Privacy Policy

Information we collect

Depending on how you use the website, we may collect:

• Identifiers and contact details, such as your name, email address, telephone number, company name, and information included in a message.
• Business and insurance information that you voluntarily provide when asking about our services, industries, risk solutions, or cost-reduction strategy.
• Scheduling information when you use the meeting scheduler, such as the meeting date and time, contact details, and information needed to arrange the meeting.
• Technical and usage information, such as IP address, browser and device information, referring page, pages viewed, timestamps, security logs, and approximate interaction information.
• Cookie and consent information, such as CookieYes preference choices and consent-log information.

The general contact form is not intended to collect Social Security numbers, payment-card information, medical records, claim files, account credentials, or other highly sensitive information. Do not submit that information through the website form.

How we use information

We may use personal information to:

• Respond to questions, requests, and inquiries.
• Communicate with you about requested services or a scheduled meeting.
• Operate, maintain, troubleshoot, and secure the website.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Measure website performance and improve content when you have provided the applicable consent.
• Remember cookie and privacy preferences.
• Comply with legal obligations and exercise or defend legal rights.

For visitors in the European Economic Area, the United Kingdom, or Switzerland, where applicable, our legal bases may include performance of a requested service, legitimate interests, consent, and compliance with a legal obligation.

Cookies and similar technologies

The website uses necessary cookies and may use optional analytics or embedded-service technologies. Optional technologies are intended to load only after you make the applicable choice in the CookieYes banner. See the Cookie Policy for the current declaration and categories.

You can change or withdraw your choices at any time through the Cookie Preferences control in the footer or the CookieYes preference center. Because the cookie inventory can change when scripts or vendors change, the live CookieYes declaration is the current source for the site's detected cookie inventory.

Service providers and third parties

We use service providers to operate the website and provide requested functions. Depending on the services enabled at the time of your visit, these may include:

• CookieYes, for cookie consent, preference management, consent logging, and the cookie declaration. See CookieYes's privacy policy.
• Google Analytics, for website measurement after Analytics consent. See Google's privacy policy.
• HubSpot, for meeting scheduling and forms when you choose to use those services. See HubSpot's privacy policy.
• Cloudflare, including Bot Management support for necessary infrastructure cookies where used by a service provider. See Cloudflare's privacy policy.
• Vercel, for hosting and delivery. If Vercel Analytics or another optional measurement service is enabled, it must be described here and consent-controlled where applicable. See Vercel's privacy policy.

When we disclose information

We may disclose personal information to:

• Service providers that process information for website hosting, security, consent management, analytics, scheduling, forms, communications, or related operations.
• Professional advisers, auditors, insurers, regulators, law enforcement, courts, or government authorities when required or permitted by law.
• A successor or transaction party in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate safeguards.
• Other parties when you direct us to disclose information or provide consent.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, to provide services, maintain business and security records, resolve disputes, enforce agreements, and comply with legal obligations.

The proposed website schedule is:

• Website inquiries: target deletion or de-identification 24 months after the last substantive contact, unless a longer period is required for a pending relationship, dispute, legal obligation, or documented business need.
• Meeting-scheduling records: target 24 months after the last activity, subject to the HubSpot account's retention and deletion controls.
• Analytics data: use the shortest Google Analytics retention period that meets the business need.
• Consent logs: retain long enough to demonstrate consent and preference history, then delete or anonymize according to the documented retention schedule.
• Security logs: retain for the period reasonably needed for security operations, with a target of 30 to 90 days unless a longer period is needed for an incident or legal requirement.

Client, insurance, accounting, employment, and other regulated business records may follow separate retention policies and are not governed by the website schedule above.

California privacy rights

If you are a California resident and the California Consumer Privacy Act (as amended) applies to our processing, you may have the right to:

• Know or access categories and specific pieces of personal information, subject to legal exceptions.
• Delete personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information, if applicable.
• Limit the use and disclosure of sensitive personal information in circumstances covered by the law.
• Receive equal service and price and not be discriminated against for exercising privacy rights.

We honor Global Privacy Control (GPC) as a browser-based opt-out preference signal where required by applicable California law.

To submit a request, email admin@corebrokers.com with the subject line "Privacy Request." We may need to verify your identity before completing a request. We will respond within the time required by applicable law and may extend the response period when permitted.

European and other rights

Depending on where you live and the law that applies, you may have rights to access, correct, delete, restrict, object to, or port personal information, and to withdraw consent where processing is based on consent. You may also have the right to complain to a data-protection authority. Contact us using the information above.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks of processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International processing

Our service providers may process information in the United States and other locations where they operate. Where required, we use appropriate safeguards for cross-border processing.

Children

The website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. Contact us if you believe a child has provided personal information.

Changes to this policy

We may update this policy when our services, technology, vendors, or legal obligations change. We will post the revised policy with a new Last updated date. Material changes will be communicated through the website or another appropriate method when required.

Contact us

For privacy questions or requests:

Notice at collection for the contact form

When you submit the Core Brokers contact form, we collect identifiers and contact details, professional or business information, message content, internet or technical information, and, if you use the scheduler, meeting details. We use this information to respond to your request, schedule a meeting, operate and secure the website, and comply with law. We retain it according to the Retention section above. We may disclose it to service providers such as hosting, consent, scheduling, form, security, and communications providers. See this Privacy Policy for more information and available rights.