1. Introduction
This Privacy Policy describes how Justin K. Dorman ("we," "us," "I") collects, uses, discloses, and safeguards information when you visit justinkdorman.com (the "Site") or submit information through any form on the Site. This Policy applies to the Site only. It does not cover information collected through Burns & Wilcox corporate channels, carrier portals, or any third-party site you reach by clicking an external link.
By using the Site or submitting information through it, you consent to the practices described below. If you do not agree, do not use the Site.
2. Information We Collect
2.1 Information you provide directly
When you complete the contact form on the home page or the Appetite Guide page, you provide the following information:
- Name (text);
- Agency name (text);
- Email address (text);
- Question or message (free-form text).
You should provide only the information necessary to describe your inquiry. Do not submit workers' compensation claim data, claimant medical or health information, Social Security numbers, financial account numbers, or any other sensitive personal information through the contact form. Use Burns & Wilcox's secure claim and submission portals for that purpose.
2.2 Information collected automatically
When you submit the contact form, the following limited technical information is recorded with your submission:
- User agent string (your browser and operating system identifier);
- Referrer URL (the page that linked you to the Site, if any);
- Source page (which page of the Site the form was submitted from);
- Timestamp of submission (server-generated).
The Site does not use analytics services (Google Analytics, Adobe, Meta Pixel, or similar), does not place advertising or third-party tracking cookies, and does not maintain server-side access logs beyond standard infrastructure logs maintained by our hosting provider.
3. How We Use Information
Information you provide is used solely to:
- Respond to your inquiry;
- Determine whether the inquiry can appropriately be advanced through Burns & Wilcox's wholesale workflow;
- Maintain a record of communications for service quality, regulatory recordkeeping, and audit purposes;
- Detect and prevent spam or abuse of the contact form.
We do not use submitted information for advertising, marketing list-building, profiling, or any automated decision-making with legal or similarly significant effects.
4. Where Information Is Stored
Contact form submissions are stored in Google Firebase (Cloud Firestore), a managed database service operated by Google LLC, in the United States (us-central1 region). Google's data processing for Firebase services is governed by the Google Cloud Data Processing and Security Terms.
Access to stored inquiries is restricted by Firebase Security Rules to the verified site owner account. The contact form does not transmit data to any other third-party service.
5. Information Sharing & Disclosure
We do not sell, rent, or trade your information. Information may be disclosed only in the following circumstances:
- With Burns & Wilcox personnel when an inquiry is advanced through the wholesale workflow, on a need-to-know basis;
- With insurance carriers if and only if you authorize a submission for quoting, in which case standard ACORD application materials are shared with the underwriting carriers we approach on your behalf;
- With Google LLC in its capacity as our hosting and database provider (subject to Google's contractual data processing terms);
- To comply with law, lawful subpoena, regulatory inquiry, or government request;
- To protect rights, property, or safety of the public, Burns & Wilcox, or any party against fraud, threats, or unauthorized activity.
6. Data Retention
Contact form inquiries are retained as long as reasonably necessary to respond, advance the wholesale workflow, and meet regulatory recordkeeping obligations applicable to insurance brokerage activity (generally a minimum of five years from the date of last activity for licensed-producer correspondence). After that period, inquiries are deleted or anonymized.
7. Cookies & Tracking
The Site itself does not set cookies. Some embedded resources loaded over the public internet (Google Fonts, jsDelivr CDN, Firebase JS SDK) may set minimal technical cookies necessary for those services to function. These are not used for tracking, profiling, or advertising. No analytics, advertising, or marketing cookies are placed by the Site.
8. Children's Privacy
The Site is intended for licensed insurance professionals and adult business contacts. It is not directed to children under 13, and we do not knowingly collect information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it.
9. Your Rights
9.1 Rights available to all users
Regardless of where you live, you may at any time:
- Request a copy of the information you have submitted through the contact form;
- Request correction of inaccurate information;
- Request deletion of your submission, subject to regulatory recordkeeping requirements that may require us to retain a record of the interaction.
Submit any of these requests through the contact form or through Burns & Wilcox compliance. We will verify your identity before acting on a request.
9.2 California residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the rights to know, delete, correct, and limit the use of sensitive personal information, and the right to non-discrimination for exercising these rights. The Site does not sell or share personal information for cross-context behavioral advertising, so the "Do Not Sell or Share" right is moot. To exercise any other right, submit a verified request through the contact form.
9.3 EU/UK residents (GDPR / UK GDPR)
If you submit information from the EU or UK, the legal basis for our processing is either (a) your consent (form submission), or (b) our legitimate interest in responding to professional inquiries about wholesale brokerage services. You have the rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your supervisory authority. Note that this Site is not directed at EU/UK markets, and we do not maintain an establishment within the EEA or UK.
10. Security
Information is transmitted to the Site over TLS (HTTPS). Data at rest in Cloud Firestore is encrypted by Google. Access to stored inquiries is restricted via Firebase Authentication and Firestore Security Rules to verified administrator account(s). Despite these safeguards, no internet transmission or storage is 100% secure, and you submit information at your own risk.
11. Workers' Compensation Claim Information
Workers' compensation claim files often include personal health information ("PHI") about injured workers that may be protected under HIPAA, ADA, state workers' compensation confidentiality statutes, or similar laws. Do not transmit claim files, medical records, claim claimant information, or any individually identifiable health information through the contact form on this Site. Use Burns & Wilcox or the carrier's secure claim portal, which is designed for this category of information.
If you inadvertently submit such information through the form, notify us immediately so we can purge it from our systems.
12. Third-Party Links
The Site contains links to external websites — state workers' compensation rating bureaus, state departments of insurance, professional associations, etc. These are provided for reference only. We do not control these sites and are not responsible for their content, privacy practices, or terms of use. Review each external site's own privacy policy before submitting any information to it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through this page; continued use of the Site after an update constitutes acceptance of the revised Policy.
14. Contact
For questions about this Privacy Policy, to exercise any of the rights described above, or to report a privacy concern, use the contact form on the home page.