Privacy Policy

Last updated: September 26, 2026

The Short Version

What We Collect

When you fill out a form on this site, we may collect:

• Contact information: name, email, and/or phone number
• Preferences: what you asked about and how you want to be contacted
• State of residence: to apply the correct licensing and disclosures
• Optional details: notes you choose to provide
• Consent record: your permission to contact you, the date and time it was given, and the exact consent language you agreed to
• Technical identifiers: IP address and browser information, retained solely as proof of consent for TCPA compliance

We do not request Social Security numbers, medical records, banking information, or other highly sensitive data through this website.

How We Use Your Information

• To respond to your request and provide educational information
• To contact you only if you gave permission
• To maintain a consent audit trail as required by federal and state law
• To improve the clarity and quality of our communication

Where Your Information Goes

Your information is stored in a secure database. A private spreadsheet that Sasson Emambakhsh uses to track follow-up receives only non-identifying fields (what you asked about, your state, age or income range, how you found the site, your consent choices, and an internal record number); your name, email address, phone number, notes and IP address are never sent to it. Non-identifying details of your inquiry (never your name, email or phone) may also be processed by an AI service to help Sasson prepare for your conversation. If you decide to work with us, your information may be recorded in secure client management systems and handled consistent with applicable law and the requirements of the issuing carrier(s).

Data Retention

Inquiry records submitted through this website are retained for five (5) years from the date of submission. After this period, records are automatically and permanently deleted from our systems.

If you become a client, records are retained in accordance with applicable state insurance regulations and issuing-carrier requirements, which may require longer retention periods.

Your Rights and Choices

• Opt out anytime: Tell us to stop contacting you and we will honor that request immediately
• Request deletion: You may request that your inquiry record be permanently deleted. We will process deletion requests within 30 days. Note: if you have become a client, certain records may be subject to mandatory regulatory retention requirements
• Request your data: You may request a copy of the information we hold about you
• Don't submit: You choose what to send; you are never required to submit a form

To exercise any of these rights, contact Sasson Emambakhsh directly at [email protected] or (702) 970-3811. We respond to verified requests within 45 days; deletion requests are completed within 30 days.

Data Security

We use reasonable safeguards to protect your information, including HTTPS encryption for all data in transit (enforced via Cloudflare) and access controls on our database systems. No internet transmission is 100% secure, so we cannot guarantee absolute security. We comply with the FTC Safeguards Rule applicable to insurance producers.

Gramm-Leach-Bliley Act (GLBA) Annual Privacy Notice

As a licensed insurance producer, Sasson Emambakhsh is subject to the federal Gramm-Leach-Bliley Act (GLBA). This notice describes our privacy practices for customers and former customers.

What information we collect and why

We collect nonpublic personal information about you from the following sources:

• Information you provide on applications or other forms (name, address, phone, email, age, beneficiaries)
• Information about your transactions with us or others (policy numbers, premiums, payment history)
• Information from consumer reporting agencies or other third parties, if you become a client and an application is submitted (credit information, medical information where permitted)

How we share your information

Reasons we can share your personal information	Do we share?	Can you limit this sharing?
For our everyday business purposes, such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes, to offer our products and services to you	Yes	No
For joint marketing with other financial companies	No	We don't share
For our affiliates' everyday business purposes, information about your transactions and experiences	No	We don't share
For our affiliates' everyday business purposes, information about your creditworthiness	No	We don't share
For our affiliates to market to you	No	We don't share
For nonaffiliates to market to you	No	We don't share

"Affiliates" means companies related by common ownership or control, as an independent insurance practice, we have no corporate affiliates. "Nonaffiliates" means companies not related by common ownership or control; we do not share your information with nonaffiliates for their marketing. "Joint marketing" means a formal agreement between nonaffiliated financial companies to market financial products or services to you; we do not engage in joint marketing arrangements.

If you become a client, you will receive a separate GLBA privacy notice from the issuing insurance carrier that covers that relationship in full.

Information Protection & Security Program

We are committed to protecting the security and confidentiality of your nonpublic personal information. Our information protection program includes the following safeguards:

• Encryption: All data transmitted through this website is encrypted in transit using TLS/HTTPS, enforced via Cloudflare. Data at rest in our systems is stored with industry-standard encryption.
• Access controls: Access to client and prospect information is restricted to authorized personnel only. Systems require authentication to access stored data.
• Firewalls and intrusion detection: Our hosting infrastructure employs network firewalls, DDoS protection, and automated threat detection provided by Cloudflare and our hosting provider.
• Employee and service provider oversight: Any vendors or service providers who access client data (e.g., CRM systems, email platforms) are contractually required to maintain appropriate safeguards and are prohibited from using your information for any purpose other than providing the contracted service.
• Physical security: Paper records containing client information are stored securely. We follow industry-standard security and record-retention practices for client files.
• Incident response: In the event of a suspected or confirmed data security incident, we will investigate promptly and notify affected individuals as required by applicable state laws (Nevada NRS 603A, Texas Bus. & Commerce Code § 521.053, Arizona ARS § 18-552, and Florida Fla. Stat. § 501.171).
• Regular review: We review and update our security practices periodically to address new threats and changes in our business operations.

While we implement these safeguards, no system is completely immune from security threats. If you have reason to believe your information may have been compromised, contact us immediately at [email protected] or (702) 970-3811.

State-Specific Privacy Notices

As a licensed insurance producer, Sasson Emambakhsh is a financial institution under GLBA, and several state consumer-privacy statutes exempt GLBA-regulated businesses or apply only above processing thresholds this practice does not meet. We therefore honor the rights to know, access, correct and delete your information voluntarily, for residents of every state, under one response window: we respond to verified requests within 45 days, and deletion requests are completed within 30 days (a record may be kept where a law or an issuing carrier requires it, and we will tell you if so). Where a statute does bind us, it is described as such below. Send any request to [email protected] or (702) 970-3811.

