Privacy Policy
Last updated: July 28, 2026
1. Introduction
Your privacy is important to us. It is the policy of Bay and Basin Insurance Services ("Bay and Basin," "we," "us," or "our") to respect your privacy regarding any information we may collect from you across our website, bayandbasinins.com, including our landing pages, and other sites we own and operate (collectively, the "Site").
This policy explains what we collect, how we use it, the cookies and similar tracking technologies we and our vendors place on your device, and the choices available to you. We offer the privacy choices described in Section 7 to every visitor as a matter of practice, whether or not a particular privacy law requires us to.
2. Information We Collect
Information you give us. When you submit a contact form, request a quote, respond to a landing page offer, subscribe to our communications, or otherwise reach out, we collect the information you provide. This typically includes your name, email address, telephone number, business or industry details, and the contents of your message.
Information collected automatically. When you visit the Site, we and our analytics and marketing vendors automatically collect technical and usage information, including your IP address, approximate location derived from that IP address, browser and device type, operating system, referring URL and search terms, the pages you view, links and buttons you click, forms you start or submit, and the dates and times of your visits. This information is collected through cookies, pixels, tags, browser local storage, and similar technologies described in Section 3.
Business identification information. Because we serve commercial insurance clients, we use business-audience identification services on the Site. These services may attempt to match your IP address and device signals against their own databases to infer the company or organization associated with your visit, and may provide us with business-level details such as company name, industry, size, and business contact information. See Sections 3 and 4.
3. Cookies and Similar Technologies
Cookies are small text files stored on your device. We also use closely related technologies, such as tracking pixels, JavaScript tags, and browser local storage, which serve similar purposes. We group them into the following categories:
Your choice comes first. Apart from strictly necessary technologies, none of the cookies or tags below load until you allow them. When you first visit the Site we present a consent banner, and nothing in the analytics or marketing categories runs unless you accept it. You can change or withdraw your choice at any time using the Cookie Preferences link in the footer of every page; withdrawing consent clears the associated cookies and stops further collection.
| Category | What it does | Examples on our Site |
|---|---|---|
| Strictly necessary | Required to load pages, route requests, maintain security, and enable core features such as form submission. These cannot be switched off through the Site. | Session and security cookies set by our hosting and application infrastructure. |
| Functional | Remember preferences you set so the Site behaves consistently across visits. | UserWay accessibility widget, which stores your accessibility display preferences. |
| Analytics and performance | Help us understand how visitors find and use the Site, which pages and campaigns perform well, and where visitors encounter difficulty. This includes recording form submissions as conversion events. | Google Analytics 4 (_ga, _ga_*); PostHog product analytics (ph_* cookies and a pseudonymous visitor identifier stored in your browser's local storage under bb_posthog_distinct_id). |
| Marketing and visitor identification | Identify the business associated with a visit, measure advertising and campaign effectiveness, and support our outreach to prospective commercial clients. These technologies may combine information about your visit with data these vendors hold from other sources and other websites. | Apollo.io website tracker; Vector identity-resolution pixel. |
Cookie lifetimes vary. Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them, which for our analytics cookies is generally up to twenty-four months. Local storage persists until you clear your browser's site data.
4. Third-Party Services We Use
The following third parties receive information about your visit directly from your browser, and process it under their own privacy policies. We encourage you to review them:
- Google Analytics 4 (Google LLC) — website analytics and conversion measurement. Google Privacy Policy.
- PostHog (PostHog, Inc.) — product analytics, including page views and form interaction events. Your IP address is recorded with these events. PostHog Privacy Policy.
- Apollo.io (Apollo.io, Inc.) — business-audience website visitor identification and sales intelligence. Apollo.io Privacy Policy.
- Vector (Vector, Inc.) — website visitor identity resolution for business audiences. Vector Privacy Policy.
- UserWay (UserWay Inc.) — accessibility widget. UserWay Privacy Policy.
- Google Fonts and Font Awesome — web fonts and icons served from third-party content delivery networks, which receive your IP address in order to deliver those assets.
We may also use service providers to host the Site, deliver email, and manage our customer relationship and agency management systems. These providers process information on our behalf and are contractually restricted from using it for their own purposes.
