Privacy policy

Effective Date: October 21, 2026

Welcome to healthinsurance.org. At healthinsurance.org (“we,” us, “our”) we understand the importance of privacy. Protecting the privacy of your information is of great importance to us. This policy describes how we collect, use, and share information about you. Please take a moment to review the terms of our Privacy Policy.

By using this website (“Site”) you acknowledge this Privacy Policy in its entirety, including our use of cookies. If you do not agree to our Privacy Policy, please stop using any services and exit the Site.

1. Information We Collect

We may collect information that describes or relates to you and is classified as Personal Information or Personal Data under applicable state laws (collectively, “Personal Information”).

Personal Information does not include:

• Publicly available information as defined under applicable state laws.
• De-identified or aggregated information as defined under applicable state laws.
• Other information excluded from the applicable state laws, including, but not limited to, Personal Information governed by HIPAA.

In the past 12 months, we may collect the following types of Personal Information:

• Direct and personal identifiers, such as Name, address, telephone number, e-mail address, and other contact information
• Demographic information, such as zip code and state;
• Commercial information, such as items you are interested in purchasing or are interested in;
• Internet or Electronic Network Activity, such as such as the type of browser you are using (e.g., Safari, Chrome), the type of operating system you are using, (e.g., Windows OS or Mac OS), your IP address and the domain name of your Internet service provider (e.g., Xfinity, Verizon), We also may collect additional log information, such as the referring/exit pages you visit, date/time stamps, and related data, which is stored in log files. See the Cookies and Other Tracking Technologies section, below for more information;
• Geolocation Information such as device location;
• Audio, Visual or Other Information such as call and video recordings;
• Inferences, such as conclusions that we develop about you using the data set forth above.

Cookies and Other Tracking Technologies

• A cookie is a small text file that is stored on a user’s device, which may be a session ID cookie or tracking cookie. Session ID cookies make it easier for you to navigate the Service and expire when you close your browser. Tracking cookies help in understanding how you use the Service, and remain after you close your browser. The Service may associate some or all of these types of cookies with your devices. Cookies may remain on your device for extended periods of time.
• Web Beacons (“Tracking Pixels”). Web beacons are small graphic images, also known as “web bugs”, “pixel tags” or “clear GIFs”, are small graphical images that may be used on the Site, or in our emails to deliver cookies, count content views and determine if an email has been opened and acted upon.
• Embedded Scripts. An embedded script is a programming code that is designed to collect information about your interactions with the Site, such as the links you click on. The code is temporarily downloaded onto your computer or other device and is deactivated or deleted when you disconnect from the Site.
• Location-Identifying Technologies. GPS (global positioning systems) software, geo-filtering, and other location-aware technologies locate you (sometimes with precision) for purposes such as verifying your location and delivering or restricting relevant content based on your location.
• Device Fingerprinting. Device fingerprinting is the process of analyzing and combining sets of information elements from a device ("Usage Information"), to identify it as a unique device. Information elements may include IP address, device identifier, browser type, operating system, data regarding network connected hardware, and information about your use of the Service.

To exercise your choices about Cookies and other Tracking Technologies, see the “Your Rights and Choices” section below.

For more information about cookies (and other kinds of online tracking), please visit www.consumer.ftc.gov/articles/0042-online-tracking. Some browsers have incorporated Do Not Track (“DNT”) preferences. As there is not yet an industry-standard DNT protocol on how to interpret DNT signals, we do not honor DNT signals from browsers at this time. However, you may refuse or delete cookies to prevent tracking activities, as described above.

How we Collect your Personal Information

We collect your Personal Information in the following ways, pursuant to applicable law:

• Directly From You, such as when you use our Services, register for an account, contact us, respond to a survey, sign up to receive emails, text messages, and/or postal mailings;
• Through Our Use of Cookies and Other Tracking Technologies, such as when you visit the Website, open or click on emails we send you, or interact with our advertisements from us, our service providers or third parties we work with.
• From Our Third Party Partners, such as third parties that we have partnered with to provide you the Services that you have requested from us. This may include our vendors, joint marketing partners and social media platforms.
• Other Sources, such as data analytics providers or publicly available sources. We may also obtain information from our affiliates.

