Privacy  Policy

Effective Date: January 5, 2023

Date Last Updated: October 8, 2026

1. Introduction

If you are a California resident, please click here for more information about your specific privacy rights.

Thank you for your interest in eHealthInsurance Services, Inc. (“eHealthInsurance,” “we,” “us,” or “our”). We are committed to protecting the privacy of those with whom we interact. This Privacy Statement (“Statement”) contains details about how we process personal information about you (defined below) that we obtain when you interact with us via our websites (including those listed below), email, mobile application, social media accounts, online chat, and other online interactions (collectively, our “Digital Properties”); insurance agent and representative services; communication channels (including telephone call centers); in other online and offline interactions and services; and from other sources (all such interactions and services collectively, the “Services”). 

Please read this Statement carefully. It applies to the following websites owned and operated by eHealthInsurance, and our other Digital Properties where we post this document as the applicable Privacy Policy: 

Applicability: We collect personal information in several contexts as described below. However, this Statement does not apply to the following information: 

  • Information about our employees, contractors, agents, and job applicants. Such information is subject to a separate privacy notice that we will make available to individuals.
  • Information we collect from individuals with whom we engage in solely business-to-business communications and transactions, such as information about the employees of our business partners and customers.
  • Protected health information subject to the Health Insurance Portability and Accountability Act (“HIPAA”) that we handle on behalf of our health insurance carrier partners. In such cases, we are bound by stringent legal and contractual obligations to those partners. If you have questions about how such information is used or disclosed, please contact your insurance provider. We do not control and are not responsible for their privacy and data processing practices. 

Changes: We may update this Statement from time to time. The current Statement will be effective when posted. Please check this Statement periodically for updates. If any of the changes are unacceptable to you, you should cease interacting with us. When required under applicable law, we will notify you of any changes to this Statement by posting an update on this website.

2. Sources of Personal Information

We collect information about you and how you interact with us in several ways, including:

  1. Information you provide to us directly. We collect information that you provide to us directly, such as when you register with us through our Services, or you apply for a health insurance or other product through our Services.
  2. Information automatically collected or inferred from your online interaction with us. We automatically collect technical information about your online interactions with our Digital Properties (such as IP address and browsing preferences) using cookies, pixels, tags, scripts, server-side tools, and similar technologies (collectively, “Cookies”).
  3. Information from public sources, such as information from public records maintained by government entities, and information you submit in public forums.
  4. Information from third parties. We receive information about you and your interactions with us from third parties, such as pharmacies, healthcare providers, insurance companies, credit reporting agencies, marketing and advertising providers, social network services, referral partners, data brokers, and companies that provide or sell lists of potential purchasers. We also may receive information about you from friends and family members (such as other people insured under the same policy as you).

We may combine information that we receive from the various sources described in this Statement, including third-party sources and public sources, and use or disclose it for the purposes identified below. 

3. Types of Personal Information We Collect

The types of personal information that we may collect about you include:

  1. Identifiers, such as your name, alias, postal address, telephone number, unique personal identifier, online identifier, internet protocol address, email address, username, phone number, social media identifiers (e.g., Twitter handle, Instagram name, etc.), Social Security number, driver’s license number, or other similar identifiers, including identifiers for family members who may be insured under an insurance policy.
  2. Customer records, such as your signature; bank account number, credit card number, or other payment information; estimated income; the content, timing, and methods of communications you have with us, such as chats, calls, and emails; and information you provide or submit to our Digital Properties.
  3. Application and eligibility demographic information for you and family members who may be insured under an insurance policy, such as age, date of birth, gender, health status, race and ethnicity information, disability, medical history, military or veteran status, date of birth, and financial and tax information (for government subsidies).
  4. Commercial information and preferences, including product preferences, advertising preferences, products or services purchased, obtained, or considered, or other preferences or interests.
  5. Internet or other electronic network activity information, such as your browsing history, search history, IP address, and information regarding your interactions with us (including interacting with us online, by the mobile application, and through advertisements). For more information, please see Section 6 (“How We Use Cookies and Automatic Data Collection Tools”).
  6. Geolocation information, such as approximate location based on your IP address.
  7. Audio, electronic, visual, or similar information, such as call center recordings and photos at events.
  8. Professional or employment information, such as job title, employer, business address and contact information.
  9. Education information, such as education history.
  10. Inferences drawn from any of the information we collect to create a profile about you reflecting your preferences and characteristics.

