← Back Home

Privacy Policy

Last updated: March 2026

Overview

Valor Legacies is a veteran-founded lead generation service that connects military families with licensed insurance professionals. We respect your privacy and are committed to transparency about how your data is handled. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

  • Form submissions: When you submit a coverage review request, we collect your name, date of birth, email, phone number, state, coverage interest, veteran status, and military branch (if applicable).
  • Consent records: We record your TCPA consent, privacy consent, the timestamp of consent, your IP address, and user agent for compliance purposes.
  • UTM parameters: If you arrive via a marketing link, we may capture UTM tracking parameters (source, medium, campaign) to understand how you found us.

How We Use Your Data

  • To connect you with a licensed insurance professional who can review your coverage options.
  • To send you a confirmation email acknowledging your request.
  • To comply with legal requirements, including TCPA consent records.
  • To improve our service through aggregate, anonymized analytics.

Data Sharing

Your contact information is shared with one or more licensed insurance professionals who may contact you regarding your coverage review request. We do not sell your data to data brokers, advertisers, or other third parties unrelated to your insurance inquiry.

Cookies & Tracking

Valor Legacies does not use third-party cookies or advertising pixels. We do not use Google Analytics, Facebook Pixel, or any similar tracking service.

The only client-side storage used is localStorage for functional preferences such as theme. This is not used for tracking.

Data Security

  • All connections are encrypted via HTTPS (TLS 1.2+)
  • HTTP Strict Transport Security (HSTS) is enforced with a 1-year max-age
  • Content Security Policy (CSP) restricts script and resource loading
  • X-Frame-Options: DENY prevents clickjacking attacks
  • CSRF tokens protect form submissions from cross-site attacks
  • Rate limiting prevents abuse of submission endpoints

Data Retention

Lead records are retained for the duration necessary to fulfill your coverage review request and to comply with legal obligations. You may request deletion at any time (see Your Rights below).

Your Rights

  • Access: You may request a copy of the personal information we hold about you.
  • Delete: You may request deletion of all personal data associated with your email address. We process deletion requests within 15 business days.
  • Correct: You may request correction of inaccurate personal information.

To exercise any of these rights, email valorlegacies@gmail.com.

Do Not Sell or Share My Personal Information

If you submitted information through our protection form, your contact details may be shared with licensed insurance professionals. Under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws, this may constitute a “sale” or “sharing” of personal information.

You have the right to opt out. To exercise this right:

  • Email us: Send a request to valorlegacies@gmail.com with the subject line “Do Not Sell or Share.”
  • Right to Delete: You may request deletion of all personal data we hold about you. We will process deletion requests within 15 business days.
  • Right to Know: You may request a copy of the personal information we have collected about you in the preceding 12 months.

We will not discriminate against you for exercising any of these rights.

Third-Party Services

Contact

For privacy-related questions, email valorlegacies@gmail.com or visit our About & Contact page.