2. How We Use Your Information

We may use your Personal Information, for any purposes consistent with our statement under this Privacy Policy or as permitted by applicable law, including to:

• Manage our Service, including your subscription to newsletters or other programs we may provide and for which you have selected;
• Offer you information about our services or other information you have requested, or to respond to your questions, emails and other requests, and to provide customer service;
• Send you technical notices, updates, security alerts, information regarding changes to our policies, and support and administrative messages;
• Prevent and address fraud, breach of policies or terms, and threats of harm;
• Monitor and analyze trends, usage and activities;
• Conduct research, including surveys, focus groups, or other insight gathering methods;
• Improve the Service or other affiliate websites, applications, marketing efforts, products, and services;
• Send you advertisements and communicate with you regarding our third-party products and services;
• Comply with laws and legal obligations, such as to enforce applicable legal requirements, relevant industry standards, contractual obligations, and our policies, including this Notice, and our Terms and Conditions;
• Support general business and operations needs, such as to consider mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions; and
• Support Business Transfers. To implement mergers, acquisitions, reorganizations, and other business transactions, and where necessary to the administration of our general business, accounting, recordkeeping, and legal functions.
• Fulfill any other purpose disclosed at the time you provide Personal Information.

We may use Artificial Intelligence (AI) Technology when processing your Personal Information as described above. This may also involve de-identifying or anonymizing your Personal Information to train, optimize, ground or otherwise enhance our AI Technology, including disclosure to third parties who help us develop or provide the systems to enable the AI Technology.

3. Sharing of Information

We may disclose Personal Information to operate our business and provide support for our Services, provide communications and advertise or market our Services, respond and comply with legal requests, or with your Consent.

We may disclose Personal Information with the following categories of third parties:

• Service Providers: These authorized third parties perform services on our behalf and provide products to Us. These may include, for example, cloud / IT services, data storage, sales, analytics, marketing, consultants, auditors and legal counsel. We require these Service Providers by contract to protect your Personal Information.
• Affiliated Companies and Partners: We may disclose such Personal Information to subsidiaries, affiliates, joint ventures and other business partners as needed to provide our products and Services for purposes of offering you information that you have requested and in general to operate our Company.
• Third-Party Analytics: We use third-party analytics services, such as Google Analytics, to understand how visitors use our website and measure the effectiveness of our marketing. These providers use cookies or other tracking technologies to collect information such as IP addresses, device and browser identifiers, pages and ads viewed, and actions taken on our website. To learn more about Google Analytics and available opt-out options, visit Google’s privacy information page.
• Third-Party Advertising: We may also disclose limited Personal Information, including identifiers and Online User Activity, to advertising partners, third-party ad networks, sponsors, and traffic measurement providers. These parties may use tracking technologies to collect information about your activities on our website and across other websites and mobile apps over time, develop profiles of your interests, personalize advertising, and measure advertising effectiveness. As a result, you may see our ads on other websites or apps based on your browsing activity, inferred interests, or demographic information. Third parties’ use of information collected through their cookies and other tracking technologies is governed by their respective privacy notices. Learn more by visiting aboutads.info/choices and http://www.networkadvertising.org/choices/.

For information about your choices on our Website, see the “Your Rights and Choices” section below.

We also may share your information under the following circumstances:

• To comply with the law or with other legal processes and, where required, to respond to lawful requests by law enforcement or by other public authorities, or to respond to a subpoena, to meet national security or law enforcement requirements, to protect the integrity of the Service or company if we believe that a user has committed unlawful or otherwise harmful acts, or to protect our interests relating to a legal proceeding;
• In connection with, or during negotiations of, any proposed or actual merger, purchase, sale, consolidation with, or any other type of acquisition or business combination of all or any portion of the Service or our assets, or transfer of all or a portion of our business to an affiliated entity or third party;
• With our affiliates, business partners, and other third parties for their own business purposes, including audience profiling and direct marketing purposes; and
• For purposes disclosed at the time you provide Personal Information, and with your consent or discretion.

