CFM HEALTH LLC & ASSOCIATES

PRIVACY POLICY

Last Updated: October 13, 2026

1. Introduction

CFM Health LLC (“CFM Health,” “we,” “us,” or “our”) respects consumer privacy and is committed to protecting personal information collected through our website, insurance services, telephone communications, and other authorized interactions.

This Privacy Policy explains how we collect, use, disclose, store, and protect consumer information.

2. Information We Collect

Depending on the services requested, we may collect:

Personal Information

• Full name.
• Telephone number.
• Email address.
• Mailing and residential address.
• Date of birth.
• Household information.

Insurance and Eligibility Information

• Household income.
• Employment and eligibility information.
• Existing insurance coverage.
• Insurance carrier and policy information.
• Marketplace application information.
• Government-issued identifiers where necessary and legally permitted.

Health-Related Information

• Preferred physicians or healthcare providers.
• Prescription medication information voluntarily provided for plan comparison.
• Other health-related information necessary for requested insurance assistance.

Technical and Communication Information

• Website usage information.
• IP address and browser information.
• Cookies and similar technologies.
• Communication preferences.
• SMS opt-in and opt-out records.
• Call recordings and customer service interactions.
• Electronic consent records.

We collect information directly from consumers, their authorized representatives, and other sources permitted by applicable law.

3. How We Use Information

CFM Health LLC may use collected information to:

• Provide insurance quotes and plan comparisons.
• Assist with Marketplace applications and renewals.
• Verify information and document consumer authorization.
• Communicate regarding existing policies and requested services.
• Provide customer service.
• Maintain accurate business and compliance records.
• Prevent unauthorized enrollments, fraud, and misuse.
• Meet applicable legal and regulatory obligations.
• Send marketing communications where appropriate consent has been obtained.
• Improve website performance and service quality.

4. Sharing and Disclosure of Information

CFM Health LLC may disclose information to authorized recipients as necessary and legally permitted, including:

• Insurance carriers.
• Federal or state Marketplace entities.
• Licensed agents and authorized agency personnel.
• Enrollment and customer management technology providers.
• Telecommunications and messaging service providers.
• Contracted customer support and administrative service providers.
• Government agencies and regulatory authorities where required.

Service providers are expected to protect consumer information and use it only for authorized purposes.

SMS consent and mobile opt-in information will not be sold, rented, or shared with third parties or affiliates for their independent marketing or promotional purposes.

Text messaging originator opt-in data and consent records will not be shared with third parties for their own marketing activities. Information may be provided to messaging vendors solely to facilitate authorized communications.

5. SMS and Mobile Information Privacy

Consumers who opt in to receive SMS communications may receive insurance-related messages in accordance with the applicable SMS program.

CFM Health LLC maintains communication preferences and opt-out records.

Consumers may withdraw SMS consent at any time by replying STOP to a message or contacting us directly.

Withdrawal of marketing SMS consent does not automatically revoke authorization for insurance services or prevent communications otherwise permitted or required by law.

6. Data Security

CFM Health LLC uses reasonable administrative, technical, and organizational safeguards designed to protect consumer information against unauthorized access, disclosure, alteration, or destruction.

These safeguards may include access restrictions, employee training, authentication controls, secure storage, and vendor oversight.

No electronic transmission or storage system can be guaranteed completely secure.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

Marketplace consumer consent and application-review documentation subject to CMS recordkeeping requirements will be maintained for at least ten years.

Other information may be retained for different periods depending on legal requirements, business needs, and the nature of the records.

8. Consumer Privacy Choices

Subject to applicable law, consumers may request to:

• Access information maintained about them.
• Correct inaccurate information.
• Update communication preferences.
• Withdraw certain authorizations.
• Opt out of marketing communications.
• Request deletion of information where legally available.

Certain records may need to be retained for regulatory, audit, fraud-prevention, or legal purposes.

Requests may be submitted using the contact information below.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to support website functionality, measure traffic, improve user experience, and maintain security.

Where applicable, consumers may manage cookie preferences through their browser settings or available website privacy controls.

Any advertising or analytics technologies used will be subject to applicable consent and privacy requirements.

10. Children’s Privacy

Our website and marketing services are not directed toward children under the age of 13.

We do not knowingly collect personal information directly from children under 13 through our website without legally appropriate authorization.

Information about minor household members may be processed when necessary for insurance applications submitted by parents, guardians, or other authorized representatives.

11. International Service Providers

Certain authorized service providers or personnel may operate outside the United States.

Where personal information is accessed or processed internationally, CFM Health LLC will apply applicable privacy, security, contractual, and regulatory requirements.

Access to Marketplace information will be restricted as required by applicable CMS and platform rules.

12. Third-Party Websites

Our website may contain links to insurance carriers, Marketplace platforms, and other external websites.

These websites may maintain independent privacy policies and security practices.

We encourage consumers to review those policies before submitting personal information.

13. Changes to This Privacy Policy

CFM Health LLC may update this Privacy Policy to reflect changes in business operations, technology, or applicable law.

The revised policy will be posted on our website with an updated effective date.

14. Contact Us

CFM Health LLC

Website: https://cfm-health.org

Email: [Insert Privacy Contact Email]

Telephone: [Insert Telephone Number]

Mailing Address: [Insert Business Mailing Address]

Consumers may contact us with privacy questions, data requests, or concerns regarding the handling of their personal information.