04-22-25

Last Updated:

04-22-25

At Champ Plan Agency LLC, we take your privacy seriously. We are committed to

safeguarding the personal and health-related information you share with us in

compliance with HIPAA (Health Insurance Portability and Accountability Act), CCPA

(California Consumer Privacy Act), and GDPR (General Data Protection Regulation),

where applicable.

1. What We Collect

We collect information to provide and improve our services,
including:

Personal Information: Name, email, phone number, job title, and company name Health Information: Benefits selections and enrollment details (protected under HIPAA) Usage Data: Browser type, IP address, page visits, and time spent on the site Location Data: If permitted by your browser or device settings

2. How We Use It

No mobile information will be shared with third parties or affiliates for marketing/promotional purposes Text messaging originator opt-in data and consent will not be shared with third parties, except for aggregators and providers of the Text Message services. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

3. How We Use It We use your information to:

Provide access to benefits and coverage options Respond to questions or requests Comply with legal obligations (e.g., HIPAA privacy rules) Improve and secure our services Send you important updates or optional marketing emails (with opt-out)

4. Compliance Highlights HIPAA (U.S. Health Info)

If we receive or process health-related data, we comply with
HIPAA privacy and security rules. Any personal health information (PHI) is
handled in accordance with our Business Associate Agreements and security
protocols.

CCPA (California) If you're a California resident, you have the right to:

Know what personal information we collect and how it’s used Request access or deletion of your personal data Opt out of the sale of your data (we do not sell data)

GDPR (EU)

If you're located in the European Union, you have the right
to:

Access or correct your personal data Withdraw consent at any time Request data portability or deletion Lodge a complaint with a data protection authority

5. Data Sharing

We do not sell your data. We only share it with:

Insurance carriers and providers you select Third-party vendors who support our platform (under confidentiality agreements) Legal authorities when required

6. How do we share your information of the privacy policy:

“All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.” A compliant Privacy Policy must state that no mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Data Security

We use industry-standard safeguards, encryption, and secure
servers to protect your information.

8. Cookies & Tracking

We use cookies for analytics and personalization. You can
disable them through your browser settings.

9. Your Rights & Choices

You can contact us at any time to:

Access, update, or delete your data Withdraw consent Opt out of marketing communications

📧

Email: [email protected]

Phone: 855-873-9776