We also make efforts to require any party with whom we share information to protect Personal Information to the same extent that we do.

4. Your Rights and Choices

Updating your Communications Choices

You can opt-out of receiving emails containing general information from us at any time, by following the instructions to click on the unsubscribe link, as provided in emails, or by emailing us at [email protected].

You also have a right to request not to receive telemarketing calls from us by asking us to place your telephone number on our internal Do Not Call List (“DNC List”). Our written Do Not Call Policy for maintaining our DNC List is available upon demand.

To opt out of “selling,” “sharing,” and “targeted advertising” involving your personal information, please complete the following steps:

1. Select “Your Privacy Choices” link at the bottom of our website page;
2. Turn the “Allow Sale/Sharing/Targeted Advertising” toggle to the “off” position (to the left) and click “Confirm Choices” to opt-out of Cookie-based selling, sharing, and targeted advertising; and
3. Submit an opt-out request by emailing us at [email protected] to opt-out of non-Cookie-based selling, sharing and targeted advertising.

Please note that you may need to opt-out separately on each browser and device to turn off cookie-based targeting. In addition, our Sites endeavor to process “Global Privacy Control” (GPC) signals from web browsers by automatically opting-out users from Targeting Cookies, although GPC technology is not fully developed and it is not yet supported by all browsers.

5. Third Party Services

This Privacy Policy does not apply to any third-party applications or software that appear on or can be accessed on this Site. We are not responsible for, and this policy does not address, the privacy practices of third parties, which are subject to those third parties’ own privacy policies. We encourage you to familiarize yourself with and consult third parties’ privacy policies and terms of use.

The Site contains software and hyperlinks to websites, locations, platforms, and services that are operated and owned by third parties.

The inclusion of a link on our services does not imply an endorsement of the linked sites or services by us or our affiliates.

6. International Users

Our Sites are controlled and operated by us from the United States and are not intended to subject us to the laws or jurisdiction of any state, country or territory other than those of the United States. Any information you provide through use of the Sites may be stored and processed, transferred between, and accessed from the United States and other countries which may not guarantee the same level of protection of Personal Information as the one in which you reside. However, we will handle your Personal Information in accordance with this Notice regardless of where your personal information is stored or accessed.

7. Data Retention

We retain your information as long as reasonably needed for the purposes described within this Privacy Policy or otherwise described to you at the time of collection. For example, we will retain your Personal Information for as long as we believe it is necessary to comply with our legal obligations, resolve disputes, enforce our Terms of Service and other agreements, or to protect the rights, property or safety of the Company, our employees, our users or others.

8. Data Security

The security of your personal information is important to us. We take appropriate security measures (including physical, electronic, and procedural measures) to help safeguard your personal information from unauthorized access and disclosure. With regard to internal operations of any Site or property owned by us, only authorized employees and authorized third party service providers are permitted to access personal information, and they may do so only for permitted business functions.

We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.

9. Minors’ Privacy

We encourage parents and guardians to spend time online with their children and to participate and monitor the interactive activities of their children. We do not knowingly collect any personal information about individuals under eighteen (18) years of age. If we obtain actual knowledge that we have collected personal information about an individual under eighteen (18) years of age, that information will be immediately deleted from our database. If you are a parent or guardian and you believe that your child under age eighteen may have provided personally identifiable information through our Site, please contact us at [email protected].

