Privacy Policy

1. Who we are

This website is operated by Jamsheed, Professional Insurance Agency Inc. dba Clean Source Data ("Clean Source Data," "we," "us" or "our"), a California corporation. We help businesses prepare, de-identify and license their operational data to AI companies. You can reach us at [email protected].

2. Our no re-identification commitment

We will never re-identify de-identified data.

Clean Source Data maintains and uses de-identified information only in de-identified form. We will not attempt to re-identify any individual or household, or link de-identified information back to any person, except to test whether our own de-identification meets the required standard. We contractually require every buyer and recipient of de-identified data to make the same commitment and prohibit them from attempting to re-identify anyone.

This statement is our public commitment under the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(m)), comparable state laws, and the HIPAA de-identification standard (45 C.F.R. § 164.514). It applies to every dataset we prepare, whether or not it ever contained health information.

3. What this policy covers

This policy covers personal information we collect through cleansourcedata.com, our forms, email and calls with prospective clients and referral partners, and our marketing. Data that a client provides to us under a signed engagement is handled under that client's agreement (and a Business Associate Agreement where health information is involved). We summarize those protections in section 7.

4. Information we collect

Information you give us

Eligibility and contact forms: your name, role, business name, email, phone number, industry, location, team size, years in business, software used, approximate data volume, whether your data includes sensitive information, and anything you write in a message.
Partner applications: your name, company, role, contact details, partner type, network size and referral plans.
Calls and emails: what you share when you speak or correspond with us.

Please do not submit customer, client, patient or employee records, or any sensitive personal information about other people, through our website. Our forms only ask about your business.

Information collected automatically

Device and usage information such as IP address, browser type, pages viewed, referring page and approximate location derived from your IP address.
Campaign information, such as the ad or link that brought you to the site (UTM parameters and click identifiers).

Information from others

Referral partners may share the business contact details of a company that agreed to be introduced to us.
Advertising and analytics providers may tell us how our ads and pages perform.

5. How we use information

To respond to you, schedule calls and assess whether your data may qualify for licensing.
To provide our services and manage client and partner relationships, including referral credit and payments.
To operate, secure and improve our website, and to measure our marketing.
To send you information you asked for. You can unsubscribe from marketing emails at any time.
To comply with law and enforce our agreements.

We do not sell the personal information we collect through this website. We share it only:

With service providers that help us run our business, such as website hosting, email delivery, scheduling, customer relationship management and analytics. They may use it only to provide services to us.
With referral partners, limited to whether a business they introduced has engaged us and the information needed to calculate their commission.
For legal reasons, if required by law or to protect rights, safety and security.
In a business transfer, such as a merger or sale of assets, subject to this policy.

We never share a prospective client's personal information, or any personal information inside a client's data, with AI companies or other data buyers. Buyers receive only de-identified data that the client has approved.

7. Client data in engagements

When a business engages us, its data is handled under a written agreement. Our standard commitments include:

De-identification takes place on-site, on a dedicated offline device at the client's location. Raw records are not sent to buyers.
All direct identifiers and contact information are removed. Where health information is involved, the HIPAA Safe Harbor standard is met and a Business Associate Agreement is signed before any health information is accessed.
Nothing is released until the client reviews and approves it in writing. The buyer then runs its own independent privacy review before accepting the data.
Any code used to link records is never derived from personal information and is never disclosed to a buyer.
Source records containing personal information are returned or securely destroyed after the de-identified dataset is accepted, as set out in the client's agreement.

8. Cookies and analytics

We use cookies and similar technologies that are necessary to run the website, and, where permitted, analytics and advertising technologies to understand site usage and measure campaigns. Where the law requires consent, we ask for it first. You can control cookies in your browser settings. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of personal information for cross-context behavioral advertising.

9. Retention

We keep personal information only as long as needed for the purposes above: typically for the length of our relationship and up to three years after our last contact, or longer where the law requires (for example, tax and contract records). We then delete or de-identify it.

10. Security

We use administrative, technical and physical safeguards appropriate to the information we hold, including encryption in transit, access controls and offline processing for client data. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.

11. Your privacy rights

Depending on where you live, including California, you may have the right to:

Know what personal information we have collected about you and how we use and share it;
Access, correct or delete your personal information;
Opt out of the sale or sharing of your personal information, and limit the use of sensitive personal information;
Not be discriminated against for exercising these rights.

To make a request, email [email protected] with the subject "Privacy request." We will verify your request using information we already hold and respond within the time the law requires (for California residents, 45 days, extendable once). You may use an authorized agent, who must provide proof of authorization. If we deny your request, you may appeal by replying to our decision.

12. Children

Our website and services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16 through this website.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here and change the "Last updated" date. Material changes will be highlighted on this page.

14. Contact us

Jamsheed, Professional Insurance Agency Inc. dba Clean Source Data
[email protected] · cleansourcedata.com