Privacy Policy

1 Definitions

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person, household, or device. “Personal Information” does not include: (a) information that is lawfully made available from federal, state, or local government records; (b) information that we have a reasonable basis to believe is lawfully made available to the general public by you from widely distributed media; or (c) information that is deidentified or aggregated consumer information. Sensitive Personal Information is a subset of Personal Information.

2 Information We Collect and the Categories of Source of Collection

Set forth below are the categories of Personal Information we collect and that we have collected in the preceding 12 months, and the categories of sources from which the Personal Information was collected. Please note that we may not collect all of the information referenced below regarding you.

* See the section entitled Online Technologies below.

We do not use or disclose Sensitive Personal Information.

We also collect aggregated, de-identified, or anonymous data that does not identify individual consumers. We collect this information for various purposes such as statistical or demographic data for legitimate business purposes not prohibited herein or by law.

3 Business or Commercial Purpose for the Collection of Personal Information

Set forth below are the business or commercial purposes for our collection of Personal Information. Please note that we may not use your Personal Information for all purposes set forth in this Privacy Policy.

See also the next section regarding Online Technologies.

4 Online Technologies

We may use various online technologies on our website to manage website tags and enable analytics. These services may collect or receive information such as hashed identifiers, cookies, and device data to provide advertisements and measure campaign effectiveness. By using our website, you agree to our use of these technologies.

A cookie is a small file of letters and numbers that is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. We and our service providers and partners use cookies or similar technologies, such as web beacons and tracking pixels, to analyze trends, administer our website, personalize content and ads, track users’ movements around our website to provide you with the most relevant browsing experience, to gather demographic information about our user base as a whole, and to provide marketing.

We may use several types of cookies and other tracking technologies on our website, as described below.

• Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart, or make use of e-billing services.
• Functionality/preference cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
• Statistical, analytical or performance cookies. These allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
• Marketing/targeting cookies. These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it and on third-party websites more relevant to your interests.
• Third-party cookies. These cookies are placed on your device by a website from a domain other than our website. These parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third-party cookies include analytical cookies, performance cookies, and targeting cookies.

Google Analytics

We use Google Analytics to ensure website functionality and improve our website and services. This software may record information such as your IP address, location, age and gender, browser type and language, operating system, access time, duration of visit, pages you view within our website, search terms you enter and other actions you take while visiting us, the pages you view immediately before and after you access the services, how often you use our services, aggregated usage and performance data, app errors, and debugging information. Data collected by Google is subject to its privacy policy. You may opt out of having your activity on our website made available to Google Analytics by installing the Google Analytics browser add-on.

Web beacons and tracking pixels

In addition, we may use web beacons and pixels, which are images that can be placed in web pages and some forms of email. These technologies can be used to deliver cookies and to collect information about your use of the site. A tracking pixel is a transparent graphic image (usually 1 pixel x 1 pixel or a JavaScript tag) that is placed on a web page and, in combination with a cookie, allows us to collect information regarding the use of the page of the site that contains the tracking pixel. We may use tracking pixels to trigger ads on participating websites based on activity tracked from the browser on a device used to visit our site.

Emails that we and our service providers send may include similar technologies that provide us with information related to whether you have opened an email or clicked on a link contained in an email. More information on how to unsubscribe from our marketing emails is found below.

If you want to remove existing cookies from your device you can do this using your browser options. If you want to block future cookies being placed on your device you can change your browser settings to do this. Please bear in mind that deleting and blocking cookies may have an impact on your user experience as parts of the site may no longer work. Unless you have adjusted your browser settings to block cookies, our system may issue cookies as soon as you visit our site or click on a link in a targeted email that we have sent you, even if you have previously deleted our cookies.

By using our website and services you affirmatively agree to the use of cookies and other online technologies disclosed in this Privacy Policy.

5 Disclosure of Personal Information

We do not sell Personal Information and we do not share with others Personal Information for cross-context behavioral advertising. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

We may disclose Personal Information, as necessary: (a) to comply with any law, regulation and/or legal process and/or exercise or defend legal claims; (b) to respond to requests from public and government authorities; (c) to enforce our terms and conditions; (d) to protect our operations and protect our rights, privacy, safety or property, and/or that of you or others; and (e) to allow us to pursue available remedies or limit the damages that we may sustain. We may also use and disclose your Personal Information in connection with or during negotiation of any reorganization, acquisition, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). You acknowledge that such transfers may occur and that any acquirer of or successor to us may continue to use your Personal Information as set forth in this Privacy Policy.

