Effective Date: October 1, 2025

This Privacy Policy explains how Heather Allred (referred to as "We," "Us," or "Our") collects, uses, discloses, and protects the Personally Identifiable Information (PII) of visitors and prospective clients (referred to as "You" or "Consumer") who use the website "Maryland Open Enrollment" (the "Site").

We are committed to maintaining the privacy and security of your information in compliance with federal and Maryland state regulations, including CMS Marketplace rules and the Maryland Online Data Privacy Act (MODPA).

1. Important Disclosures & Our Role
Not the Government
We are a private, licensed insurance agent in the State of Maryland, and are not the official Maryland Health Connection or the Federally Facilitated Marketplace (HealthCare.gov). Our purpose is to assist you with health insurance plan comparison and enrollment.

Data Minimization (Maryland MODPA)
In accordance with Maryland law, we only collect the minimum amount of personal data that is reasonably necessary and proportionate to provide you with the insurance comparison and enrollment services you request.

Types of Plans Offered
We are authorized to offer both On-Exchange (Qualified Health Plans eligible for tax credits through the Maryland Health Connection) and Off-Exchange (private plans, which are not eligible for tax credits) health insurance products.

2. Information We Collect
We limit our collection of PII and do not collect Protected Health Information (PHI) on our public-facing website forms.

A. Information You Voluntarily Provide (PII)
When you request assistance, subscribe to our newsletter, or use a contact form, you provide the following PII:

• Contact Data: Full Name, Email Address, Phone Number.

• Location Data: Zip Code and/or County of Residence (necessary for rate quoting).

• Demographic Data: Age or Date of Birth (necessary for rate quoting).

• Consent Records: The electronic confirmation of your consent to be contacted.
   

B. Automated and Technical Data
When you visit our Site, we automatically collect non-personally identifiable information, which is used for site function, analysis, and optimization:

• Usage Data: Pages viewed, time spent on site, and referral source.

• Technical Data: IP address, browser type, operating system, and device information.
   

3. How We Use Your Information (Purpose of Collection)
We collect and use your PII solely for the following purposes:
 

1. Lead Generation & Contact: To fulfill your request for assistance by contacting you via the methods you authorized (phone, text, or email).

2. Service Delivery: To conduct preliminary rate comparisons, assess your potential eligibility for subsidies, and schedule consultations.

3. Enrollment Facilitation (CMS/Marketplace): If you elect to proceed, we will use your information to facilitate your application for coverage through the Maryland Health Connection or direct with a private carrier.

4. Compliance: To maintain the records of consent required by CMS and the Telephone Consumer Protection Act (TCPA) for a minimum of ten (10) years.

5. Internal Business Operations: To improve our services and conduct necessary business analysis.
    

4. Disclosure and Sharing of Your Information
We do not sell your personal data to third parties. We only share your information with trusted entities as strictly necessary to provide the services you have requested:

Recipient: Insurance Carriers
Purpose of Disclosure: To submit your final enrollment application or to request a quote (only after explicit verbal or written consent from you).

Recipient: CMS/Maryland Health Connection
Purpose of Disclosure: To facilitate your eligibility determination and enrollment in a Qualified Health Plan, as authorized by you.

Recipient: Business Associates/Vendors
Purpose of Disclosure: Third-party software (e.g., CRM systems, email marketing platforms) that help us manage and secure your data. All vendors are contractually obligated to maintain data privacy standards.

Recipient: Legal/Regulatory Authorities
Purpose of Disclosure: As required by law (e.g., in response to a subpoena, court order, or to fulfill regulatory audit requests from the Maryland Insurance Administration or CMS).

5. Consumer Rights (In Accordance with Maryland MODPA)
As a Maryland resident, you have the right to:

• Access: Request confirmation as to whether we are processing your personal data and obtain a copy of that data.

• Correction: Request that we correct inaccuracies in your personal data.

• Deletion: Request the deletion of your personal data, subject to certain legal exceptions (e.g., our mandatory record-keeping requirements for compliance purposes).

• Opt-Out: Opt-out of the processing of your personal data for targeted advertising or the sale of your personal data (we do not sell your data).

• Revoke Consent: Revoke your consent to be contacted at any time by replying "STOP" to a text message, using the unsubscribe link in an email, or by contacting us directly (see Section 8).

We will respond to all Consumer Rights Requests within forty-five (45) days, as required by law.

6. Data Security and Retention
We implement and maintain reasonable administrative, technical, and physical safeguards to protect your PII from unauthorized access, use, or disclosure. This includes using Secure Sockets Layer (SSL) encryption for all data transmitted on our Site.
We retain PII for as long as necessary to fulfill the purposes outlined in this Policy, including the mandatory retention period for CMS enrollment and compliance documentation (a minimum of ten years).

7. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or compliance requirements. We will notify you of any material changes by posting the new Policy on this page and updating the Effective Date at the top.

8. Contact Information
If you have questions, concerns, or wish to exercise your Consumer Rights, please contact us directly:

• Agent Name: Heather Allred

• Maryland Insurance License ID: 19354492

• Phone: 410-929-1555

• Email: MsHeatherAllred@gmail.com

• Mailing Address: PO BOX 172, White Marsh, MD 21162