Privacy Policy

1. Who we are

This Privacy Policy applies to Good Life Insurance Group (also referred to as "Good Life," "we," "us," or "our"), an independent insurance brokerage organized and operating in the State of Arizona, with its principal place of business at:

Good Life Insurance Group
1201 S Alma School Road, Unit 12-200
Mesa, AZ 85210
Phone: 480-576-7911
Email: [email protected]

This policy applies to goodlifeinsurancegroup.com and all related pages, forms, and services we operate. By using our site or submitting your information, you agree to the practices described below.

2. Information we collect

2.1 Information you give us directly

• Identifiers — first and last name, postal address, email address, telephone number, date of birth (when applying for coverage).
• Demographic information — state of residence, age range, marital status, household size (when relevant to coverage).
• Financial information (Nonpublic Personal Information / NPI) — annual income, mortgage balance, existing coverage, debts, and other inputs to coverage calculators or applications. Subject to the Gramm-Leach-Bliley Act.
• Health information — height, weight, tobacco use, medical conditions, prescriptions, family history, and other underwriting-relevant data, but only when you submit it as part of an insurance application or pre-qualification.
• Service information — the audience that applies to you (veteran, trucker, family, other), military branch and status (when relevant), commercial driving status (when relevant), coverage type interest, and preferences.
• Communications — the content of emails, form submissions, voice calls, voicemails, and text messages exchanged with us.
• Consent records — the date, time, IP address, and browser used to provide TCPA, electronic signature, and similar consent.

2.2 Information collected automatically

• Usage data — pages viewed, links clicked, time on page, referring URL, search terms used to find us, and similar interaction data.
• Device data — IP address (truncated where supported by analytics), browser type and version, operating system, device type, screen size, and language.
• Cookies and similar technologies — first- and third-party cookies, pixel tags, local storage. See Section 7 for details.
• Call attribution data — when you call a number on our site, our call-tracking provider (CallRail) may capture the displayed phone number, the time of call, the duration, the source of the visit (organic, paid, referral), and may record the call where state law permits.

2.3 Information from third parties

• Insurance carriers and underwriting databases — when you authorize us to submit an application on your behalf, we may receive prescription drug history (Rx databases), Medical Information Bureau (MIB) reports, motor vehicle reports (MVR), and underwriting decisions from carriers.
• Public records — state insurance department lookups, NAIC public producer search, professional license verification.
• Service providers — analytics, call tracking, advertising, and CRM platforms acting on our behalf (see Section 8).
• Referral sources — partner agencies, financial advisors, or existing clients who refer you to us, but only the contact information they share with your consent.

3. How we use your information

We use the information described above for the following purposes:

• To mail your free Will Kit and deliver associated digital templates.
• To respond to your inquiries, schedule consultations, and provide you with insurance-related information you request.
• To pre-qualify you with insurance carriers, generate quotes, submit applications you have authorized, and follow up on the status of submitted applications.
• To comply with our legal obligations under federal and state insurance, financial, and tax laws — including record-keeping rules under state DOI regulations and the Gramm-Leach-Bliley Act.
• To prevent fraud, secure our systems, and enforce our Terms of Service.
• To improve our website, content, and services through analytics, A/B testing, and aggregate measurement.
• To send marketing communications to you, when you have given consent (TCPA-compliant for calls and text messages, CAN-SPAM-compliant for email). You can withdraw consent at any time — see TCPA Disclosure.

4. How we share your information

We share information only as described below. We do not sell your personal information for monetary value to third-party lead aggregators or list brokers.

4.1 Insurance carriers

When you authorize us to submit an application or quote request, we share the information necessary for underwriting and policy issuance with the carrier you have selected. Each carrier has its own privacy practices, which are governed by their own privacy notices.

4.2 Service providers

We share information with vendors who perform services on our behalf and are contractually obligated to protect it. These include:

• Hosting and infrastructure — Cloudflare, Inc. (HTTPS, CDN, hosting, web analytics, bot mitigation).
• Email delivery — Resend and similar transactional email providers.
• Call tracking and recording — CallRail, Inc.
• Analytics — Google Analytics 4 (via Google Tag Manager); Cloudflare Web Analytics. See Section 7 for cookie details.
• Customer relationship management (CRM) — when integrated, GoHighLevel (LeadConnector HQ) or a comparable CRM used to manage client follow-up.
• SMS / text messaging platform — Twilio, Inc. (carrier gateway, A2P 10DLC sender) and LeadConnector HQ / GoHighLevel (workflow orchestration and two-way conversation management) used to send appointment reminders, Will Kit updates, missed-call text-backs, and quote follow-up text messages on our behalf. Both vendors are contractually limited to processing data solely for our SMS program and may not use mobile numbers or SMS opt-in data for their own purposes or for the marketing purposes of other clients.
• Document delivery — printing and mailing partners used to ship the physical Will Kit.

