🛡️ Privacy Notice

Glacier Point Insurance Services, Inc. ("we," "us," "our") respects your privacy. We collect and use personal information for the purpose of providing insurance and surety brokerage services, processing quotes, placing bonds and policies with carriers and surety underwriters, measuring the effectiveness of our own marketing, fulfilling regulatory obligations, and communicating with you about your account.

Information We Collect

We may collect the following categories of information:

Identifiers: name, address, email, phone number, FEIN, SSN
Commercial information: business name, ownership, license numbers
Financial information: only as required for underwriting
Internet or device data: if you use our website
Information you voluntarily provide: on quote forms

Data Sharing

We do not sell your personal information.

Depending on the service you use, we share information with:

Insurance carriers and surety underwriters
Wholesale insurance brokers and managing general agents who assist us in placing coverage
Technology providers supporting our website, communications, and quote or policy services
Analytics and advertising measurement providers, as described below
State regulatory bodies when required to file bonds (e.g., CA CSLB)

We use industry-standard security and encryption to protect your information.

For questions about this privacy notice, contact: [email protected]

🧭 Your Privacy Choices (CCPA / CPRA, California Residents)

Current CPRA Status: At this time, we do not meet the statutory thresholds to be considered a "business" under the California Privacy Rights Act (CPRA). The law generally applies to companies that:

Had annual gross revenue above $26,625,000 in the preceding calendar year (the threshold effective January 1, 2025), OR
Buy, sell, or share personal information of 100,000+ consumers/households annually, OR
Derive 50%+ of annual revenue from selling/sharing personal information

However, we provide the following information as a best practice and in anticipation of future growth. If our status changes, we will update this notice and provide formal CCPA/CPRA request methods.

Privacy Rights Under CCPA/CPRA: California residents would have the following rights if CPRA applies:

1. Right to Know

You may request information about the categories of personal information we collect, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

2. Right to Access

You may request a copy of the personal information we have collected about you.

3. Right to Correction

You may request that inaccurate personal information be corrected.

4. Right to Deletion

You may request that we delete personal information we have collected, unless retention is required for:

Insurance underwriting
Bond filing
Regulatory compliance
Fraud prevention
Legal obligations

5. Right to Opt-Out of Sale/Sharing

We do not sell personal information. We use Google Ads conversion tracking, which places Google cookies on this site to measure whether our advertising leads to quote requests. We do not provide your quote or application information to data brokers, and we do not use it for behavioral advertising. Our website also uses Google Analytics and Microsoft Clarity. ChatGPT ad measurement can share hashed contact identifiers for conversion matching, as described below.

Do Not Track and opt-out signals: ChatGPT ad measurement respects Global Privacy Control and the browser preference below. Our other analytics tools do not currently respond to "Do Not Track" or Global Privacy Control. We do not sell personal information regardless of any signal, and you can block or delete cookies, including Google's advertising cookies, in your browser settings.

6. Right to Non-Discrimination

We will not discriminate against you for exercising any CCPA rights.

📝 How to Submit a Privacy Request

To submit an access, correction, deletion, or "right to know" request, contact us:

Email: [email protected]

Phone: (925) 744-6553

We will verify your identity before processing the request, as required by law.

🔍 FCRA Soft Credit Pull Notice

When you apply for a contractor bond, we may obtain a soft credit inquiry to determine eligibility and pricing.

This is not visible to creditors
It does not affect your credit score
It is used solely for bond underwriting purposes

By submitting the bond application, you authorize Glacier Point Insurance Services, Inc., and our underwriting partners, to obtain your credit information as allowed by the Fair Credit Reporting Act (FCRA).

🔒 Data Security Statement

Our website uses HTTPS to encrypt data in transit. Access controls help restrict access to information. Retention depends on the purpose of the record and applicable insurance and regulatory requirements, as described below.

Our website safeguards include:

SSL/TLS encryption for data in transit
Secure cloud infrastructure with access controls

🏛️ Insurance Privacy (IIPPA & GLBA)

Insurance information may be subject to privacy requirements separate from website analytics, including the following laws where applicable:

California Insurance Information and Privacy Protection Act (IIPPA) — Cal. Ins. Code §791 et seq.
Gramm-Leach-Bliley Act (GLBA) — 15 U.S.C. §6801 et seq.

Information Practices (per IIPPA §791.04)

Sources: directly from you, insurance applications, consumer reporting agencies (for bond applications), and insurance-support organizations.
Insurance services: we use application and policy information to underwrite, place, service, administer, and renew insurance and surety products, and to meet legal and regulatory obligations. Website advertising measurement is described separately below.
Disclosure: we do not disclose nonpublic personal information to non-affiliated third parties except as permitted by law — including wholesale insurance brokers and managing general agents, insurance carriers, reinsurers, surety underwriters, state regulators (e.g., CA CSLB), law enforcement, and fraud prevention databases.
Access and correction: you may access and request correction of your recorded information by contacting [email protected]. For written access requests covered by §791.08, we respond within 30 business days after receiving a sufficiently specific request and proper identification.

GLBA Safeguards

We use safeguards designed to protect nonpublic personal information. This website notice does not replace any separate insurance privacy notice or disclosure required for your transaction.