10. Notification of Changes

We reserve the right to change or update this Privacy Policy at any time. When we make material changes to the terms of this Policy we will provide notice on this page by posting a clear and conspicuous notice on the Site explaining that we are changing our Privacy Policy. All Privacy Policy changes will take effect immediately upon their posting on the Site. Please check the Site periodically for any changes. Your continued use of the Site and/or acceptance of our e-mail communications following the posting of changes to this Privacy Policy will constitute your acceptance of any and all changes.

11. Contact Us

If you have any questions or comments about this Privacy Policy, please email us via the Contact Us page on this site, or by sending a letter to HealthInsurance.org, LLC, 5353 Wayzata Boulevard, Suite 300, St. Louis Park, MN 55416.

12. State Specific Notices

State-Specific Consumer Rights

This Section is provided specifically for residents of Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Louisiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont and Virginia. In addition to the disclosures and rights provided above in this Privacy Policy, you may be entitled to exercise certain requests regarding your Personal Information as described below.

Access, Correction and Deletion Rights

You may request a copy of the following: (1) the categories of Personal Information we collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the business or commercial purpose for collecting or selling (if applicable) the Personal Information; (4) the categories (or in some states, the identity) of third-parties with whom we shared Personal Information, and the categories of Personal Information shared; and (5) the specific pieces of your Personal Information that we have collected, used, disclosed, or sold.

You may request that we (and our service providers) correct your Personal Information if it is inaccurate or delete your personal information. Note that deletion requests are subject to certain limitations, for example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate customer requests, and for certain other internal business purposes described in our Privacy Policy.

Before submitting any request, please note the following important information:

• You may directly access or change much of your personal information if you have directly interacted with us by calling us at the Contact Information on the Site.
• If you are submitting a deletion request, your personal information will be permanently terminated consistent with any applicable laws. Once your deletion request is processed: (i) you will lose the ability to access previous information about your use of our Services (ii) you will be able to interact with us and provide us information again, but you may not be able to tie the new account to any past activities.
• To submit an access, correction or deletion request: Email us at [email protected]. We will process your request in a manner and timeframe prescribed by any applicable privacy law, and otherwise do so solely at our discretion.

Opt-Out Rights

You have the right at any time to opt out of (i) any selling or sharing of your personal information to a third-party (excluding service providers or other exceptions permitted by law); (ii) any third-party targeted advertising (i.e., cross-context behavioral advertising); and (iii) any use of sensitive personal information (such as precise geo-location or financial information) except for the purposes it was collected and as otherwise permitted by law.

As described above, certain identifying information through the use of cookies and other tracking technologies may be shared with brands/services we partner with, advertising businesses and other third-parties.

You are entitled to opt-out of these and other activities (some of which are referred to as a “Do Not Sell” right):

• Any selling or sharing of your personal information to a third-party (excluding service providers or other exceptions permitted by law);
• Any third-party targeted advertising (i.e., cross-context behavioral advertising); and;
• Any use of sensitive personal information (such as precise geo-location information) except for the purposes it was collected and as otherwise permitted by law, such as with your consent.

As provided above in the Your Rights and Choices section, (i) anyone can opt-out of Targeting Cookies on our Site or rely on an automated GPC signal from the browser, and (ii) update “Your Privacy Choices,” which can be found on the footer of this Site. Privacy laws may provide you with other opt-out rights which are inapplicable to us. In particular, we do not engage in impactful profiling activities with respect to our online users.

To submit an opt-out request: Select “Your Privacy Choices” on the footer of the Services and follow the instructions. If you need help, email us at [email protected].

Verifying and Processing Requests

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Personal Information or complying with your request. You will be required to provide some information, based on the nature of your request, including, but not limited to: name, email, home address, date of birth, phone number, or account information. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request. If you designate an authorized agent to submit a request on your behalf (a) we may require you to provide the authorized agent written permission to do so, and (b) we may require you to verify your own identity directly with us as described above.

Appeals

If we deny a privacy request, you may appeal the decision to us at the contact information provided below or in our denial notice. To the extent possible, please describe the basis for your appeal and if there is any specific personal information that concern you. We will endeavor to provide a prompt response and within the timeframe provided by any applicable law.

