Responsible
Talniri Ltd (Israel), operator of PPLI.com.
What for
To answer your enquiries, run the research assistant and adviser accounts, send the briefing you asked for and measure how the site is used.
Your control
Analytics is on by default and you can switch it off at any time; advertising cookies stay off for UK visitors until you agree, and you can use your UK GDPR rights at any time.
01Who is responsible
PPLI.com is owned and operated by Talniri Ltd, a company incorporated in Israel. Talniri Ltd is the controller of the personal data described here: it decides how and why that data is used.
PPLI.com is an educational research website on private placement life insurance, published in 11 editions. We do not sell insurance and we do not give personal financial, tax or legal advice.
When we process the data of people in the UK, we apply the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended by the Data (Use and Access) Act 2025. Talniri Ltd itself is governed by Israel's Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and is supervised by the Israel Privacy Protection Authority. For every privacy matter, write to info@ppli.com. We do not publish a postal address.
02What we collect
Enquiry and consultation forms
Your name, email address and country of tax residence. If you choose to add them: telephone number, investable-asset range, topic and a free-text message. We use these to answer your enquiry and to follow it up.
AI research assistant ("Concierge")
The messages you type and the answers you receive, the planning answers you select, a session identifier and timestamps. If you ask us to follow up, also your name, email address and any note you add. Section 09 explains how the assistant works.
Professional (adviser) accounts and the 14-day trial workspace
Name, email address, firm, role, country, experience and the access you request. The content you save in the workspace: client references, planning facts, analyses, tasks, messages and course progress. Login and audit records, including IP address.
Email briefing
If you subscribe: your email address, your name if you give it, and your subscription status. Every email carries an unsubscribe link.
Technical data
Our server logs record IP address, browser and device data, the pages requested and the referring page. We derive an identifier from the IP address to limit repeated requests, and we read approximate country and city hints from network headers to show the right edition.
Your cookie choice
When you make a choice in the cookie banner, we store that choice with a random identifier, the language edition, your time zone, the banner version, the page path and the time. The record holds no name, no email address and no full IP address.
03Purposes and lawful bases
| Purpose | Data | Lawful basis (UK GDPR) | Retention |
|---|---|---|---|
| Answering enquiries and following up | Form data, correspondence | Steps you ask for before a contract (art. 6(1)(b)); legitimate interests in replying (art. 6(1)(f)) | Up to 3 years after last contact |
| Running the AI research assistant | Messages, answers, session data, follow-up details | Contract, to provide the service you request (art. 6(1)(b)) | Up to 12 months |
| Adviser accounts and trial workspace | Account data, saved content, login and audit records | Contract (art. 6(1)(b)); legitimate interests in security (art. 6(1)(f)) | While active; deleted within 12 months of closure or trial expiry |
| Email briefing | Email, name, subscription status | Consent (art. 6(1)(a)) | Until you unsubscribe |
| Operating and securing the site | Server logs, rate-limit identifier | Legitimate interests (art. 6(1)(f)) | Up to 90 days |
| Proving your cookie choice | Consent record | Legal obligation to demonstrate consent (art. 6(1)(c), art. 7(1)) | 3 years |
| Audience measurement | Google Analytics cookies and events | Legitimate interests in understanding how the site is used and improving it (art. 6(1)(f)); you can object at any time through Cookie settings (art. 21) | At most 14 months at Google |
| Advertising measurement | Google Ads cookies and conversion events | Consent (art. 6(1)(a) and PECR reg. 6) | Cookies 90 days |
| Legal claims and requests from authorities | Whatever the matter requires | Legal obligation (art. 6(1)(c)); legitimate interests (art. 6(1)(f)) | As long as the matter requires |
Where we rely on legitimate interests, you may object, and we will stop unless we have compelling grounds that override your interests.
04Cookies
PECR requires consent before a website stores or reads information on your device, unless the storage is strictly necessary or falls within an exception. The Data (Use and Access) Act 2025 added an exception, in force since 5 February 2026, that allows storage for statistical purposes provided users are given clear information and a simple means to object. This section gives you that information, and Cookie settings gives you the means to object. For advertising measurement we ask for your consent first.