📱 SMS / Text Message Program

SMS opt-in consent and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliate for marketing or promotional purposes. We do not sell or rent SMS opt-in consent or mobile phone numbers.

If you opt in to SMS communications via the checkbox on our quote forms, the following terms apply:

Content: informational messages about your quote, application, policy, or service updates. We do not send marketing or promotional texts.
No sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Frequency: varies based on account activity.
Rates: message and data rates may apply. Your mobile carrier is not liable for delayed or undelivered messages.
Opt-out: reply STOP at any time to unsubscribe. Reply HELP for assistance.
TCPA consent: by opting in, you consent under the Telephone Consumer Protection Act (47 U.S.C. §227) to receive calls and texts at the number provided, including from automated systems, for the purposes described above. Consent is not a condition of purchase.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected and to meet legal, accounting, or regulatory obligations. Typical retention periods:

Quote requests and intake questionnaires (no policy issued): up to 3 years after the last activity
Identifiers collected in intake questionnaires (tax ID numbers, dates of birth, driver's license numbers): removed from our online intake system within about 90 days after we finish working from the questionnaire; the copy on the insurance application itself follows the policy-record period below
Bound policies and bonds: up to 10 years after the policy term ends. California requires producers to keep transaction records for at least five years after a policy expires (10 CCR §2190.2); we keep them longer because claims involving construction work can be brought up to ten years after the work is completed (Code of Civil Procedure §337.15)
Documents you upload through our secure upload page: stored privately as part of your client file and retained under the applicable quote-request or policy-record period above. We remove a temporary upload copy only after confirming it has been copied to your client file elsewhere; an upload is not automatically deleted merely because it has not yet been transferred.
Intake and upload activity logs (IP address, browser type): up to 13 months
Regulatory filings (e.g., CSLB bond filings): as required by the applicable agency
Website analytics: retention depends on the provider and its settings. Google Analytics retention controls apply to user and event data, not standard aggregated reports

Breach Notification

In the event of a security incident involving unauthorized access to unencrypted personal information, we will notify affected California residents as required under Cal. Civ. Code §1798.82. Notice will be made in the most expedient time possible and without unreasonable delay.

Minors

Our services are directed to businesses and their owners. We do not knowingly collect personal information from individuals under 16. If you believe a minor has submitted information through this site, please contact [email protected] and we will delete it.

Cookies, Analytics & Advertising Measurement

We use the following services on the site:

Google Analytics / Tag Manager: to understand aggregate usage and improve content
Microsoft Clarity: session recordings and heatmaps, with sensitive form inputs masked, to improve user experience
Google Ads conversion tracking: cookies that measure whether our advertising leads to quote requests
ChatGPT ad measurement: attribution cookies and hashed contact information used to match quote requests to ads, as described below

You can manage cookies in your browser settings. Aside from the advertising measurement described above, we do not use third-party ad networks, and we never sell personal information.

ChatGPT ad measurement

We use OpenAI's measurement pixel to measure quote requests following our ChatGPT ads. It uses attribution and browser identifiers. Its __oppref cookie lasts up to 30 days after it is written, and its __obref cookie lasts up to 365 days after creation. Browser settings may shorten these periods. Automatic advanced matching is enabled. The pixel can detect supported contact information entered on public quote forms and convert it to SHA-256 hashes in your browser before sending it to OpenAI to match conversions to ads. Supported contact information can include names, email addresses, and phone numbers supplied with a quote request. Raw contact information is not sent through this matching feature. Hashing allows matching and does not make these identifiers anonymous. SMS consent is separate from advertising measurement: the SMS checkbox controls whether you receive texts, not whether ad measurement is allowed. Our conversion code does not send SMS consent records, text message content, insurance answers, or coverage details. We opt conversion events out of future individual ad personalization.

You can allow or turn off this measurement below. This preference applies only to ChatGPT ad measurement on this browser and website address. Use the controls again on other browsers or devices, or after clearing browser storage. Turning it off stops future measurement and removes its attribution cookies. It does not delete events already received by OpenAI. Global Privacy Control takes precedence over an allow preference. These controls do not turn off Google Analytics, Google Ads, or Microsoft Clarity.

Third-Party Insurance Services (Thimble)

Our instant-coverage page embeds a quoting and binding widget operated by Thimble, a third-party licensed insurance agency. Information you enter in that widget is collected directly by Thimble and governed by Thimble's own privacy policy and terms, not this notice. When you bind a policy through the widget, we receive information about the transaction in our capacity as broker of record.

Licensing and Geographic Scope

Glacier Point Insurance Services, Inc. is a licensed insurance producer in the following states:

California — Agency License #6008364 (resident)
New Jersey — Non-Resident Entity License #3002155313 (Property & Casualty)
Nevada — Non-Resident Producer Firm License #4188928 (Property & Casualty)

Our National Producer Number (NPN) is 20412321. If you access the Site from other locations, you do so under the laws that apply to your use of our services.

Updates

We may update this Privacy Policy from time to time. The "Last Updated" date above reflects the latest version. Material changes will be posted on this page.

Privacy Notice