Privacy Policy

This Privacy Policy describes how Elston LLC, operating as Elston Risk Solutions (“Elston,” “we,” “us,” or “our”), collects, uses, and protects information in connection with the website elstonrisksolutions.com (the “Site”) and the client portal accessible through it (the “Services”).

1. Information we collect

Information you provide. If you contact us by email or phone, we receive the information you choose to share, such as your name, organization, contact details, and the content of your message. If you are a client with portal access, we collect account credentials and the information you or your organization submit through the Services.

Information collected automatically. When you visit the Site, our hosting and security providers (including Cloudflare, Inc.) automatically log technical information such as IP address, browser type, device information, pages visited, and timestamps. This information is used for security, performance, and site operation.

Cookies. The Site uses only the cookies necessary to operate and secure the Services, such as session and security cookies associated with the client portal. We do not use advertising cookies or sell information collected through cookies.

Fonts and content delivery. The Site loads typefaces from Google Fonts. When a page loads, your browser requests those font files directly from Google, and Google receives your IP address and browser user agent as part of that request. Google states that it does not use these requests to build advertising profiles. No cookies are set by this request, and we receive no information from it.

2. How we use information

• To operate, maintain, and secure the Site and Services;
• To respond to inquiries and communicate with you;
• To provide contracted services to clients;
• To monitor for fraud, abuse, and unauthorized access;
• To comply with legal and regulatory obligations.

3. How we share information

We do not sell personal information. We share information only with: (a) service providers that support our operations, such as hosting, security, and email providers, under obligations of confidentiality; (b) professional advisors where reasonably necessary; (c) authorities where required by law, regulation, subpoena, or legal process; and (d) a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Client data

Information submitted by clients through the portal is processed on the client’s behalf under the terms of the applicable client agreement. Where that agreement conflicts with this Policy, the client agreement governs with respect to that data.

5. Data retention

We retain information for as long as reasonably necessary to fulfill the purposes described above, to comply with legal, accounting, or regulatory requirements, and to resolve disputes. Technical logs are retained on shorter cycles set by our hosting and security providers.

6. Security

We use commercially reasonable technical and organizational safeguards to protect information, including encrypted connections (TLS) and access controls on the client portal. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal information we hold about you, or to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond consistent with applicable law.

8. Children

The Site and Services are intended for business use by adults. We do not knowingly collect information from anyone under 18.

9. Changes to this Policy

We may update this Policy from time to time. The effective date above reflects the most recent revision. Material changes will be posted on this page.

10. Contact