HIPAA Authorization

Notice of Privacy Practices

Last updated: December 3, 2025

Important Notice About Your Health Information

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Our Commitment to Your Privacy

Healthy Hope is committed to protecting the privacy of your health information. We understand the sensitive nature of health-related data and are required by law to maintain the privacy of your Protected Health Information (PHI) and to provide you with notice of our legal duties and privacy practices.

This notice applies to all health-related information we create, receive, or maintain in connection with helping you find and enroll in health insurance coverage.

What is Protected Health Information (PHI)?

Protected Health Information includes any information that:

  • Relates to your past, present, or future physical or mental health condition
  • Relates to the provision of health care to you
  • Relates to payment for health care services
  • Identifies you or could reasonably be used to identify you

Examples include: Your name, address, date of birth, Social Security Number, medical history, prescription information, health insurance ID numbers, and any health conditions or treatments discussed during the enrollment process.

How We May Use and Disclose Your PHI

1. Treatment, Payment, and Health Care Operations

We may use and disclose your PHI to help you obtain health insurance coverage, process your application, determine eligibility for subsidies, and communicate with insurance carriers on your behalf.

2. With Your Authorization

Except as described in this notice, we will not use or disclose your PHI without your written authorization. You may revoke your authorization at any time by submitting a written request, except to the extent we have already acted based on your authorization.

3. As Required by Law

We may disclose your PHI when required by federal, state, or local law, including to public health authorities, government oversight agencies, or in response to a court order.

4. Health Insurance Carriers

We share your information with health insurance companies to obtain quotes, process applications, and facilitate enrollment. This includes carriers like Blue Cross Blue Shield, UnitedHealthcare, Aetna, Cigna, and others.

5. Business Associates

We may disclose your PHI to business associates who perform services on our behalf and who are contractually obligated to protect your information. These include our technology providers, data storage services, and CRM systems.

Your Rights Regarding Your PHI

Under HIPAA, you have the following rights:

  • 1.
    Right to Access

    You have the right to inspect and obtain a copy of your PHI that we maintain.

  • 2.
    Right to Amendment

    You may request that we amend your PHI if you believe it is incorrect or incomplete.

  • 3.
    Right to Accounting

    You may request an accounting of certain disclosures we have made of your PHI.

  • 4.
    Right to Restrictions

    You may request restrictions on how we use or disclose your PHI. We are not required to agree to your request, but if we do, we will honor those restrictions.

  • 5.
    Right to Confidential Communications

    You may request that we communicate with you in a certain way or at a certain location.

  • 6.
    Right to a Paper Copy

    You have the right to obtain a paper copy of this notice upon request.

How We Protect Your Information

We implement administrative, physical, and technical safeguards to protect your PHI:

Technical Safeguards

  • AES-256 encryption for data at rest
  • TLS 1.3 encryption for data in transit
  • Multi-factor authentication
  • Regular security audits

Administrative Safeguards

  • Employee training on HIPAA compliance
  • Business associate agreements
  • Access controls and audit logs
  • Incident response procedures

Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by law. Notification will be made without unreasonable delay and in no case later than 60 days after we discover the breach. Notification will include a description of what happened, the types of information involved, steps you should take to protect yourself, and what we are doing to investigate and mitigate the breach.

Filing Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

To file a complaint with HHS:

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
www.hhs.gov/ocr/complaints

Contact Our Privacy Officer

Healthy Hope

HIPAA Privacy Officer

Phone: 1-877-421-8620

Email: privacy@insurancemadesimple.ai

HIPAA Requests: hipaa@insurancemadesimple.ai

General: support@insurancemadesimple.ai

Changes to This Notice

We reserve the right to change this notice at any time. Changes will apply to PHI we already have about you as well as any information we receive in the future. The new notice will be available on our website and upon request. The effective date of this notice is shown at the top of this page.

Related Policies