What we collect, and what we do with it.

Last updated 6 August 2026 · Hipson Investments LLC, 2000 S Dairy Ashford, Ste 360, Houston, TX 77077

This notice covers hipsoninvestments.com and the tools on it. It is written to describe what the site actually does, in plain language. If anything here does not match your experience, tell us and we will fix the notice or the site.

What we collect, page by page

The plan-review form (/flyer). If you complete it we store what you enter: your name, company, work email, phone number if you give one, and your four answers about employee count, plan funding, renewal timing and what you need help with. We also record which link brought you and your browser's user-agent string. This is stored in a Google Firestore database that only Hipson staff can read.

The ACA audit (/aca-audit). This one does collect and store. Before the questions begin we ask for your name, company, work email and phone number, and we keep them along with your seven answers so we can send your results and follow up once. It is stored in the same Google Firestore database as the plan-review form, readable only by Hipson staff. If our system is unreachable when you finish, nothing is stored at all — the page instead opens an email in your own mail app, and you can see exactly what is being sent before you send it.

The health funnel (/health). This one runs entirely in your browser. Your answers are not transmitted to us or stored anywhere unless you press the button that opens an email — at which point you can see exactly what is being sent before you send it.

Every page. Firebase Hosting, which serves this site, keeps standard server logs including IP addresses, for security and reliability. We do not use Google Analytics, advertising pixels, or any cross-site tracking, and we do not set our own cookies.

Third parties that see something

• Google — hosting, the Firestore database, and the fonts this site loads. Loading a page contacts Google's font servers, which see your IP address.
• Substack — the newsletter sign-up box is an embedded Substack frame on some pages. If you subscribe, Substack handles that under its own privacy policy, and the address goes to them, not into the database above.
• Pulse AI Agency — the small "Live site by Pulseaa.com" badge is a script loaded from pulseaa.com.
• Insurance carriers — only if you become a client and only what is needed to quote or place your coverage.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

Why we keep it

To reply to you, to prepare the review or assessment you asked for, and to keep a record of advice given — which, as a licensed insurance and securities practice, we are expected to retain. We do not send marketing email to people who only used a free tool; if you want the newsletter you subscribe to it separately.

How long

Enquiries that do not become client relationships: up to 24 months, then deleted. Client records: retained as long as required under insurance and securities recordkeeping rules, which is generally at least six years after the relationship ends.

Your choices

Texas residents have rights under the Texas Data Privacy and Security Act, and residents of other states may have similar rights. Whoever you are and wherever you live, you can ask us to:

• tell you what we hold about you,
• correct it,
• delete it, or
• send you a copy.

Email information@hipson.com with "Privacy request" in the subject, or call 281.493.6862. We respond within 45 days. There is no charge, and asking costs you nothing else — we will not treat you differently for it. If we decline, we will say why and how to appeal.

Security, honestly stated

The database is locked down so that the public can only submit an enquiry — it cannot read anything, and nothing can be deleted from a browser. Staff access requires a Google account on a named allowlist. That said, no website is perfectly secure, and we will not pretend otherwise. Please do not send policy numbers, Social Security numbers, medical details or account numbers through this website; if we need those, we will arrange a secure route.

Children

This site is meant for adults arranging coverage for a business or a household. We do not knowingly collect information from anyone under 13. Where a family's cover involves a child, the information comes from the parent or guardian and is handled with the same care as the rest of the file.

Changes

If this notice changes materially we will update the date at the top and, where it affects information we already hold, tell affected people directly.

This notice describes the website. Insurance and securities business conducted through Ameritas Investment Company, LLC (AIC) and Ameritas Advisory Services (AAS) is additionally covered by their own privacy notices, which are provided to clients at account opening and annually thereafter.