This website requires JavaScript.

Privacy Policy

Effective date: November 3, 2026. This version replaces our earlier privacy policy.

TaiAn Financial LLC, an Indiana limited liability company (National Producer Number 16447413), doing business as Travel World Insurance ("we," "us"), is a licensed insurance agency that helps international students, scholars, and travelers buy health and travel medical insurance. We are also an IMG Endorsed Independent Chinese Sales Center.

This policy explains what personal information we collect through taianfinancial.com and travelworldinsurance.com (the "Sites") and through our other channels (phone, email, live chat, WeChat, and WhatsApp), how we use and share it, and the choices and rights you have. It includes the notice at collection required by California law.

Information we collect

Information you give us

  • Quotes and plan questions: name, email, phone number, date of birth, citizenship, country of residence, visa type, school or program sponsor, travel dates, destination, and the coverage you are looking for.
  • Applications and renewals for TaiAn group plans: the information above plus mailing address, policy details, and information about dependents you include.
  • Payments: see "Payment card information" below.
  • Messages: what you tell us through our contact forms, phone, email, live chat, WeChat, or WhatsApp, and recordings of phone calls when you agree to be recorded (we ask for your consent at the start of the call).

Payment card information

When you pay for a TaiAn group plan or a renewal on our Sites, we collect your card number, expiration date, security code, and billing details only to process that payment. They are sent over an encrypted connection to our payment processor, Authorize.Net, which processes the charge. We do not store your full card number or security code. We keep a record of the transaction (such as the amount, date, authorization code, and the last four digits of the card) for accounting, refunds, and customer service.

Most other plans are purchased on the insurance company's own secure website. Card information you enter there goes to the insurance company, not to us.

Information from insurance companies

The insurance companies and administrators we work with, such as International Medical Group (IMG), send us records of the policies sold through us (for example, names, dates of birth, contact details, addresses, policy numbers, and coverage dates) so we can help you with renewals, claims questions, and service.

Information collected automatically

When you visit the Sites, we, our hosting providers, and the tools listed below collect your IP address, browser and device type, pages viewed, the site that referred you, approximate location derived from your IP address, and similar usage data. We do this through server logs, cookies, and similar technologies. See "Cookies, your choices, and consent."

California notice at collection

The categories of personal information we have collected in the past 12 months, as defined by California law, where they come from, why we use them, who receives them, and whether they are "sold" or "shared." How long we keep each is in "How long we keep information" below.

Category Examples Sources Purposes Disclosed to Sold or shared?
Identifiers Name, email, phone, address, IP address, online identifiers You; insurers; your device Quotes, applications, service, security Insurers; service providers; Google (online identifiers) Not sold. Online identifiers shared for advertising unless you opt out
Customer records (Cal. Civ. Code 1798.80) Name, address, phone, date of birth, payment card details You; insurers Applications, payments, renewals, service Insurers; Authorize.Net; service providers No
Characteristics of protected classifications Age or date of birth, citizenship You; insurers Quotes and eligibility Insurers; service providers No
Commercial information Plans quoted or purchased, policy dates, payment history You; insurers Service, renewals, accounting Insurers; service providers No
Internet or network activity Pages viewed, referring site, clicks, device and browser Your device Site operation, analytics, ad measurement Google; Cloudflare; Tawk.to Shared for advertising unless you opt out
Approximate geolocation Country or city derived from IP address Your device Security, analytics, consent defaults Google; Cloudflare No
Audio or electronic information Chat transcripts; recordings of calls you agree to You Customer service Tawk.to; service providers No
Education and professional information School, program sponsor, visa category You; insurers Quotes and eligibility for student and scholar plans Insurers No
Sensitive personal information Card number with security code; citizenship or immigration (visa) status You Only to process payments and provide the insurance you request Authorize.Net; insurers No

We use sensitive personal information only for purposes California law permits without an opt-out (such as providing the services you request and processing payments). We do not use it to infer characteristics about you.

How we use information

  • To provide quotes and help you choose, buy, and manage coverage.
  • To process applications and payments and to enroll you with the insurance company.
  • To send policy and renewal reminders and, where permitted, information about our products. You can unsubscribe at any time.
  • To answer your questions and provide customer service.
  • To understand and improve the Sites (analytics) and to measure our advertising, subject to your choices.
  • To prevent fraud, keep the Sites secure, and meet legal, tax, and insurance record-keeping requirements.

How we share information

We do not sell personal information for money. We disclose it only:

  • To insurance companies and administrators (such as IMG, Trawick, iTravelInsured, Cigna, and HCC) as needed to quote, issue, and service your coverage. Their own privacy notices govern how they handle your information, including on their purchase websites.
  • To service providers that work for us under contract and may use it only to provide services to us: website hosting and security (Bluehost, Cloudflare), our quote and application systems (Microsoft Azure, MongoDB Atlas), payment processing (Authorize.Net), email delivery (SMTP2GO), contact forms (Formspree), spam protection (Google reCAPTCHA), live chat (Tawk.to), content management (ButterCMS), and customer relationship management software.
  • To analytics and advertising partners: Google (Google Analytics and Google Ads, through Google Tag Manager) and Cloudflare Web Analytics. Using Google's advertising cookies to measure our ads may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out at any time (see below).
  • When required by law, regulation, or legal process, or to protect our rights or the safety of others.
  • With a successor organization if our business is sold, merged, or reorganized.

