Privacy Policy

You give us: Contact details you submit through a form or when you book a call — name, business name, email, and anything you write in a message.

Collected automatically: Standard server logs (IP address, browser type, pages requested, timestamps) kept to operate and secure the site. Essential cookies only. We use cookies strictly necessary to operate the site and keep it secure. We do not use advertising or analytics cookies, so no consent banner is required.

We do not collect special-category personal data through the website, and we do not ask you to submit client policyholder information through public forms.

• Respond to your inquiry and schedule and conduct calls.
• Operate, secure, and improve the website.
• Send you information you request or that relates to an active conversation. We do not sell your information or share it for advertising.

We process website information because you asked us to respond (to take steps at your request), and on our legitimate interest in running and securing the site. Where consent is required for non-essential cookies, we ask first.

• Service providers under contract — the infrastructure, hosting, and email providers that run the site and our communications. They process data only on our instructions and under confidentiality and security terms.
• Legal — when required by law, or to protect our rights, users, or the public.

We do not sell personal information.

When an agency engages Yozona, we process policy and certificate data on the agency's behalf — named insureds, policy details, certificate-holder information. For that data:

• The agency is the controller; Yozona is the processor.
• Handling, sub-processors, retention, and deletion are governed by our Data Processing Agreement, not this policy.
• An individual whose information appears in that data should contact their insurance agency (the controller) to exercise rights; we support the agency in responding.

Our security posture for that data is described on our Security page and in the DPA.

We keep contact-form and inquiry information only as long as needed to handle your request and our relationship, then delete or anonymize it. Server logs are kept on a short rolling window for security and then discarded. Retention for agency client data is set by the DPA, not this policy.

We protect website information with encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is perfectly secure, but we work to protect what we hold and to minimize what we collect.

Depending on where you live, you may have the right to access, correct, delete, or port the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these, email support@paullumen.com. We respond within the timeframe the applicable law requires. You may also have the right to complain to your data-protection authority.

For agency client data, direct requests to the agency that holds the relationship (Section 5).

The website and service are for businesses. We do not knowingly collect personal information from children.

We may update this policy. The effective date above reflects the latest version; material changes will be noted on this page.

Questions or requests: support@paullumen.com — Yozona LLC, TX, USA.