Privacy Policy

This policy is a working draft and should be reviewed by counsel before publication. It describes our current data practices in plain language; it is provided as a starting point — not legal advice.

1. Who this policy applies to

This policy applies to PlondoLife (a national life-insurance brokerage based in Monroe, Louisiana) and the websites, mobile-friendly pages, agent training platform, and customer support channels we operate at plondolife.com and at any sub-domain of plondolife.com. It applies to information about visitors, prospective clients, policyholders, beneficiaries, and any other consumer who interacts with us.

Independent contractors who work as PlondoLife-affiliated agents are covered by a separate notice — see our Independent Contractor Privacy Notice.

2. Information we collect

We collect personal information in three ways: from you directly, automatically as you use our site, and from third parties we’re authorized to receive it from. For transparency, here are the categories — using the labels California’s privacy law (CCPA/CPRA) recognizes:

• Identifiers — name, email, phone, mailing address, account login, IP address, device identifiers.
• Customer records (Cal. Civ. Code §1798.80) — date of birth, Social Security number where required by a carrier, employment information, financial details, beneficiary details.
• Protected classifications — gender, marital status, age, citizenship, disability — collected only when a carrier needs them for underwriting or to satisfy anti-discrimination law.
• Commercial information — products you’ve quoted, applied for, or hold; transaction history; communications with us.
• Internet or network activity — pages you visit on plondolife.com, links clicked, referring URLs, browser and device metadata, cookie identifiers.
• Geolocation — coarse location derived from IP address; we do not collect precise GPS coordinates.
• Sensory information — recordings of inbound or outbound calls when permitted by state law and disclosed at the start of the call.
• Professional or employment information — for agents and applicants to our network.
• Inferences — predictions or scores derived from the above (for example, which carriers are most likely to fit your case).
• Sensitive personal information (under CPRA / state law) — Social Security number, driver’s license number, financial-account credentials, precise health information, and information collected through your interactions with health professionals.

We collect nonpublic personal information as that term is defined under the federal Gramm-Leach-Bliley Act (GLBA) — and we treat it under both this policy and the GLBA framework described in section 5 below.

3. How we use it

• To match you with carriers and policies that fit your needs.
• To process applications, transmit them to carriers, and support underwriting.
• To service active policies and answer your questions.
• To send communications about your coverage, your account, and our services.
• To detect, prevent, and investigate fraud and protect against unauthorized access.
• To meet legal, tax, insurance regulatory, anti-money-laundering, and licensing obligations.
• To improve plondolife.com, our agent training platform, and our internal operations.
• To support a sale, financing, merger, or other corporate transaction (in which case the recipient is bound by terms at least as protective as these).

We use a small amount of artificial intelligence inside our agent training platform — see our AI Systems Notice for the full picture of where, why, and what AI does not do for us.

4. Consumer reports used in life-insurance underwriting (FCRA)

When you apply for life insurance or an annuity through us, the carrier underwriting your application may order consumer reports about you. Common ones include the Medical Information Bureau (MIB), prescription history, motor vehicle record, attending physician statements, and checks against publicly available financial information. These reports are governed by the federal Fair Credit Reporting Act (FCRA).

You have the right to:

• Know whether a consumer report was used in connection with your application.
• Request a copy of the report directly from the agency that produced it.
• Dispute information you believe is inaccurate or incomplete with the agency that issued the report.

If a carrier declines, modifies, or rates up your coverage in whole or in part because of a consumer report, the carrier will send you an “adverse action” notice with the agency’s name and contact details and a summary of your FCRA rights. Your PlondoLife agent can answer questions and help you decide on next steps.

5. How we share it (GLBA framework)

Federal law requires us to be specific about three kinds of sharing. Here they are.

With our affiliates(companies under common ownership with PlondoLife). We may share information with affiliates to service your policy, support fraud prevention, and offer you products from another part of the family. Affiliates are contractually bound to use information only as described in this policy. You can ask us to limit affiliate sharing for marketing — see “Your rights” below.

