Privacy Policy

Introduction

Oak Health Plans ("we," "us," or "our") is an independent, licensed insurance agency. We help individuals compare and apply for health, dental, vision, life, and group insurance products offered by third-party carriers. We are not an insurance company, health plan, healthcare provider, or government agency.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit oakhealthplans.com (the "Site") or otherwise interact with us to request a quote, apply for coverage, or ask for assistance (collectively, our "Services").

By using the Site or our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or our Services.

---

Our Role — What This Means for Your Information

Because we are an independent agency and not the insurer, most of the information you share with us is collected in order to prepare and submit an application on your behalf to the carrier you select. Once you enroll, the carrier — not Oak Health Plans — becomes responsible for administering your plan, processing claims, and handling your protected health information under HIPAA as the covered health plan. We act as your agent of record and may continue to assist you with service issues, but we do not adjudicate claims or administer benefits ourselves.

As a Texas-licensed insurance producer, our handling of your nonpublic personal financial and health information is governed by the Gramm-Leach-Bliley Act (GLBA) and applicable Texas insurance privacy regulations (28 TAC Chapter 22), rather than by HIPAA directly. Where a carrier or plan you enroll with is itself a HIPAA covered entity, they will provide you with their own Notice of Privacy Practices.

---

Information We Collect

Information you provide to us, typically when requesting a quote or completing an application:

• Contact information (name, address, email, phone number)

• Date of birth and, where required for an application, Social Security number

• Household, employment, and income information (e.g., for ACA subsidy eligibility)

• Dependent and family member information

• Health information relevant to underwriting or eligibility (e.g., tobacco use, basic health history), only where a particular application requires it

• Government-issued identification, where required by a carrier

We generally do not collect or store full payment card or bank account numbers ourselves — premium payments are typically made directly through the carrier's own secure enrollment or billing portal. If this ever changes for a specific product, we will disclose it at the point of collection.

Information collected automatically when you use the Site:

• Device and browser information (IP address, browser type, operating system)

• Usage data (pages visited, time on page, click activity)

• General geographic location (based on IP address)

• Cookies and similar tracking technologies (see "Cookies" below)

Information from third parties, where relevant to your application:

• Insurance carriers you apply with

• Prior insurers, for coordination of benefits

• Government agencies, for eligibility or subsidy verification

• Employers, in the case of group coverage

---

How We Use Your Information

• Preparing and submitting your insurance application(s) to the carrier(s) you select

• Comparing plans and providing quotes

• Assisting with service issues after enrollment, in our capacity as your agent

• Complying with state insurance licensing and regulatory requirements

• Responding to legal process or government requests

• Detecting and preventing fraud

• Improving the Site and our services (analytics)

• Marketing our own products and services to you, where you've consented or as otherwise permitted by law (see "Your Communication Choices" below)

We do not use your health or financial information for any purpose beyond what's needed to serve you as described above, or as required by law.

---

How We Share Your Information

• With the carrier(s) you apply to — this is the core of how we operate; your application information is shared with the insurance company you choose so they can evaluate and, if approved, issue your coverage.

• With service providers who support our business operations — for example, our CRM/marketing platform, website hosting, and phone/SMS provider. These providers are contractually limited to using your information only to provide services to us.

• For legal reasons — in response to a subpoena, court order, regulatory request, or to protect our legal rights, prevent fraud, or comply with insurance licensing law.

• In a business transfer — if Oak Health Plans is involved in a merger, acquisition, or sale of substantially all assets, your information may transfer as part of that transaction, subject to this Policy or a successor policy.

• With your consent — for any other purpose, only with your written or electronic authorization.

We do not sell your personal information, and we do not share it with unrelated third parties for their own independent marketing purposes.

---

Your Communication Choices

If you provide your phone number or email through the Site, you consent to be contacted by us about your quote or application, including by call, text/SMS, or email, as described in our Terms of Use. You may opt out of marketing communications, and revoke consent to be contacted, at any time by:

• Replying "STOP" to any text message

• Using the unsubscribe link in any marketing email

• Contacting us using the information below

Opting out of marketing does not affect communications necessary to service an active application or policy (e.g., a carrier follow-up needed to complete your enrollment).

---

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site and understand how it's used:

• Essential cookies — required for the Site to function

• Functional cookies — remember your preferences

• Analytics cookies — help us understand visitor behavior

We do not use marketing, advertising, or targeting cookies on the Site, and we do not use Site visitor data to target advertising to you on the other platforms. If we run advertising campaigns (for example, on Facebook or Google), those platforms use their own audience-targeting tools based on the platform's own data — not information collected from your visit to this Site. You can control cookies through your browser settings; disabling some cookies may limit Site functionality. The Site does not currently respond to browser "Do Not Track" signals.

---

Data Security

We use reasonable technical, administrative, and physical safeguards designed to protect your information, including encryption in transit, access controls, and vendor agreements requiring appropriate safeguards. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

---

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including any period required by Texas insurance record-keeping requirements or other applicable law. When no longer needed, information is securely deleted or de-identified.

---

Children's Privacy

Our Services are not directed to individuals under 18, except where a minor is listed as a dependent on a parent's or guardian's application. We do not knowingly collect personal information directly from children under 18.

---

State Privacy Rights

Texas residents: As a Texas-licensed producer, you have rights under Texas insurance privacy law regarding your nonpublic personal information, including the right to know what we collect and, in some cases, to limit certain disclosures.

Separately, under the Texas Data Privacy and Security Act (TDPSA), Texas residents have the right to confirm whether we process their personal data, access that data, correct inaccuracies, request deletion, and obtain a portable copy of it. You also have the right to appeal a denied request. To exercise any of these rights, contact us using the information below. We may need to verify your identity before processing certain requests.

Other states: If you are a resident of a state with its own consumer privacy law, you may have additional rights (such as the right to know, delete, or correct your information). Because Oak Health Plans is licensed to do business in Texas, New Jersey, and Mississippi, these rights may not apply to all visitors of this Site. Contact us and we will do our best to address your request.

---

Third-Party Links

The Site may link to third-party sites, such as a carrier's application portal or HealthCare.gov. We are not responsible for the privacy practices of those sites. Please review their privacy policies directly.

---

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last Updated" date, and where appropriate, additional notice. Your continued use of the Site after changes are posted constitutes acceptance of the updated Policy.

---

Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us:

Oak Health Plans

Phone: (214) 984-3577

Email: [email protected]