Consumer Health Data Privacy Policy.

This Consumer Health Data Privacy Policy applies to consumer health data that CoverageBeacon (operated by QLG Media LLC) collects, processes, or shares about residents of Washington under the Washington My Health My Data Act (MHMDA, RCW 19.373), Nevada under SB 370 (NRS 603A.400 et seq.), Connecticut under the Connecticut Data Privacy Act health data provisions, and similar state consumer health data laws.

This policy is in addition to our general Privacy Policy. To the extent the two policies conflict with respect to consumer health data covered by these state laws, this policy controls.

1. What we mean by “consumer health data”

For purposes of this policy, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and identifies the consumer's past, present, or future physical or mental health status, including information that could be used to infer health status such as enrollment in or eligibility for health-related government programs (Medicare, Medicaid), use of tobacco products, age range, household income (for ACA Marketplace subsidy determination), or interest in specific insurance products (final expense, Medicare Advantage, ACA Marketplace, etc.).

2. Categories of consumer health data we collect

Through our chat funnels and call routing, we may collect or process the following categories of consumer health data:

• Age range (categorical bands such as 50–59, 60–69, 65–69, Under 65, etc.)
• Enrollment status in Medicare (Parts A and B, Medicare Advantage, Medigap, Part D)
• Eligibility for or enrollment in Medicaid (including dual-eligible status with Medicare)
• Household income range (categorical bands, used for ACA Marketplace subsidy determination)
• Tobacco use status (used for final expense underwriting categorization)
• Interest in specific insurance products (final expense, Medicare, ACA Marketplace)
• ZIP code and state (used to route inquiries to licensed agents in your area and to determine plan availability)
• Caller ID when you initiate a phone call from our site

We do not collect Social Security numbers, dates of birth, full names, mailing addresses, email addresses, payment card information, health insurance policy or member ID numbers, or specific medical conditions or diagnoses through this Site. The qualifying questions in our chat tools collect categorical answers (such as an age range), not precise personal data.

3. Categories of sources

Consumer health data described above is collected:

• Directly from the consumer through interactions with our chat tools, qualifying forms, and call buttons
• Automatically through our call tracking platform (CallGrid) when a consumer initiates a phone call from our Site

4. Purposes for which we collect, use, and process consumer health data

We collect, use, and process consumer health data for the following purposes:

• To determine eligibility for the insurance categories the consumer is asking about
• To route the consumer's inquiry to a licensed insurance agency partner that serves the consumer's state, county, and category
• To enable a licensed insurance agent to discuss insurance options that may be available to the consumer
• For internal product quality assurance, fraud prevention, compliance documentation, and to comply with applicable legal obligations

5. Categories of third parties with whom we share consumer health data

We share consumer health data with the following categories of third parties:

• Licensed insurance agency partners (and the licensed agents they employ or contract with) who serve the consumer's state and the insurance category the consumer is asking about. These partners are listed on our Marketing Partners page.
• Service providers that support our routing, compliance documentation, and analytics infrastructure, including our call tracking and visitor session platform (CallGrid), our lead certification service (TrustedForm by ActiveProspect), and our infrastructure providers. These service providers process consumer health data only on our behalf and only for the purposes set out in this policy.

We do not sell consumer health data. We do not transmit consumer health data values (such as your specific Medicare or Medicaid status, tobacco use, household income, or coverage interest) to advertising or analytics vendors (such as Google Analytics, Google Ads, Meta, TikTok, or Microsoft Advertising). Those vendors receive only generic lifecycle events (for example, that a chat was started or that a call button was clicked) and standard attribution parameters.

6. Your rights

If you are a Washington, Connecticut, Nevada resident, or a resident of another state with applicable consumer health data rights, you have the right to:

• Confirm whether we are collecting, processing, sharing, or selling your consumer health data
• Access the consumer health data we have collected about you
• Withdraw consent from our collection or sharing of your consumer health data
• Request deletion of your consumer health data
• Appeal a denial of any of the above requests

Washington residents may also file a complaint with the Washington State Attorney General if they believe their rights under MHMDA have been violated.

7. How to exercise your rights

To exercise any of the rights above, contact us at:

• Email: [email protected] with subject line “Consumer Health Data Request”
• Universal opt-out portal: qlg.media/do-not-sell

We confirm receipt of consumer health data requests within 2 business days and complete fulfillment as soon as possible, and no later than 15 business days from receipt. If we need additional time, we will notify you of the reason and the extension period (up to 45 days total).

We do not require an account or fee to submit a consumer health data request.

8. Authentication

To process a verifiable consumer health data request, we will ask you to confirm enough information for us to reasonably verify that you are the consumer whose data is the subject of the request. We will not use information you provide for verification for any purpose other than verification.

9. Retention

We retain consumer health data only for as long as necessary to fulfill the purposes described in Section 4, typically no longer than 24 months, unless a longer retention period is required to comply with applicable law (such as TCPA and state Do Not Call defensive evidence rules).

10. Changes to this policy

We may update this Consumer Health Data Privacy Policy from time to time. We will post the updated policy with a revised “Last updated” date. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact us

For questions about this Consumer Health Data Privacy Policy or to exercise your rights, contact:

QLG Media LLC dba CoverageBeacon
Naples, FL
Email: [email protected]