Nevada residents (NRS 603A): Nevada law gives you a statutory right to opt out of the sale of covered information collected through a website, and requires us to keep reasonable security measures and to notify you of a data breach. We do not sell personal information, so there is nothing to opt out of; if you send an opt-out request anyway we will confirm that within the 60 days NRS 603A allows. Requests to know, correct or delete your information are honored voluntarily as described above.

Texas residents (TDPSA): The Texas Data Privacy and Security Act exempts financial institutions subject to GLBA, so it does not directly bind this practice. We nevertheless honor requests to access, correct, delete and obtain a copy of your personal data voluntarily, as described above. We do not sell personal data or use it for targeted advertising.

Florida residents: Florida's Digital Bill of Rights applies to large data controllers above thresholds this practice does not meet. We honor access, correction and deletion requests voluntarily, as described above. Florida's Information Protection Act (Fla. Stat. § 501.171) does bind us: we keep reasonable security measures and will notify you of a data breach as it requires.

Arizona residents: Arizona has no comprehensive consumer privacy statute. Its insurance-specific privacy law (A.R.S. § 20-2101 et seq.) governs information collected in connection with an insurance transaction, including an opt-in requirement before certain sharing with non-affiliated third parties, and A.R.S. § 18-552 requires us to notify you of a data breach. Access, correction and deletion requests are honored voluntarily as described above.

Virginia residents (VCDPA): The Virginia Consumer Data Protection Act exempts financial institutions subject to GLBA and applies only above processing thresholds this practice does not meet. We nevertheless honor requests to (1) confirm whether we process your personal data; (2) access it; (3) correct inaccuracies; (4) delete it; (5) obtain a portable copy; and (6) opt out of targeted advertising or sale, voluntarily and within the 45-day window described above. We do not sell personal data and do not use it for targeted advertising.

Cookies and Tracking

Strictly necessary cookies are always active: they keep your session secure, protect forms against cross-site request forgery, and remember your cookie choice. These do not require consent.

Error reporting is not analytics: if a script on a page fails to run, your browser sends this site (never a third party) a short technical report containing the page path, your browser's software version string, and the error text with email addresses and long number sequences removed; it never includes anything you typed into a form, sets no cookie or persistent identifier (only a temporary per-tab counter so the same problem is reported once), is not used for analytics or advertising, and exists only so we can find and fix breakage on the site.

Analytics cookies are off by default. We load them only after you opt in to the "Analytics" category in the cookie banner. With your consent we use Google Analytics, PostHog, and Ahrefs Web Analytics to understand how visitors use the site in aggregate. We do not use advertising cookies or sell your data, and analytics activity is not linked to your form submission.

State detection: to offer you the disclosures for your state, and only after you have opted in to the "Analytics" category, your browser asks a geolocation service (ipapi.co) which U.S. state your network address belongs to. Only your IP address is sent, no cookie is set, and the answer is not stored: it is used once to show a dismissible banner, and only your choice to dismiss that banner is remembered for the browsing session. Nothing is requested while analytics consent is off or after you withdraw it.

You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page.

AI Chat Assistant ("Ari")

The chat widget on this site is an automated AI assistant, not a person and not a licensed producer. Messages you type into the Ari chat are sent from our server to a third-party AI provider to generate the reply: currently OpenRouter, Google Gemini, Groq or Cerebras, tried in that order until one answers (the order can change when a provider is unavailable). The provider's own terms govern its handling of the text it receives. Do not enter personal, health or financial details in the chat. We do not save your conversation: our server keeps a per-network-address hourly message counter to limit abuse, and a log entry recording the network address, the general topic category of the exchange and whether the reply was redirected to a licensed professional, but not the text of what you typed or what Ari replied. Your browser holds the current conversation in session storage so it survives moving between pages and clears it when the tab is closed.

Text Messaging (SMS)

We do not send automated or bulk text messages. No texting platform, autodialer or short code is connected to this website. If you choose text as your preferred contact method, Sasson may reply to you personally from his business number, (702) 970-3811, about the inquiry you submitted. Standard message and data rates may apply. Reply STOP at any time and texting ends. Choosing text is never a condition of receiving our services or booking a consultation, and your consent is given to Sasson Emambakhsh only; it is not shared with or transferred to any other party.

We record the date, time, IP address, and exact consent language at the time you opt in, as required for TCPA compliance. We do not share your phone number with third parties for their marketing purposes.

Do Not Call

We honor the National Do Not Call Registry. If you have asked us not to contact you, we will respect that request. To opt out of future communications, simply tell us during any conversation, reply STOP to any text message, or contact us directly.

CAN-SPAM (Email)

Any follow-up emails we send comply with the CAN-SPAM Act. Every email includes our physical business address and a clear way to opt out of future emails. We honor opt-out requests promptly.

Personal and Licensing Disclosures

Licensed in: Nevada (#4185790) | Texas (#3460699) | Florida (#G322852) | Arizona (#22097825) | Virginia (#1569892)

Contact Us

Questions about this policy, data requests, or deletion requests? Contact Sasson Emambakhsh, Las Vegas, NV, at [email protected] or (702) 970-3811.

Note: Product and carrier privacy notices may apply if you become a client. Refer to the applicable carrier's privacy notices for additional details.

← Back to home  |  Compliance & Legal

Sasson Emambakhsh is a licensed representative (NV #4185790 | TX #3460699 | FL #G322852 | AZ #22097825 | VA #1569892). This page provides educational information only and does not constitute financial, legal, or tax advice.