Privacy Policy
Your privacy and data security are our highest priorities
Last Updated: January 1, 2025
Introduction
CareGuard Platform Technologies Corp. ("CareGuard," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our insurance enrollment platforms, broker portals, agency management systems, and related services (collectively, the "Services").
As a healthcare technology platform that facilitates Affordable Care Act (ACA) marketplace enrollments and handles protected health information, we operate under strict federal regulations including the Health Insurance Portability and Accountability Act (HIPAA), the Affordable Care Act, and various state privacy laws.
By using our Services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services. We may update this policy periodically, and your continued use of the Services after changes are posted constitutes acceptance of those changes.
This Privacy Policy applies to all users of our platform, including individuals seeking insurance coverage, licensed insurance brokers and agents, insurance agencies, and insurance carriers.
Information We Collect
Personal Information
We collect personal information that you provide directly to us, including but not limited to: full name, email address, phone number, date of birth, Social Security number, address, insurance information, health information, financial information, and employment details. This information is necessary to facilitate insurance enrollment, comply with federal regulations, and provide our services.
Automatically Collected Information
We automatically collect certain information about your device and how you interact with our platform, including: IP address, browser type, operating system, pages viewed, time spent on pages, links clicked, and referring website. We use cookies, web beacons, and similar technologies to collect this information.
Health Information
As a healthcare technology platform, we may collect protected health information (PHI) as defined under HIPAA. This includes medical history, current health conditions, prescription information, and other health-related data necessary for insurance enrollment and coverage determination.
How We Use Your Information
Primary Uses
We use your information to: facilitate insurance enrollment and application processing; communicate with insurance carriers and the Centers for Medicare & Medicaid Services (CMS); verify eligibility for coverage and subsidies; process payments and commissions; provide customer support; maintain and improve our platform; comply with legal and regulatory requirements; prevent fraud and ensure security; and send administrative notifications about your enrollment, renewals, and policy changes.
Marketing Communications
With your consent, we may use your contact information to send promotional materials about our services, new features, and relevant insurance products. You may opt out of marketing communications at any time while still receiving essential service-related communications.
Analytics and Improvement
We use aggregated and de-identified data to analyze platform usage, improve user experience, develop new features, and generate insights about enrollment trends and user behavior. This aggregated data cannot be used to identify individual users.
Information Sharing and Disclosure
Insurance Carriers and CMS
We share your information with insurance carriers for enrollment processing, coverage determination, and policy management. We transmit data to CMS and state-based marketplaces as required for ACA enrollment and eligibility verification. This sharing is necessary to provide our core services and is governed by federal regulations.
Brokers and Agencies
If you work with a licensed insurance broker or agency through our platform, we share your information with them to facilitate enrollment assistance and ongoing policy management. Brokers and agencies are bound by their own professional obligations and privacy requirements.
Service Providers
We engage trusted third-party service providers to perform functions on our behalf, including: payment processing, data storage and hosting, customer support, email delivery, security services, and analytics. These providers have access only to information necessary to perform their functions and are contractually obligated to maintain confidentiality.
Legal Requirements
We may disclose your information when required by law, subpoena, court order, or government regulation; to protect our rights, property, or safety; to investigate fraud or security issues; in connection with corporate transactions such as mergers or acquisitions; or with your explicit consent.
No Sale of Personal Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used solely to provide our services and fulfill our obligations to you.
HIPAA Compliance and Protected Health Information
HIPAA Obligations
CareGuard Platform Technologies operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We maintain comprehensive safeguards to protect protected health information (PHI) and comply with all applicable HIPAA Security Rule and Privacy Rule requirements.
Business Associate Agreements
We enter into Business Associate Agreements (BAAs) with covered entities, including insurance carriers and healthcare providers, that clearly define our responsibilities regarding PHI. These agreements ensure that all parties maintain appropriate safeguards and use PHI only for permitted purposes.
Minimum Necessary Standard
We adhere to the minimum necessary standard, accessing, using, and disclosing only the minimum amount of PHI necessary to accomplish the intended purpose. Our systems are designed with role-based access controls to enforce this principle.
Patient Rights
Under HIPAA, you have the right to: access your health information; request corrections to your health information; receive an accounting of disclosures; request restrictions on uses and disclosures; request confidential communications; and file a complaint if you believe your privacy rights have been violated.
Data Security
Technical Safeguards
We implement industry-leading security measures including: 256-bit SSL/TLS encryption for data transmission; AES-256 encryption for data at rest; multi-factor authentication; regular security audits and penetration testing; intrusion detection and prevention systems; secure data centers with physical access controls; and regular security training for all personnel.
SOC 2 Type II Compliance
Our platform has achieved SOC 2 Type II certification, demonstrating our commitment to maintaining controls for security, availability, processing integrity, confidentiality, and privacy. We undergo regular audits to maintain this certification.
Incident Response
We maintain a comprehensive incident response plan to address any potential security breaches. In the event of a breach affecting your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovery.
Employee Access
Access to personal information is restricted to authorized employees who require it to perform their job functions. All employees undergo background checks and sign confidentiality agreements. We maintain detailed access logs and regularly review access permissions.
Your Privacy Rights
Access and Portability
You have the right to access your personal information stored on our platform. You may request a copy of your data in a structured, commonly used, and machine-readable format. We will provide this information within 30 days of your request.
Correction and Deletion
You may request corrections to inaccurate personal information. You may also request deletion of your personal information, subject to legal and regulatory requirements. Note that we may be required to retain certain information for compliance purposes even after you request deletion.
Opt-Out Rights
You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us directly. You may also manage cookie preferences through your browser settings. Note that opting out of certain communications may impact our ability to provide services.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising these rights.
Exercising Your Rights
To exercise any of these rights, please contact us at privacy@careguardplatform.com or call +1 (888) 965-5558. We will verify your identity before processing your request and respond within the timeframe required by applicable law.
Cookies and Tracking Technologies
Types of Cookies
We use essential cookies (necessary for platform functionality), performance cookies (to analyze usage and improve performance), functional cookies (to remember your preferences), and targeting cookies (with your consent, for marketing purposes). You can control cookie preferences through your browser settings.
Third-Party Analytics
We use third-party analytics services to understand how users interact with our platform. These services may collect information about your visits to our site and other websites. We use this information solely for improving our services.
Do Not Track
Some browsers include a 'Do Not Track' feature. Our platform respects these signals and will not track users who have enabled this feature for non-essential tracking purposes.
Data Retention
Retention Periods
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Enrollment records and related documentation are typically retained for 7 years after the end of coverage as required by federal regulations. Marketing data is retained until you opt out or request deletion.
Secure Deletion
When information is no longer needed, we securely delete or anonymize it using industry-standard methods. Deletion includes removing data from active systems, backups, and archives, subject to legal retention requirements.
Children's Privacy
Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible.
When processing insurance enrollments for dependents under 18, we collect information as authorized by parents or legal guardians in accordance with applicable regulations.
International Data Transfers
Our Services are designed for users in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and where we operate.
By using our Services, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy and applicable U.S. law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
For significant changes that materially affect your rights, we will provide additional notice through email or prominent notice on our platform at least 30 days before the changes take effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
CareGuard Platform Technologies Corp.
Privacy Officer
Email: privacy@careguardplatform.com
Phone: +1 (888) 965-5558
For HIPAA-related complaints: If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
Your Privacy Matters
We're committed to maintaining the highest standards of privacy and security. If you have any questions about how we protect your information, don't hesitate to reach out.
Contact Privacy Team: +1 (888) 965-5558