4. How We Use Your Personal Information

We may use each category of your personal information described above in the following ways:

  1. To enable interactions between you and us, such as to provide our Digital Properties and other products and services; facilitate online quoting, applications for, and purchases of our products; to register and administer your account, to support your interactions with us; to provide information about insurance plans; to communicate with you about your policy or our data practices; to install and configure changes and updates to programs and technologies related to interactions with us; to authenticate those who interact with us; and to respond to your requests, complaints, and inquiries.
  2. For our own internal business purposes, such as to evaluate or audit the usage and performance of programs and technologies related to interactions with us; to process and catalog your responses to surveys or questionnaires (e.g., customer satisfaction reviews); and to maintain proper business records.
  3. For our internal research and product improvement purposes, such as to evaluate and improve the quality of your interactions with us and the quality of programs and technologies related to interactions with us; to perform internal research for technological development and demonstration; to conduct data analysis and testing; to design new services and products; to improve our products or services; to evaluate the effectiveness of our advertising or marketing efforts; and to debug and repair errors with our systems, networks, and equipment
  4. For legal, safety, or security reasons, such as to comply with laws and other legal requirements; to investigate and respond to claims against us, our personnel, and our customers; to establish, exercise, or defend legal claims; to protect our safety, our property or the rights of those who interact with us, or others; and to detect, prevent, and respond to security incidents or other malicious, deceptive, fraudulent, or illegal activity.
  5. In a de-identified, anonymized, or aggregated format. We may receive or convert personal information into a de-identified, anonymized, or aggregated format, and use such information for any legal purpose. To the extent that we de-identify information, we will not attempt to re-identify it except in compliance with applicable law.
  6. For marketing. We may use your personal information to market our products or services or those of third parties, such as our business partners. We may use your personal information to invite you to participate in marketing surveys, questionnaires, promotions, events or contests. We may audit aspects of our ad impressions. We may use your personal information for short-term transient use, including for contextual ad customization. We may use your personal information to enhance our content, to better design and target marketing campaigns, and to personalize and deliver advertisements to you, including in commercial emails and by developing product, brand, or services audiences and identifying you across devices and sites. For more information about online marketing activity, see Section 6 (“How We Use Cookies and Automatic Data Collection Tools”) below.
  7. In connection with a corporate transaction, such as if we acquire assets of another business, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
  8. To fulfill other purposes disclosed at the time you provide personal information or otherwise where we are legally permitted or are required to do so.
  9. For any other purposes for which you provide consent.

We may use personal information to develop and improve algorithms, artificial intelligence or machine learning tools and models in connection with all the above processing activities consistent with our customer commitments and applicable laws.

5. To Whom We Disclose Your Personal Information

We may disclose your personal information to the categories of recipients described below: 

