Your Privacy & Data Security
At ONE Insurance, we take your privacy and data security seriously. This page explains how the NuRoad Insurance Quote application protects your personal information.
Your data stays on YOUR device. We use browser-based local storage, meaning your quote information never leaves your computer or phone until YOU explicitly choose to share it via email or export.
Security Features
Local Storage Only
All your quote data is stored directly in your browser's secure local storage. No server uploads, no cloud databases, no external storage.
HTTPS Encryption
When hosted on HTTPS, all data transmitted between your browser and the application is encrypted using industry-standard TLS/SSL protocols.
Auto-Save
Your progress is automatically saved every time you make a change. No manual saving required, and you never lose your work.
Optional Redaction
When sharing your quote via link or QR code, you can choose to redact personal information (names, contact details, serial numbers).
No Server Logging
We don't log your form data on any server. Standard web server logs may capture IP addresses and page visits for security monitoring only.
Minimal Analytics
We use Google Analytics only to track general usage patterns (page views, form progress milestones). No personal information is sent to analytics.
What Data We Collect
Local Storage (On Your Device)
The following information is stored locally in your browser and never transmitted to our servers automatically:
- Policy information (effective date, province)
- Personal details (name, email, phone, address)
- Claims and violation history
- Insurance history details
- Experience and usage information
- Vehicle details (type, value, year, make/model, serial number, plate)
- Operator information for each vehicle
- UI preferences (dark mode, compact view)
Analytics Data (Anonymous)
We collect anonymous usage statistics via Google Analytics:
- Page views and navigation patterns
- Form progress milestones (e.g., "reached vehicles section")
- Device type (mobile vs. desktop)
- Browser type and version
- Geographic region (province level only)
- Session duration and bounce rate
No personal information (names, emails, addresses, vehicle details) is sent to Google Analytics.
Email Sharing (When You Choose)
When you click "Email Quote", your default email client opens with a pre-filled message containing:
- All your entered quote information
- A shareable link (with data encoded in the URL)
This email is sent directly from your email client to nuroad@oneinsurance.ca with a CC to your email address. We do not intercept or store this data separately.
How We Protect Your Data
Browser Security
Your data is stored using the browser's localStorage API, which is:
- Origin-specific: Only accessible from the same website domain (nuroad.oneinsurance.ca)
- Sandboxed: Other websites cannot read your data
- Private browsing safe: Data is cleared when you close private/incognito windows
- Device-specific: Not synchronized across devices unless you use browser sync features
HTTPS/TLS Encryption
When deployed on HTTPS, all communication between your browser and the web server is encrypted using TLS 1.2 or higher. This prevents third parties from intercepting or tampering with data in transit.
URL Encoding for Sharing
When you share a quote via link or QR code:
- Data is encoded using Base64 and URL encoding (not encryption)
- The link is long but contains no server-side storage
- Anyone with the link can view the quote (like sharing a document link)
- You can enable "Redact personal info when sharing" to remove sensitive details before sharing
Share links are NOT encrypted. If you share a link without redaction enabled, the recipient can view all quote details. Use redaction for public sharing (e.g., posting in forums or sending to third parties).
Third-Party Services
Google Analytics
We use Google Analytics to understand how users interact with the application. Google Analytics:
- Sets cookies in your browser for tracking sessions
- Collects anonymous usage data (see "Analytics Data" above)
- Does NOT receive any personal or quote information from us
- May use data for advertising purposes under Google's privacy policy
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Google Places API (Address Autocomplete)
Address autocomplete uses Google Places API:
- Your typed address is sent to Google for suggestions
- Google may log these requests per their privacy policy
- Autocomplete is optional—you can type addresses manually
- Biased to show Manitoba addresses first for your convenience
QR Code Generator
When you generate a QR code (Share / QR button or Print), we use api.qrserver.com to create the QR code image:
- The shareable link URL is sent to the API
- The API returns a QR code image
- No personal data is included in the QR code URL if redaction is enabled
Your Rights & Control
Access Your Data
All your data is stored locally on your device. You can view it anytime by:
- Opening the quote form (data is displayed in the fields)
- Using browser developer tools (F12 → Application → Local Storage)
- Exporting via Backup Quote (downloads a .nuroad file)
Delete Your Data
To permanently delete your quote data:
- Click "Clear Saved Data" in the quote form
- Clear your browser's local storage manually (Settings → Privacy → Clear browsing data)
- Use private/incognito mode (data is automatically deleted when you close the window)
Data Portability
You can export your quote data at any time using the Backup Quote button (hamburger menu). This downloads a .nuroad file (JSON format) that you can:
- Save for your records
- Restore later using Restore Quote
- Transfer to another device
- Share with ONE Insurance broker
Opt-Out of Analytics
To disable Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on or use a privacy-focused browser extension like uBlock Origin.
Data Retention
Local Storage
- Data persists indefinitely in your browser until you delete it
- Browser updates or cache clearing may remove data (backup recommended)
- Private/incognito mode data is cleared when you close the browser
Email Communications
- Emails sent to nuroad@oneinsurance.ca are retained per ONE Insurance's email retention policy
- Email records may be kept for business, legal, and regulatory compliance purposes
Analytics Data
- Google Analytics retains data for 26 months by default
- Aggregate usage reports may be retained indefinitely for business purposes
Security Best Practices
For Maximum Privacy
- Use HTTPS: Always access the form via HTTPS (look for the padlock icon in your browser)
- Use Private Mode: Complete your quote in a private/incognito window if using a shared computer
- Enable Redaction: Turn on "Redact personal info when sharing" before generating share links
- Backup Regularly: Use Backup Quote to save your data before clearing browser cache
- Clear Data: Use Clear Saved Data when done, especially on shared/public computers
Be Cautious When Sharing
- Share links contain your full quote data if redaction is disabled
- Only share links with trusted parties (ONE Insurance, your broker)
- QR codes are equivalent to links—anyone scanning them can view your quote
- Email quotes are sent in plain text—avoid including sensitive information beyond what's necessary
Contact Us
If you have questions about privacy, data security, or this policy, please contact us:
- ONE Insurance
- Phone: 1-888-204-4656
- Email: nuroad@oneinsurance.ca
- Program: NuRoad Snowmobile & ATV Insurance
November 17, 2025
NuRoad Insurance Quote Application © 2025 ONE Insurance