HSA for America Privacy Policy

Personal Data

Personally identifiable information, such as your name, mailing address, email address, telephone number, and date of birth, and information about your household and health plan needs, that you voluntarily give to us when you request an instant quote, schedule a consultation, subscribe to our Maximize Your HSA newsletter, request a free report, submit a form, use the live chat, or apply for a health insurance plan or healthshare membership through us. You are under no obligation to provide us with personal information of any kind; however, your refusal to do so may prevent you from using certain features of the Site.

Derivative Data

Information our servers and third-party services automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, the pages you have viewed directly before and after accessing the Site, your approximate geographic location, and your device identifiers. The third-party technologies that collect this information are described in Section 3.

Mobile and Text Messaging Information

No mobile phone information will be shared with third party affiliates or marketers for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Provide instant quotes and identify health insurance plans, healthshare programs, and related options suited to your situation.
• Fulfill and manage applications, enrollments, and related transactions.
• Schedule and conduct consultations you request.
• Email you regarding your inquiry, account, or application.
• Deliver newsletters, free reports, and other information you request.
• Deliver targeted advertising and measure the effectiveness of our advertising.
• Identify anonymous website visitors for our internal sales and marketing purposes.
• Monitor and analyze usage and trends to improve your experience with the Site.
• Increase the efficiency and operation of the Site.
• Respond to customer service requests.
• Perform other business activities as needed.

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including data analysis, email delivery, hosting services, customer service, and marketing assistance. The specific third-party services used on this Site are described below.

Insurance Applications and Carrier Disclosures

All of the personal information on any application you submit through HSA for America will only be shared with the insurance company or healthshare organization of the plan or program for which you are applying. We will not share your email address with any third party, and your email address will never be sold or distributed for third-party marketing purposes.

Consent Management (Cookiebot by Usercentrics)

We use Cookiebot, a consent management platform provided by Usercentrics A/S, to manage your cookie and tracking preferences. When you first visit our Site, Cookiebot presents a consent banner that allows you to accept or decline the use of cookies and tracking technologies. Cookiebot automatically scans our Site to detect cookies and trackers, categorizes them (necessary, preferences, statistics, and marketing), and blocks non-essential cookies from loading until you provide consent. Cookiebot stores your consent choice in a cookie called “CookieConsent” so that your preference is remembered on subsequent visits. Cookiebot may also collect your IP address (anonymized), consent status, browser type, date and time of consent, and the URL of the page where consent was given. This data is used to document and prove consent as required by law. For more information, visit Cookiebot’s privacy policy at https://www.cookiebot.com/en/privacy-policy/.

Website Analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service provided by Google LLC (“Google”), to help analyze how users use the Site. Google Analytics uses cookies and similar technologies to collect standard Internet log information and visitor behavior information. The information generated about your use of the website (including your IP address) is transmitted to Google servers in the United States. Google uses this information to evaluate your use of the website, compile statistical reports on website activity, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required by law, or where such third parties process the information on Google’s behalf. For more information, visit Google’s Privacy Policy at https://policies.google.com/privacy.

Advertising and Retargeting (Meta Pixel and AdRoll)

We use the Meta (Facebook) Pixel and AdRoll to measure the effectiveness of our advertising, understand the actions people take on our website, and deliver targeted advertisements to you on other websites and platforms. These tools use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet, including your IP address, browser fingerprint, pages visited, and actions taken. This information is used to provide measurement services and target ads. You can opt out of the collection and use of information for ad targeting by visiting http://www.aboutads.info/choices or http://www.youronlinechoices.eu/.

Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure whether visitors who arrive at our Site through Google advertising complete actions such as requesting a quote or scheduling a consultation. This service uses cookies to attribute those actions to our advertising campaigns. The data collected is aggregated for reporting and does not allow us to personally identify you through this tool alone. For more information, visit Google’s Privacy Policy at https://policies.google.com/privacy.

Behavior Analytics and Session Recording (Hotjar)

We use Hotjar to better understand our users’ needs and to optimize the Site experience. Hotjar is a technology service that helps us understand how users interact with our Site through heatmaps, session recordings, and feedback tools. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices, including a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type, browser information, approximate geographic location (country only), and the preferred language used to display our Site. Hotjar stores this information on our behalf in a pseudonymized user profile. For further details, please see Hotjar’s privacy policy at https://www.hotjar.com/legal/policies/privacy/.

Visitor Identification (Visual Visitor / Smart Recognition)

We use Visual Visitor, a visitor identification service, to identify anonymous website traffic for our internal sales and marketing purposes. This service collects your IP address, User Agent, current URL, display resolution, date and time of visit, cookies, and referrer information. Visual Visitor may use cross-device tracking and email hashing (SHA-256) to associate your visit with your name, email address, and other professional data points. This data is encrypted both in transit (TLS 1.2/1.3) and at rest (AES-256) and is used solely within the United States. To opt out of Visual Visitor tracking, you may contact us using the information provided at the end of this policy or visit Visual Visitor’s opt-out page.

