Welcome to ConnectHealthPlans.com (“Site”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our Site and services. Protecting your privacy and sensitive health information is a priority for us. We are committed to complying with applicable privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and other relevant regulations to which we are subject.

By using our Site, you consent to the collection and use of your information as described in this Policy. Please read it carefully. If you do not agree with our practices, please do not use our Site.

Information We Collect

We collect personal and health-related information that you voluntarily provide to us and data collected automatically when you use the Site. This may include:

Personal identifiers: Full name, date of birth, mailing address, email address, phone number

Health insurance information: Policy numbers, coverage details, claims information

Payment details: Billing and payment information for premium processing

Account credentials: Username, password, and authentication data

Communications: Records of correspondence, inquiries, or feedback you send us

Technical information: IP addresses, browser type, device identifiers, log-in times, pages viewed, and cookies or similar tracking technologies

We may also collect sensitive health information strictly for purposes related to providing and managing insurance coverage, as permitted by law.

How We Use Your Information

Your information is used primarily to:

Provide, administer, and manage your health insurance policies and services

Process claims, payments, and customer service requests

Communicate with you about your account, policy changes, or site updates

Personalize your experience and improve our Site and services

Comply with legal requirements and regulatory obligations

Conduct data analysis to enhance service delivery

Send marketing communications, with your consent where required

Legal Basis for Processing (If Applicable Under GDPR)

Where GDPR applies, we process your personal data based on:

Your explicit consent

The necessity to perform our contract with you

Compliance with legal obligations

Our legitimate interests, balanced against your privacy rights

Sharing Your Information

We do not sell your personal information. We may share your data with:

Service providers who assist us (e.g., IT contractors, payment processors), under strict confidentiality agreements

Regulatory or law enforcement authorities as required by law

Other third parties only with your consent or as necessary for legal or business purposes

Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to collect information about your usage, help your experience function smoothly, analyze traffic, and provide personalized content. You can manage cookie preferences through your browser or our consent banner.

Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

Access, correct, or delete your personal data

Restrict or object to certain processing activities

Withdraw any consent given

Receive a portable copy of your data in a standard format

Lodge a complaint with a supervisory authority

Data Security

We employ industry-standard technical, administrative, and physical safeguards to protect your personal and health information from unauthorized access, disclosure, alteration, or destruction. These measures include data encryption, secure servers, access controls, regular security training for employees, and policies ensuring confidential handling of your information. While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure; thus, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Data Retention

We retain your personal and health information only as long as necessary to fulfill the purposes described in this policy, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. The retention period depends on the type of information, our relationship with you, and statutory requirements. When information is no longer needed, we securely delete or anonymize it in accordance with our data retention and destruction policies.

International Data Transfers

Your information may be processed and stored in countries outside your own, including jurisdictions that may have different data protection standards. When we transfer data internationally, we do so under applicable legal safeguards such as standard contractual clauses, data protection agreements, or other means to ensure your privacy and legal rights are maintained.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or new features. Any updates will be posted on this page with an updated effective date, and, if required, users will be notified through prominent notices on the Site or direct communications. Continued use of the Site after policy changes indicates acceptance of those changes.

Contact Information

If you have questions, requests, or concerns regarding this Privacy Policy or how we handle your information, please contact us at:

Email: info@connecthealth.com 

Phone: +1-938-336-0965‬ (TTY 711)

Hours of Operations: 8:00am – 7:00pm (EST) Monday to Friday

You also have the right to contact your local data protection authority if you have concerns about how your personal data is handled.