  1. Affiliates and subsidiaries: We may disclose your personal information within the eHealth Insurance group of companies, which includes parents, corporate affiliates, subsidiaries, business units and other companies that share common ownership for the purposes described above.
  2. Insurance providers, government health care exchanges, and related entities: In order to provide you with insurance you request, we may disclose your information to insurance companies, Federally-facilitated Exchanges or State-based Exchanges, HSA Trustees or Administrators, and similar entities.
  3. Other insurance-related companies: We may disclose your information to other companies involved in insurance transactions, such as insurance support companies, who may keep your personal information or give it to others; consumer reporting agencies; to third parties to conduct actuarial or research studies; and medical care institutions or providers to verify coverage or benefits, inform individual of medical problems, or conduct audits.
  4. Third parties that help fulfill requests: We may share your personal information with third-parties that facilitate and support us in processing a request or transaction on your behalf; to provide you with quotes, products, and services; and to process payments. We may share your personal information with an insurance agent when you request to be contacted by an agent, or when you request information about or an application for insurance that is offered through an insurance agent with whom we associate. If you are contacted by such a third party, any additional information that you subsequently choose to provide to such third-party entity will be governed by that entity’s privacy policy.
  5. Third parties that provide business services to us, such as web hosting service providers, IT providers, operating systems and platforms, internet service providers, analytics companies, and marketing providers (e.g., we may share your email address with our outbound email marketing providers)
  6. Professional consultants: such as accountants, lawyers, financial advisors, and auditors.
  7. Business partners: We may also provide your personal information or provide access to your personal information to our business partners, such as marketing and advertising providers, ad platforms and networks, and social media companies; third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”); partners who work with us on joint marketing efforts and/or joint promotional or sponsorship opportunities, including co-branded products and services and financial institutions with which we have joint-marketing agreements; non-affiliated companies for their marketing or other business purposes as permitted by law, such as insurance companies, insurance agencies, and others;  referral, lead generators, and other commercial data partners; and other similar third parties. All above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Where required by law, we will obtain your consent prior to disclosing your personal information to our business partners. Where recipients use your personal information for their own purposes independently from us, we are not responsible for their privacy practices or personal information processing policies. You should consult the privacy notices of those third-party services for details on their practices.
  8. For legal, security and safety purposes: We may share your personal information with third parties such as law enforcement, regulators, state insurance officials, or others to comply with federal, state, or local laws, a subpoena or other legal process, and other applicable legal requirements; to protect the confidentiality and security of our records; to protect against or prevent fraud; for claims administration; to enforce or apply our Terms of Use and other agreements; and to protect our rights and our property or safety of our users or third parties.
  9. In connection with a corporate transaction: We may transfer any information we have about you in connection with a change in corporate control, including but not limited to a merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of eHealthInsurance Services, Inc. and its business, or as part of a corporate reorganization or stock sale.
  10. Organizations with which you have a relationship: We may disclose personal information to an affinity group, employer, provider group, benefits administrator or consultant, healthcare system, pharmacy, financial services provider, or other entity with which you may have a relationship when such entity referred you to us or when you use our website or call center in connection with your relationship to such entity.
  11. To others with your consent.

We may also de-identity, anonymize, or aggregate personal information to share with third parties for any purpose. To the extent that we de-identify information, we will not attempt to re-identify it except in compliance with applicable law.

6. How We Use Cookies and Automatic Data Collection Tools

We (and authorized third parties) use Cookies on our Digital Properties to collect information about you, your device, and how you interact with our Digital Properties. This section contains additional information about:

  • The types of tracking technologies we use and the purposes for which we use them
  • The types of information we collect using these technologies
  • How we disclose or make information available to others
  • Choices you may have regarding these technologies
  1.  Types of Cookies and Tracking Technologies We Use

Our Digital Properties and the third parties that we authorize may use the following tracking technologies:

  • Cookies, which are a type of technology that install a small amount of information on a user’s computer or other device when they visit a website.
  •  Pixels, web beacons, and tags, which are types of code or transparent graphics that contain a unique identifier. In addition to the uses described below, these technologies provide information about interactions with our Digital Properties (including communications such as emails we may send to you) and help us customize our marketing activities. In contrast to cookies, which are stored on a user’s computer hard drive, pixels, web beacons, and tags are embedded invisibly on our Digital Properties.
  •  Session replay tools, which record your interactions with our Digital Properties, such as how you move throughout our Digital Properties and engage with our webforms. In addition to the uses described below, this information helps us improve our Digital Properties and identify and fix technical issues visitors may be having with our Digital Properties.
  •  Embedded scripts and SDKs, which allow us to build and integrate custom apps and experiences on our Digital Properties, some of which may be developed by a third party. Embedded scripts are temporarily downloaded onto your device from our web server, or from a third party with which we work, and are active only while you are connected to our Digital Properties and are deleted or deactivated thereafter.
  • Server-side technologies, which collect and process information about you and your interactions with our Digital Properties on our servers and transmit that data to third parties (such as though an API connection).