4.3 Legal and regulatory disclosures

We may disclose information when required by law, subpoena, court order, or governmental request, or when necessary to investigate fraud, protect our rights, or protect the safety of others. We may also disclose information to state insurance departments as part of regulatory examinations or audits.

4.4 Business transfers

If we are acquired, merged, reorganized, or our assets are sold, your information may be transferred as part of that transaction. We will notify you and provide options where required by applicable law.

4.5 With your consent

We may share information with other parties when you direct us to do so — for example, with a spouse, financial advisor, attorney, or accountant you ask us to copy on communications.

5. GLBA Privacy Notice (Financial Privacy)

As an insurance broker, we are a "financial institution" under the federal Gramm-Leach-Bliley Act (GLBA). This section serves as our annual GLBA privacy notice.

What we do

• Why? Financial companies choose how they share personal information. Federal law gives consumers the right to limit some — but not all — sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully.
• What information do we collect? Identifiers, financial information you provide, and information from third parties as described in Section 2.
• How do we use it? To deliver insurance services you request and to comply with law. See Section 3.
• How do we share it? With carriers and service providers acting on our behalf. We do not share your nonpublic personal information with non-affiliates for their own marketing.

Reasons we can share, and whether you can limit it

Reason	Do we share?	Can you limit it?
For everyday business purposes — to process applications, maintain accounts, respond to court orders, report to credit bureaus	Yes	No
For our marketing — to offer our services to you	Yes	Yes (see opt-out below)
For joint marketing with other financial companies	No	—
For our affiliates' everyday business purposes — information about your transactions and experiences	No	—
For our affiliates' everyday business purposes — information about your creditworthiness	No	—
For our affiliates to market to you	No	—
For non-affiliates to market to you	No	—

To limit our marketing, email [email protected] with the subject line "GLBA Opt-Out" and your full name. We will process the request within 30 days.

6. Your privacy rights by state

6.1 California (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know — request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and the third parties with whom we shared it.
• Right to delete — request deletion of personal information we collected from you, subject to exceptions for legal compliance and ongoing services.
• Right to correct — request correction of inaccurate personal information.
• Right to opt-out of sale or sharing — although we do not sell personal information, you may direct us not to share it for cross-context behavioral advertising.
• Right to limit use of sensitive personal information — request that we limit our use of sensitive personal information (financial, health, precise geolocation) to what is necessary to provide the services you requested.
• Right to non-discrimination — we will not deny services, charge different prices, or provide different quality of service because you exercised a privacy right.
• Right to data portability — receive a copy of the personal information you provided in a structured, commonly used, machine-readable format.

To exercise these rights, email [email protected] with the subject line "CCPA Request." Include enough information for us to verify your identity (typically full name, current address, and the email/phone you used with us). Authorized agents may submit requests with written authorization.

We will respond within 45 days. We may extend by an additional 45 days where reasonably necessary and will notify you of any extension within the initial 45-day period.

"Do Not Sell or Share My Personal Information." We do not sell personal information for monetary value, and we do not currently engage in cross-context behavioral advertising that meets the CPRA definition of "sharing." If that ever changes, we will update this policy and provide a "Do Not Sell or Share" link.

Shine the Light. California Civil Code § 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

6.2 Virginia, Colorado, Connecticut, Utah, Texas (and other state privacy laws)

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), or other states with comprehensive privacy laws, you may have rights similar to those listed above, including the right to access, correct, delete, port, and opt out of targeted advertising, the sale of personal data, and certain forms of profiling.

Email [email protected] with your state-specific request. Where state law provides an appeals process, we will provide it. We do not engage in profiling with significant legal effects, do not sell personal data, and do not use personal data for targeted advertising as those terms are defined in the applicable state laws.

6.3 All US users

Regardless of where you live, you may always:

• Unsubscribe from marketing email by clicking the link at the bottom of any email or replying with the word "UNSUBSCRIBE."
• Opt out of marketing text messages by replying STOP.
• Add yourself to our internal Do Not Call list by emailing [email protected] or calling 480-576-7911.
• Request a copy of, correction to, or deletion of the information we have about you.