5. How We Use Information
- To respond to your inquiries and provide insurance quotes, coverage, and servicing
- To personalize your experience and better respond to your individual needs
- To improve our website, content, and campaigns based on how visitors use them
- To improve customer service and support
- To process transactions and administer your policies
- To administer a contest, promotion, survey, or other site feature
- To send periodic emails and, where permitted, marketing or prospecting communications
- To measure the effectiveness of our advertising and identify prospective business clients
- To detect and prevent fraud and abuse, and to comply with legal and regulatory obligations
6. Sharing of Information
We do not sell your personally identifiable information for money. We share information in the following circumstances: with insurance carriers, wholesalers, and underwriters in order to obtain quotes and place coverage at your request; with trusted service providers who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential; with the analytics and visitor-identification vendors listed in Section 4; and where required by law, subpoena, or to protect our legal rights.
Important disclosure. The analytics and visitor-identification technologies described in Sections 3 and 4 disclose information about your visit to third parties who may use it for their own commercial purposes, including cross-context behavioral advertising and enriching their own data products. We want to be plain about this: it happens even though we receive no money for it, and it is the kind of disclosure California privacy law calls a "sale" or "sharing" of personal information. It is switched off unless you allow it, and you can turn it off at any time as described in Section 7.
7. Your Privacy Choices and Rights
Cookie preferences. Use the Cookie Preferences link in the footer of any page to review the analytics and marketing categories and turn them on or off. Your choice is stored on your device, so you may need to set it again on a different browser or after clearing your browsing data.
Browser controls. Most browsers let you refuse or delete cookies through their settings. Blocking cookies may affect how parts of the Site function. You can clear the analytics identifier we store by clearing your browser's site data for this Site.
Google Analytics opt-out. You can prevent Google Analytics from collecting data by installing the Google Analytics Opt-out Browser Add-on.
Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser or extension transmits a GPC signal, we automatically treat it as a request to opt out of the sale and sharing of personal information for that browser: the marketing and visitor-identification technologies described in Sections 3 and 4 are disabled and cannot be enabled on that browser, and our consent banner will confirm this to you.
Do Not Sell or Share My Personal Information. To opt out of the sale or sharing of your personal information, use the Do Not Sell or Share My Personal Information link in the footer of any page and turn off the marketing category. This immediately disables the visitor-identification technologies described above and clears their cookies. You may also email us at eheffernan@bayandbasinins.com with the subject line "Do Not Sell or Share."
Requests about your information. As a matter of practice, and regardless of whether any particular privacy law obliges us to, we will on request tell you what personal information we hold about you and where it came from, correct it if it is inaccurate, and delete it where we are not required to keep it. We will also never treat you differently for asking. To make a request, contact us using the details in Section 12. We may need to confirm your identity against information we already hold before we act, and you are welcome to have someone make a request on your behalf.
Some records we hold as a licensed insurance agency must be retained under insurance and financial-services law, including the Gramm-Leach-Bliley Act and the California Insurance Information and Privacy Protection Act, and we may not be able to delete those. That constraint applies to policy and transaction records, not to the website analytics and marketing information described in this policy, which we can always switch off and clear.
8. Data Retention
We retain the information you submit for as long as necessary to respond to your inquiry, service your policies, and meet our legal, regulatory, and recordkeeping obligations as a licensed insurance agency. Analytics data is retained according to the retention settings of the vendors listed in Section 4, which is generally between fourteen and twenty-six months for event-level data.
9. Data Protection
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access it. These include the use of TLS/SSL encryption in transit, access controls, and comprehensive data management policies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Third Party Links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites.
11. Children's Privacy
Our Site is intended for businesses and adults. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Contact Us
If you have questions about this policy or wish to exercise your privacy rights, contact us at:
Bay and Basin Insurance Services
371 Main St, Salinas, CA 93901, United States
Phone: 831-540-4583
Email: eheffernan@bayandbasinins.com
13. Changes to Our Privacy Policy
If we decide to change our privacy policy, we will post those changes on this page and update the "Last updated" date above. Your continued use of the Site after those changes take effect constitutes acceptance of the revised policy.