We may use both first-party Cookies, which are set by us, and third-party Cookies, which are set by other parties. Some of the Cookies we use may last solely for your browsing session and are deleted when you close your browser, while others are persistent and stored after you close your browser.

  1.  Purposes for Using These Technologies

We and authorized third parties use these technologies for purposes including:

  • Strictly Necessary, such as determining when you are signed in, determining when your account has been inactive, providing you with privacy disclosures and choices, and for troubleshooting and security purposes (including preventing fraud and malicious behavior);
  • Functionality/Personalization, such as remembering user preferences and pages and products you have viewed in order to enhance and personalize your experience when you visit our Digital Properties;
  • Performance/Analytics, such as maintaining and improving the performance of our Digital Properties analyzing how our Digital Properties are used to understand which pages are most popular and how users move around them. For example, we use Google Analytics to help us improve our Digital Properties’ performance and user experiences. Google Analytics may use Cookies to perform their services. To learn how Google Analytics collects and processes data, please visit https://policies.google.com/technologies/partner-sites; and
  • Advertising, such as providing you with offers that may be of interest to you; conducting targeted advertising and content personalization to you on our Digital Properties and those of third parties, including jointly marketing the products and services of our and other businesses; tracking activity over time and across properties to develop a profile of your interests and advertise to you based on those interests (“interest-based advertising”); and measuring the effectiveness of our communications with you and advertising campaigns, including identifying how and when you engage with our communications.

c. Information Collected

These Cookies collect data about you and your device listed above in Section 3 (“Types of Personal Information We Collect”), such as your IP address, location (both approximate and precise), cookie ID, device ID, Ad ID, click ID, operating system, device type, device settings and other device information, browser used, browser history, search history, pages viewed, search queries, login information, information entered into webforms, and other information about how you interact with our Digital Properties (such as pages on our Digital Properties that you have viewed).

  1.  Disclosures of Your Information

We may disclose information to third parties or allow third parties to directly collect information using Cookies on our Digital Properties, such as social media companies, advertising networks, companies that provide analytics including ad tracking and reporting, security providers, and others that help us operate our business and Digital Properties. These companies may use these technologies to gather information about both your visits to our Digital Properties and your visits elsewhere on the Internet, including to provide interest-based advertising.

  1.  Your Choices

As described in Section 13 (“California Consumer Privacy Act”) below, residents of California may be able to disable Cookies that constitute a “sale” or “sharing,” as those terms are defined under the California Consumer Privacy Act.

In addition, you may be able to control how we use Cookies through other mechanisms. Please be aware that if you disable the use of Cookies, the functionality of our Digital Properties may be negatively impacted, and certain areas or features may not display or work correctly. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your Cookies, you may need to repeat this process for each computer, device, or browser.

  • Interest-Based Advertising. Some of the third parties we work with may participate in the Digital Advertising Alliance (“DAA”). The DAA provides a mechanism for you to opt out of interest-based advertising performed by members at https://youradchoices.com/. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives. If you are using a mobile device, you can manage interest-based ads on your device by adjusting the settings provided by your device manufacturer or the operating system provider: Manage settings on iOS devices; and Manage settings on Android devices.
  • Browser Settings. You can also refuse or delete cookies using your browser settings. Please be aware that not all Cookies can be deleted through browser settings. Please refer to your browser’s Help instructions to learn more about how to manage Cookies, or use the following links for instructions for commonly used browsers: Apple Safari; Google Chrome; Microsoft Edge; and Mozilla Firefox.
  • Do Not Track. Some browsers have incorporated a Do Not Track (“DNT”) feature or setting you can activate to signal to the website you are visiting that you do not wish to have information about your online searching and browsing activities collected and used over time and across websites. As there is not yet a common agreement about how to interpret DNT signals, we do not honor DNT signals from website browsers at this time.

7. Security

We maintain reasonable security procedures and technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, disclosure, access, alteration, or use. Nevertheless, transmission via the Internet and online digital storage are not completely secure and we do not guarantee the security of your information collected through the Services.

