Privacy Policy

1. About This Policy

GroupHealthMatch ("we," "us," or "our") operates the website at grouphealthmatch.com (the "Platform"). This Privacy Policy explains how we collect, use, share, and protect information about you when you use the Platform, whether you are an employer looking for a broker, a licensed insurance broker or agent, or a general visitor.

By using the Platform, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect

2a. Information You Provide Directly

• Broker claim requests: When a broker claims a profile, we collect name, email address, National Producer Number (NPN), phone number, agency name, and any additional profile information submitted.
• Employer inquiries: When an employer submits a contact or lead request, we collect name, company name, email address, phone number, employee count, and coverage needs.
• Account registration: Name, email address, and password (hashed).
• Subscription and billing: Payment information (processed by Stripe — we do not store full card numbers).
• Communications: Any messages you send us via email or contact forms.

2b. Information Collected Automatically

• Usage data: Pages visited, search queries, clicks, and time spent on pages.
• Device and technical data: IP address, browser type, operating system, referrer URL, and device identifiers.
• Cookies and similar technologies: See Section 6 below.

2c. Information from Third-Party Sources

• NIPR / State DOI data: Broker profiles may be pre-populated with publicly available data from the National Insurance Producer Registry (NIPR) and state Departments of Insurance, including name, NPN, license number, license status, and state(s) of licensure.
• Analytics providers: We use Google Analytics 4 (GA4) to collect aggregated usage data. See Section 6.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform;
• Create and manage broker profiles and accounts;
• Route employer inquiries to relevant brokers;
• Process Subscription payments and manage billing;
• Send transactional communications (account confirmations, lead notifications, billing receipts);
• Send marketing communications to brokers who have opted in (you may opt out at any time);
• Verify broker license status and NPN accuracy;
• Analyze usage trends and improve Platform features;
• Detect and prevent fraud, abuse, or violations of our Terms of Service;
• Comply with applicable legal obligations.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Broker-Employer matching: When an employer submits an inquiry, their contact information and coverage needs are shared with the broker(s) they are matched with.
• Public broker profiles: Information in a broker's profile (name, location, specialties, credentials) is publicly visible on the Platform and may be indexed by search engines.
• Service providers: We share data with trusted third-party vendors who help us operate the Platform, including payment processors (Stripe), cloud infrastructure providers, email delivery services, and analytics providers. These vendors are contractually required to protect your data and use it only for specified purposes.
• Legal compliance: We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of GroupHealthMatch, our users, or others.
• Business transfers: If GroupHealthMatch is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

5. Broker Profile Data and NIPR

Some broker profiles on GroupHealthMatch are auto-generated using publicly available data from the National Insurance Producer Registry (NIPR). This data includes producer name, NPN, license type, license status, and state(s) of appointment. This information is public record under state insurance regulations.

If you are a broker whose profile was auto-generated and you believe the information is inaccurate or you wish to have your profile removed prior to claiming it, please contact us at privacy@grouphealthmatch.com. Brokers who claim their profiles can update their information directly through the Platform.

6. Cookies and Analytics

We use cookies and similar tracking technologies to operate and improve the Platform. These include:

• Essential cookies: Required for core Platform functionality (e.g., authentication, session management).
• Analytics cookies: We use Google Analytics 4 (GA4) to understand how visitors use the Platform. GA4 collects anonymized usage data including page views, session duration, and traffic sources. Data is processed by Google subject to Google's Privacy Policy. You can opt out of GA4 tracking by installing the Google Analytics Opt-Out Browser Add-on.
• Preference cookies: Used to remember your settings and preferences.

Most browsers allow you to control or block cookies through their settings. Note that disabling certain cookies may affect Platform functionality.

7. Data Retention

We retain your information for as long as necessary to provide the Platform, fulfill the purposes described in this Policy, and comply with our legal obligations. Specifically:

• Account data is retained for the duration of your account and for up to 3 years after account closure;
• Billing records are retained for 7 years as required for tax and financial compliance;
• Lead and inquiry records are retained for up to 2 years;
• Auto-generated broker profile data from public sources is retained until corrected or removal is requested.

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), hashed passwords, role-based access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and keep your account credentials confidential.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email we send.
• Data portability: Request a structured, machine-readable copy of your data.

To exercise any of these rights, contact us at privacy@grouphealthmatch.com. We will respond within 30 days.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.

To submit a California privacy rights request, email privacy@grouphealthmatch.com with "California Privacy Request" in the subject line.

11. Children's Privacy

GroupHealthMatch is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@grouphealthmatch.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page with a revised "Last updated" date and, where appropriate, by email. Your continued use of the Platform after any change constitutes acceptance of the updated Policy.

13. Contact Us

For privacy-related questions, requests, or concerns, contact us at: