Privacy Policy

This Privacy Policy explains how Private Market Health Insurance ("we," "us," or "our") collects, uses, protects, and shares information when you visit privatemarket.health (the "Site") or apply for coverage through us. Private Market Health Insurance is a private, independent insurance brokerage. We are not affiliated with the U.S. federal or any state government, the Health Insurance Marketplace, HealthCare.gov, Medicare, Medicaid, or CMS.

1. Information we collect

Information you give us

• Household details for quotes: ZIP code, ages of household members, tobacco status, coverage-start preferences.
• Application information when you apply for a plan: legal name, date of birth, Social Security number, address, phone, email, height/weight, coverage effective date, payment routing details, and answers to the carrier's health questionnaire.
• Account credentials if you create an account (email and password, managed by our authentication provider).
• Communications you send us (email, phone, SMS, chat, form messages).

Information collected automatically

• Device and log data: IP address, browser type, device type, referring URL, pages viewed, timestamps.
• Cookies and similar technologies used for essential site function, remembering your session, and measuring how the Site performs.
• Attribution identifiers: a visitor ID we generate ("vid") and, if you arrived from an ad or campaign, first-touch source parameters (e.g., UTM tags). We use these to attribute quote and application events to the ad or channel that drove them, and to prevent duplicate billing to advertising platforms.

Information from third parties

• Carriers may return underwriting decisions, effective dates, and policy status after you apply.
• Advertising platforms (e.g., Meta, Google) may share aggregated ad-performance data with us.

2. How we use information

• To generate quotes and present plan options that match your household.
• To submit your application to the carrier(s) you select and to service that application through issuance.
• To create and secure your account, respond to your questions, and provide customer support.
• To send you transactional messages about your quote or application, and — with your consent — marketing communications.
• To measure the performance of our website and advertising, prevent fraud, and improve our service.
• To comply with insurance regulations, tax reporting, subpoenas, and other legal obligations.

3. Health information

When you complete a carrier application, you provide medical questionnaire responses (for example, current medications and diagnosed conditions). We treat this information as sensitive. We use it only to submit your application to the carrier(s) you select and to service that application. We do not sell health information, and we do not share it with advertising platforms.

As an independent insurance brokerage, we are generally not a HIPAA "covered entity," but we handle health-related information with the same care: encrypted transmission, restricted internal access, and disclosure only to the carrier(s) you apply with or as required by law.

4. How we share information

• Insurance carriers you choose to apply with. Once submitted, the carrier's own privacy policy governs how they use that information.
• Service providers acting on our behalf under contract, including our hosting and content-delivery provider, our database and authentication provider (Supabase), our email-delivery provider (Resend), and — for site analytics and advertising measurement — Meta and Google. These providers are permitted to use your information only to provide services to us.
• Advertising platforms for measurement, retargeting, and conversion tracking. This includes the Meta Pixel and the Facebook Conversions API (server-side), and — where enabled — Google Ads conversion tracking. Under some state laws, sharing information with these platforms for advertising is treated as "sale" or "sharing for cross-context behavioral advertising." See Section 7: Your privacy rights for how to opt out.
• Legal and safety. We may disclose information when required by law, regulator, or valid legal process, or to protect the rights, property, or safety of any person.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your health information or your Social Security number for advertising or any other commercial purpose.

5. Cookies and advertising technologies

We use the following categories of cookies and similar tools:

• Strictly necessary — session, security, and load-balancing. Cannot be disabled.
• Performance — aggregated statistics about how the Site is used.
• Advertising — the Meta Pixel and (when enabled) Google Ads tags fire on quote, plan-selection, and application events to measure the effectiveness of our advertising and to build audiences for future campaigns. We also send corresponding server-side events to Meta via the Facebook Conversions API so that measurement remains reliable even when browser cookies are blocked.

You can control browser cookies through your browser settings. To limit ad personalization from the platforms we use, see the tools referenced in Section 7.

6. Communications: phone, text, and email

If you provide a phone number and request contact, or check a consent box authorizing calls or text messages, you agree that we (or an insurance agent on our behalf) may contact you at that number, including using automated technology and by prerecorded voice, for quoting, enrollment, and servicing. Message and data rates may apply. You can opt out of marketing texts at any time by replying STOP to a text from us, and you can unsubscribe from marketing emails using the link at the bottom of each message. Transactional messages related to a live quote or application will continue while your application is open.

7. Your privacy rights

All U.S. residents

You may request access to the personal information we hold about you, correction of inaccurate information, and deletion. To make a request, email info@privatemarket.health. We will verify your identity before acting on requests involving sensitive data.

California, Colorado, Connecticut, Virginia, Utah, and other state-law residents

Depending on your state, you may have the right to:

• Know the categories and specific pieces of personal information we have collected about you and the purposes.
• Delete personal information we have collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising, and limit the use of sensitive personal information.
• Not be discriminated against for exercising a privacy right.
• Appeal a denial of a request (Virginia, Colorado, Connecticut).

To exercise any of these rights, email info@privatemarket.health with the subject line "Privacy Request" and specify the right you are exercising and the state you reside in. You may designate an authorized agent to submit a request on your behalf; we will require reasonable proof of the agent's authority.

Opting out of advertising cookies and pixels

• Meta / Facebook / Instagram: adjust ad preferences at facebook.com/adpreferences.
• Google: adjust ad settings at myadcenter.google.com.
• Industry opt-outs: optout.aboutads.info and optout.networkadvertising.org.
• Your browser may support Global Privacy Control (GPC). Where legally required, we honor a valid GPC signal as an opt-out of sale/sharing for the browser sending it.

8. Financial privacy (GLBA)

As an insurance producer, we are subject to the Gramm-Leach-Bliley Act and applicable state insurance privacy regulations. We collect nonpublic personal financial and health information necessary to place coverage. We do not disclose that information to nonaffiliated third parties except (a) to the carriers you apply with, (b) to service providers acting on our behalf, or (c) as permitted or required by law. Our practices are consistent with the NAIC Insurance Information and Privacy Protection Model Act as adopted in your state.

9. How we protect information

We use technical, administrative, and physical safeguards designed to protect personal information, including:

• TLS encryption in transit for all traffic between your browser and our servers.
• Encryption at rest for sensitive application data submitted through the Site.
• Access controls limiting internal access to the personnel who need it.
• Row-level security on our application database and audit logging for administrative actions.

No security program is perfect. If you believe your account or information has been compromised, contact us immediately at info@privatemarket.health.

10. Data retention

We retain application information for as long as required to service the application and to meet insurance regulatory, tax, and record-keeping obligations (typically a period of years measured from the end of the policy). Account information is retained while your account is active and for a reasonable period afterward. Quote inputs and log data are retained on a shorter cycle for security and analytics. You can request deletion at any time; where legal or regulatory obligations require us to retain a record, we will restrict use to those purposes.

11. Children

The Site is intended for adults age 18 and older. We do not knowingly collect personal information from children under 13. Dependents may be listed on a household application by the applying adult.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. If we make material changes, we will provide additional notice on the Site or, where required, by email.

13. Contact us