Skip to content

Revision [draft] · effective [effective date]

Allied Policy Privacy Policy

Last updated: [effective date]. This page is a general summary of how Allied Policy collects, uses, shares, and protects your information. It is provided for general information only and is not legal advice. This is a draft that Allied Policy's counsel must review and finalize before publication. If you have questions about this policy or your information, please contact us at [contact email] or [mailing address].

Allied Policy is a licensed, independent life insurance agency. We are not an insurance company, and we do not underwrite or issue insurance policies; coverage is underwritten and issued by the insurance carriers we work with. This Privacy Policy explains what information we collect when you use our website and services, how we use and share it, and the choices and rights you have. It applies to consumers who shop for life insurance through us, policyholders who manage a policy through our portal, and visitors to our site. By using our website or services, you agree to the practices described in this policy. Separate consents apply to marketing contact and to voiceprints, as described below.

Who we are

Allied Policy is a licensed, independent life insurance agency operating from [mailing address], starting in Illinois. We hold our own insurance producer license and business-entity (agency) license (for example, [DFPR license number]) and our own carrier appointments. We are the agency of record.

We are an agency, not an insurer. We shop multiple carriers so you can compare real options, but we do not underwrite risk, make coverage decisions, or issue policies. Eligibility, coverage, pricing, and the final policy are determined by the issuing carrier. The information on our site and in our tools is general information, not insurance, legal, tax, or financial advice, and not a recommendation to buy any particular product.

We work with licensed advisor partners, and some services may be provided through those partners. We are compensated through commissions paid by insurance carriers when a policy is placed. For questions about this policy, contact us at [contact email], [phone number], or [mailing address].

Information we collect

We collect the following categories of information, depending on how you interact with us. You are not required to provide all of it, but some information is needed to give you a quote, submit an application, or service a policy.

  • Identity and contact information: your name, mailing address, email address, phone number, date of birth, and similar details you provide when you request a quote, chat with us, create an account, or ask to speak with an advisor.
  • Insurance-application and health-related information, where you choose to provide it: information needed to prepare a quote or application, which can include age, gender, coverage amount and type, tobacco or nicotine use, general health questions, lifestyle information, and beneficiary details. Some carrier applications include health questions; you provide this information so we and the carrier can process your request.
  • Payment information: billing details you provide to purchase or maintain a policy. Payments are generally processed by the carrier or a payment processor; we limit the payment data we retain.
  • Device, usage, and cookie information: technical details such as your IP address, browser and device type, pages viewed, links clicked, and similar analytics data collected automatically through cookies and similar technologies (see Cookies and tracking).
  • Communications and call recordings: the content of messages, chats, emails, texts, and phone or voice conversations you have with us, including recordings and transcripts of calls (calls may be recorded, and we disclose recording as described below).
  • Illinois biometric voiceprints: if you separately consent, a voiceprint (a biometric identifier under Illinois law) used to recognize and authenticate you as a returning caller. We do not create a voiceprint unless you have given a separate written consent first (see Illinois Biometric Information Privacy Act).

How we use information

We use the information we collect to operate our business, serve you, and meet our legal and compliance obligations. We do not use your health-related or biometric information for advertising.

  • To provide quotes, compare carrier options, prepare and submit applications, and help you shop for and service a policy.
  • To communicate with you about your request, your quote, your application, and your policy, including proactive servicing alerts (for example, payment issues, lapse risk, underwriting status changes, or a term nearing expiry).
  • To connect you with a licensed advisor when you ask for one, including live transfers and scheduled appointments.
  • To operate, secure, personalize, and improve our website, tools, and AI assistant, and to power our chat and voice experiences.
  • To verify your identity, prevent fraud, and, where you consent, recognize you as a returning caller using a voiceprint.
  • To comply with applicable laws and regulations, maintain required consent, disclosure, and audit records, and enforce our terms.
  • To send you marketing about our products and services, but only where you have given the consent required by law, and always subject to your right to opt out.

How we share information

We share information only as needed to provide our services and as required by law. We do not sell your biometric data, and we do not lease, trade, or profit from it in any way. We share information with the following categories of recipients.

We do not sell your voiceprint or other biometric identifiers or biometric information, and we do not lease, trade, or otherwise profit from it. Any sharing of biometric information is strictly limited as described in the Illinois Biometric Information Privacy Act section below.

  • Insurance carriers: to prepare quotes, submit applications, obtain underwriting decisions, and place and service policies.
  • Licensed advisor partners: to answer your questions, guide you, and close and service policies, consistent with your requests and consents.
  • Service providers: vendors that support our operations under contract, including our customer relationship management (CRM) platform, our communications platform (which provides our voice, SMS, and voice-verification capabilities), our consent-certification vendor, hosting and infrastructure providers, analytics providers, and identity and security providers. These providers may process your information only to perform services for us and are bound by confidentiality and data-protection obligations.
  • As required by law: to comply with legal obligations, respond to lawful requests and legal process, cooperate with regulators, protect our rights and the safety of others, and in connection with a business transaction such as a merger or sale, subject to this policy.
  • With your direction or consent: to any other party you ask us to share with, or where you otherwise consent.

