Client portal

Privacy notice

Last updated October 21, 2026

This notice explains how the Alton Risk client portal handles your information. It supplements our Privacy Policy and Terms of Service, which apply to the portal as well.

What the portal shows you

Your policies, binders, applications and certificate requests come from our agency management system, where we keep your account. You can sign in only if your email address is listed as a contact on your company's account with us, and you see only that company's information.

What we collect when you use it

• Your email address, to send you single-use sign-in links.
• Each sign-in, with its time, IP address and device type. We use this to keep your account secure, and our team is alerted when someone signs in.
• The documents you download and the requests you make, such as certificates, so we can act on them and keep a record.
• Anything you type into a form, and files you attach. Certificate requests go into your account with us so your broker can work on them.
• Applications: your answers and attachments are saved as you go and kept in the portal's encrypted storage. Our team can see your answers as you complete them, before you sign, so we can help and prepare your submission. If a save fails (for example you lose your connection), unsaved answers are kept in your browser on that device for up to three days and are cleared when you sign out.
• When an application is signed, we record the signer's name, title, email, the time, IP address and device, what they agreed to, and a fingerprint of the signed application and its attachments, so it can be shown later that the copy is the one signed. We file it in your account and document storage, and email a copy to your broker and to the signer.
• If you request access, the details you give us (name, email, company, phone and message) go to our team by email.

Cookies

The portal uses one cookie, which keeps you signed in for up to eight hours. It uses no advertising or analytics cookies.

Who helps us run it

The portal is hosted by Netlify, sign-in and notification emails are sent through Postmark, and your account information is held in our agency management system (Momentum). Signed applications are filed in our document storage (Microsoft SharePoint). If you book a call, scheduling is handled by Calendly under its own privacy policy. These providers work for us under confidentiality obligations. We don't sell your information.

We use the information in your application to solicit and place insurance for your company, and share it with insurers, wholesale brokers and others for that purpose. We may also use anonymized, aggregated data for industry-trend analysis and benchmarking.

How we protect it

Sign-in links work once and expire after 15 minutes. All connections are encrypted. Access ends when you sign out, after eight hours, or once you're removed as a contact on your company's account (usually within minutes, and always within a day).

Keeping access right

If someone leaves your company, or you see anything that isn't yours, tell us at connect@altonrisk.com and we'll update your account.

Your choices

To ask about, correct or delete your information, contact us at connect@altonrisk.com. Your rights are described in our Privacy Policy.

About the portal

This portal is provided for convenience. It is not a certificate or proof of insurance and does not amend, extend or alter any policy. Coverage is governed solely by the policy issued by the insurer. Information shown may not reflect recent changes; contact your broker to confirm.