Privacy policy.

This privacy policy applies to empathyinsuranceadvisors.com and to information collected by Empathy Insurance Advisors during consultations, applications, and post-enrollment service.

We are an independent licensed insurance brokerage (NPN 19291077). We are not an insurance carrier, a healthcare provider, or a covered entity under HIPAA in most contexts. We are subject to applicable state insurance privacy regulations, federal Fair Credit Reporting Act provisions where they apply, and consumer-protection frameworks including those described in Sections 5 through 9 of this policy.

We collect information you provide to us directly, plus limited technical information collected automatically when you use our website.

Information you provide directly: contact information (name, address, email, phone), date of birth, household composition, household income (for ACA subsidy eligibility), employment status, current insurance coverage details, health questions and history (relevant to medical or life insurance underwriting), Medicare beneficiary information for Medicare consultations, payment information when you enroll, and any other information you choose to share during a consultation.

Information collected automatically: IP address, browser type and version, operating system, pages visited on our site, referring URL, the dates and times of your visit, and similar technical telemetry. See Section 9 (Cookies and online tracking) for details on tracking technologies.

We use the information we collect to provide insurance consultation, enrollment, and post-enrollment service. Specific uses include:

• Conducting needs analysis and identifying coverage options that fit your situation
• Submitting applications to insurance carriers on your behalf with your consent
• Verifying coverage details, processing enrollments, and servicing your policies
• Communicating with you about your coverage, renewals, and changes
• Responding to your questions and requests
• Complying with legal obligations and regulatory reporting requirements
• Improving our website and operations through aggregated technical analytics

We do not sell your personal information to third parties. We share information in limited circumstances:

• Insurance carriers when you authorize us to submit an application or service request on your behalf. Each carrier has its own privacy policy that governs information once transferred.
• Service providers that help us operate our business — for example, call routing, secure document storage, customer relationship management, and email delivery vendors. These providers are contractually bound to handle information only for the purposes we direct.
• Regulatory bodies when required by federal or state insurance laws, including reporting required of licensed brokers.
• Legal compliance when required by law, subpoena, court order, or in response to lawful requests by public authorities.
• Business transitions in connection with a merger, acquisition, or asset sale involving the brokerage, in which case the acquiring party would assume the obligations of this policy.

We are not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) in most contexts. As an insurance brokerage we may receive health-related information during consultations, applications, and underwriting. We treat that information with the same care that HIPAA-covered entities apply, even where HIPAA itself does not directly apply to us.

For Medicare-specific interactions we follow the Centers for Medicare & Medicaid Services Third Party Marketing Organization (TPMO) regulations. This includes limits on how Medicare beneficiary contact information may be used or shared, recording of Medicare sales calls where required, and adherence to CMS rules about scope of appointment.

We are not connected to or endorsed by the U.S. government or the federal Medicare program.

Several states grant residents specific privacy rights, including California (CCPA/CPRA), Colorado, Connecticut, Utah, Virginia, and others. Where applicable, residents of those states have rights to:

• Know what categories of personal information we have collected about them
• Access a copy of the specific personal information we hold
• Request correction of inaccurate personal information
• Request deletion of personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not sell personal information; we may use limited tracking pixels described in Section 9)
• Non-discrimination for exercising these rights

To exercise any of these rights, contact us using the information in Section 15. We will respond within the timeframe required by applicable state law.

The federal Telephone Consumer Protection Act (TCPA) governs telemarketing calls, autodialed calls, pre-recorded messages, and text message marketing. We do not place autodialed marketing calls, send pre-recorded marketing messages, or send marketing text messages without your prior express written consent.

When you provide your phone number through a consultation request form or during a call, you consent to be contacted by a licensed advisor about the insurance options you inquired about. You can revoke consent at any time by replying STOP to text messages, by saying so on a call, or by contacting us using the information in Section 15.

Standard message and data rates may apply to text communications.

Marketing emails we send comply with the federal CAN-SPAM Act. Each marketing email identifies the sender, includes a physical mailing address, and provides a clear and conspicuous unsubscribe option. Unsubscribe requests are honored promptly.

Transactional and service-related emails (for example, policy documents, renewal reminders, scheduled callback confirmations) are sent based on your relationship with us and may continue even after you unsubscribe from marketing emails.

Our website uses cookies and similar technologies to remember preferences, analyze how the site is used, and support advertising attribution. Categories of trackers we may use include:

• Strictly necessary — required for basic site function
• Analytics — Google Analytics 4 and similar services that measure aggregate site usage
• Tag management — Google Tag Manager to coordinate the trackers above
• Advertising attribution — Meta Pixel and similar conversion-tracking pixels used to measure the effectiveness of advertising campaigns. We configure these to send aggregated conversion events; we do not transmit health information or other sensitive personal categories through these pixels.

Most browsers let you control cookies through browser settings. Browser-level Do Not Track signals are not currently a standard, and we do not respond to them in a specific way; however, you may use the controls in Section 10 to opt out of advertising-related processing.

You have the following rights and choices:

• Access — request a copy of personal information we hold about you
• Correction — request that inaccurate information be corrected
• Deletion — request deletion of your information, subject to retention requirements imposed by insurance regulation and federal/state law
• Opt-out of email — unsubscribe from marketing emails using the link in any marketing email
• Opt-out of phone/SMS — reply STOP to text messages or contact us by phone or email to be removed from outbound contact
• Opt-out of advertising attribution — disable third-party cookies in your browser; for Meta conversion tracking, see your Meta account ad preferences

To exercise these rights, contact us using the information in Section 15.

We retain personal information as long as needed to provide service and to comply with legal and regulatory requirements. Insurance regulators in some states require broker recordkeeping for specific periods (often three to seven years after the conclusion of the relationship). Recordings of Medicare-related sales calls are retained per CMS TPMO requirements (currently ten years).

When information is no longer required, it is deleted or de-identified using reasonable methods.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. Examples include encrypted storage for sensitive records, access controls on internal systems, and contractual safeguards with vendors who process information on our behalf.

No method of transmission over the internet or electronic storage is fully secure; we cannot guarantee absolute security. We commit to notifying affected individuals and regulators in the event of a security incident, as required by applicable law.

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Information about minor dependents may be provided by a parent or guardian as part of a family insurance application; that information is treated as part of the household application.

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be highlighted in a notice on the website or by direct communication where appropriate.

Direct privacy questions, access requests, correction requests, and deletion requests to:

Empathy Healthcare Solutions Inc.
d/b/a Empathy Insurance Advisors
123 NW 13th St, Suite 309, Boca Raton, FL 33432
Email: privacy@empathyinsuranceadvisors.com
General inquiries: Contact form and methods

NPN 19291077 | Licensed in 22+ states.