8. Children’s Privacy

Interactions with us are intended for individuals 16 years of age and older. Our interactions are not directed at, marketed to, nor intended for, children under 16 years of age. We do not knowingly collect any information within the scope of this Statement, including personal information, from children under 16 years of age. If you believe that we have inadvertently collected personal information from a child under the age of 16, please contact us at the address in Section 12 (“Contact”) below and we will use reasonable efforts to delete the child’s information from our databases. 

9. External Links

When interacting with us you may encounter links to external sites or other online services, including those embedded in third-party advertisements or sponsored content which we do not control. We are not responsible for the privacy practices and data collection policies for such third-party services. You should consult the privacy statements of those third-party services for details. 

10. Rights and Additional Disclosures for Financial Consumers

Individuals who seek or obtain financial products or services from us (“Financial Consumers”) may have rights in information subject to financial or insurance privacy laws, such as the Gramm-Leach-Bliley Act and similar state financial or insurance privacy laws (“Financial Information”). Financial Consumers may request to exercise these rights by mail at Customer Service, eHealthInsurance.com, 9190 Priority Way West Dr, Ste 110, Indianapolis, IN 46240:

  • Limiting Data Sharing with Non-Affiliated Third Parties: You may request to opt out of certain disclosures of your Financial Information to non-affiliated third parties.
  • Limiting Data Sharing with Affiliated Third Parties: You may request that we not disclose consumer report information that is used for insurance eligibility purposes with affiliates for them to market their products and services to you.
  • RESIDENTS OF AZ, CA, CT, GA, IL, MA, ME, MN, MT, NV, NJ, NC, OH, OR and VA. You may request to access or to correct or delete your Financial Information using the methods above. You must state your first and last name, zip code, date of birth, email address, eHealth ID (if any), and phone number, and the Financial Information you want to access or to correct or delete. If you request to access your Financial Information, we will tell you what Financial Information we have. You may access and copy the Financial Information at our office or ask that we mail you a copy for a fee. If you ask us to correct your Financial Information, we will let you know what actions we take. If you do not agree with our actions, you may send us a statement explaining what you believe is the correct Financial Information.
  • CALIFORNIA RESIDENTS. Important Privacy Choices for California Residents. If you are a resident of California, we will not disclose your Financial Information with any non‑affiliated companies for marketing unless the disclosure is otherwise permitted by law or you give us your express prior consent. We may also disclose your Financial Information for marketing purposes to affiliated companies, and to non‑affiliated companies with which we have contracts to provide financial products or services to you, but not until we provide you with an opportunity to opt‑out of such disclosure and you do not opt‑out. Nothing in this Privacy Statement limits any rights California residents may have under California state law.
  • MONTANA RESIDENTS. If you are a resident of Montana, we will not disclose your Financial Information to non‑affiliated companies for their marketing purposes unless the company has an insurance license, you authorize us to do so, or as permitted by law. You may request a record of any subsequent disclosures of medical information using the methods above.
  • NEVADA RESIDENTS. We provide this notice under state law. To be placed on our internal Do Not Call list, contact us using the methods above and provide your name, address, and the telephone numbers you wish to include on the list. If you have questions, you may contact us or the Nevada Attorney General at: McCarran Center – State of Nevada Campus, 1 State of Nevada Way Suite 100, Las Vegas, NV 89119; (702) 486‑3132; or AGInfo@ag.nv.gov.
  • RESIDENTS OF NEW MEXICO, NORTH DAKOTA, AND VERMONT. If you are a resident of New Mexico, North Dakota, or Vermont, we will not disclose your Financial Information to non‑affiliated companies unless you expressly authorize us to do so. This does not prohibit us from disclosing your Financial Information to third parties that perform business services for us or that assist us in servicing your policy or fulfilling a request made by you, or as otherwise permitted by law.

We will make reasonable efforts to respond to your request but cannot guarantee that we will be able to honor your request. For example, where permitted or required by law we generally will retain your information for as long as your account is active, as needed to provide you services, or for other business purposes. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, where permitted or required by law.

