Privacy notice.
What we collect, why we collect it, and what we promise never to do with it. Written in plain English because submission data is sensitive and you deserve to know where it goes.
Privacy notice contents
Hedge is a wholesale insurance broker. That means we handle sensitive information about insureds, retail agencies, and risks every day. This notice tells you exactly what we collect, what we do with it, and. Maybe more importantly. What we refuse to do with it.
What we collect.
We collect only what's needed to place, service, and defend an account. Specifically:
| Category | Examples | Why we need it |
|---|---|---|
| Agency & agent data | Agency name, NPN, licenses, E&O details, contact info | Verify appointment eligibility & route submissions |
| Insured submission data | Business name, operations, revenue, loss history, exposure detail | Underwriting, market selection, bind |
| Uploaded documents | Loss runs, prior policies, applications, schedules | Market release & quoting |
| Site usage | Pages visited, submission form progress, IP address, ad-click identifiers | Understand and improve site use; measure advertising when allowed |
How we use it.
Submission and agency data is used only for insurance brokerage purposes. Placing the risk, servicing the policy, handling claims, and meeting our regulatory obligations. Site usage data is used only to operate the site and diagnose problems.
Who we share with.
Hedge shares submission data only with the parties required to get the risk placed and serviced:
- Markets you've authorized. Before releasing a submission to any carrier, we confirm the release with you. You see every market before it sees your file.
- Carrier-appointed MGAs & binding facilities, where required to execute a placement.
- Regulatory bodies, where required by law. State DOIs, NAIC, or in response to lawful subpoena.
- Our own service providers. AMS, document storage, payment processor. All of whom are bound by written confidentiality agreements.
What we don't do.
A short list of things Hedge has never done and has no plans to do:
- Sell submission, agency, or insured data to any third party, at any price.
- Share submission, agency, or insured data with marketing platforms, ad networks, or behavioral retargeters. If you allow optional tools, limited site-usage and campaign signals are sent to the providers described in Section 08.
- Use insured data to train AI models. Ours or anyone else's.
- Share prior carrier pricing with competing markets without your explicit written release.
- Contact an insured directly without the retail agent's prior knowledge.
Retention & deletion.
Submission data for bound risks is retained for the longer of (a) the state-mandated retention period for surplus lines records. Typically 5 years after expiration. And (b) the applicable statute of limitations for coverage disputes. Submission data for non-bound risks is retained for 18 months unless you request earlier deletion.
You can request deletion of any non-regulated data at any time by emailing submissions@hedgespecialty.com. We'll confirm deletion in writing within 10 business days.
Security.
All submission data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is restricted to the named account team plus operations and compliance staff on a need-to-know basis. We run third-party penetration testing annually and maintain a SOC 2 Type II report, which is available to appointed agencies under NDA.
Your rights.
Depending on your jurisdiction and whether the relevant law applies, you may have rights to access, correct, delete, or port your personal data. California residents may also have the right to know the categories of data collected and to opt out of "sharing" for cross-context behavioral advertising. We honor the browser choices described in Section 08 on this site regardless of whether a particular privacy law requires us to do so.
To exercise a privacy right, email privacy@hedgespecialty.com. We respond to verified requests within 30 days.
Cookies & the site.
hedgespecialty.com uses first-party browser storage for core features, including saving submission-form progress in your browser and remembering your privacy choice. Submission drafts stay in your browser and do not transmit until you submit the form.
We use Google Analytics, Google Ads, Meta, LinkedIn, and OpenAI Ads to understand site traffic and measure advertising. These providers may receive your IP address, browser or device information, the page URL, referring page, privacy-scrubbed interaction events, and campaign or ad-click identifiers. We do not intentionally send form entries, agency or insured details, or uploaded documents to these tools. Google Signals and Google ad personalization remain disabled. Microsoft Clarity session replay is not used.
For visitors identified as visiting from the United States, these measurement tools run by default. For all other visitors, nonessential measurement tools stay off unless the visitor selects Allow tracking. We use the request's approximate country, provided by our hosting platform, to select that posture; the endpoint returns only the posture to the page and is not used to build a location profile. If the country cannot be determined, tracking stays off until the visitor allows it.
Select Do not sell or share at the bottom of any page to turn advertising tracking off or change a prior choice. We also recognize an enabled Global Privacy Control signal as a direction to keep advertising tools off. Prior opt-outs remain honored. Turning advertising tracking off stops future ad-pixel collection on this site and clears the advertising identifiers we can access. In an opt-in jurisdiction, selecting Keep tracking off also keeps Google Analytics off. A later opt-out cannot retrieve information a provider received before that choice.
Contact & changes.
Privacy questions go to privacy@hedgespecialty.com. A human will read your email and respond, usually within one business day.
Changes to this notice will be posted here with an updated effective date.
Terms of service and licensing.
Privacy notice last updated August 29, 2026. Exercise a privacy right via the legal desk.