Legal Entity. MTG Insurance Agency LLC, DBA GetHealthPlans.com (“GHP,” “we,” “us,” or “our”) operates the website gethealthplans.com (the “Site”) and related contact channels (phone, SMS/text, email, web forms, and chat) (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard information about visitors, prospective customers, and customers, and describes the choices and rights available to you.
By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
Not Legal Advice / Not a HIPAA Portal. This Policy is provided for transparency and does not constitute legal advice. The Site is not a HIPAA-secure portal and is not intended to receive protected health information (“PHI”) as defined by HIPAA. Do not submit diagnosis codes, full medical histories, Social Security numbers, financial account numbers, or other sensitive medical or financial details through Site forms, chat, SMS, or standard email. If we need sensitive information to process an application, we will arrange a more secure channel or a carrier-specific application platform.
We collect information directly from you, automatically from your device, and from third parties. Categories may include:
We do not seek to collect sensitive categories (e.g., government identifiers, precise geolocation, or detailed health/biometric data) via the Site. If you voluntarily provide such data, we will minimize, delete, or redirect you to a secure channel where feasible.
We use information to:
Subject to the controlling limitation in Section 4 regarding mobile/SMS opt-in data, we may disclose the categories above to:
We do not disclose PHI obtained in a covered HIPAA context via the Site. If PHI is required for an application, we use a carrier-approved secure intake process.
This Section controls over any more general data-sharing or “sale/sharing” language in this Policy with respect to text-messaging data.
No mobile information, no phone number collected for the purpose of SMS/text messaging, and no SMS opt-in or consent will be sold, rented, or shared with any third parties or affiliates for their own marketing or promotional purposes. Text-messaging originator opt-in data and consent are excluded from every category of disclosure described in Section 3 and from any “sale” or “sharing” described in Section 6.
We may share mobile/SMS information only with subcontractors and service providers that directly support our own messaging operations and customer service — for example, our SMS/messaging platform and our CRM — and only to deliver the messages and support the communications you have requested or consented to. These providers are bound by contract to use the information solely for that purpose.
Your consent to receive text messages, and the data associated with that consent, is used only by GHP and these support providers. It is never transferred, licensed, or made available to any third party for that party’s independent use.
We use cookies, local storage, pixels, tags, SDKs, and similar technologies to:
This Section 5 does not apply to text-messaging opt-in data, which is governed exclusively by Section 4.
Some states define “sale” or “sharing” of personal information to include disclosures for cross-context behavioral advertising. We may engage in such practices with advertising partners with respect to web and device data, where permitted by law and consistent with your choices.
Text-messaging opt-in data is never sold or shared. See Section 4, which controls. You can opt out of the sale/sharing of other categories of personal information via our “Do Not Sell or Share My Personal Information” link (in the Site footer) or by contacting us (see Section 19).
We collect two separate and independent consents for automated phone, text (SMS), and email communications. Granting one does not grant the other; neither is bundled with your acceptance of these terms or any other agreement; and marketing consent is never a condition of obtaining a quote, applying for coverage, or purchasing a product.
This consent is collected verbally from you by a licensed agent during a recorded enrollment or application call (or when you otherwise provide your phone number or email address in connection with your application or policy). It authorizes ongoing, transactional servicing communications about the application or policy you hold — for example, application and policy status updates, billing and payment notices, enrollment-window reminders, and service messages — delivered by phone call, text message (SMS), and email. This is relationship and transactional messaging tied to a policy you are applying for or already hold; it is not marketing. Message and data rates may apply. Message frequency varies. You may opt out at any time (reply STOP to texts, or use the unsubscribe link or contact us for email), after which we will deliver any required policy and servicing communications through alternative channels such as mail or telephone. Opting out does not affect your coverage or your ability to be serviced.
