At HealthBenefit360 ("we," "us," or "our"), protecting your privacy is fundamental to our business. This Privacy Notice (the "Notice") explains how we collect, use and disclose your Personal Information when you use healthbenefit360.com (the "Website"), call us, or otherwise interact with us. It is intended to comply with applicable data-privacy laws, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (together, the "CCPA").
Definitions
Personal Information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Examples include names, mailing addresses, email addresses, phone numbers, dates of birth, IP addresses and device identifiers. Personal Information does not include publicly available government records, de-identified or aggregated information, or information excluded from applicable privacy laws, such as information governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Fair Credit Reporting Act, or the Gramm-Leach-Bliley Act.
Usage Data is data collected automatically through your use of the Website, such as the pages you view and how long you stay.
Cookies and Pixels are small data files placed on your device (cookies) and snippets of code that record activity on a website (pixels). They help websites work, and they report how visitors use a site.
Information we collect and how we use it
We collect Personal Information directly from you when you fill out a form, call us or enroll; automatically when you use the Website; and from lead-generation partners and consumer data providers. We limit what we collect to what we need to provide the services described on the Website, and we will not collect new categories of Personal Information or use it for materially different purposes without giving you notice.
| Category | Examples | Why we use it |
|---|
| Identifiers | Name, postal address, email, phone number, IP address | Respond to your requests, contact you about programs, process enrollment |
| Characteristics & eligibility details | Date of birth, age, household size, state of residence, whether you have Medicare, Medicaid or Tricare | Determine which programs you are eligible for |
| Commercial information | Programs you asked about or enrolled in; billing details you provide at enrollment | Complete enrollment, customer service, record keeping |
| Internet activity | Browser type, pages viewed, access times, referring site | Operate and improve the Website, measure marketing |
| Audio recordings | Recordings of calls with our specialists | Quality assurance, training, compliance and dispute resolution |
| Inferences | Preferences drawn from the information above | Tailor the information we share with you |
Calls, text messages and call recording
If you give us your phone number and consent, we and our service providers may contact you by phone or text message, including through automated technology or prerecorded or artificial voice, about the programs you asked about. Consent is not a condition of purchase. Message and data rates may apply. You can opt out of text messages at any time by replying STOP, and you can ask to be placed on our internal do-not-call list by calling 888-373-1809.
Calls with HealthBenefit360 may be monitored and recorded. Where required by law, we tell you at the start of the call that it is being recorded.
We do not sell or share mobile phone numbers or text-messaging opt-in data with third parties for their own marketing purposes.
Cookies and pixels
We use cookies and pixels to operate the Website, remember your preferences and understand how visitors use it. You can set your browser to refuse cookies or to alert you when one is set; some parts of the Website may not work properly if you do. Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your Personal Information for that browser.
How we disclose and share information
We may disclose Personal Information:
- to our affiliates;
- to the program providers that deliver the membership you enroll in (for example, Healthcare2U, Lyric Health or the discount plan organization), so they can provide services to you;
- to service providers that support our business, such as call-center, telephony, hosting, payment, analytics and customer-relationship vendors;
- to fulfill the purpose for which you provided it, or for another purpose we disclose when you provide it;
- to a buyer or successor in a merger, sale or transfer of some or all of our business or assets;
- to comply with a court order, law or legal process, including government or regulatory requests;
- when we believe disclosure is necessary to protect the rights, property or safety of HealthBenefit360, our customers or others; and
- for any other purpose with your consent.
Our service providers are contractually prohibited from retaining, using or disclosing your Personal Information for any purpose other than the services they perform for us. Third-party program providers have their own privacy policies, which govern their handling of your information. This Notice does not apply to third-party websites you reach through links on our Website.
We do not sell Personal Information for money. We do not sell or share Personal Information with third parties for their own direct marketing.
Retention
We keep Personal Information only as long as needed for the purposes in this Notice, and longer only where needed to meet legal, regulatory or contractual obligations, resolve disputes or enforce our agreements. Call recordings and consent records are kept for as long as applicable telemarketing and consumer-protection laws require. Usage Data is generally kept for about 24 months unless we need it longer for security or legal reasons.
Data processing and security
We process and store information in the United States. We use physical, electronic and procedural safeguards designed to protect your information from loss and unauthorized access, and we limit access to employees and contractors who need it to serve you. No transmission over the internet is completely secure, so we cannot guarantee the security of information you send to us.
Children's privacy
The Website is intended for adults. We do not knowingly collect Personal Information from children under 16 except as part of an enrollment submitted by a parent or guardian on behalf of a dependent. If you believe a child has given us information, contact us and we will delete it.
California consumer rights
If you are a California resident, you have the following rights, subject to verification and to certain exceptions:
- Right to know and access. You may ask what Personal Information we collected about you over the past 12 months, the categories of sources, our business purposes, the categories of third parties we disclosed it to, and the specific pieces of information we hold.
- Right to delete. You may ask us to delete Personal Information we collected from you. We may decline where we need the information to complete a transaction or provide a service you requested, detect security incidents or fraud, debug our systems, comply with a legal obligation, or use it internally in ways compatible with the context in which you provided it.
- Right to correct. You may ask us to correct inaccurate Personal Information.
- Right to opt out of sale or sharing of Personal Information, including for cross-context behavioral advertising.
- Right to limit the use of sensitive Personal Information, where applicable.
- Right to non-discrimination. We will not deny you services, charge you a different price or provide a different level of service because you exercised your rights.
How to submit a request
Call 888-373-1809 or email PrivacyRequest@healthbenefit360.com. Your request must include enough information for us to verify your identity (at least your name and either your mailing address or email address) and describe what you are asking for. You may use an authorized agent; we may ask the agent for written permission signed by you and ask you to verify your identity directly. You may also make a request on behalf of your minor child. You do not need an account to make a request, and we use the information you provide only to verify and respond.
Response timing
We will confirm receipt within 10 business days and aim to respond within 45 days. If we need more time (up to 90 days in total), we will tell you why in writing. We respond by mail or electronically, at your choice, and we do not charge a fee unless a request is excessive, repetitive or manifestly unfounded, in which case we will explain why and give you a cost estimate first.
Rights in other states
Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Texas, Oregon and others, may have similar rights to access, correct, delete and port their Personal Information and to opt out of targeted advertising, sale or profiling. Submit requests the same way as above. If we deny your request, you may appeal by emailing PrivacyRequest@healthbenefit360.com with the subject line "Privacy Appeal"; we will respond within the time your state's law requires.
Changes to this Notice
We will post any changes to this Notice on this page and update the effective date above. If we make material changes to how we treat your Personal Information, we will also post a notice on the Website's home page.