This notice describes the privacy rules the Kansas City Life Group of affiliated companies follows with respect to the non-public personal information of its customers. We follow these rules for both current and former customers.

The affiliated companies are:

• Kansas City Life Insurance Company, Old American Insurance Company, Grange Life Insurance Company and Sunset Life Insurance Company of America, which are life insurance companies;
• Sunset Financial Services, Inc., a broker dealer; and
• KCL Service Company, an insurance agency.

As we provide products and services to you, we may collect certain information. This may include information:

• That you give us on applications and other forms;
• About your transactions with us; such as, the kinds of products you buy and your payment history.
• Or that we receive from outside sources; such as, a consumer reporting agency and health care providers.

We do not sell your non-public personal information to third parties. Each affiliated company will only disclose its customers' non-public personal information:

• among the other affiliates;
• to provide services to its customers;
• to administer its business;
• to market products;
• and, as allowed by law.

We may disclose customers' non-public personal information to our agents. We may also disclose it to others to provide service, to help us market our own products or to establish retained asset accounts for settlement proceeds or benefits. We will require in writing that your information be kept confidential. We will also require in writing that the information must be used only for the reason we disclosed it. This includes information we get from a consumer reporting agency. If we ever change this policy, we will give you a chance to opt out.

Sometimes we acquire medical information about our customers. We may need this information to process a claim or issue a policy. We will only disclose medical information:

• to administer our business;
• to perform services and transactions you ask for;
• to comply with laws and regulations; and
• as you or your representative approve.

There are federal rules which may apply to use and disclosure of your personal health information if you are covered by a health insurance policy or group dental or vision insurance plan. In these cases you will receive a separate notice.

We have security controls in place to protect your non-public personal information. We limit use of our customers' information to our employees who need such information to do their jobs, and to outside entities as required or permitted by law. We also have physical and electronic safeguards that are intended to assure the privacy of your non-public personal information.

You may review the information we have on file about you. If you think it is wrong, you may ask for a change. If we agree, we will make the change.

We have the right to change our privacy rules. If we do that, we will send a written notice to all customers who may be affected by the change.

California Privacy Notice Addendum

Important Disclosure for California Residents (new as of January 1, 2020):

This Addendum to our Privacy Notice for California Residents supplements the information contained in the Privacy Notice of Kansas City Life and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to policyholders, visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.

Consumer Rights under the CCPA

1.    You have the right to request disclosure of our data collection and sales practices in connection with your policy, including the categories of personal information we have collected, the source of the information and our use of the information. While we believe our current privacy notice generally addresses these questions, we are required to provide this disclosure to you regarding your rights. You may make such a request twice in a twelve-month period, and the Company will respond within 45 days.
2.    You also have the right to request a copy of the specific personal information collected about you during the 12 months before the request (together with right #1, a “personal information request”);
3.    You have the right to request that your information is deleted (with exceptions).
4.    You have the right to request that your personal information not be sold to third parties. However, this is unnecessary, as we do not sell your personal information to third parties.
5.    You have the right not to be discriminated against because you exercised any of the new rights pursuant to California law

Use of Personal Information

We may use or disclose the personal information we collect for the business purposes listed on our privacy notice. In addition, when someone uses our “contact us” email form, we collect and track their IP Address (in order to prevent spamming).

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We may disclose your personal information as described above to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We disclose your personal information for a business purpose to our affiliates, service providers and third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

In the preceding twelve (12) months, we have not sold any personal information and we do not plan to do so at any point in the future.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Calling us at 800-733-6242 (for customer service)
• Visiting oaic.com to log in through our online access.

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage. We will review it at least annually for any necessary changes or updates.