HIPAA Notice of Privacy Practices

1. Health Information We May Collect

When you request a quote, complete an application, or communicate with us about insurance coverage, we may collect protected health information (PHI), including:

• Medical history, diagnoses, conditions, and treatment information
• Prescription drug and pharmacy benefit information
• Health status, disability status, and functional limitations
• Medicare, Medicaid, or other government program enrollment and claims data
• Information about prior insurance coverage, including denials, lapses, or pre-existing condition history
• Other health-related information necessary to obtain quotes or complete applications on your behalf

This information may be collected directly from you, from insurance carriers, from healthcare providers (with your written authorization), or from government databases such as the Centers for Medicare & Medicaid Services (CMS).

2. How We Use Your Health Information

We use health information solely for the following permitted purposes:

3. Disclosure of Health Information

We may share your health information only as follows:

• With insurance carriers and their agents — as necessary to obtain quotes, process applications, and administer your coverage
• With reinsurers and underwriters — as required by carriers to evaluate and issue your policy
• With government agencies — including CMS, the Florida Department of Financial Services, and other regulators, as required by law
• With your authorized representatives — including family members, attorneys, or other agents you designate in writing
• As required by law — in response to valid legal process, court orders, or regulatory investigations

All third parties with whom we share your health information are required to maintain its confidentiality and use it only for the purposes for which it was disclosed.

4. Your Rights Regarding Health Information

To the extent HIPAA applies to our activities, you have the right to:

5. Safeguards for Health Information

We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of your health information. Access to health information is limited to personnel who need it to perform their job functions in connection with your insurance services. We regularly review our security practices and update them as needed to address new risks.

6. How to File a HIPAA Complaint

If you believe your health information privacy rights have been violated, you may file a complaint with us or with the federal government. We will not retaliate against you for filing a complaint.