With non-affiliated companies for joint marketing (other licensed insurance entities we partner with to make additional coverage available to you). We share basic identifying information for joint marketing only; we do not share medical history, application details, or financial specifics for joint marketing.

With service providers who process information on our behalf (hosting, CRM, email and SMS delivery, analytics, customer support, payment processing, background screening, fraud screening, AI providers). They see only what they need to perform the service, and they are contractually obligated to keep it confidential and not use it for their own purposes.

We also disclose information:

• To insurance carriers when you apply for or hold a policy through us.
• To state insurance departments and other regulators when required.
• To law enforcement, courts, or government authorities when legally compelled.
• To our auditors, attorneys, and other professional advisors under confidentiality.
• In the context of a corporate transaction (sale, financing, merger), as noted above.

We do not sell personal information for money. Some sharing of online identifiers and cookie data with advertising and analytics partners may be treated as a “sale” or “sharing” under California law and certain other state laws. You can opt out using the instructions in “Your rights” below.

6. Cookies, analytics, and online advertising

We use cookies, web beacons, pixels, and similar technologies for required functions (login, security, fraud prevention), performance and analytics, and advertising/personalization. Required cookies cannot be disabled while you use the secure parts of the site.

You can manage tracking in several ways:

• In your browser — most browsers let you block or delete cookies in Settings.
• Through industry opt-outs — the NAI consumer opt-out and the DAA WebChoices tool let you opt out of interest-based advertising from participating companies.
• Global Privacy Control (GPC) — we honor a valid GPC signal as a request to opt out of “sale” and “sharing” under state law where applicable.
• Through our cookie banner — when present, the banner controls non-essential cookies.

7. SMS and phone communications

When you give us your phone number — for a quote, a policy update, a one-time login code, or other transactional messaging — we do notshare that consent or opt-in data with anyone for marketing purposes. Carriers we partner with on your specific policy may text you under their own terms; we’ll tell you when that’s the case. Standard message and data rates apply. Reply STOP to any message to stop further messaging from us; reply HELP for assistance, or contact us at support@plondo.com.

8. Your rights

Depending on where you live, you have one or more of the following rights with respect to personal information we hold about you:

• Right to know — what categories we’ve collected, the sources, the purposes, and the categories of recipients we’ve shared with.
• Right to access a copy of your information in a portable format.
• Right to correct inaccurate information.
• Right to delete, subject to legal, fraud-prevention, and policy-administration retention exceptions.
• Right to opt out of “sale” or “sharing” for cross-context behavioral advertising.
• Right to limit use of sensitive personal information (CPRA).
• Right to non-discrimination for exercising any of these rights — we won’t deny services, raise prices, or downgrade quality because you spoke up.
• Right to designate an authorized agent to make a request on your behalf.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia residents (and residents of any state with a similar law adopted after this policy’s effective date) have specific rights under their state’s privacy law. To exercise any right, email support@plondo.com with your name, the right you’re asking us to honor, and the state you live in. We’ll verify your identity before responding (we may ask for documents that match the information we already have on file) and aim to reply within 45 days. If we need more time, we’ll tell you why.

We don’t use sensitive personal information to infer characteristics about consumers, so the “limit” right is generally satisfied by default — but you can still file the request, and we’ll confirm in writing.

9. Children

Our products and services are intended for adults age 18 and older. We do not knowingly collect personal information from children under 13 (per the federal Children’s Online Privacy Protection Act, COPPA), and we do not knowingly collect or sell the personal information of anyone under 16 (per CCPA/CPRA) without parental consent. If you believe a minor has provided personal information to us, contact support@plondo.com and we will delete it.

10. Data security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These include encryption in transit (TLS) and at rest where appropriate, role-based access controls, multi-factor authentication for staff, logging and monitoring, and vendor security reviews. We align our program with widely adopted frameworks (such as NIST 800-53 controls and the NAIC Insurance Data Security Model Law where applicable).