This is a distinct and optional consent, collected separately from Opt-In 1 through a dedicated, unchecked opt-in (such as a checkbox or written or electronic authorization) at the point you choose to provide it. It authorizes marketing and promotional messages and quote solicitations intended to offer you new or additional products and to generate new business, delivered by phone call, text message (SMS), and email. This consent is optional, is not required to request a quote, apply for coverage, or purchase any product, and is never a condition of receiving the service communications described in Opt-In 1. Where these communications are delivered using an automatic telephone dialing system or a prerecorded or artificial voice, we obtain the prior express written consent required by the federal Telephone Consumer Protection Act (TCPA) and applicable state telemarketing laws (including, where applicable, the Florida Telephone Solicitation Act) through a clear and conspicuous disclosure presented at the point of opt-in and separate from any other agreement. Message and data rates may apply. Message frequency varies. You may opt out at any time (reply STOP to texts, or use the unsubscribe link or contact us for email).
Reply STOP to any text message to opt out, and HELP for help. You may also email support@gethealthplans.com or call us. Opting out of one consent does not affect the other; opting out of marketing (Opt-In 2) does not stop the transactional service messages under Opt-In 1, and opting out of those service messages does not affect your coverage. Your SMS consent and associated mobile data are handled exclusively as described in Section 4 and are never shared with third parties for their marketing. Some calls may be recorded for quality and compliance; notify the agent if you do not consent to recording, and we will use an unrecorded channel where feasible.
As a licensed insurance agency, we may collect nonpublic personal information in connection with quoting and applications. We handle such information consistent with applicable insurance privacy laws, including, where applicable, Title V of the Gramm-Leach-Bliley Act (GLBA) and applicable state insurance privacy regulations. We restrict access to nonpublic personal information to personnel and service providers who need it to provide our services, and we maintain safeguards designed to protect it. We do not sell nonpublic personal financial information.
We retain information for as long as needed for quoting, servicing, compliance, tax and audit, dispute resolution, and other legitimate business purposes, after which we delete or de-identify it consistent with our retention schedule and applicable law.
We employ administrative, technical, and physical safeguards appropriate to the nature of the data. However, no method of transmission or storage is completely secure. Standard email and SMS are not appropriate channels for sensitive medical or financial data. If we become aware of a security incident affecting your personal information, we will notify you and applicable regulators as required by law.
The Services are not intended for children. We do not knowingly collect personal information from children under the age of 13 (or under 16 where applicable law provides heightened protections). If you believe a child provided information, contact us to request deletion.
Depending on your state of residence and applicable law, you may have rights to:
We will not discriminate against you for exercising these rights.
To the extent applicable law grants you these rights, residents of states with comprehensive privacy laws — including, among others, California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, and other states that have enacted comparable laws — may exercise the rights described in Section 12 as provided by their respective state law.
California (CCPA/CPRA). California residents may request access to the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties to whom we disclose it. California residents may also request deletion and correction, and may opt out of the “sale” or “sharing” of personal information and limit the use of sensitive personal information. We do not sell or share text-messaging opt-in data (see Section 4). You may designate an authorized agent to make a request on your behalf; we will verify the agent’s authority and your identity.
Sensitive personal information. We do not use or disclose sensitive personal information for purposes that require an option to limit such use under applicable law, other than as permitted without that option.
Appeals. Where applicable law provides a right to appeal a denied request, instructions to appeal will be included in our response.
Submit a request using the methods in Section 19. We will verify your identity (and an authorized agent’s authority, where applicable) and respond within the time required by law. Where we deny a request, we will explain why and, where applicable, how to appeal.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement. Where we use analytics or segmentation to personalize content or advertising, you may exercise applicable opt-out rights as described in Sections 5, 6, and 13.
We market to U.S. residents. If you access the Services from outside the United States, you understand your data may be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.
The Services may link to third-party websites or use third-party tools. We do not control or endorse third-party content and are not responsible for their practices or policies. Your use of third-party services is at your own risk and subject to their terms.
We may update this Policy periodically. The updated version will be indicated by an updated Effective Date and will be effective as soon as posted. Material changes will be communicated as required by law.
Privacy requests, questions, compliance, and legal inquiries:
You may also use the on-Site “Do Not Sell or Share My Personal Information” link and cookie settings.
GHP may, at times, act as a business associate to insurance carriers (covered entities) when handling PHI through carrier-approved systems — not through this Site. If and when we act in a HIPAA capacity, our use and disclosure of PHI will be governed by HIPAA and applicable Business Associate Agreements (BAAs). The Site and standard email/SMS are not the intake point for PHI.