On your first visit, UK visitors see a short notice that says analytics is on and can be switched off, and asks whether you agree to advertising measurement. If you save a refusal, we respect it on every later visit. Visitors from the EEA and Switzerland see the same notice. In all other countries, both analytics and advertising measurement run by default and can be switched off at any time.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
ppli_consent_v2 | PPLI.com (localStorage) | Stores your cookie choice | 180 days, then we ask again | Essential |
ppli_consent_rid | PPLI.com (localStorage) | Random ID linking your choice to its record | Until you clear it | Essential |
wordpress_logged_in_*, wordpress_sec_* | PPLI.com (cookies) | Keep adviser accounts signed in and secure | Session, or 14 days with "remember me" | Essential |
| Assistant session keys | PPLI.com (localStorage) | Let the AI assistant resume your conversation | Until you clear them | Essential |
ppli.wi.* | PPLI.com (localStorage) | Remembers the figures you typed into the calculators, on your device only | Until you clear them | Essential |
_ga, _ga_9RFL3MCGJS | Google Analytics (cookies) | Distinguish visits and measure which pages are read | 2 years | Analytics |
_gcl_au, _gcl_aw | Google Ads (cookies) | Measure whether our adverts lead to visits and enquiries | 90 days | Advertising |
When advertising measurement is allowed, Google may also set cookies on its own domains. We do not use personalised advertising or remarketing to individuals. A Global Privacy Control signal from your browser is honoured as an opt-out of advertising measurement.
We use Google Consent Mode. If you refuse or switch off advertising measurement, Google tags still send cookieless signals for it without identifiers, which Google uses for aggregate modelling. The same applies to analytics only if you switch analytics off. They set no cookie and carry no ID that recognises you on a later visit.
You can change your choice at any time through the "Cookie settings" link in the footer of every page or with this button:
05Who receives data
We share personal data only with these recipients, and only as far as each needs it:
- Our web hosting provider, which stores the site, the server logs and the databases.
- Google, for Google Analytics measurement, Google Ads conversion measurement, Google Fonts and YouTube videos embedded on some pages.
- Anthropic PBC (USA), which processes assistant conversations to generate replies.
- Our email service provider or providers, for replies and the email briefing.
- Professional advisers such as lawyers and accountants, where needed.
- Authorities, where the law requires it.
We do not sell personal data. We do not use your data to train AI models, and under its commercial terms Anthropic does not train its models on our API data.
06International transfers
Data is processed in Israel and by providers in the United States and other countries. UK adequacy regulations recognise Israel as providing adequate protection, so transfers to Talniri Ltd in Israel need no further safeguard. The European Commission takes the same view (Decision 2011/61/EU, confirmed in its January 2024 review).
Transfers to US providers rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on standard contractual clauses approved for transfers from the UK.
07How long we keep data
- Enquiries and related correspondence: up to 3 years after the last contact, unless a client relationship follows that requires longer, or the law requires longer.
- AI assistant conversations: up to 12 months.
- Adviser accounts and workspace content: while the account is active, then deleted within 12 months of closure or of trial expiry without conversion. Trial users can ask for earlier deletion.
- Email briefing: until you unsubscribe. We keep the unsubscribe record so that we honour it.
- Server logs: up to 90 days. Consent records: 3 years.
- Google Analytics: Google keeps measurement data for the retention period set in our account, at most 14 months.
- Backups roll over and are overwritten on a rolling basis.
08Your rights
Under the UK GDPR you have the following rights. Using them is normally free of charge.
To use a right, email info@ppli.com. We reply within one month. For complex or numerous requests we may extend this by up to two further months, and we will tell you within the first month if we do. We may ask for information to confirm your identity.
If you are unhappy with how we have handled your data, please complain to us first at the same address. We acknowledge complaints within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commission, which operates as the ICO: ico.org.uk/make-a-complaint, helpline 0303 123 1113.
09AI assistant and automated replies
The Concierge assistant answers research questions about private placement life insurance. Its replies are generated automatically through the API of Anthropic PBC in the United States, and the conversation is stored on our server. Transcripts can be sent to the PPLI.com team so that a person can follow up.
The answers are automated research support. They are not financial, tax or legal advice and they do not take account of your circumstances. No decision with legal or similarly significant effect is made about anyone by automated means.
Avoid typing information you would not want stored, such as account numbers or details of other people. Conversations are kept for up to 12 months, and you can ask us to delete yours sooner.
10Security
We protect data with access controls, two-factor authentication on administrative accounts, encrypted connections (HTTPS), request rate limits and daily backups. No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify the ICO and, where the risk is high, you, as the UK GDPR requires.
11Children
PPLI.com is not directed to anyone under 18, and we do not knowingly collect their personal data. If you believe a young person has sent us data, write to us and we will delete it.
12Changes to this policy
We update this policy when our practices or the law change. The effective date and version number at the top show the current text. If a change affects how we use data you have already given us, we will tell you before it takes effect, and where consent is needed we will ask for it again.
13Contact
Talniri Ltd · PPLI.com
Email: info@ppli.com
Tell us which right you wish to use or what your complaint concerns, and give the email address you used with us. We respond within one month, extendable by two further months for complex requests, and acknowledge complaints within 30 days.