Privacy policy
Consent text version 2026-08-v1.
What we are
Client First Certified is a directory and certification programme. We are not an insurance agency, we do not sell insurance, and we are not a lead broker.
What we collect
If you request a quote from an agency: your name, email address, optionally your phone number and ZIP code, what you are looking for, and anything you type in the notes field. We also record the date and time you submitted it, your IP address, your browser's user agent string, and the exact wording of the consent disclosure shown to you.
If you browse: standard server logs and privacy-respecting product analytics. We do not use advertising trackers and we do not build advertising profiles.
Who your information goes to
A quote request goes to the single agency you named, and to nobody else. We do not fan one submission out to several agencies, we do not sell your details, and we do not pass them to lead buyers, aggregators or marketing companies. The agency contacts you directly.
We record which agency you consented to be contacted by, and the exact disclosure you saw, so that both you and the agency have a record of what was agreed.
How long we keep it
Quote request details are removed automatically 24 months after submission. We keep the anonymised record — that a request happened, and how quickly the agency responded — because that is how we hold agencies to the responsiveness they signed up to. That anonymised record contains no name, email address, phone number or IP address.
The agency you contacted keeps its own records under its own privacy policy and its own regulatory obligations. Those are separate from ours.
Withdrawing consent
You can ask the agency to stop contacting you at any time, including by replying STOP to a text. You can also ask us to delete your submission by emailing us, and we will remove it and tell the agency you asked.
Agency data
This is the same text an agency is shown on the application form itself, version 2026-08-v1 — rendered from one shared source so the two cannot drift.
How we use what you tell us. Everything on this form is used to review your application, build your public profile, and administer your certification. We also use it to understand your agency well enough to be useful to you — which means we may contact you about services from us or our partners that fit what you have described. That is a conversation, never a condition: nothing here affects whether you are certified, and every operational question on this form is optional.
What leaves us, and what does not. We do not sell your information, and we do not pass it to lead buyers, marketing companies or other agencies. If we ever publish or share industry data drawn from applications — market sizing, benchmarks, technology adoption — it is aggregated and de-identified, with no agency identifiable in it. Your individual answers stay with us.
Your certification portal. It records what happens to the leads we send you, including how quickly you respond. You can see it; we can see it. Responsiveness is one of the practice standards you sign, so we use it to hold the network to them — and we will tell you when yours slips.
Errors and omissions certificates are stored in a private location readable only by our reviewers, and served only through short-lived signed links.
An agency's own details stay current because we ask: certification renews annually, and at renewal the agency re-confirms its profile, its coverage and its standing. Where somebody claimed a listing and we did not approve the claim, there is no such relationship to refresh — so we remove that person's name, contact details and the evidence they sent after twelve months, keeping only the fact that a claim was filed and what was decided.
Security
Data is held in a managed Postgres database with row-level access controls, encrypted in transit and at rest. Uploaded documents are stored privately and served only through short-lived signed links.
Contact
Questions or a deletion request: privacy@findcertifiedagent.com.