Privacy Policy
This policy explains what we collect when you use vestarisk.com, why we collect it, who else sees it, and what you can ask us to do with it.
Last updated 11 August 2026.
Draft — requires review before publicationThis is a working draft prepared for review, not legal advice. It must be checked by counsel and by whoever handles compliance for Pembroke before it goes live. Several items below are marked as needing confirmation, and California privacy law obligations depend on facts about the business — revenue, data volume, and whether personal information is sold or shared — that need to be established rather than assumed.
Who we are
Vesta Risk is a specialised insurance program of Pembroke Insurance Solutions, the trade name of The Ponto Group LLC, a licensed California insurance producer, licence #20790267. Our address is 7040 Avenida Encinas #104-228, Carlsbad, CA 92011. You can reach us at [email protected] or (760) 487-8268.
In this policy, “we” and “us” mean that entity.
What we collect
Information you give us through a form. Our contact and Mod Analysis request forms ask for your name, your agency’s name, your email address, your telephone number, and information about your business — which may include agency type, approximate annual payroll, your workers compensation policy number, your current experience modification, and your renewal month.
Information you send us directly. If you email or call us, or send documents so we can produce a Mod Analysis, we receive whatever you choose to send. Those documents commonly include declarations pages, loss runs and experience rating worksheets.
Information collected automatically. Our web host records standard server information such as the country a request came from. We do not run analytics, advertising trackers or cookies for marketing purposes. If that changes, this policy will be updated first.
We do not knowingly collect information from anyone under 18, and the site is not directed at children.
What we do with it
- To answer your enquiry and to prepare and deliver a Mod Analysis when you request one.
- To quote, place and service insurance on your behalf, which requires sharing information with insurance carriers, wholesalers and underwriters.
- To meet our legal, regulatory and recordkeeping obligations as a licensed insurance producer.
We do not sell personal information. We do not share it for cross-context behavioural advertising.
Who else sees it
Our form provider. Form submissions are processed and stored by Formspree, a third-party service. Anything you type into a form on this site is held on their systems as well as ours.
Insurance carriers and wholesalers. If you ask us to quote or place coverage, we share what is necessary with the relevant markets.
The WCIRB. Where you authorise it, we request your rating data from the Workers’ Compensation Insurance Rating Bureau of California.
Service providers. Email, scheduling, document storage and similar tools we use to run the practice.
When required by law. Including in response to lawful requests from regulators or courts.
We do not permit these parties to use your information for their own marketing.
Documents you send us
A Mod Analysis needs your own policy documents. Those can contain sensitive material — federal employer identification numbers, officer names, and in the case of loss runs, information about individual employees’ injuries.
We ask you to send only what the analysis needs. We use those documents solely to produce your report and to service your account, and we do not publish client documents. Where we illustrate a document on this website, it is a constructed specimen, never a real client’s paperwork.
How long we keep it
We retain records for as long as needed to provide our services and to meet the recordkeeping requirements that apply to licensed insurance producers in California. The specific retention period must be confirmed against Pembroke’s records policy and applicable Department of Insurance requirements.
How we protect it
This website is served over HTTPS and makes no third-party requests when you load a page. Access to client documents is limited to the people who need it to do the work. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your California privacy rights
California residents may have the right to know what personal information we have collected about them, to request its deletion, to request correction of inaccurate information, and not to be discriminated against for exercising those rights.
To make a request, email [email protected] or call (760) 487-8268. We will need to verify your identity before acting on a request. Some information must be retained where the law requires it.
Whether the California Consumer Privacy Act applies to this business, and which specific obligations attach, depends on revenue and data-volume thresholds that must be confirmed. This section must be reviewed by counsel before publication.
Insurance-specific notices
As a licensed producer we are also subject to insurance privacy rules governing non-public personal information, and carriers issue their own privacy notices with the policies they write. Those notices are separate from this one and describe what the carrier does with your information.
Confirm with compliance whether a separate Insurance Information and Privacy Protection Act notice is required, and whether Gramm-Leach-Bliley notice obligations apply.
Changes
If we change this policy we will update the date at the top. Material changes will be described here rather than made quietly.
Contact
Questions about this policy, or about information we hold: [email protected], (760) 487-8268, or 7040 Avenida Encinas #104-228, Carlsbad, CA 92011.