Commitment to Client Confidentiality
Crestpoint Risk Partners (“Crestpoint,” “we,” “us,” or “our”) provides strategic risk advisory, risk architecture, and commercial insurance brokerage solutions to enterprise clients nationwide. In fulfilling our advisory and brokerage duties across all 50 U.S. states, we gather sensitive operational, financial, and organizational data.
This Privacy Policy details the policies and safeguards we maintain regarding the collection, use, retention, disclosure, and protection of information obtained through our website (cpriskpartners.com), digital intake portals, consultation questionnaires, and direct broker-client communications.
Types of Data We Collect
Because Crestpoint operates as a commercial risk advisory firm, the vast majority of information processed relates directly to commercial enterprises, business operations, and risk profiles. We collect information through three primary mechanisms:
A. Enterprise & Operational Information
Information essential for risk profiling, insurance submissions, and actuarial evaluation:
- Corporate legal name, DBA names, FEIN/tax identification numbers, corporate structure, and operating licenses.
- Historical loss runs, past claims records, safety programs, and risk management histories (typically 3 to 5 years).
- Property schedules, building construction data, square footages, fire suppression systems, and location asset valuations.
- Fleet data, DOT/MC numbers, driver qualification files, vehicle identification numbers (VINs), and transit routes for trucking and logistics clients.
- Financial metrics, gross revenue, annual payroll totals, employee headcount, and guest/table turnover numbers for hospitality and restaurant clients.
- Healthcare operational parameters, clinical staff credentials, patient volume, and HIPAA compliance protocols for medical practices.
B. Contact & Executive Information
Information required to establish authorized representation and policy communication:
- Executive and primary risk officer names, corporate titles, professional email addresses, phone numbers, and office locations.
- Billing, premium financing, and accounting point-of-contact details.
- Private client contact and residence information for specialized high-value personal property risk solutions.
C. Automated Technical & Website Analytics
When you interact with our website, our servers automatically log technical diagnostics such as IP address, browser type, operating system, referring URL, time spent on pages, and network latency. We use these analytics strictly to optimize site performance, maintain cybersecurity integrity, and prevent malicious access.
How We Utilize Collected Information
We process information exclusively for legitimate commercial advisory and insurance broking purposes, including:
- Underwriting SubmissionsAssembling thorough underwriting dossiers submitted to admitted insurers and wholesale surplus lines brokers to negotiate policy terms.
- Risk Architecture & AuditsIdentifying contractual exposure gaps, business interruption bottlenecks, and benchmarking adequate coverage limits.
- Claims Advocacy & ResolutionAssisting your enterprise in reporting, documenting, and vigorously advocating claims before insurance adjusters and carrier legal teams.
- Regulatory & Statutory ComplianceFulfilling mandated recordkeeping, surplus lines tax reporting, and licensing standards across state departments of insurance.
Authorized Disclosure & Protection Protocols
Crestpoint Risk Partners does not sell, rent, monetize, or publicly distribute any client data to advertising networks or external data aggregators. Disclosures occur strictly within the ordinary course of securing insurance quotes and policies:
- Insurance Underwriters & Carriers: Authorized commercial carriers, Lloyd's syndicates, managing general agents (MGAs), and reinsurers reviewing your underwriting risk.
- Third-Party Administrators & Loss Adjusters: Independent inspection agencies, loss prevention engineers, premium auditors, and claims investigators necessary to service active policies.
- Trusted Technology Vendors: Enterprise cloud infrastructure and policy management platforms operating under strict data protection and confidentiality agreements.
- Legal & Regulatory Mandates: State insurance commissioners, judicial subpoenas, or law enforcement entities when required by binding statutory authority.
Data Security & Retention Standards
We maintain comprehensive physical, electronic, and procedural safeguards designed to protect non-public commercial and personal data from unauthorized access, accidental destruction, alteration, or disclosure:
Encryption Standards
TLS 1.3 cryptographic protocols during transmission and AES-256 military-grade encryption at rest across all storage repositories.
Statutory Retention
Underwriting and policy records are retained in compliance with state insurance statutes of limitations, after which secure digital destruction is executed.
Multi-State Regulatory Compliance (All 50 States)
As Crestpoint provides advisory and insurance placements covering all 50 states, we honor privacy provisions recognized under state statutory regimes, including the California Consumer Privacy Act (CCPA/CPRA), the New York Department of Financial Services Cybersecurity Regulation (23 NYCRR 500), and related state insurance department privacy codes:
- Right to Know & Access: The right to request confirmation of the categories and specific elements of personal data collected.
- Right to Rectification: The right to correct inaccurate records or incomplete underwriting disclosures.
- Right to Deletion: The right to request record expungement, subject to mandatory state insurance commissioner policy retention laws.
- Right Against Retaliation: We never discriminate against any client exercising their statutory privacy rights.
Inquiries & Updates
We periodically review and update this Privacy Policy to reflect evolving insurance market practices, statutory requirements, and cybersecurity innovations. Updates take effect immediately upon publication on this page with the modified effective date.
If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact our Managing Advisory team:
Crestpoint Risk Partners
Attn: Privacy & Regulatory Compliance Officer
360 New Byhalia Rd, Collierville, TN 38017
Email: info@cpriskpartners.com
Phone: +1 (901) 902-1198