What is collected
When you submit a request: the needs you saved, the facts you reported and marked unknown, the region of the risk, your preferred contact method, the consent you gave and its wording version, and the page you came from. Guide preparation tools and saved needs keep those fields in your browser until you submit.
The insurance-solutions search and public lookup API send your general question and optional risk region to our server to find published guides and portals. This lookup does not create a request or send it to a broker. The question may appear in the page URL and hosting request logs. Keep names, contact details, exact addresses, policy numbers, medical information and documents out of it.
Guide preparation fields stay in your browser until you submit a request. A prepared request records its topic, entry page and a reported source channel such as guide, search, API or ChatGPT. A source label is attribution, not proof that an external assistant or broker is connected.
Not requested at this stage: medical history, identity documents, financial statements, exact street addresses, or documents an insurer would need to quote.
Who it is shared with
Only the licensed brokers you consented to, up to three, and only after your request is routed. Each recipient, purpose and date appears in your sharing timeline. In information-mode markets nothing is shared with anyone.
How long it is kept
Request records are retained for 24 months from submission, then deleted. Aggregate counts of unmet demand by region and line contain no personal detail and are kept indefinitely.
Your rights
You can ask what was stored, correct it, withdraw consent for future sharing, or have it deleted, subject to records we must keep. Withdrawal stops future actions; it cannot recall what a broker already received, which the timeline will show.
Laws that apply
PIPEDA for Canadian residents, UK GDPR for UK residents, and applicable state privacy laws for US residents. Transfers of personal data outside your region are recorded with the applicable safeguard before any such transfer happens.
Contact
Privacy requests are handled by the operator named on the About page.