Please note that once your application has been submitted to your chosen health insurance company or any other relevant party (such as the federal government in the case of an application involving advanced premium tax credits) you may have to contact the insurance company or such other party directly to update your application and/or exercise your individual rights under HIPAA. 

11. Other Choices

You may request to update your name, email address and password by clicking on the “Sign in” or “My Account” link on this website and signing in using your email address and password.

You can opt-out of receiving promotional email messages by clicking on the “Unsubscribe” link contained at the bottom of each email, text message marketing by responding “STOP” to the text message, or by contacting us using the information in Section 12 (“Contact”) below To opt-out of receiving satisfaction surveys, you may contact us using the information in Section 12 below. Please note that you will still receive communications from us regarding your insurance quote, application, policy or advanced premium tax credit even if you opt-out of receiving our surveys and/or notices of additional products or services.

12. Contact

If you have questions regarding this Statement or our privacy practices, please contact us at:
eHealthInsurance Services, Inc.
ATTN: Privacy
9190 Priority Way West Dr, Ste 110
Indianapolis, IN 46240
privacy@ehealth.com
TELEPHONE: 800-977-8860

13. California Consumer Privacy Act

As an insurance broker, eHealthInsurance rarely handles personal information that is subject to the California Consumer Privacy Act (“CCPA”). In the very limited cases where we may collect information about certain California residents subject to the CCPA, this section applies.  This CCPA notice does not apply to the following information:

  • Any information provided in connection with seeking a financial product or service (including any data subject to the Gramm-Leach Bliley Act (“GLBA”) or the California Financial Information Privacy Act (“CalFIPA”)) and information subject to the Fair Credit Reporting Act (“FCRA”).
  • Protected health information subject to HIPAA that we handle on behalf of our health insurance carrier partners. In such cases, we are bound by stringent legal and contractual obligations to those partners. If you have questions about how such information is used or shared, please contact your insurance provider. We do not control and are not responsible for their privacy and data processing practices.
  • Information about individuals who are not California residents.
  • Information about our own employees, contractors, agents, and job applicants. Such information is subject to a separate privacy notice that we will make available to the applicable individuals.
  • Information we collect from individuals with whom we engage in solely business-to-business communications and transactions, including due diligence transactions, such as information about the employees of our business clients.

References to “personal information” in this section mean personal information subject to the CCPA (except where specified).

13.1 Sources of Personal Information

We collect limited personal information subject to the CCPA from the following types of sources:

  • Cookies (Section 2(b))

13.2 Types of Personal Information

We collect the following types of personal information:

  • Identifiers (Section 3(a))
  • Customer records (Section 3(b))
  • Internet or other electronic network activity information (Section 3(e))
  • Geolocation information (Section 3(f)
  • Inferences (Section 3(j))

13.3 Uses of Personal Information

We may use personal information for the following purposes:

  • To enable interactions between you and us (Section 4(a))
  • For our own internal business purposes (Section 4(b))
  • For our internal research and product improvement purposes (Section 4(c))
  • For legal, safety, or security reasons (Section 4(d))
  • In a de-identified, anonymized, or aggregated format (Section 4(e))
  • For marketing purposes (Section 4(f))
  • In connection with a corporate transaction (Section 4(g))
  • With your consent (Section 4(i))

13.4 Disclosures of Personal Information

We may disclose personal information to the following categories of recipients:

  • Affiliates and subsidiaries (Section 5(a))
  • Third parties that help fulfill requests (Section 5(d))
  • Service providers (Section 5(e))
  • Professional consultants (Section 5(f))
  • Business partners (Section 5(g))
  • For legal, security and safety purposes (Section 5(h))
  • In connection with a corporate transaction (Section 5(i))
  • To others with your consent (Section 5(k))

We use and disclose sensitive personal information only for (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) short-term, transient use, including nonpersonalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) purposes that do not infer characteristics about you.

We retain your Personal Information as long as necessary to fulfill the purposes outlined in this Statement unless we are required to do otherwise by applicable law. This includes retaining your Personal Information to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your Personal Information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest.

The following chart contains more detail about the categories of personal information we collected and to whom it was sold or shared in the past 12 months.

