1. Overview
Keystone North ("we," "us," "our") operates keystonenorth.com and related services. We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights.
By using our services, you agree to the collection and use of information in accordance with this policy. If you disagree, please do not use our services.
2. Data We Collect
2.1 Information You Provide
- • Name, email, phone number (when you book a discovery call or submit a form)
- • Company name, agency name, producer count (when you identify as an agency owner)
- • Insurance vertical interest, coverage preferences
- • TCPA consent (explicit checkbox for outbound calls/texts)
2.2 Automated Data
- • IP address, browser type, operating system
- • Pages visited, time spent, referral source
- • Calculator inputs and results (InsureCalc)
- • Device identifiers, cookies, local storage
2.3 Third-Party Sources
We may receive data from our lead magnet (InsureCalc) and CRM integrations (Airtable, HubSpot, Close) to enrich lead profiles with verified business data.
3. How We Use Your Data
- • Lead qualification: Score and route leads to our research/setter teams
- • Outbound outreach: Contact qualified agency owners via phone/email (with TCPA consent)
- • Service delivery: Build contact lists, schedule meetings, report pipeline metrics
- • Communication: Send estimates, drip sequences, appointment confirmations
- • Analytics: Improve calculators, optimize lead scoring, measure conversion
- • Compliance: Maintain TCPA consent logs, DNC suppression, call recordings
4. Data Sharing
We do not sell your personal data. We share data only:
- • With your consent: To insurance carriers/agencies for quote requests
- • Service providers: Cloudflare (hosting), Resend (email), CRM platforms (Airtable, HubSpot, Close), Slack (alerts)
- • Legal requirements: Court orders, regulatory inquiries, TCPA compliance audits
- • Business transfers: In a merger/acquisition, with notice and equivalent protections
5. TCPA Compliance & Consent
We strictly comply with the Telephone Consumer Protection Act (TCPA) and state telemarketing laws:
- • Express written consent: Required before any outbound call/text (captured via explicit checkbox on InsureCalc)
- • Consent logging: Timestamp, IP address, user agent, consent text stored immutably
- • DNC compliance: Federal + State DNC lists scrubbed before every campaign
- • Call hours: 8 AM–8 PM local time only
- • Recording disclosure: "This call is recorded for quality assurance" announced on every call
- • Opt-out honored: Immediate suppression in CRM + dialer; "Remove me" = immediate stop
- • Consent revocation: Email hello@keystonenorth.com or reply STOP to any text
6. Data Retention
| Data Type | Retention Period | Basis |
|---|---|---|
| TCPA consent logs | 5 years | TCPA statute of limitations |
| Lead data (converted) | 3 years post-contract | Contractual + tax |
| Lead data (unconverted) | 12 months | Legitimate interest |
| Call recordings | 2 years | Quality + compliance |
| Analytics/calculator data | 24 months | Product improvement |
| Email/drip logs | 12 months | Delivery + compliance |
7. Your Rights
Depending on your jurisdiction, you may have:
- • Access: Request a copy of your data
- • Rectification: Correct inaccurate data
- • Erasure: Request deletion (subject to legal holds)
- • Portability: Receive your data in portable format
- • Restriction: Limit processing
- • Objection: Object to direct marketing/legitimate interest processing
- • Withdraw consent: At any time for consent-based processing
To exercise rights: email privacy@keystonenorth.com. We respond within 30 days.
7. Security
- • TLS 1.3 encryption in transit; AES-256 at rest (Cloudflare, Resend, Airtable)
- • Role-based access control; least privilege principle
- • Annual penetration testing; quarterly vulnerability scans
- • Incident response plan; 72-hour breach notification (GDPR)
- • Subprocessor agreements with DPAs/SCCs
8. Cookies & Tracking
- • Essential: Session, CSRF, theme preference (no consent needed)
- • Analytics: Cloudflare Web Analytics (privacy-first, no cookies)
- • No third-party ad tracking: No Facebook Pixel, Google Ads, etc.
- • Local storage: Theme preference, calculator state, dismissal flags
9. Contact
- Data Protection Officer: Kashif Ali — privacy@keystonenorth.com
- Mailing Address: Keystone North, 100 King St W, Toronto, ON M5X 1C9, Canada
- Supervisory Authority: Office of the Privacy Commissioner of Canada
10. Changes to This Policy
We may update this policy. Material changes will be notified via email (if we have your email) and posted here with a revised "Last updated" date. Continued use constitutes acceptance.