7. Cookies, analytics, and tracking technologies

We use first- and third-party cookies and similar technologies. Below is what we use, why, and how to control it.

7.1 Strictly necessary

• Cloudflare — security and bot mitigation. Cannot be disabled while using the site.
• Form anti-spam (honeypot, rate limit) — protect against automated submissions.

7.2 Functional

• CallRail — dynamically swaps phone numbers based on visitor source so we can attribute phone-call leads to marketing channels. Sets a session cookie. CallRail privacy notice.

7.3 Analytics

• Google Tag Manager + Google Analytics 4 — measures site usage, traffic sources, and conversion events. Cookie names _ga, _ga_*. We use Google's IP anonymization where supported. Google privacy policy.
• Cloudflare Web Analytics — privacy-first measurement; does not use cookies or fingerprinting.

7.4 Advertising

We do not currently run retargeting or display advertising that requires advertising cookies. If we add advertising tags (e.g., Meta Pixel, Google Ads conversion tracking) we will update this Section, provide a cookie banner where required, and honor opt-out signals.

7.5 Your controls

• Browser settings — you can block or delete cookies in your browser. Doing so may break some site functionality.
• Global Privacy Control (GPC) — we recognize GPC signals from supported browsers as a valid request to opt out of sale/sharing where applicable under state law.
• Do Not Track (DNT) — there is no industry-standard response to DNT signals; we do not currently change behavior based on DNT.

8. Third-party services and links

Our site may link to third-party sites (state insurance departments, carrier websites, news articles, etc.). We are not responsible for the privacy practices of those sites. Their own privacy notices govern.

The third-party services we currently use as data processors include:

• Cloudflare, Inc. — hosting, CDN, web analytics
• Resend — transactional email
• CallRail, Inc. — phone call tracking and (where lawful) recording
• Google LLC — Google Tag Manager, Google Analytics 4
• Insurance carriers (when you authorize a quote or application)

9. Call recording notice

Calls placed to or from numbers managed through CallRail may be recorded for quality assurance, agent training, and compliance purposes. Arizona is a one-party-consent state for the recording of telephone communications under A.R.S. § 13-3005. If you call from a state with stricter (two-party) consent requirements, our agents will obtain your verbal consent before recording.

If you do not wish to be recorded, please tell our agent at the start of the call and we will accommodate the request (typically by switching to a non-recorded line or by taking notes only).

10. How long we keep your information

We retain personal information only for as long as needed to fulfill the purposes for which it was collected, provide services you have requested, comply with legal and regulatory obligations, and enforce our agreements.

• Active client records — for the life of the policy plus 7 years after termination, per state insurance record-keeping rules.
• Lead/inquiry records — 24 months from last contact, then archived or deleted unless required to be retained longer.
• Consent records (TCPA, e-sign) — at least 4 years from the date of consent or longer if required by federal or state law.
• Call recordings — 12 months unless flagged for compliance review.

11. Data security

We use commercially reasonable administrative, technical, and physical safeguards to protect your information. These include HTTPS encryption in transit, encrypted storage at rest where supported, access controls, employee training, vendor due diligence, and regular reviews of our security posture.

No system is 100% secure. If you believe your information has been compromised, please contact us immediately at [email protected].

12. Children's privacy

Our services are not directed to children under the age of 18, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us and we will delete it.

13. International users

We provide services exclusively to U.S. residents in the states where we are licensed to sell insurance. If you access our site from outside the United States, you understand that your information will be processed in the United States, which may have different data protection laws than your country of residence.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top of this page shows when it was last updated. Material changes will be posted prominently on this page and, where required, communicated by email. Your continued use of the site after the effective date of any change indicates acceptance of the revised policy.

15. How to contact us

For privacy questions, requests, or complaints:

Privacy Officer
Good Life Insurance Group
1201 S Alma School Road, Unit 12-200
Mesa, AZ 85210
Email: [email protected]
Phone: 480-576-7911

If we do not resolve your concern, you may also contact your state insurance department or attorney general's office. California residents may contact the California Privacy Protection Agency at cppa.ca.gov.

---

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Before publishing or relying on this policy in litigation, we recommend a final review by a licensed attorney admitted in the State of Arizona and familiar with insurance and consumer-privacy law.