Who this policy covers
This policy explains how Lead Vista LLC ("Lead Vista", "we", "us") handles personal information. It applies to this website and to the Lead Vista lead marketplace.
We handle personal information about two different groups, and the answers below often differ between them. Read the one that applies to you:
- Business contacts — people who visit this site, submit our enquiry form, or work for a buyer or marketing partner. We collect this information directly from you.
- Consumers — people who submitted an insurance enquiry on a form operated by one of our marketing partners. We usually do not collect this information from you directly; we receive it from the partner whose form you filled in.
This policy does not cover what a buyer, an insurer, or a marketing partner does with your information after we deliver it to them, or once you deal with them directly. Each of those companies is an independent controller of your information and has its own privacy policy. Ask them for it.
Information we collect
Information you give us
When you use the enquiry form on this site we collect your name, work email address, company name, and whether you identify as a buyer or a marketing partner. If you email or call us we keep the contents of that correspondence. If you become a participant in the marketplace we also collect account, billing, tax, and licensing information about your business and its representatives.
Consumer enquiry data we receive from partners
A consumer enquiry submitted through a partner form typically contains the consumer's name, postal address, email address, telephone number, date of birth or age, and details relevant to an insurance quote — for example vehicle, property, driving and claims history, current coverage, and household information.
It also contains the consent record: the exact disclosure text the consumer was shown, the URL of the page, the timestamp, the originating IP address, and any consent-certification token captured at the source. We keep this because it is the evidence that the consumer agreed to be contacted.
Information collected automatically
When you visit this site we collect standard technical information: IP address, browser and device type, operating system, referring page, pages viewed, and timestamps. We use this to serve the site, keep it secure, and understand aggregate usage.
Information from other sources
We may receive information from validation and verification services (for example to check that a telephone number or email address is deliverable, or to check a record against duplicate history), from consent-certification providers, from buyers reporting the outcome of a record, and from public or commercial business sources when we research a prospective participant.
We do not knowingly collect information from anyone under 18, we do not direct this site or the marketplace to children, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a minor's information has reached us, contact us and we will delete it.
Categories collected, sources, and disclosure
The table below maps what we handle to the statutory categories used by US state privacy laws, covering the twelve months preceding the date of this policy.
| Category | Examples | Source | Disclosed for a business purpose to | Sold or shared |
|---|---|---|---|---|
| Identifiers | Name, postal address, email, telephone number, IP address, account identifiers | You; marketing partners; verification services | Buyers; service providers | Yes — consumer enquiry data |
| Customer records | Contact and billing details, insurance-related details provided in an enquiry | You; marketing partners | Buyers; payment and accounting providers | Yes — consumer enquiry data |
| Protected classifications | Age or date of birth, marital status, where provided on an enquiry form | Marketing partners | Buyers | Yes — consumer enquiry data |
| Commercial information | Records purchased, returned, and credited; bids, filters, and payouts | You; marketplace activity | Service providers | No |
| Internet activity | Pages viewed, referring URL, device and browser data, form interaction | Automatic collection; marketing partners | Analytics and hosting providers | No |
| Geolocation | Approximate location inferred from IP address; postal code and state | Automatic collection; marketing partners | Buyers; service providers | Yes — consumer enquiry data |
| Professional information | Employer, job title, licensing and appointment details | You; public and commercial sources | Service providers | No |
| Inferences | Lead scoring and quality signals derived from the above | Derived by us | Buyers; service providers | Yes — consumer enquiry data |
We do not use or disclose sensitive personal information for purposes beyond those permitted without an opt-out under applicable law, and we do not collect it for the purpose of inferring characteristics about you.
How we use personal information
- To operate the marketplace: receive an enquiry, validate it, check it for duplicates, price it, route it to matching buyers, and deliver it.
- To verify and retain consent evidence, and to produce that evidence in response to a consumer complaint, a buyer dispute, or a regulator request.
- To reconcile the transaction: accepts, returns, reason codes, credits, invoicing, and payouts.
- To respond to your enquiry, provide support, and communicate about your account.
- To detect, investigate, and prevent fraud, invalid traffic, abuse, and security incidents.
- To produce aggregated and de-identified analytics and reporting about marketplace performance.
- To meet legal, tax, audit, insurance, and regulatory obligations, and to establish or defend legal claims.
We do not use consumer enquiry data to build advertising profiles, and we do not perform automated decision-making that produces a legal or similarly significant effect on a consumer. Routing decisions determine which buyer receives an enquiry; they do not determine whether coverage is offered or on what terms — that is the buyer's decision under its own process.
Where a US state privacy law requires a legal basis or a purpose limitation, we process for the purposes disclosed above and for compatible purposes only.
How we disclose personal information
To insurance buyers
The central fact of our business: we deliver consumer enquiry data to insurance buyers, and we are paid for it. Under US state privacy laws this is a "sale" and a "share" of personal information. We disclose it as such rather than describing it as anything softer.
A consumer enquiry may be delivered to one or more buyers, depending on the exclusivity terms of the record. Each buyer becomes an independent controller of the data it receives and uses it under its own privacy policy for its own purposes, including contacting the consumer about insurance.
