Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you use our website, submit lead forms, or contact us by phone, we may collect the following types of personal information:

• Contact Information: your name, email address, phone number, mailing address, and ZIP code
• Demographic Information: your date of birth, age, and gender
• Medicare Information: your Medicare Part A and Part B effective dates, current coverage status, plan-type preferences (Medicare Advantage or Medicare Supplement), tobacco-use status, and any health-related information you voluntarily provide
• Doctor and Prescription Information: the providers and medications you tell us about so we can check network and formulary coverage
• Communication Records: records of your phone calls, emails, and other communications with us
• Preferences: your plan preferences, budget, and communication preferences

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing activities:

• Technical Information: your IP address, browser type and version, device type, operating system, and unique device identifiers
• Usage Data: pages visited, time spent on pages, links clicked, search queries, referral sources, and navigation paths through our website
• Location Data: approximate geographic location based on your IP address
• Cookies and Tracking Technologies: cookies, web beacons, pixels, and similar technologies (see Section 5)
• Advertising Identifiers: Google Click IDs (GCLID), campaign IDs, ad group IDs, and similar parameters when you visit us from a paid ad

1.3 Information from Third-Party Sources

We may receive information about you from third-party sources such as data aggregators, marketing partners, public databases, and social media platforms, which we may combine with other information we have collected to provide relevant Medicare options.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Medicare Plan Services: to provide quotes, match you with Medicare Advantage or Medicare Supplement plans, facilitate enrollment, and assist with your Medicare needs
• Communication: to respond to your inquiries, send requested information, provide customer support, and communicate about your Medicare options
• Marketing: to send you marketing communications about our services and Medicare products (with your consent where required)
• Website Improvement: to analyze website usage, improve functionality, and enhance user experience
• Legal Compliance: to comply with applicable laws, regulations, and legal processes, including CMS Third-Party Marketing Organization (TPMO) rules
• Fraud Prevention: to detect, prevent, and address fraud, security issues, and illegal activities
• Business Operations: analytics, reporting, and quality assurance
• Personalization: to personalize your experience and provide tailored Medicare recommendations

3. How We Share Your Information

We do not sell, rent, lend, or redistribute your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

• Insurance Carriers and Partners: We may share your information with Medicare insurance carriers to obtain quotes and facilitate enrollment in plans you select. These partners are contractually obligated to use your information only for providing Medicare insurance services.
• Service Providers: We may share information with trusted third-party service providers who assist us with business operations such as website hosting, data analysis, email delivery, customer service, and CRM (such as Salesforce). These providers are bound by confidentiality obligations.
• Legal Requirements: We may disclose your information when required by law, court order, subpoena, or government regulation, including the Centers for Medicare & Medicaid Services (CMS).
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity, subject to this Privacy Policy.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

4. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure servers with firewalls and intrusion detection
• Regular security audits and vulnerability assessments
• Limited access to personal information on a need-to-know basis
• Employee training on data protection and confidentiality

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. We use cookies and similar tracking technologies (web beacons, pixels, and tags) to enhance your experience, analyze website usage, and deliver targeted advertising.

5.2 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality, such as form submissions and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website, including page views, traffic sources, and user behavior patterns.
• Functionality Cookies: Remember your preferences and settings (including our accessibility toolbar choices) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness, including Google Click ID (GCLID) persistence.

5.3 Third-Party Cookies and Advertising

We work with third-party advertising partners (Google Ads, Facebook, and similar platforms) who may place cookies on your device to serve targeted advertisements based on your browsing behavior. These partners may collect information about your online activities over time and across different websites. We may also use remarketing and retargeting technologies to show you relevant ads after you leave our website.

5.4 Your Cookie Choices

You have several options to manage cookies:

• Browser Settings: Most browsers allow you to refuse or delete cookies through their settings. Disabling cookies may affect website functionality.
• Opt-Out Tools: You can opt out of interest-based advertising through the Digital Advertising Alliance (aboutads.info), Network Advertising Initiative (networkadvertising.org), or your device settings.
• Do Not Track: Some browsers offer a "Do Not Track" signal. There is no universal standard for responding to these signals, and we currently do not respond to them.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
• Portability: Request a copy of your information in a portable format
• Opt-Out: Opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us
• Object: Object to certain processing of your information

To exercise these rights, please contact us at info@medicareat65.org. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share information
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information. We do not sell your personal information.
• Right to Limit Sensitive Information: Limit the use and disclosure of sensitive personal information
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To submit a request, contact us at info@medicareat65.org or call us. You may designate an authorized agent to make requests on your behalf, subject to proof of authorization.

8. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your information based on consent, contractual necessity, legal obligations, or legitimate interests
• Data Subject Rights: You have rights to access, rectification, erasure, restriction of processing, data portability, and objection
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

International transfers of your data will be protected by appropriate safeguards such as Standard Contractual Clauses.

9. Children's Privacy

Our website and services are intended for adults age 18 and older, and primarily for individuals who are eligible for or already enrolled in Medicare. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors affecting retention periods include:

• The nature of our relationship and whether you are an active client
• Legal, regulatory, tax, and accounting requirements (including CMS recordkeeping for Medicare-related sales)
• Potential legal claims or disputes
• Business operational needs

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, including Medicare insurance carrier websites, Medicare.gov, social media platforms, and partner sites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected through our website.

12. Health Information and HIPAA

As a licensed health insurance agency working with Medicare carriers, we operate as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) for certain workflows. While we are not a HIPAA covered entity, we are contractually obligated through Business Associate Agreements (BAAs) with insurance carriers to comply with HIPAA's Privacy Rule, Security Rule, and Breach Notification requirements.

This means the health-related information you provide to us is protected under HIPAA regulations. We maintain administrative, technical, and physical safeguards including employee training, risk assessments, and detailed policies and procedures to protect your Protected Health Information (PHI).

Once you enroll in a Medicare plan, the insurance carrier becomes the covered entity directly responsible for your ongoing health information.

13. Telephone Communications and Recording

When you contact us by telephone or provide your phone number through our website, you consent to receive calls from us regarding your Medicare insurance inquiries. CMS regulations require that calls related to Medicare Advantage and Part D sales be recorded in their entirety and retained for a minimum period set by regulation. By continuing a call after being notified of recording, you consent to the recording.

By providing your telephone number, you agree that we may contact you at that number using an automated telephone dialing system, pre-recorded messages, or text messages. Consent is not a condition of purchasing any goods or services. Standard message and data rates may apply.

You may opt out of receiving marketing calls or text messages at any time by informing us during a call, responding STOP to any text message, or contacting us at info@medicareat65.org.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this policy. Material changes will be communicated through a prominent notice on our website or by email. We encourage you to review this Privacy Policy periodically.

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within a reasonable timeframe as required by applicable law.