6 Our Retention Policy — How Long We Keep Your Personal Information

We will retain each category of your Personal Information identified above for an amount of time that is reasonably necessary for us to use the information for the purposes disclosed herein and for any other permitted purposes, including retention of Personal Information pursuant to any applicable contract, law, or regulation. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

7 Data Security

We implement technical, organizational, administrative, and physical measures to help ensure a level of security appropriate to the risk to the Personal Information we collect, use, process, and disclose. These measures are aimed at ensuring the on-going integrity and confidentiality of Personal Information. We evaluate these measures on a regular basis to help ensure the security of the processing. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable.

8 Email Communications

You may unsubscribe from our marketing communications by clicking the “unsubscribe” link found in the commercial emails we send, or by sending us a request to compliance@healthaxis.com. If you opt out of receiving marketing email communications, we may still send you email messages related to specific transactions with us. Unsubscribing yourself from our marketing communications will not affect our service to you.

9 Children

We do not direct our websites or applications to children under thirteen (13) years of age. We do not knowingly collect information from persons under 13 years of age or provide any Personal Information from such persons to any third party for any reason whatsoever. We do not allow persons known to be under 13 years of age to receive direct marketing communications from us. No information should be submitted to our website or applications by persons under 13 years of age. When appropriate, we may ask you to indicate your date of birth to verify compliance with the age requirements set forth herein.

10 Consumer Rights

Your Rights if You Are a Resident of California

California residents may exercise certain privacy rights pursuant to the California Consumer Privacy Act, as amended, and related regulations (CCPA). Your rights to submit certain requests as a California resident are described below. Please note that these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms.

• Right to Know Personal Information Collected About You. You have the right to know: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) to the extent applicable, the business or commercial purpose for collecting, selling, or sharing Personal Information; (4) the categories of parties to whom we disclose Personal Information; and (5) the specific pieces of Personal Information we have collected about you. You also have the right to know the list of all third parties to whom we have disclosed Personal Information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.
• Right to Know Personal Information Disclosed, Sold or Shared and to Whom. You have the right to request that we disclose to you: (1) the categories of Personal Information that we collected about you; (2) to the extent applicable, the categories of Personal Information that we sold or shared about you and the categories of third parties to whom the Personal Information was sold or shared; and (3) to the extent applicable, the categories of Personal Information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
• Right to Request Deletion of Your Personal Information. You have the right to request that we delete your Personal Information. However, there are a number of situations where you do not have the right that we delete your Personal Information. For example, you cannot request that we delete your Personal Information if it is reasonably necessary for us to comply with a legal obligation, complete the transaction for which the Personal Information is collected, provide the services that you have requested or reasonably anticipated within the context of our ongoing business relationship, or to otherwise perform a contract between us. We also will not delete your Personal Information from our backup systems to the extent permitted by the CCPA. Following receipt of a request, we will let you know what, if any, Personal Information we can delete.
• Right to Correct Inaccurate Information. If you believe that any of the Personal Information we maintain about you is inaccurate, you have the right to submit a request for us to correct that information. Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you direct.
• Right to Opt-Out of the Sale and Sharing of Your Personal Information. Given our data practices, this right does not apply to you.
• Right to Limit the Use of Your Sensitive Personal Information. Given our data practices, this right does not apply to you.
• Right Not to be Retaliated Against. If you choose to exercise any of your rights, you have the right not to be retaliated against.

How to Make a Consumer Request

For California residents, you can exercise your rights to know, correct, and delete by sending us an email at compliance@healthaxis.com or by calling us at 1-855-969-5859.

We may also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative. If there is no reasonable method by which we can verify your identity, we will state so in response, including an explanation of why we have no reasonable method to verify your identity.

There may be situations where we cannot grant your request. For example, if you ask us to delete Personal Information that we are obligated to keep to comply with applicable law we may not be able to fulfill some or all of your request. We may also decline to grant your request where our use of your Personal Information serves a legitimate purpose such as for security purposes. Your request may also be denied if it compromises the privacy of others, is overly repetitive, or is extremely burdensome to fulfill.

We will respond to valid requests to know, requests to correct, and/or delete no later than 45 calendar days. If we cannot verify your request within 45 days, we may deny your request. If necessary, we may take up to an additional 45 days to respond to your request, but in such an event will provide you a notice and an explanation of the reason that we will take more than 45 days to respond.

11 Nevada Privacy Notice

Nevada law provides that Nevada residents may opt out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, and online service activity. Our uses of your Personal Information are not sales under Nevada law, so no opt-out right applies.

12 How to Contact Us

If you have any questions or concerns about our privacy policies and practices, please feel free to contact us using the details below.