Privacy Policy
Last updated August 2026
This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. It covers both people who use Alara as customers and consumers whose information may pass through our systems.
What we collect
- From customers: name, business name, email, phone, licence details, billing information, and how you use the product.
- From website visitors: pages viewed, referrer, approximate location from IP, and device information.
- From consumers, via our vendors: name, contact details, address, age range, the website and timestamp where consent was captured, the IP address used, and the disclosure text shown at the time.
How we use it
- To provide the products you have bought and support you in using them
- To verify that consumer records meet consent, do-not-call and quality requirements before they enter our catalogue
- To bill you and keep accurate financial records
- To improve the product and understand which channels work
- To meet legal and regulatory record-keeping obligations
Who we share it with
We share consumer records with the licensed insurance professionals who purchase them, and only after those records have passed our verification pipeline. We use third-party processors for hosting, payments, email, consent verification and list scrubbing. We do not sell customer account information.
Certain states restrict sharing consumer contact information with third parties other than the original lead source. Where that applies, those records are retained for deduplication and suppression purposes only and are never sold.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop contacting you. Write to info@alarabenefits.com. We will respond within the timeframe required by applicable law.
If you want to stop being contacted specifically, see our Do Not Call Policy — it is faster and more specific.
Retention and security
We retain transaction and consent records for five years to meet regulatory requirements. Access to consumer data is restricted, delivered files are stored privately and served only through expiring links, and every material action is written to an append-only audit log.