Privacy and Cookies Policy

Last Updated: September 1, 2026

At RiskOne Group, we respect the privacy of people who visit our website or communicate with us through our digital channels.

This Privacy and Cookie Policy explains what information we may collect, how we may use it, when it may be shared, and the choices available to users regarding their information and the use of cookies.

This policy applies to the official RiskOne Group website, including its forms, analytics tools, advertising technologies, and related functions.

1. Information About RiskOne Group

This website is operated by:

Legal Entity Name: RiskOne Group

Business Name: RiskOne Group

Address: 601 Ave. Fernandez Juncos, San Juan, PR 00907

Telephone: (787) 200-2790

Email: info@riskonegroup.com

2. Information We May Collect

The information collected will depend on how a person uses the website and the features available.

Information Provided Directly

When a person completes a form or communicates with RiskOne Group, we may receive information such as:

• Name
• Email address
• Telephone number
• Company or organization, when requested
• Area of service interest, when requested
• Message content
• Any other information the person voluntarily chooses to provide

Website forms are intended for initial inquiries related to RiskOne Group services.

Information Collected Automatically

When a person visits the website, certain tools may collect technical and usage information, including:

• Internet Protocol address
• Browser type
• Device type
• Operating system
• Browser language
• Pages visited
• Date and time of the visit
• Approximate time spent on the website
• Links or buttons used
• Website, advertisement, or source that referred the visitor
• General interactions with website content
• Information related to advertising campaigns

This information may be collected through cookies, pixels, tags, scripts, and similar technologies.

3. How We May Use Information

RiskOne Group may use collected information to:

• Respond to inquiries
• Communicate with a person requesting information
• Direct an inquiry to the appropriate service area
• Understand the reason for a request
• Arrange an initial conversation or consultation
• Operate and maintain the website
• Analyze how people find and use the website
• Improve content, navigation, and user experience
• Measure the performance of campaigns and communications
• Detect technical problems, fraud, or unauthorized use
• Maintain records of inquiries
• Comply with applicable legal or regulatory obligations
• Protect the rights, property, and safety of RiskOne Group and others

We will not use collected information for purposes that are incompatible with those described in this policy unless we have authorization, a legal obligation, or another valid basis for doing so.

4. Sensitive Information

Do not submit sensitive or confidential information through the general website forms, including:

• Medical information or diagnoses
• Medical records
• Policy numbers
• Claims documents or detailed claims information
• Social Security numbers
• Banking information
• Tax information
• Confidential financial information
• Personal employee information
• Passwords
• Documents containing sensitive personal information

The general website forms are not designed to handle claims, urgent requests, medical information, protected employee information, or confidential documents.

When an inquiry requires additional information, RiskOne Group may provide a more appropriate channel for continuing the communication.

5. Forms and Communications

Submitting a form or sending a message through the website does not automatically create a contractual, professional, fiduciary, brokerage, or client relationship with RiskOne Group.

It also does not guarantee:

• Acceptance of a request
• Availability of a service
• Issuance of an insurance policy
• Approval of coverage
• Approval or payment of a claim
• A response within a specific period
• A particular outcome

Urgent matters should not be submitted through the website forms.

6. Website Platform

The RiskOne Group website uses Duda to host, manage, and operate its pages and forms.

Duda and other providers that support website operations may process certain technical information or information submitted through forms according to their functions, policies, and applicable agreements.

RiskOne Group seeks to use providers that maintain reasonable measures to protect information. However, no transmission or storage system can guarantee absolute security.

7. Google Analytics and Google Tag Manager

RiskOne Group may use Google Analytics to understand how people find and use the website.

Google Analytics may collect information such as:

• Pages visited
• Approximate visit duration
• Device type
• Browser
• Approximate location
• Traffic source
• General website interactions

We may also use Google Tag Manager to manage tags and codes related to analytics, advertising, and measurement.

Google Tag Manager does not necessarily collect information on its own. However, tools configured through the platform may collect information according to their function.

Collected information may be used to evaluate website performance, improve content, and understand general usage trends.

8. Google Ads

RiskOne Group may use Google Ads to promote its services and measure the performance of advertising campaigns.

Google Ads and related technologies may use cookies, identifiers, and other information to:

• Measure visits generated by advertisements
• Record conversions
• Evaluate campaign performance
• Limit repeated advertising
• Create advertising audiences, where permitted
• Display advertising related to previous visits, when applicable

These technologies will be managed through the cookie preferences available on the website when applicable.

9. Meta Pixel

RiskOne Group may use Meta Pixel to measure certain website interactions and evaluate advertising campaigns on Meta platforms, including Facebook and Instagram.

Meta Pixel may collect or receive information related to:

• Page visits
• Button interactions
• Forms started or completed
• Device and browser type
• Internet Protocol address
• Campaign parameters
• Other events configured on the website

Meta may use received information according to its own policies and terms.

RiskOne Group does not configure these tools for the purpose of deliberately collecting medical, financial, employee, or claims-related information.

10. What Cookies Are

Cookies are small files or identifiers that a website may store or access through a person’s browser or device.

Cookies may be used to:

• Enable basic website functions
• Maintain security
• Remember preferences
• Analyze website use
• Measure campaigns
• Support advertising functions
• Improve certain website features

We may also use similar technologies, including pixels, tags, scripts, and local storage.