Illinois Biometric Information Privacy Act (BIPA)

For Illinois residents, we may collect and use a voiceprint, which is a biometric identifier under the Illinois Biometric Information Privacy Act (BIPA), to recognize and authenticate you as a returning caller. We only do this if you provide a separate, informed written consent (an electronic signature is acceptable) before any voiceprint is created. That consent, which is a standalone release separate from our marketing and lead consent, names the biometric we collect (your voiceprint), the purpose (caller recognition and authentication), and how long we keep it. See our biometric consent notice at [link to biometric consent notice].

Retention and destruction: we retain your voiceprint only as long as needed for its stated purpose, and in any event no longer than three years from your last interaction with us, whichever comes first. We follow a publicly available written retention-and-destruction schedule, enforced by an automated destruction process, and destroy voiceprints on that schedule. Our current schedule is available at [link to biometric retention schedule].

No sale and strict limits: we do not sell, lease, trade, or otherwise profit from your voiceprint or any other biometric identifier or biometric information, and we disclose it only in the narrow circumstances the law allows. We store biometric data using at least a reasonable standard of care and in a manner that is the same as or more protective than how we store other sensitive information. If you do not consent to a voiceprint, you can still use our services; we simply will not recognize you by voice.

Cookies and tracking

We and our service providers use cookies and similar technologies (such as pixels and local storage) to operate the site, remember your preferences, keep you signed in, measure and improve performance, and understand how our site is used. Some of these are necessary for the site to function, and others are optional.

You can control cookies through your browser settings, and where required we provide a cookie preference tool at [link to cookie settings]. Blocking some cookies may affect how the site works. Where required by applicable law, we honor recognized browser-based opt-out signals; [counsel to confirm whether the site responds to Global Privacy Control and similar signals at launch]. We use consent-certification tools to document the consent you provide through our forms.

Data retention

We keep information for as long as needed to provide our services, service your policy, and meet our legal, regulatory, and recordkeeping obligations, after which we delete or de-identify it.

For consent records, call recordings, and call transcripts, our general retention period is approximately five years, aligned to applicable limitations periods and confirmed against applicable state rules. Voiceprints are held to the shorter BIPA schedule described above (no longer than three years from your last interaction, or sooner once the purpose is met). Where different legal requirements apply, we follow the period the law requires.

Your choices and rights

You have choices about your information, and depending on where you live you may have additional rights. To exercise any of these, contact us at [contact email], [phone number], or [mailing address], or use the tools available in your policyholder portal. We will verify your identity before acting on a request and will respond within the time required by law.

Some information is retained for legal, regulatory, and recordkeeping reasons (for example, consent records, call recordings, and licensing and audit records) and cannot be deleted while those obligations apply, so not every record can be erased on request. The specific rights available to you depend on where you live and on applicable law.

  • Access: request a copy of the personal information we hold about you.
  • Correction: ask us to correct information that is inaccurate or out of date.
  • Deletion or portability (where applicable): request deletion of, or a portable copy of, certain personal information, subject to the legal retention obligations described above.
  • Opt out of marketing: stop marketing calls, texts, and emails at any time (reply STOP to texts, use the unsubscribe link in emails, tell our voice assistant to stop, or contact us).
  • Revoke consent: withdraw a consent you previously gave, including consent to be contacted or consent to a voiceprint. Revoking a voiceprint consent leads to destruction of the voiceprint under our schedule.
  • GLBA opt-out: where applicable, opt out of certain sharing of your nonpublic personal information as described in our GLBA privacy notice, which we provide separately [link to GLBA privacy notice].
  • Do-not-call: ask to be added to our internal do-not-call and suppression list.

How we protect information

As a licensed insurance agency, we maintain a written information security program with administrative, technical, and physical safeguards designed to meet the GLBA Safeguards Rule and applicable insurance data-security requirements. We store your information in the United States.

Our safeguards are designed to include encryption of sensitive data at rest and in transit, role-based access controls so that people see only the information they need, multi-factor authentication for accounts that can view sensitive personal information, activity logging and auditing, and vendor oversight. No system can be guaranteed to be perfectly secure, but we work to protect your information and to detect and respond to security events. If a security incident affects your information, we will notify you and regulators as required by law.

Children

Our website and services are intended for adults and are not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at [contact email] and we will delete it as required by law.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the last updated date at the top of the page, and, where required, we will provide additional notice. Your continued use of our website or services after an update means you accept the revised policy.

How to contact us

If you have questions about this Privacy Policy or want to exercise your choices or rights, contact us at:

Allied Policy, [mailing address]. Email: [contact email]. Phone: [phone number]. For biometric or BIPA questions, contact us at [biometric contact email or same as above].