To service providers
We use vendors to run the business: cloud hosting and content delivery, data storage, email delivery, telephone and email validation, consent certification, duplicate detection, analytics, payment processing, accounting, and professional advisers. They may process personal information only on our instructions, for our purposes, under contract, and may not sell it or use it for their own purposes.
To marketing partners
We report back to the partner that originated a record whether it was accepted, returned, or rejected, and the reason code. This may identify the record concerned.
For legal and corporate reasons
We may disclose personal information where we believe it is required by law, subpoena, or other legal process; to a regulator or law enforcement; to enforce our Terms of Service; to investigate fraud or a security incident; or to protect the rights, property, or safety of any person. We may also disclose it in connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply to the information.
We do not otherwise disclose personal information to third parties for their own independent marketing.
Contact, consent, and how to stop it
Where a consumer gives prior express written consent on a partner form, that consent typically authorises one or more buyers to contact the consumer at the number provided, including by autodialled or prerecorded call and by text message, whether or not the number is on a do-not-call registry, and regardless of whether the consumer buys anything. Consent is never a condition of purchase. The disclosure the consumer actually saw controls; it is retained with the record.
You can stop this at any time:
- Calls — tell the caller to put you on their do-not-call list. They must honour it.
- Texts — reply STOP to the message. Message and data rates may apply.
- Email — use the unsubscribe link in the message.
- All of it, from us — write to privacy@leadvista.com with the phone number and email address you used, and we will suppress them and stop routing further enquiries associated with them.
Withdrawing consent with us stops future routing. It does not automatically stop a buyer that has already received your information and become an independent controller of it — contact that buyer directly, or ask us and we will tell you which buyers received your enquiry.
We will always send transactional and service messages about an account, and those are not subject to marketing opt-out.
Your privacy rights
Depending on where you live, you may have some or all of the following rights. We extend them to all US residents as a matter of practice, whether or not the law where you live requires it.
- Know and access — what personal information we hold about you, the categories, the sources, the purposes, and the categories of recipient, and a copy of it in a portable form.
- Delete — ask us to delete your personal information, subject to the exceptions below.
- Correct — ask us to fix information that is inaccurate.
- Opt out of sale and sharing — direct us to stop selling or sharing your personal information. For a consumer enquiry this means we stop routing it to buyers.
- Limit use of sensitive personal information — where applicable.
- Non-discrimination — we will not deny you a service, charge a different price, or provide a different quality of service because you exercised a right. We do not offer financial incentives for personal information.
- Appeal — if we decline a request, you may appeal, and we will respond in writing with our reasoning.
How to make a request
Email privacy@leadvista.com or call +1 (555) 010-0000. Tell us which right you are exercising and include the email address and telephone number you used, so we can find your record. An authorised agent may submit a request on your behalf with written proof of authorisation.
We will verify your identity before acting, usually by matching the details you provide against the record we hold, and we may ask for more information if the match is not conclusive. We do not use verification information for any other purpose. We will acknowledge within 10 business days and respond within 45 days, extendable once by a further 45 days where reasonably necessary, and will tell you if we need the extension.
When we may decline
We may retain information despite a deletion request where we need it to complete a transaction, detect or prevent fraud or security incidents, exercise or defend legal claims, or comply with a legal obligation. Consent evidence is the clearest example: TCPA and state telemarketing rules make that record the defence against a complaint about the very contact you are objecting to. We will tell you if we rely on an exception and why.
If you are outside the United States
The marketplace serves the United States and our systems are located there. We do not intend to offer the service to individuals in the European Economic Area or the United Kingdom. If you are located there and believe we hold your information, contact us and we will handle your request under the applicable law.
How long we keep information
We keep personal information only as long as we need it for the purposes above, then delete or de-identify it. In practice:
- Consumer enquiry data — retained for the period needed to route, deliver, and reconcile the record, and to handle returns and disputes.
- Consent evidence — retained for at least five years, because that is the outer limit of the period in which a complaint about the contact can be brought, and longer where a claim, investigation, or legal hold requires it.
- Suppression records — retained indefinitely. We have to keep a record of the numbers and addresses you asked us to stop using, or we cannot honour the request.
- Business contact and account data — retained for the relationship and then for as long as required by tax, accounting, and limitation periods.
- Site logs — retained for a short period for security and troubleshooting.
Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls on a least-privilege basis, logging of access to enquiry data, and vendor due diligence. Where the Gramm-Leach-Bliley Safeguards Rule applies to information we handle, we maintain a written information security programme consistent with it.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Do not send sensitive personal information to us by unencrypted email.
To report a suspected vulnerability or incident, write to security@leadvista.com.
Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the current version. Where a change materially affects how we handle personal information already collected, we will give notice before it takes effect and, where the law requires it, obtain consent.
Contact us
Lead Vista LLC is the controller of the personal information described in this policy. For any privacy question or request, write to privacy@leadvista.com or call +1 (555) 010-0000.
- Lead Vista LLC
- 200 Continental Drive, Suite 401
- Newark, DE 19713
- United States
If you are not satisfied with our response, you may have the right to complain to your state attorney general or to the privacy regulator where you live.