Privacy Policy

1. Information We Collect

Depending on how you interact with Harbor Group USA, we may collect several categories of information.

1.1 Information You Provide to Us

You may voluntarily provide information when you:

• Submit a contact or inquiry form
• Request information about health plans or healthcare coverage
• Request a quote or coverage information
• Request assistance from our team
• Subscribe to communications or newsletters
• Contact us by email, telephone, or other communication methods
• Submit information relating to a health-plan application or enrollment process
• Communicate with us regarding an existing health plan or coverage
• Participate in surveys, promotions, or other activities
• Otherwise voluntarily communicate information to us

Depending on the service or interaction, information may include:

• Name
• Email address
• Telephone number
• Mailing address
• ZIP code
• Date of birth
• Household or family information
• Employment information
• Health-plan information
• Healthcare coverage information
• Eligibility information
• Enrollment information
• Health-related information that you voluntarily provide
• Other information you voluntarily submit

We collect information that is reasonably necessary for the applicable purpose, subject to applicable legal and regulatory requirements.

2. Health and Healthcare-Related Information

Because Harbor Group USA operates in the health-plan and healthcare coverage environment, certain information you voluntarily provide may relate to your health, healthcare coverage, eligibility, or healthcare needs.

Depending on the circumstances, health-related information may be subject to additional federal or state privacy protections.

We do not request that you provide unnecessary medical information through general website contact forms.

Please do not submit medical records, diagnoses, prescription information, Social Security numbers, financial account information, or other highly sensitive information through a general website form unless the applicable form or service specifically requests it and appropriate safeguards are in place.

Where information is subject to HIPAA or other specific privacy laws, Harbor Group USA will handle that information in accordance with the requirements applicable to the particular information, service, and entity involved.

This website Privacy Policy is not intended to replace a HIPAA Notice of Privacy Practices where such a notice is legally required.

3. Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Device type
• Operating system
• General geographic information
• Pages visited
• Referring and exit pages
• Date and time of visits
• Time spent on pages
• Website interactions
• Search or navigation activity
• Device and browser identifiers
• Website performance information
• Error and diagnostic information

This information may be collected through cookies, analytics technologies, pixels, tags, log files, and similar technologies.

4. How We Use Personal Information

We may use personal information for purposes including:

• Responding to inquiries
• Providing requested information
• Assisting with health-plan and healthcare coverage inquiries
• Communicating with prospective and existing customers
• Providing information about available health plans and healthcare coverage options
• Processing requests or applications where applicable
• Facilitating enrollment or other requested services
• Providing customer support
• Communicating service-related information
• Sending newsletters, educational materials, or marketing communications where permitted
• Personalizing communications and website experiences
• Improving our website and services
• Understanding website usage and performance
• Preventing fraud, abuse, and unauthorized activity
• Protecting the security of our systems
• Complying with legal and regulatory obligations
• Establishing, exercising, or defending legal claims
• Enforcing our agreements and policies
• Performing other purposes disclosed at the time information is collected or otherwise permitted by applicable law

5. Health Plan and Healthcare Coverage Inquiries

If you request information about health plans, healthcare coverage, eligibility, enrollment, benefits, coverage options, or related services, we may use the information you provide to respond to your request and facilitate the services you have requested.

Depending on the nature of your request, we may need to share relevant information with health plans, plan carriers, licensed agents, brokers, enrollment platforms, service providers, or other parties involved in fulfilling your request.

The information shared will depend on the service requested and will be limited to information reasonably necessary for the applicable purpose, subject to applicable legal and regulatory requirements.

6. Information Sharing and Disclosure

We do not sell personal information to third parties for monetary consideration.

However, we may disclose or make personal information available in appropriate circumstances, including the following.

6.1 Service Providers

We may use third-party service providers to support our business and website operations, including providers for:

• Website hosting
• Cloud storage
• Email delivery
• Customer relationship management
• Communications
• Analytics
• Cybersecurity
• Technical support
• Form processing
• Enrollment or health-plan technology
• Customer support
• Payment processing, where applicable

These providers may process information on our behalf and are expected to use information only as necessary to provide the applicable services or as otherwise permitted by law.