If you are unsatisfied with our response to an appeal, you can raise your concerns with your state’s Office of the Attorney General.

Additional information regarding requests

We may not, and will not, discriminate against any customer for exercising their privacy rights, including those provided by the applicable privacy laws. Please note that we may otherwise continue to share your Personal Information with our affiliates and service providers, and as otherwise directed by you, for the purposes described in our Privacy Policy.

To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

California Residents

Additional Notice of Collection, Use and Disclosure of Personal Information

This section further describes the disclosures at the top of the Privacy Policy in regards to categories of Personal Information we may collect about you when visiting our Site:

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers;
• Additional Data Subject to (Cal. Civ. Code § 1798.80): signature, physical characteristics or description, state identification card number, bank account number, credit card number, debit card number, and other financial information;
• Protected Classifications: characteristics of some protected classifications under California or federal law, such as race, age, gender, disability status, and veteran status;
• Commercial Information: commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
• Geolocation Data;
• Sensory Information: audio and visual information;
• Employment Information: professional or employment-related information that is typically found on a résumé;
• Inferences: inferences drawn from any of the information identified above reflecting your preferences, characteristics, and purchasing behavior.

As described near the top of this Privacy Policy, during at least the last 12-month period, we may have collected all of the above categories of personal information about you from the following categories of sources: (i) Directly from you, such as when you provide us information; (ii) From your device(s), such as when you visit our website(s); (iii) Third parties who perform services on our behalf; (iv) Our joint marketing partners; (v) Online advertising companies; and (vi) Consumer data resellers.

We may use Personal Information as described above near the top of this Privacy Policy, which includes:

• Performing services to you, including as necessary maintaining or servicing accounts, providing customer service, processing, or fulfilling orders and transactions, verifying customer information, processing payments, maintaining and improving our Services to you, or providing similar services – all categories of information.
• Marketing research and activities, as well as auditing interactions with you and concurrent transactions, including, but not limited to, providing advertising or marketing services to you, providing analytics services, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance – primarily including identifiers, protected classifications, commercial information, online activity, geolocation data and inferences.
• Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction – primarily including identifiers, commercial information, online activity, geolocation data and inferences.
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity – primarily including identifiers, commercial information, online activity, geolocation data and sensory information.
• Debugging to identify and repair errors that impair existing intended functionality – primarily including identifiers, online activity and geolocation data.
• Undertaking internal research for technological development and demonstration – primarily including identifiers, commercial information, online activity, geolocation data and inferences.
• Undertaking activities to verify or maintain the service or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us – primarily including identifiers, commercial information, online activity and geolocation data.
• The following information may be shared for a legitimate business purpose or legal requirement with our legal affiliates, contracted vendors who perform services on our behalf, professional services organizations, such as auditors and law firms, and government entities (where required by law) – all categories of information.
• The following information may be ‘sold’ or ‘shared’ with third parties (as such terms are defined under applicable state privacy laws) such as marketing partners, online advertising services, third party data analytics providers, social networks and/or consumer data resellers – primarily identifiers, commercial information, online activity, (non-precise) geolocation data, and inferences. These activities are primarily to engage in online advertising activities and provide tailored content and ads that may be of interest to you. You have the right to opt out of this disclosure of your information, as detailed above.
• We do not sell or share information about individuals between 13-16 years old without affirmative authorization to do so, if we have actual knowledge of the individual’s age. As noted above, we do not knowingly collect or use information from minors under 18 without parental consent.

Residents of Nevada Only

For Nevada residents, please note that we do not sell personal information as defined by Nevada law (Nevada Revised Statutes, Chapter 603A, Section 1.6). You can submit a request to us regarding the sale of such information as directed by the contact information provided below.

Residents of Washington (and other states with health data laws)

Please note that Oscar does not draw inferences about consumers’ health statuses based on purchases or other personal information it collects as described in this Privacy Policy.