11. Categories of Cookies

Strictly Necessary Cookies

These cookies support essential functions, including:

• Security
• Website operation
• Form functionality
• Consent management
• Privacy preferences

These cookies may be required for certain parts of the website to operate properly.

Analytics Cookies

These cookies help us understand how people use the website.

They may collect information about:

• Pages visited
• Traffic source
• Time spent browsing
• Device type
• General interactions

This information may be used to improve website content, navigation, and operation.

Advertising Cookies

• These cookies may be used to:
• Measure campaigns
• Record conversions
• Create audiences
• Limit advertisement frequency
• Display advertising related to interests or previous visits

This category may include Google Ads and Meta technologies, depending on the website’s current configuration.

Functionality Cookies

These cookies may enable additional features, remember preferences, or display content provided by third parties.

Their use will depend on the tools installed on the website.

12. Cookie Preferences

When applicable, the website will display a notice that allows users to:

• Accept nonessential cookies
• Reject nonessential cookies
• Manage cookie categories
• Review additional information
• Change a previous selection

Strictly necessary cookies may remain active because they support basic website functions.

Users may also manage or block cookies through their browser settings. Blocking certain cookies may affect the operation of parts of the website.

13. Third-Party Services

The website may use services operated by third parties, including:

• Duda
• Google
• Meta
• Security providers
• Hosting or infrastructure providers
• Other technical providers added later

These providers may collect or process information according to their own policies, terms, and settings.

RiskOne Group does not control every privacy or cookie practice of those third parties.

14. How We May Share Information

RiskOne Group may share limited information when reasonably necessary with:

• Providers supporting website operations
• Analytics and advertising providers
• Professionals supporting technical, administrative, or legal functions
• Governmental, regulatory, or judicial authorities when required
• Third parties involved in a business reorganization, acquisition, merger, or transfer, if applicable
• Other parties when authorization or another valid legal basis exists

RiskOne Group does not sell personal information collected through its general website forms.

Information submitted through an inquiry is not automatically shared with insurers, providers, or other parties solely because a form was completed.

Any later disclosure will depend on the nature of the inquiry, the requested service, the applicable authorizations, and the scope of the relationship.

15. Information Retention

RiskOne Group will retain information for as long as reasonably necessary to:

• Respond to or follow up on an inquiry
• Maintain business records
• Meet contractual obligations
• Comply with legal or regulatory requirements
• Resolve disputes
• Protect its rights
• Maintain system security

Retention periods may vary according to the type of information and the purpose for which it was collected.

16. Security

RiskOne Group seeks to use reasonable administrative, technical, and organizational measures to protect information under its control.

These measures may include:

• Access controls
• Encrypted connections
• Internal information-handling practices
• Security tools provided by the platforms used

However, no internet transmission method or storage system can guarantee absolute security.

Users should avoid sending sensitive or confidential information through digital channels that have not been expressly designated for that purpose.

17. Processing Outside Puerto Rico

Some technology providers may store or process information outside Puerto Rico.

As a result, information may be subject to the laws and legal processes of other jurisdictions.

RiskOne Group will seek to use these services according to the available terms, settings, and contractual measures.

18. Privacy Requests

A person may contact RiskOne Group to:

• Ask what information they provided through the website
• Request correction of inaccurate information
• Request deletion of information, when applicable
• Withdraw consent for certain communications
• Ask questions about this policy
• Report a privacy concern

Requests may be submitted through:

Email: info@riskonegroup.com

Telephone: (787) 200-2790



Address: 601 Ave. Fernandez Juncos, San Juan, PR 00907

RiskOne Group may request reasonable information to verify a person’s identity before responding to certain requests.

Some requests may be subject to legal, contractual, regulatory, or record-retention limitations.

19. Marketing Communications

RiskOne Group may send communications related to its services when a person has requested them, expressed interest, or when another appropriate basis exists.

A person may request to stop receiving promotional communications through:

• An unsubscribe link, when available
• A direct reply to the communication
• A request sent to info@riskonegroup.com

Communications necessary to respond to or follow up on an active inquiry may continue.

20. Children

The RiskOne Group website is intended for companies, organizations, employers, employer groups, and professionals.

It is not designed to intentionally collect personal information from children.

If RiskOne Group identifies that it received information from a child without appropriate authorization, it may take reasonable steps to delete it.

21. Links to Other Websites

The website may include links to pages operated by third parties.

RiskOne Group does not control and is not responsible for:

• The content of those websites
• Their security measures
• Their privacy policies
• Their cookie practices
• The availability of their services
• 
  

Including a link does not necessarily represent an affiliation, endorsement, or recommendation.

22. Changes to this Policy

RiskOne Group may modify this Privacy and Cookie Policy to reflect:

• Website changes
• New tools
• Changes in our practices
• Legal or regulatory requirements
• Improvements in how we explain our processes

The current version will state the date of its latest update.

When a change is material, we may communicate it through the website or by other appropriate means.

23. Contact

For questions about this Privacy and Cookie Policy, contact:

RiskOne Group

601 Ave. Fernandez Juncos

San Juan, PR 00907

Telephone: (787) 200-2790

Email: info@riskonegroup.com