6.2 Health Plans, Plan Carriers, Agents, Brokers, and Enrollment Partners

When you request information, assistance, a quote, enrollment support, or other healthcare coverage services, we may share relevant information with health plans, plan carriers, licensed agents, brokers, enrollment platforms, or other parties necessary to fulfill your request. The information shared will depend on the service requested and may be subject to additional privacy policies and legal requirements applicable to those parties.

6.3 Legal and Regulatory Requirements

We may disclose information when reasonably necessary to:

• Comply with applicable federal, state, or local law
• Respond to lawful governmental requests
• Respond to subpoenas, court orders, or legal processes
• Meet regulatory requirements
• Investigate suspected fraud or abuse
• Protect our legal rights
• Protect the safety and security of individuals or systems
• Enforce our agreements

6.4 Business Transfers

If Harbor Group USA undergoes a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law.

7. Marketing Communications

We may use contact information to send newsletters, educational materials, updates, information about our services, or other communications where permitted by law.

You may unsubscribe from marketing emails by using the unsubscribe mechanism included in the applicable communication or by contacting us.

We will not use or disclose protected health information for marketing purposes in a manner prohibited by applicable law.

Where HIPAA applies, the use or disclosure of protected health information for marketing is subject to applicable HIPAA requirements and authorization rules.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Operate the website
• Maintain sessions
• Remember preferences
• Improve website functionality
• Analyze traffic
• Measure website performance
• Understand user interactions
• Support security
• Measure marketing effectiveness
• Support advertising where applicable

Certain cookies may be necessary for website functionality, while others may be optional depending on their purpose and applicable law.

You may manage cookies through available website controls and your browser settings. Disabling certain cookies may affect website functionality.

9. Analytics and Tracking

We may use third-party analytics services to understand how visitors interact with our website and to improve website performance and user experience.

Analytics providers may collect technical and usage information such as device information, browser information, IP address, pages viewed, referring pages, and interaction information.

We will configure and use analytics and tracking technologies in accordance with applicable privacy requirements.

Because Harbor Group USA operates in a health-plan and healthcare coverage environment, we do not intend to use ordinary website analytics to unnecessarily collect or disclose sensitive health information.

We also take reasonable steps to avoid transmitting sensitive information through URLs, analytics parameters, advertising pixels, or similar tracking mechanisms.

10. Sensitive Information

Certain information may be considered sensitive personal information under applicable state or federal law, including information relating to health, healthcare coverage, financial circumstances, precise location, or other protected categories.

We will handle such information in accordance with applicable legal requirements.

You should avoid voluntarily submitting sensitive information through general-purpose website forms unless it is specifically requested for a legitimate business purpose and appropriate security measures are in place.

11. Data Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, use, disclosure, alteration, or destruction. Depending on the nature of the information and applicable requirements, safeguards may include:

• Access controls
• Authentication
• Encryption
• Secure hosting
• Monitoring
• Security testing
• Employee access restrictions
• Vendor security controls
• Incident response procedures

No method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee that information transmitted through the Internet or stored electronically will always be completely secure.

12. Data Retention

We retain personal information for as long as reasonably necessary to:

• Fulfill the purposes for which it was collected
• Provide requested services
• Maintain business and transaction records
• Meet legal and regulatory requirements
• Resolve disputes
• Enforce agreements
• Protect our legal rights
• Detect and prevent fraud
• Maintain appropriate compliance records

Retention periods may vary depending on the type of information, the purpose for which it was collected, and applicable legal or regulatory requirements.

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable retention obligations.

13. Your Privacy Choices

Depending on your location and applicable law, you may have certain rights concerning your personal information. These may include the right to:

• Request access to certain personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information about how personal information is processed
• Opt out of certain marketing communications
• Withdraw consent where processing is based on consent
• Request information regarding certain disclosures or sharing
• Exercise applicable rights regarding targeted advertising or certain data sharing

These rights are subject to applicable legal exceptions and limitations.

14. California Residents

California residents may have additional rights under the California Consumer Privacy Act, as amended ("CCPA"), depending on whether and how the law applies to Harbor Group USA.

Depending on applicable requirements, California residents may have rights concerning access, correction, deletion, and certain disclosures or sharing of personal information, as well as rights relating to certain forms of targeted advertising.

Harbor Group USA does not sell personal information for monetary consideration.

We will not unlawfully discriminate against an individual for exercising privacy rights provided by applicable law.

Where required, California residents may submit privacy requests using the contact information provided below.

15. Other State Privacy Laws

Residents of other U.S. states may have privacy rights under applicable state privacy laws.

