Privacy Policy
Effective August 28, 2026 · Version 2026-08-28.v4-shm ·
Draft — requires review by licensed counsel before launch.
The short version
- We collect only what we need to advise you on health coverage.
- We never sell your personal information, and we don't share it with other marketers.
- We never ask for medical history on this website.
- You can opt out of any communication, or ask us to delete your data, at any time.
What we collect
- What you give us: name, email, phone, date of birth (health plans are priced by age), ZIP code and state, household size, coverage situation, timeline, budget range, network preferences, optional doctor/hospital names, and optional wellness interests you choose to share.
- Consent records: the exact consent wording version, timestamp, and source page for every submission — kept so we can prove we only contact people who asked us to.
- Basic technical data: the page you arrived from and standard web logs.
- ZIP-code location lookup: to show you the right city and state, your ZIP
code may be sent to a third-party location-lookup service. Only the ZIP code is sent — never
your name, email, phone number, or anything else about you — and the service returns only a
city and state. It is not used for advertising and your information is not sold to it.
- Unfinished coverage checks: if you begin the coverage check and leave
without submitting it, we record how far you got and the coverage answers you had given by
that point — ZIP code and state, coverage situation, timeline, household size, budget range,
network preference, and any plan features you selected. We do this to understand where the
form loses people and to improve it. We do not record your name, email address, or
phone number unless you complete and submit the form, so an unfinished check cannot
be used to contact you. You can ask us to delete these records using the contact details
below.
- Advertising measurement: if you arrive from one of our ads, Google's conversion tag records that your coverage check was completed so we can measure our campaigns. This is aggregate campaign measurement — it is not used to build a profile of you, and we do not run third-party ad-network trackers beyond it.
What we deliberately do NOT collect on this site
- Medical records, diagnoses, prescriptions, or claims history
- Social Security numbers or financial account numbers
- Any information about children
If a private plan requires medical underwriting, that happens later, directly with the
insurance carrier through its own secure application — with your knowledge, at your choice.
How we use your information
- To prepare your coverage-fit summary and advise you
- To contact you in the ways you consented to
- To obtain quotes from carriers you ask us to check
- To meet insurance-regulatory record-keeping obligations
Who we share it with
- Insurance carriers — only when you ask us to pursue a quote or application
- Licensed advisor partners in the SmartHealthMatch network — only when the advisor matched to you is the one licensed in your state, and only to serve your request
- Service providers that run our website, forms, CRM, and scheduling — under confidentiality obligations, and only to operate this service
- No one else. We do not sell, rent, or trade your information.
Your choices and rights
- Opt out any time: reply STOP to texts, use the unsubscribe link in emails, or tell us on a call. We keep a suppression list so you stay opted out.
- Access, correction, deletion: email and we will honor your request within 30 days, except records we are legally required to retain (such as consent and policy records), which are kept only as long as the law requires and then deleted.
- Residents of California and other states with privacy laws have additional rights, including the right to know and the right to delete; the contact above handles those requests too.
Security & retention
Form submissions are transmitted over HTTPS and stored in access-controlled systems.
Lead records that never become client relationships are deleted after 24 months. Consent
records are retained for the period required by applicable law.
Contact