Privacy policy

This policy explains how Ashbrook Data LLC, of [Company address — to confirm] (“Ashbrook”, “we”, “us”), handles personal information about people who visit ashbrookdata.com, book a valuation call, request access to data in our marketplace, or contact us.

It does not cover operating data that a brokerage sells or licenses through us. That data is handled under a separate signed agreement and the commitments in our Data use terms, including removing insured names and personal information before delivery.

When you book a valuation call

Your name, work email, brokerage and role. If you choose to tell us: number of employees, annual written premium band, lines of business, agency management system and years of records. The time slot and time zone you pick. After booking, you can optionally tell us about ownership and who would approve a deal.

When you request access to data

Your name, work email, company and role, the uses you intend, your timeline, any notes you add, and the listing and option you asked about.

Private account access

Private account sign-in is not currently available on this site. We do not send sign-in links or collect an account password.

Automatically

• Campaign details. If you arrive from a link carrying campaign tags (UTM parameters), we store those tags, the page you landed on and the referring page in a cookie, and attach them to any booking or request you make. See Cookies and analytics.
• Usage events. If analytics is switched on, we record events such as pages viewed, buttons clicked, searches and filters used in the marketplace, and booking or request steps completed.
• Technical information. Our hosting provider may process information such as IP address, browser type and request logs in order to serve and protect the site.

When you contact us

Whatever you include in an email or on a call with us.

• To schedule, confirm, reschedule and hold the calls you book, and to prepare for them.
• To review and respond to access requests, and to follow up about the data you asked for.
• To arrange booking confirmations, acknowledge access requests and send other messages about something you asked us to do.
• To understand which pages and campaigns lead to bookings and requests, and to improve the site.
• To keep the site secure and prevent misuse, such as abuse of booking or request forms.
• To meet legal obligations and to establish or defend legal claims.

We do not sell personal information about visitors to the site.

Where the law requires a legal basis for using personal information, we will state it here for each use listed above. [counsel to draft]

We share personal information only as described here.

Service providers

Companies that run parts of the site for us and may only use the information to provide their service. We may use:

• Email delivery: Resend, to send access-request acknowledgements and notifications to our team.
• Scheduling: Cal.com, to hold time slots and create booking invitations.
• Booking and request records: private Vercel Blob storage, to keep a record of bookings and requests.
• Analytics: PostHog, only if analytics is switched on.
• Hosting: Vercel, which hosts and serves the site.

[final list of providers in use at launch — to confirm]

Brokerages and buyers

We keep a brokerage’s identity confidential. Buyers see a description of the data, never who the brokerage is, unless the brokerage chooses otherwise. If an access request moves toward an agreement, we may tell the brokerage which company is asking, because every agreement names the buying entity before anyone signs. [to confirm]

Advisers, authorities and business changes

Our professional advisers, under a duty of confidentiality; authorities, where the law requires it; and, if Ashbrook is involved in a merger, acquisition or sale of assets, the parties to that transaction. [counsel to draft]

• ab_utm cookie. Set only on a first visit that carries campaign tags. It holds those tags, the landing page and the referring page, and expires after 90 days. It is not set if you arrive without campaign tags.
• Session storage. While you book a call or send a request, your browser keeps your progress in session storage so a refresh doesn’t lose it. Your browser clears it when you close the tab.
• Analytics. If PostHog is switched on, it records the usage events described above and may set its own cookies or local storage. [analytics cookie names and duration — to confirm]

You can block or delete cookies in your browser settings. The site still works without them; we just won’t know which campaign brought you.

We keep personal information only as long as we need it for the purposes above, then delete it.

• Booking details: [retention period — to confirm]
• Access requests: [retention period — to confirm]
• Analytics events: [retention period — to confirm]

We may keep some information longer where the law requires it or to resolve a dispute.

We take steps intended to protect personal information. [summary of security measures — to confirm] No website or service can be guaranteed secure, and we cannot promise that information will never be accessed without permission.

If you think your information has been put at risk through the site, contact us at [privacy contact email — to confirm].

• You don’t have to give us optional booking details; you can still book a call without them.
• You can block or clear cookies in your browser.
• You can ask us to stop sending you messages that aren’t about something you asked us to do.

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to correct it, to delete it, or to object to or limit how we use it. To make a request, email [privacy contact email — to confirm]. We may need to confirm your identity before acting on it, and we will not treat you differently for asking.

Our service providers may process personal information in countries other than the one you live in. [processing locations and transfer safeguards — to confirm]

The site is for brokerage principals and teams at companies that use data. It is not directed at children, and we do not knowingly collect personal information from anyone under [age — to confirm]. If you believe a child has given us information, contact us and we will delete it.

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will take reasonable steps to let you know, such as a notice on the site. [notice method — to confirm]

Questions, requests or complaints about privacy: [privacy contact email — to confirm]. Post: Ashbrook, [Company address — to confirm].