Privacy Policy

Information we collect

Information you provide

The retirement check-in uses your selected focus, career stage, and account status to create an agenda in your browser. A temporary draft may remain in this browser tab. You can view, copy, or print the agenda without providing contact information. When you submit a review request, we store your name, email, optional phone number and district, contact preferences, any check-in answers, campaign reference, and your permission to contact you about that request. Authorized office staff can access this information and record service status, follow-up dates, and notes. Submitting a request does not subscribe you to automated marketing.

If you schedule a meeting, Calendly collects your name, email address, appointment time, and choice of phone or Zoom. Phone bookings require a callback number. Your selected review topic and approved campaign codes may be prefilled in Calendly; your full check-in agenda is not automatically sent. If you use the unsubscribe page, we collect the email address needed to honor your request.

Information collected automatically

The CalSTRS estimator runs locally in your browser without registration. Calculating, printing, or downloading a web copy does not submit your entries or results to us. They are not included in site measurement or saved in browser storage by the calculator. A copy you download remains on your device.

If the optional “Email my summary” feature is available and you explicitly request it, we receive your email address, consent, calculator entries, and income comparison. We recompute and temporarily store that summary to provide a private link. The email contains the link and a review invitation, not your compensation or pension figures. Anyone with the link can view the summary; use your own address and keep the link private. Access expires after seven days. Requesting a copy does not enroll you in a marketing sequence or reverse an existing opt-out. A booking or contact request is separate.

Basic site measurement records page visits and actions such as opening the calendar, a scheduler-reported booking, or saving a contact request. It uses a random browser-tab identifier that expires after 30 minutes of inactivity and a limited set of campaign and A/B codes. These event records do not contain your name, email, phone, district, check-in answers, full page URL, or IP address. We do not connect this identifier to contact records. Hosting and scheduling providers may separately process request and device information. Google Analytics is used only if configured and you opt in. We do not use retargeting pixels.

How we use information

• To schedule and conduct the pension and 403(b) review you request.
• To send appointment confirmations and reminders.
• To respond to questions and follow-up requests.
• To deliver a one-time private estimate link when you expressly request it and delivery is available.
• To honor unsubscribe and do-not-contact requests.
• To understand whether the site and outreach campaign are working.
• To secure, maintain, and improve the site.

We do not sell or rent personal information.

Services that help operate this site

Information may be processed by vendors that provide hosting, scheduling, analytics, communications, or suppression-list services. These currently may include Cloudflare/OpenAI Sites, Calendly, Google Analytics, and Instantly. Requested estimate-link emails use our office’s Google/Gmail service, which processes the recipient address and email contents. If office alerts are connected, submitted request details may also be sent to the office’s notification service. Their handling of information is also governed by their own privacy terms.

Cookies and browser signals

The embedded Calendly scheduler loads as its booking area approaches the screen; opening Calendly directly is also available. Calendly controls its own cookies and privacy practices. Basic site measurement uses tab storage, and your privacy choice is saved in this browser. Use “Measurement & privacy choices” at the bottom of the page to disable basic measurement or manage an optional Google Analytics opt-in. This site disables optional site measurement when your browser sends Global Privacy Control or Do Not Track. These controls do not prevent processing needed to fulfill a booking, contact request, or opt-out, and do not control a third-party scheduling service. We do not use your visit for cross-site retargeting.

Retention and security

Appointment and inquiry information is retained only as reasonably needed to provide services, keep business records, and meet legal obligations. Suppression records may be retained so that a do-not-contact request continues to be honored. Reasonable administrative and technical safeguards are used, but no internet system is completely secure.

Raw site-measurement events are kept for up to 90 days, with cleanup performed when new measured visits arrive. Office staff may retain aggregate campaign reports and verified outcome totals for longer-term business reporting. To limit automated form abuse, the server uses a keyed, time-limited hash derived from a request’s network address; the rate-limit table does not store the raw address. Those records generally expire within 30 minutes and are cleared during subsequent requests. Requested estimate emails also use a keyed daily email-address hash for rate limiting, retained for up to 48 hours; the report table does not store your email address. Delivery records are kept so failed alerts can be retried and duplicates avoided; completed alert payloads are cleared after 30 days during office queue maintenance.

Private estimate access ends after seven days, even if no further requests arrive. Expired estimate contents are erased in bounded batches during later estimate activity, so storage deletion may occur after access expires. We retain an opaque request identifier, token hash, consent version, timestamps, and minimal delivery state to prevent duplicate emails; these records do not contain your financial entries after cleanup. The requested email remains subject to the email provider’s retention. Private-summary pages are excluded from optional site analytics and search indexing.

Your choices and requests

You may ask what personal information we have about you, request a correction or deletion where applicable, or ask us to stop marketing contact. Use the unsubscribe page, email eddie@sandstromandassociates.com, call 818-360-7400 EXT 3, or write to the address below.

Children and policy changes

This site is intended for working adults and is not directed to children under 13. Material changes to this policy will be posted on this page with an updated effective date. You may review this policy whenever you use the site.