Privacy Notice

GLBA privacy notice: what we do with your personal information

Financial companies choose how they share your personal information. Federal law, including the Gramm-Leach-Bliley Act, gives consumers the right to limit some but not all sharing, and requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully.

Notice at collection

This notice tells you, before you give us personal information, what we collect, why, and how long we keep it.

Quote requests: identifiers (your name, work email, and the IP address and page you send the form from), customer records (your phone number and typed signature), professional or employment-related information (your title and company, its FEIN, ZIP code, industry, headcount, estimated payroll, states and work mix) and commercial information (the coverage you ask us to quote and whether you use Worklio HCM), used to prepare quotes, submit applications to carriers and wholesalers at your request, place and service coverage, contact you about it, and send marketing emails you can unsubscribe from at any time. To prepare quotes we may also receive from your company employee census data (such as age, ZIP code and coverage tier), payroll and class-code information, loss history and current policy details; loss history can include information about work injuries, which is sensitive personal information. We keep quote and coverage records while we work with you or your company, and then as long as insurance record-keeping rules or other law require.

Newsletter sign-ups: identifiers (your work email, and the IP address and page you send the form from), used to send the updates you asked for; after you unsubscribe we keep your email only to honor the unsubscribe.

Job applications: identifiers and professional or employment-related information (your name, email, phone, NPN, licensed lines and states, LinkedIn profile, the book or segment you have worked, and your resume), used only to consider you for the role and kept as long as employment law requires (in California, at least four years).

Website activity: identifiers (IP address and cookie IDs), internet or other electronic network activity information (pages viewed, referring page, device and browser data, and interactions such as scrolling, clicks on links and buttons, and starting a form) and geolocation data (the approximate location derived from your IP address), used to run, secure and measure the Site and to link your visits to a quote request or newsletter sign-up you send us; Google Analytics keeps it for up to 14 months after your last visit, HubSpot keeps visit history that is linked to a quote request or sign-up for as long as we keep that record, and other visit history until we no longer need it to measure the Site, and our server logs keep it for 90 days. HubSpot's ad pixel lets LinkedIn, an advertising network, collect identifiers, the pages you visit and device and browser data for advertising, which California law treats as sharing; you can opt out at Your Privacy Choices.

We may also use any of this information to protect the Site and our business and to comply with the law. We use sensitive personal information only to provide the services you ask for and as the law allows. We do not sell or share quote requests, newsletter sign-ups or job applications.

Cookies and tracking

We use a cookie that remembers your cookie choice, and analytics cookies from Google Analytics and HubSpot that measure visits and how pages are used; HubSpot's also link your visits to a quote request or newsletter sign-up you send us. HubSpot's ad pixel also lets LinkedIn collect visits for advertising.

If your browser is set to a European time zone, analytics cookies stay off until you accept them; otherwise they are on until you turn them off. Turning them off, or a Global Privacy Control signal from your browser (a setting in some browsers and extensions), opts that browser out of the sale and sharing of personal information; a Global Privacy Control signal also overrides an earlier Accept, and Your Privacy Choices shows whether we have honored it. You can change your choice at any time in Cookie settings at the bottom of every page.

Your quote answers are kept in your browser's session storage until you close the tab. When you submit a form, Google reCAPTCHA checks that a person is sending it, which sends your IP address and information about your device and browser to Google.

The Site does not respond to Do Not Track signals. LinkedIn, through HubSpot's ad pixel, and Google, through reCAPTCHA, may collect information about your device and online activity over time and across other websites under their own privacy notices.

How we share information

In the past 12 months we disclosed the personal information described in our Notice at collection, for the purposes listed there, to the companies that run parts of the Site and our business: customer relationship management (HubSpot), which receives your quote requests, newsletter sign-ups, IP address and, while analytics is on, the pages you visit; hosting, site logs and email delivery of job applications to our hiring team (Microsoft Azure); analytics (Google Analytics); spam protection (Google reCAPTCHA); and marketing agencies that work in our CRM. Google explains how it uses information from sites that use its services at https://policies.google.com/technologies/partner-sites.

We also share information with insurance carriers and wholesalers to obtain quotes and place coverage, with affiliates under common ownership, and when required by law or to protect rights and safety.

HubSpot's ad pixel lets LinkedIn, an advertising network, collect identifiers (such as cookie IDs and IP address), the pages you visit on the Site and device and browser data for advertising, which California law treats as sharing. Until October 20, 2026, the Site also used Microsoft Clarity, which let Microsoft collect identifiers (such as cookie IDs), information about how you used the Site (such as clicks, scrolling and mouse movement) and approximate geolocation (which Microsoft derives from your IP address) for its own purposes as well as ours, in exchange for its free service; California law may treat that as a sale, so in the past 12 months we may have sold those categories of personal information to Microsoft.

We do not otherwise sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. You can opt out at Your Privacy Choices.

Your right to limit sharing

We do not share nonpublic personal information with nonaffiliated third parties for their own marketing. If this changes, we will give you notice and an opportunity to opt out as required by law. To limit sharing where permitted, contact privacy@worklioinsurance.com.

State insurance privacy rights

Some states give additional rights under insurance information and privacy protection laws, such as the right to access and correct recorded personal information and to receive reasons for adverse underwriting decisions. Contact privacy@worklioinsurance.com to exercise these rights.

How we protect information

We use administrative, technical, and physical safeguards described on our Security page, including encryption in transit, layered access controls, and audit logging. No method of transmission or storage is completely secure.

Changes to this notice

We may update this notice from time to time and will post the updated version with a new "last updated" date.

Contact us

Privacy questions can be sent to privacy@worklioinsurance.com or Worklio Insurance Services LLC, 801 Brickell Ave, FL 8, Miami, FL 33131.