California Privacy Rights
This notice supplements our Privacy Policy for California residents where the California Consumer Privacy Act, as amended, applies. It describes this website’s information practices and ways to exercise your rights.
Information and disclosures
This site handles identifiers and contact information, location, date of birth and derived age, current coverage information, internet activity, consent-session records, and area plan availability. Sources include you, your browser, lookup services, and CMS. The table identifies purposes and recipient categories.
| Information | Why we use it | Who receives it |
|---|---|---|
| Contact identifiers First and last name, email address, and phone number on a contact request. Privacy forms may request fewer details. | Respond to requests, arrange requested agent contact, and honor privacy choices. | Operational providers; the receiving agency identified through the contact form’s marketing-partner link. Privacy requests are not marketing leads. |
| Location, age, and coverage details ZIP, city, state, county, date of birth, derived age, and current coverage answer. | Look up area plan availability and provide context for requested agent contact. | CMS receives location and coverage year only; lookup providers receive location inputs. The receiving agency receives the submitted profile, including date of birth and coverage answer. |
| Internet and device information IP address, approximate country and state, browser information, page requests, campaign tags, and first-party preferences. | Run and secure the website, show regional content, remember a check, identify a referral's source, and honor opt-outs. | Hosting and technical providers. Campaign tags accompany a submitted referral. No advertising pixels or cross-site advertising tools are enabled. |
| Plan availability and request records Area plan counts, consent and referral references, submission outcomes, delivery errors, privacy requests, and suppression records. | Display results, document requested contact and delivery, investigate failed submissions, process privacy requests, and prevent unwanted referrals. | The receiving agency gets the submitted profile and consent record. Convoso processes submitted lead data for the receiving agency. Operational providers support request handling and records. |
| Consent-session records Form content, disclosures, entered contact details, location and coverage answers, interactions, IP address, and browser/device details. Date-of-birth input values are masked. | Document the form experience and consent. Recording can occur before submission, including if you leave without submitting. | ActiveProspect’s TrustedForm. A submitted referral includes its certificate URL for the receiving agency. |
A paid referral may be a sale of contact identifiers, submitted location, date of birth and derived age, coverage details, and campaign information. No cross-context advertising sharing is enabled. Location, age, and coverage answers support the requested check and referral; we do not use them to create unrelated sensitive-characteristic advertising profiles. See our retention explanation.
What you can request
- Know and access your personal information, including relevant sources, purposes, and disclosures.
- Correct inaccurate information or request deletion, subject to applicable exceptions.
- Opt out of sale or sharing.
- Limit uses or disclosures of sensitive personal information where that right applies.
- Exercise these rights without unlawful discrimination.
How to submit a request
Do Not Sell or Share My Personal Information →
Access, correction, deletion, or another privacy request →
A browser opt-out does not require an account, name, or email. Global Privacy Control is recognized. For other requests, use the contact details associated with your earlier interaction. We may verify identity or a representative’s authority before disclosing, correcting, or deleting information; opt-outs do not require that verification.
Where applicable, access, correction, and deletion requests are acknowledged within 10 business days and ordinarily answered within 45 calendar days, with notice of a permitted extension. Applicable sale/sharing and sensitive-use restrictions are processed as soon as feasible and within 15 business days. These limits do not delay an immediate browser preference or new-referral suppression.
Information necessary to document a request, comply with law, or prevent unwanted contact may be retained. Ask us to explain or review a response through the same request form.