No system is perfectly secure. Email is not a secure communication channel — please do not send Social Security numbers, account numbers, login credentials, or full health histories by email. Use the secure forms in your account or on plondolife.com instead.

If we ever discover a security incident that affects your personal information, we will notify you and the regulators required to be notified, in the manner and within the time frames required by law.

11. Fraud awareness — what we’ll never ask you

Real PlondoLife employees and licensed agents will never:

• Ask you to send your full Social Security number, full bank account number, or password by email or text.
• Ask you to wire money or send gift cards to a personal account.
• Threaten to immediately cancel a policy unless you make a same-day payment to a number we’ve never used before.
• Ask you to install screen-sharing or remote-access software so we can “help.”

If something feels off — an unexpected call, a too-urgent email, a request for credentials — stop and verify by calling the number on plondolife.com or emailing support@plondo.com directly.

12. Retention

We retain personal information for as long as needed to service your policy and to meet insurance, tax, anti-fraud, anti-money-laundering, and other legal requirements. Typical retention periods:

• Quote requests that don’t become applications — up to 24 months.
• Application files — at least 7 years from the date of decision (carriers and state DOIs typically require this).
• Active policy records — for the life of the policy plus 10 years.
• Tax and commission records — at least 7 years.
• Communications and call recordings — typically 12 months unless tied to an active matter.
• Account and login records — for the life of the account plus 24 months after closure.

When retention requirements expire, we delete or de-identify the information.

13. International users

PlondoLife operates entirely from the United States. By using our services from outside the U.S., you consent to the processing of your information in the U.S., where data-protection laws may differ from those in your country. We do not currently offer services intended for residents of the European Economic Area, the United Kingdom, Switzerland, or other countries with data-export restrictions; if that changes, we’ll update this policy first.

14. Booking a call with a PlondoLife agent

When you submit a booking through an agent’s page (URLs like plondolife.com/b/<agent code>), the following privacy practices apply on top of the rest of this policy.

• What we collect for the booking.First name, last name, email address, phone number, U.S. state, preferred language, the topic you selected, any free-text notes you typed, the time slot you chose, the agent’s timezone at booking, and the IP address + user agent of the device that submitted the form.
• Who sees it. The agent who owns the booking page sees everything you submitted. PlondoLife staff see the same information for the purpose of operating the platform (anti-fraud, support, audit). Booking data is not sold or shared with non-agent advertisers.
• How long we keep it. Booking records are retained alongside the related lead record per the retention schedule in section 12. Cancelled bookings keep the same retention floor; the cancellation reason is stored alongside the original record so support can reconstruct what happened.
• Communications you’ll get. Confirmation email, calendar invite (.ics attachment), optional SMS confirmation, optional reminder email and SMS, and a cancellation notice if the agent cancels — with the agent’s reason. SMS opt-out via STOP; email opt-out via the unsubscribe footer or by contacting support. Note: opting out of transactional booking communications cancels the booking.
• What you should not put in notes.Don’t type Social Security numbers, full medical histories, account passwords, payment information, or anything else you wouldn’t want appearing in plain text on an agent’s screen. The free-text notes field is not the place for sensitive data — that conversation belongs on the call.
• Recordings. If the agent records the call, that recording is governed by the recording disclosure on the call and the retention rules in this policy. Two-party-consent states require both sides to agree before recording starts; the agent is required to obtain that consent at the top of the call.

15. Changes

We may update this policy from time to time. The “Effective” date above will reflect the most recent revision, and material changes will be highlighted on plondolife.com for at least 30 days. If a change requires consent under applicable law, we’ll ask for it before applying the change to your information.

16. Contact us

For questions about this policy, to exercise your rights, or to flag a concern:

For complaints we can’t resolve, you also have the right to file a complaint with your state’s attorney general or insurance department.