Effective Date: January 1, 2025
Last Updated: July 22, 2025

1. Introduction

PolicySmart, located at 445 Park Avenue, Floor 9, New York, NY 10022, USA (“PolicySmart”, “we”, “our”, or “us”), is committed to protecting the privacy and data rights of our users. This Privacy Policy explains how we collect, use, disclose, and protect personal data collected through our website and broker subdomain, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

If you have any questions or requests regarding this policy, you may contact us at info@policysmart.com.

2. Who This Policy Applies To

This Privacy Policy applies to:

  • Brokers submitting information to partner with PolicySmart;
  • Clients seeking insurance services through our platform;
  • Insurance carriers using our system for client pairing.

3. What Data We Collect

We collect and process the following types of personal data only when you voluntarily provide it via forms on our website or broker subdomain:

  • Full name
  • Company name
  • Email address
  • Telephone number
  • Business role/title
  • Aadditional details requested in role-specific onboarding forms

We do not use this data for marketing purposes, nor do we sell or share it with third parties for commercial gain.

4. Purpose and Legal Basis for Processing

We process your personal data solely for:

  • Facilitating secure and accurate matchmaking between brokers, clients, and carriers;
  • Internal operations necessary to evaluate service partnerships and provide cost-saving opportunities;
  • Fulfilling contractual or pre-contractual obligations.

The legal bases under GDPR for processing your data are:

  • Article 6(1)(b) – processing is necessary for the performance of a contract or to take steps prior to entering into a contract;
  • Article 6(1)(f) – legitimate interests, such as efficient service matching and risk reduction;
  • Article 6(1)(a) – your consent, when applicable.

5. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. When no longer needed, your personal data will be securely deleted or anonymized.

6. Data Sharing and International Transfers

We do not sell, rent, or distribute your data to third parties.
We may transfer data outside the European Economic Area (EEA), including to the United States, strictly for the operational purposes described. These transfers are protected by Standard Contractual Clauses (SCCs) or other legal mechanisms approved by the European Commission.

7. Your Rights Under GDPR

If you are in the EEA or other applicable jurisdictions, you have the following rights:

  • The right to access your data
  • The right to correct inaccurate or incomplete data
  • The right to request deletion of your data
  • The right to restrict or object to processing
  • The right to data portability
  • The right to withdraw consent at any time
  • The right to lodge a complaint with a supervisory authority

To exercise any of these rights, email us at info@policysmart.com.

8. Security Measures

We use industry-standard encryption, access controls, and administrative safeguards to protect your data against unauthorized access, misuse, or disclosure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and update the “Last Updated” date above.