IAAPA Insurance Solutions
Last Updated: October 12, 2026

At Fortress Affinity Management, LLC, doing business as IAAPA Insurance Solutions (“IAAPA Insurance Solutions,” “we,” “us,” or “our”), safeguarding your personal information is a top priority. We handle your data in accordance with applicable privacy laws and this Privacy Policy. This document outlines how we gather, use, share, and otherwise manage the information collected through (a) your use of our website at iaapainsurancesolutions.com or our products and services, (b) your online interactions and participation in events, or (c) any other situations where we provide you with this Privacy Policy.

IAAPA Insurance Solutions is an insurance and risk management program endorsed by the International Association of Amusement Parks and Attractions (“IAAPA”) and available to U.S.-based IAAPA members.

Definitions

In this Privacy Policy:

- Personal Data refers to any information that can identify an individual, either directly or indirectly, through various identifiers such as a name, identification number, location data, online identifiers, or specific personal characteristics.
- Processing encompasses any operation performed on personal data, whether automated or manual, such as collection, recording, organization, storage, retrieval, use, dissemination, and deletion.
- Controller is the entity that determines the purposes and means of processing personal data, either independently or jointly with others.
- Processor is any entity that processes personal data on behalf of the controller.
- Recipient is any person or entity, public authority, agency, or body that receives personal data, including both processors and controllers.
- Legal Basis refers to the lawful grounds for processing personal data as defined by applicable privacy laws.

Types of Personal Data We Collect

We may collect your personal data when you:

- Contact us by phone, email, or through our website;
- Request a quote or submit a contact form on our website;
- Apply for, purchase, or renew insurance coverage through us;
- Engage with our products and services, including browsing or requesting information;
- Interact with us on our social media platforms;
- Provide personal information through third-party sources, including service providers; or
- Engage with our team at in-person events, such as industry trade shows.

Directly Provided Personal Data

We may collect personal data that you provide directly, including through our website (for example, our quote request and contact forms), by phone or email, through social media, or when you apply for coverage or create an account. This may include your name, email address, phone number, organization name, the type of operation you run, your operation’s location, IAAPA membership information, the topics you would like to discuss, and your message.

If you apply for insurance, we may also collect the information needed to market, place, and service your coverage, such as details about your operations and locations, property and equipment values, payroll and revenue, employee information, prior insurance and loss history, and, where applicable, payment details.

Automated Data Collection

We may gather information through automated technologies when you use our website and products. This includes your IP address, browser information, device details, cookies, and data related to your browsing behavior on our site.

Information from Third Parties

We might receive personal data from third parties, such as insurance carriers and other insurance intermediaries, lead generation companies, data vendors, advertising partners, and service providers. This may include your name, email, phone number, company name, job title, and country.

How We Use Your Personal Data

We may use your personal data for various purposes, including:

- Responding to your inquiries, quote requests, and feedback;
- Confirming your eligibility for the program;
- Preparing submissions and obtaining quotes and coverage from insurance carriers;
- Servicing your coverage, including policy documents, certificates of insurance, endorsements, renewals, and claims advocacy;
- Providing risk management services and related resources;
- Establishing a user account for our products and services;
- Processing transactions efficiently;
- Enhancing our website, products, and services;
- Monitoring product performance and implementing security measures;
- Managing our business relationship with you;
- Sending you marketing information about our offerings;
- Ensuring compliance with legal and regulatory obligations; and
- Other purposes consistent with the context in which the data was collected.

Data Sharing

Your personal data may be shared with third parties in the following scenarios:

- Insurance Carriers and Intermediaries: We may share your data with insurance companies, wholesale and surplus lines brokers, managing general agents, and Higginbotham and its affiliates as needed to quote, place, and service your coverage and to support claims.
- IAAPA: We may share limited information with the International Association of Amusement Parks and Attractions as necessary to confirm your eligibility as an IAAPA member for the program.
- Processors and Service Providers: We may share your data with companies that assist us in processing personal data for the purposes outlined above, including IT, website hosting, email marketing, and payment processing providers. Such sharing is governed by contracts that limit the use of your data.
- Legal Obligations: We may share personal data with regulatory bodies, including state insurance departments, law enforcement, or other authorities to comply with legal requirements.
- With Your Consent: We may share your data if you have consented to such sharing.

Insurance Information

Personal information collected in connection with applying for or obtaining insurance may also be subject to the Gramm-Leach-Bliley Act and applicable state insurance privacy laws, and to the privacy notices of the insurance carriers that issue your coverage. Where those laws or notices provide additional protections, we will handle your information in accordance with them.

Your Rights

Depending on your circumstances, you may have certain rights regarding your personal data, including:

- The right to access and obtain a copy of your personal data;
- The right to request correction or deletion of your personal data;
- The right to withdraw consent for data processing;
- The right to object to certain processing activities; and
- The right not to be subject to automated decision-making.

You can exercise these rights by submitting a request using the contact information in the “Contact Us” section below. We will make every effort to respond to your requests in accordance with applicable laws. Some information may need to be retained to meet legal, regulatory, or contractual obligations, including insurance record-keeping requirements.

Legal Basis for Processing

Where applicable, our legal basis for processing your personal data may include the performance of a contract, your consent, legitimate interests, or compliance with legal obligations.

Interactions with Third Parties

We may link to third-party websites or services that are not controlled by us, including the websites of IAAPA, Higginbotham, and insurance carriers. We are not responsible for the privacy practices of these third-party services, so we encourage you to review their privacy policies.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected. We consider factors such as the nature of the data, its sensitivity, our contractual obligations, and our legal and regulatory record-keeping obligations, including those that apply to insurance records, in determining retention periods.

Security of Your Information

We maintain safeguards to protect your personal data from unauthorized access or disclosure. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security. For more information, please see our Security Statement.

Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from individuals under the age of 13. If we learn that we have collected such data without parental consent, we will take steps to delete that information.

Cookies and Tracking Technologies

We may use cookies and other tracking technologies to enhance your experience on our website. You can manage your cookie preferences through our site or your browser settings.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended. These include the right to know about the personal data we collect, to request deletion, and to opt out of the sale or sharing of personal data.

Updates to This Policy

We may update this Privacy Policy periodically. Any revisions will be posted on this page with an updated “Last Updated” date, and we may notify you through other means of significant changes.

Contact Us

If you have any questions or comments regarding this Privacy Policy, or would like to exercise your rights, please contact us:

IAAPA Insurance Solutions
219 Industrial Dr., Ridgeland, MS 39157
Phone: 888-989-1225
Email: [email protected]