Categories of Personal Information We CollectCategories of Third Parties to Whom We Sold or Shared Personal Information
Identifiers (Section 3(a))Advertisers, ad platforms and networks, and social media platforms Third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”)Referral, lead generators, and other commercial data partners Partners who work with us on promotional opportunities, including co-branded products and services 
Customer records (Section 3(b))Advertisers, ad platforms and networks, and social media platforms Third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”)Referral, lead generators, and other commercial data partners Partners who work with us on promotional opportunities, including co-branded products and services 
Internet or other electronic network activity information (Section 3(e))Advertisers, ad platforms and networks, and social media platforms Third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”)Referral, lead generators, and other commercial data partners Partners who work with us on promotional opportunities, including co-branded products and services 
Geolocation data (Section 3(f))Advertisers, ad platforms and networks, and social media platforms Third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”)Referral, lead generators, and other commercial data partners Partners who work with us on promotional opportunities, including co-branded products and services 
Inferences (Section 3(j)).Advertisers, ad platforms and networks, and social media platforms Third parties whose Cookies we use as described in Section 6 (“How We Use Cookies and Automatic Data Collection Tools”)Referral, lead generators, and other commercial data partners Partners who work with us on promotional opportunities, including co-branded products and services 

Your Rights

Depending on our interactions with you and subject to legal limitations and exceptions, California residents may have the following rights, which they may exercise by using our webform or emailing us privacy@ehealth.com:

  • Right to Know. You may have the right to request information about the categories of personal information we have collected about you, the categories of sources from which we collected the personal information, the purposes for collecting, selling, or sharing the personal information, and the categories of third parties with whom we have disclosed your personal information (“Categories Report”).  You may also request information about the specific pieces of personal information we have collected about you (“Specific Pieces Report”).
  • Right to Delete. You may have the right to request that we delete personal information that we have collected from you.
  • Right to Correct. You may have the right to request that we correct inaccurate personal information that we maintain about you.
  • Right to Opt Out of Sale and Sharing. You may have the right to opt out of the sale and sharing of personal information (as such terms are defined under the CCPA). We do not knowingly sell information about minors under 18. You can exercise the Right to Opt Out of Sale and Sharing by clicking the “Your Privacy Choices” link in the website footer and following the instructions provided to opt out of the sale, sharing, or use of personal information for targeted advertising purposes. If you require additional assistance exercising your rights, please contact us at privacy@ehealth.com. To the extent required by law, we will honor opt-out preference signals sent in a format commonly used and recognized by businesses, such as an HTTP header field or JavaScript object. We will process opt-out preference signals at the browser level.

Non-Discrimination and Non-Retaliation: In accordance with applicable law, we will not discriminate or retaliate against you for exercising these rights.

Verification: To process rights requests, we may need to obtain information to locate you in our records or verify your identity depending on the nature of the request.  For Right to Know, Delete, and Correct requests, we collect information necessary to verify your identity and that you are a resident of California, including first and last name, zip code, date of birth, phone number, email address, eHealth ID, and preferred contact method. 

Please be aware there might be circumstances where we will not honor your request, as permitted under the CCPA. For example, if we are not able to verify your identity and that you are a California resident, we may not honor your Right to Know, Correction, or Deletion request. Additionally, we may not delete your personal information if an exception under the CCPA applies to your deletion request.

Authorized Agents: Authorized agents may exercise rights on your behalf by submitting a request emailing us privacy@ehealth.com.  

  • If you designate an authorized agent to submit a Right to Know, Delete, or Correct request, we may reach out to you directly to verify your own identity or to confirm that you provided the authorized agent with permission to submit the request.   
  • If you designate an authorized agent to submit a Right to Opt-Out of Sale and Sharing request, we may seek additional information directly from the authorized agent to process the request.   

California Shine the Light: If you are a California resident, you may opt out of sharing your personal information subject to California Civil Code §1798.83 (the “Shine the Light law”) with third parties for those third parties’ direct marketing purposes by clicking the “Your Privacy Choices” link in the website footer and following the instructions provided. If you require additional assistance, please contact us at privacy@ehealth.com.