Live Chat (Tawk.to)

We use Tawk.to, a live chat service, to communicate with visitors in real time. When you use the chat feature, the contents of your chat, along with your name, email address (if provided), IP address, browser information, and pages visited, are transmitted to and processed by Tawk.to on our behalf to provide the chat service and maintain a record of the conversation. Please do not submit sensitive personal information, such as Social Security numbers or financial account numbers, through the chat. For more information, visit Tawk.to’s privacy policy at https://www.tawk.to/privacy-policy/.

CRM and Marketing Automation (HubSpot)

We use HubSpot as our customer relationship management (CRM) and marketing automation platform. Information you submit through forms on our Site, such as your name, email address, and phone number, along with information about your interactions with our emails and Site, is processed and stored within the HubSpot platform. We use HubSpot to manage inquiries, send communications you have requested, and track the effectiveness of our marketing. For more information, visit HubSpot’s privacy policy at https://legal.hubspot.com/privacy-policy.

Site Performance (NitroPack)

We use NitroPack, a website performance optimization service, to improve page loading speed. NitroPack processes technical information such as your IP address and browser characteristics as necessary to deliver optimized versions of our pages. For more information, visit NitroPack’s privacy policy at https://nitropack.io/page/privacy.

Security and Content Delivery (Cloudflare)

Our Site is delivered through Cloudflare, a content delivery network and security service. Cloudflare processes technical information such as your IP address and browser characteristics to route traffic, protect against malicious activity, and improve performance. For more information, visit Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

Tag Management (Google Tag Manager)

We use Google Tag Manager to manage website tags and scripts through a single interface. Google Tag Manager itself does not collect personally identifiable data. However, it facilitates the deployment of other tags and scripts (described in this policy) which may collect data as described in their respective sections.

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. We use Cookiebot as our Consent Management Platform to give you control over which cookies and tracking technologies are active on our Site. When you first visit, you will be presented with a consent banner where you can accept or decline non-essential cookies. Non-essential tracking technologies are blocked from loading until you provide affirmative consent. You can change your cookie preferences at any time by clicking the Cookiebot icon or “Cookie Settings” link on our Site. Most browsers are also set to accept cookies by default. You can remove or reject cookies through your browser settings, but be aware that such action could affect the availability and functionality of the Site.

For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.

If you are a resident of California, you are granted specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

Under the CCPA/CPRA, California residents have the right to:

• Know what personal information is being collected about them.
• Know whether their personal information is sold or disclosed and to whom.
• Say no to the sale or sharing of personal information (Right to Opt-Out).
• Access their personal information.
• Request deletion of personal information collected from them.
• Request correction of inaccurate personal information.
• Not be discriminated against for exercising their privacy rights.
• Limit the use and disclosure of sensitive personal information.

To exercise any of these rights, please contact us using the information provided below. We will respond to verifiable consumer requests within forty-five (45) days of receipt.

We do not knowingly sell personal information of consumers under 16 years of age.

Under the CCPA/CPRA, California residents have the right to opt out of the “sale” or “sharing” of their personal information. Under these laws, “sale” and “sharing” include allowing third parties to collect personal information through tracking technologies for targeted advertising purposes.

If you wish to opt out of the sale or sharing of your personal information, you may do so by:

• Clicking the “Do Not Sell or Share My Personal Information” link in our website footer.
• Contacting us directly using the information provided below.
• Enabling a Global Privacy Control (GPC) signal in your browser.

We use administrative, technical, and physical security measures to help protect your personal information, including encrypted transmission (HTTPS/TLS) for information you enter on our Site. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you become aware of any data we have collected from children under age 13, please contact us using the contact information provided below.

Our No-Risk, Extremely Satisfied, Money-Back Guarantee

We are so confident that doing business with HSA for America will save you time, money, and frustration, that we guarantee it. If you purchase a health insurance plan from HSA for America and are not totally blown away by the service you receive from us before you apply, while your application is in the approval process, or up to 10 days after you receive your policy, you may cancel and receive an 100% refund.

In return for providing outstanding service and helping you continue to save money, we expect you to be a client for life, and to refer your friends our way as well!

Delivery Method and Timing

Once you have scheduled your consultation, we will contact you by phone promptly at the scheduled appointment time, and take you through our seven step Health Coverage Optimization Program, in order to determine:

• Which insurance companies or healthshare plans will offer the best value for your needs
• Which plan deductibles, coinsurance options, and elective options you should consider
• Any underwriting issues that may affect which company you wish to apply with
• What your contribution plans are for your HSA, and which administrator would best meet your needs