We do not share personal information with third parties for their own direct marketing purposes (California "Shine the Light," Cal. Civ. Code 1798.83).

Cookies, your choices, and consent

We use cookies and similar technologies for three purposes: to make the Sites work (necessary), to measure traffic (analytics), and to measure our advertising (advertising). The live chat also sets cookies.

  • Your Privacy Choices. Every page has a "Your Privacy Choices" link. It lets you accept these tools or turn off everything that is not necessary for the Sites to work. Turning them off is your opt-out of the "sale" or "sharing" of your personal information. Your choice is saved in your browser, so it applies to that browser and device.
  • Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing and turn advertising off automatically for that browser.
  • Visitors in Europe (the European Economic Area, the United Kingdom, and Switzerland): analytics and advertising stay off unless you choose "Accept."
  • Do Not Track. Browsers' older "Do Not Track" setting has no agreed meaning, so we do not respond to it. We honor Global Privacy Control instead.

What happens if you opt out. You can still use the Sites fully: browse, get quotes, and buy coverage. We will not deny you service, charge you a different price, or give you a different level of service because you opted out. The only changes are that we stop using analytics and advertising cookies and the live chat for your browser, so you would contact us by phone, email, WeChat, or WhatsApp instead.

You can also block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage ad personalization in your Google account. Blocking all cookies may affect how parts of the Sites work.

Your rights

California residents have the right to:

  • Know and access the categories and specific pieces of personal information we have collected about you, its sources, our purposes, and the categories of third parties we disclose it to.
  • Delete personal information we collected from you, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information (see "Your Privacy Choices" above).
  • Limit the use of sensitive personal information. Because we use it only for permitted purposes, we do not offer a separate "Limit" link.
  • Not be discriminated against for exercising these rights.

How to make a request. Email [email protected], call 1-317-318-8259 (English) or 1-317-318-8258 (Chinese), or use the contact form on either Site. We will verify your identity by matching information you give us with information we already have, and respond within 45 days (we may extend this once by another 45 days and will tell you if we do). You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. We do not offer financial incentives for personal information.

Residents of other U.S. states may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising and sale. Make requests the same way. If we decline your request, you may appeal by replying to our decision, and we will respond within the time your state's law requires.

Insurance and financial privacy laws. Information we collect to provide insurance to you is also protected by the federal Gramm-Leach-Bliley Act and state insurance privacy laws, including the California Insurance Information and Privacy Protection Act. Some of the rights above may not apply to that information, for example where we must keep policy records.

Visitors in Europe and the United Kingdom may have the right to access, correct, delete, restrict, or object to the processing of their personal information, to receive a copy of it, and to withdraw consent at any time (through "Your Privacy Choices"). We process your information to provide the services you request (contract), to meet legal obligations, for our legitimate interests in running and securing our business, and, for analytics and advertising, with your consent. You may also complain to your local data protection authority.

How long we keep information

We keep each kind of information only as long as we need it for the purposes above, and then delete it or make it anonymous.

Information How long we keep it
Quote requests and inquiries that don't lead to a purchase 2 years after our last contact with you
Policy, application, and renewal records (identifiers, customer records, commercial, education and professional information, citizenship and visa status) While your coverage and renewals continue, then 7 years after coverage ends, or longer if insurance or tax record-keeping laws require
Payment transaction records (amount, date, authorization code, last four digits) 7 years, as tax and accounting laws require. Full card numbers and security codes are never stored
Messages, chat transcripts, and call recordings 2 years, or as long as the related policy record if they concern a policy
Website activity, cookies and analytics Cookies: up to 2 years. Analytics reports: up to 14 months. Server logs: 1 year

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections (HTTPS), limited access to customer records, and a payment processor for card payments. No method of transmission or storage is completely secure. Please contact us if you believe your information has been misused.

International visitors

We are based in the United States, and your information is processed and stored in the United States, where privacy laws may differ from those in your home country. By using our services, you understand that your information will be transferred to the United States.

Children

The Sites are not directed to children under 13, and we do not knowingly collect personal information from them online. Information about a minor dependent may be provided by a parent or guardian when applying for coverage. If you believe a child has given us personal information, please contact us and we will delete it.

Translations

We may provide this policy in Chinese and other languages for your convenience. If a translation differs from the English version, the English version controls.

Changes to this policy

We may update this policy from time to time. The updated version will be posted on the Sites with a new effective date. We review it at least once a year.

Contact us