Privacy Policy

Upper Echelon Health (“Upper Echelon Health,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit upperechelonhealth.com, submit an online form, request insurance assistance, or otherwise communicate with us.

1. Information We Collect

Depending on your interaction with us, we may collect:

• Identifiers and contact information, such as your name, email address, telephone number, and mailing address.
• Location and eligibility information, such as ZIP code, state, age, household composition, and other information used to identify potentially available coverage.
• Insurance-related information, including current or prior coverage and information you voluntarily provide to evaluate coverage options.
• Health-related information you voluntarily provide when relevant to an insurance inquiry, application, underwriting, or client-service request, including information about medical history, prescriptions, or health conditions.
• Communications and records of your interactions with us, including form submissions, calls, texts, emails, appointment information, and service requests.
• Device and usage information, such as IP address, browser/device type, referring pages, pages visited, and cookie or similar technology data.

2. How We Use Information

We may use information to respond to inquiries; identify and explain potential insurance options; assist with quoting, eligibility review, applications, enrollment, policy servicing, and client support; communicate about requested services; maintain business and compliance records; operate and improve our website and technology; prevent fraud and security incidents; and comply with applicable legal, regulatory, carrier, or contractual requirements.

3. Insurance and Health-Related Information

Health and insurance information should be provided only when reasonably necessary for the service you request. We may disclose relevant information to insurance carriers, authorized enrollment or quoting platforms, and other parties involved in evaluating, applying for, enrolling in, or servicing coverage.

Upper Echelon Health does not represent through this Privacy Policy that every item of health-related information we receive is “protected health information” under HIPAA. Whether HIPAA applies depends on the nature of the information, the entity involved, and the relationship in which the information is handled. Where applicable law or a contractual obligation imposes additional requirements, we will handle information in accordance with those requirements.

4. When We Disclose Information

We may disclose information to:

• Insurance carriers, agencies, networks, quoting or enrollment platforms, and other parties involved in providing the insurance-related service you request.
• Service providers that support our CRM, website hosting, forms, communications, scheduling, analytics, security, document management, or other business operations.
• Professional advisers, regulators, government authorities, courts, or law enforcement when reasonably necessary or required by law.
• A successor or prospective successor in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable law.

We do not sell personal information for money. We also do not knowingly sell health-related information. Certain privacy laws may define “sale,” “sharing,” or targeted advertising more broadly than an exchange for money; where such laws apply, we will provide any rights and choices required by applicable law.

5. Calls, Text Messages, and Email

If you provide contact information and request assistance, we may use that information to communicate with you about your inquiry, application, enrollment, policy, appointment, or client-service needs. Where consent is required for marketing or automated communications, we will seek consent through the applicable form or communication channel.

Consent to receive marketing calls or text messages is not a condition of purchasing insurance. Message and data rates may apply. You may opt out of marketing text messages by replying STOP where supported, and may opt out of marketing email through the unsubscribe method provided in the message. Transactional or service communications may continue when permitted by law.

6. Cookies, Analytics, and Similar Technologies

Our website and embedded third-party services may use cookies, pixels, local storage, and similar technologies to operate the site, remember preferences, understand website usage, maintain security, and measure performance. The specific technologies used may change as our website and service providers change. Browser settings can be used to control many cookies, although disabling them may affect functionality.

7. Third-Party Services

Our website may link to or embed services operated by insurance carriers, enrollment platforms, CRM or form providers, scheduling services, analytics providers, and other third parties. When you interact directly with a third party, its own privacy policy and terms may apply. We encourage you to review those policies.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No electronic transmission or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining insurance and business records, satisfying carrier or regulatory requirements, resolving disputes, enforcing agreements, and meeting legal obligations. Retention periods may vary based on the type of information and applicable requirements.

10. Your Privacy Choices and Rights

Depending on your state of residence and applicable law, you may have rights concerning your personal information, which may include requesting access, correction, deletion, or information about certain disclosures or uses. Some rights are subject to exceptions, verification requirements, and legal record-retention obligations.

To submit a privacy request, contact us through the contact methods available on our website. We may request information reasonably necessary to verify your identity and process the request. We will not unlawfully discriminate against you for exercising an applicable privacy right.

11. Children's Privacy

This website is directed to adults seeking insurance information. We do not knowingly collect personal information directly from children under 13 through this website. Information concerning a dependent may be provided by a parent, guardian, or other authorized adult when reasonably necessary for an insurance inquiry or enrollment.

12. Do Not Track and Preference Signals

Browser-based “Do Not Track” signals are not handled uniformly across the internet. Where applicable law requires recognition of a legally valid browser or device-based privacy preference signal, we will process it as required by that law.

13. Sensitive Information and Advertising

We do not use health-related information submitted for an insurance inquiry to build advertising profiles or for unrelated targeted advertising. We do not disclose health-related information to third parties for their own independent marketing purposes unless you direct us to do so or applicable law permits it with any required authorization or consent.

14. Changes to This Policy

We may update this Privacy Policy as our services, technology, legal requirements, or business practices change. The “Last updated” date identifies the most recent revision.

15. Contact Us

For privacy questions or requests, contact Upper Echelon Health through the contact information or contact form available at www.upperechelonhealth.com.