Depending on the applicable state law and the circumstances, these rights may include rights to access, correct, delete, obtain a copy of, or restrict certain processing of personal information, as well as rights to opt out of certain targeted advertising, profiling, or sale or sharing activities.

Harbor Group USA will provide rights required by applicable law.

16. Children's Privacy

Our website is not intended to knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us inappropriately, please contact us using the information below.

We will take reasonable steps to investigate and address the situation as required by applicable law.

17. Third-Party Websites and Services

Our website may contain links to third-party websites, health plans, plan carriers, healthcare organizations, service providers, advertisers, or other external resources.

Third-party websites operate independently from Harbor Group USA. We are not responsible for the privacy practices, security, content, or policies of third-party websites.

We encourage you to review the applicable privacy policy before submitting personal information to any third party.

18. Information Received From Third Parties

We may receive information from third parties, including health plans, plan carriers, technology providers, marketing partners, enrollment platforms, or other parties involved in providing requested services.

The information we receive depends on the relationship and services involved. We will use such information in accordance with applicable law and the purposes for which it was provided.

19. Telephone and Text Communications

If you provide a telephone number and request that we contact you, we may communicate with you by telephone or text message regarding your inquiry, requested services, health-plan options, enrollment, or other matters related to your interaction with Harbor Group USA.

Where required, we will obtain appropriate consent before sending marketing text messages or making certain automated calls.

Message and data rates may apply depending on your mobile carrier. You may opt out of marketing text messages by following the instructions provided in the applicable communication.

Opting out of marketing communications does not necessarily prevent service-related communications that are necessary to fulfill a request or provide a service.

20. Email Communications

If you provide your email address, we may use it to respond to inquiries, provide requested information, communicate regarding services, and, where permitted, send marketing or educational communications.

You may unsubscribe from marketing communications at any time.

We may continue to send transactional, security, legal, or service-related communications when necessary.

21. Do Not Track and Privacy Signals

Some browsers and devices provide privacy signals such as "Do Not Track" or similar mechanisms.

Because there is not a single universal technical standard for all such signals, our website may not respond to every browser-based signal unless required by applicable law.

Where applicable law requires recognition of a specific privacy signal or universal opt-out mechanism, we will comply with the applicable requirements.

22. International Visitors

Harbor Group USA is a United States-based organization and its Services are primarily intended for users in the United States.

If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate.

Privacy laws in those jurisdictions may differ from the laws of your country or region. Where applicable law requires additional safeguards for international transfers, we will implement those safeguards as required.

23. HIPAA and Protected Health Information

If Harbor Group USA is acting as a HIPAA covered entity or business associate with respect to particular information or services, applicable HIPAA requirements will govern the use and disclosure of protected health information.

Where Harbor Group USA is required to provide a separate Notice of Privacy Practices, that notice will govern protected health information as specified by HIPAA and applicable law.

This website Privacy Policy does not itself constitute a HIPAA Notice of Privacy Practices.

24. Health Data Security Incidents

Harbor Group USA takes the security of health-related information seriously.

Where a security incident involving personal or health information occurs, we will investigate the incident and provide notifications to affected individuals, regulators, or other parties when required by applicable federal or state law. Depending on the nature of the information and the entity involved, different federal and state requirements may apply.

25. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

• Our services
• Data collection practices
• Technology
• Business operations
• Legal requirements
• Regulatory requirements
• Privacy practices

When we make changes, we will update the "Last Updated" date at the top of this policy.

For material changes, we may provide additional notice where required or appropriate.

We encourage you to review this Privacy Policy periodically.

26. Governing Law

This Privacy Policy is governed by applicable United States federal law and the applicable laws of the states in which Harbor Group USA operates or is subject to jurisdiction.

Where a particular state or federal privacy law provides rights or protections that apply to you, those requirements will control to the extent required by law.

27. Contact Us

If you have questions, concerns, privacy requests, or other inquiries regarding this Privacy Policy or the handling of your personal information, please contact us:

We may request reasonable information necessary to verify your identity before processing certain privacy requests.

28. Effective Date

This Privacy Policy is effective as of January 1, 2026, and remains in effect until replaced or updated.

Harbor Group USA is committed to protecting your privacy and handling personal information responsibly, transparently, and in accordance with applicable U.S. privacy requirements.