and/or other authorized parties. We may disclose information to service providers, business partners, and other authorized parties that perform services or support functions for us, such as transaction and payment processing, claims and policy administration, customer service, recruiting, auditing, compliance, security, fraud prevention, analytics, advertising, marketing, account maintenance, research and development, error correction, and other activities permitted by this Privacy Policy.
    • Social networking services. If you choose to use a social networking service, information from or about you may be disclosed to or collected by the social networking service. Please review the applicable social networking service’s privacy policy, terms, and privacy settings.
    • Affiliates and subsidiaries. We may disclose your information to our affiliates and subsidiaries for purposes consistent with this Privacy Policy. They will be required to maintain that information in accordance with this Privacy Policy.
    • Business transactions. We may disclose or transfer information in connection with a merger, acquisition, sale of assets, divestiture, joint venture, securities offering, financing, bankruptcy, reorganization, liquidation, dissolution, or other transaction, including related preparatory steps.
    • Legal and safety. We may disclose information to law enforcement, government entities, regulators, courts, service providers, third parties, or other parties (for example, certificate holders or policyholders), as required or allowed by applicable law; to enforce the TOS; to protect rights, security, or property; or to help prevent harm or fraud.
    • Anonymized or aggregated information. We may disclose anonymized or aggregated information for any lawful purpose.
    • Other. With notice, consent, or at your request. We may disclose your information for any other purpose with notice to you, with your consent, or at your request, subject to applicable law.

    5. Links to Other Websites

    The Websites and Services may link to third-party websites, applications, information, content, or services not covered by this Privacy Policy. Please see Section 9 of the TOS for information about third-party links.

    6. Children’s Privacy

    We do not knowingly collect personal information from individuals under age thirteen (13). Individuals under age thirteen (13) should not use our Websites or Services or submit personal information. If you believe that we may have received personal information from an individual under age thirteen (13), please email us at sfm_legal@sfmic.com.

    7. How We Protect Your Personal Information

    We take physical, technical, and administrative safeguards designed to protect the information submitted through our Websites or Services from unauthorized access, use, disclosure, loss, destruction, or alteration. No Internet, email, application transmission, or electronic storage is fully secure or error-free. Please use caution when submitting information, safeguard your password, do not share it with anyone, and sign out of your account and close your browser window when you are finished.

    8. Storage

    Your personal information is stored on servers in various locations in the United States. Your personal information may be disclosed to government authorities, regulators, courts, or law enforcement, as required or permitted by applicable law. By using or accessing our Websites or Services, you understand that your information can be transferred to or processed in countries outside of your country of residence, including the United States, where data protection and privacy laws may differ.

    9. Retention

    We retain your personal information for as long as reasonably necessary for the purposes outlined in this Privacy Policy, including to maintain your user account, comply with legal, tax, accounting, and recordkeeping obligations, resolve disputes, enforce agreements, and support legitimate business needs.

    In determining retention periods, we consider the nature and sensitivity of the information, the purposes for processing it, potential risk from unauthorized use or disclosure, and applicable legal requirements. We may also retain information about your email preferences until you opt out. Where permitted by applicable law, we may anonymize your personal information.

    10. Choices Regarding Your Personal Information

    You have choices regarding your information on the Websites and Services:

    • Access, correction, updates, and deletion. You may access, correct, update, or request deletion of your information by signing in to your account, emailing sfm_legal@sfmic.com, or contacting us by postal mail as described. We may verify your identity before responding.
    • Communication preferences. You may manage email preferences by emailing sfm_legal@sfmic.com or using unsubscribe instructions in marketing emails. You may still receive service-related and other non-marketing communications. To opt out of postal mail, contact us using the methods described in Section 11.
    • Automated calls and text messages. You may opt out of automated and marketing calls and text messages at any time as described in Section 20 of the TOS, including by replying “STOP” to any text message from us or contacting sfm_legal@sfmic.com.
    • Withdrawing consent. You may withdraw your consent to our use or disclosure of your information by contacting us, subject to legal and recordkeeping requirements.
    • Cookies, social networking services, and other technologies. See Section 2 and Section 5.

    11. How To Contact Us

    If you have any questions or comments about this Privacy Policy, please contact us via email at sfm_legal@sfmic.com or at the following postal address:

    SFM Companies
    PO Box 9416
    Minneapolis, MN 55440
    Attention: Legal Department

    12. Changes to this Privacy Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on the Websites and reflected by the “Effective Date and Last Revised” date at the top of this Privacy Policy. To the extent permitted by applicable law, your continued use of our Websites or Services after an updated Privacy Policy is posted constitutes your acceptance of the revised Privacy Policy.