Effective Date: June 1, 2026

Notice at Collection and Privacy Policy for California Residents

This California Notice at Collection and Privacy Policy (“CCPA Disclosure”) explains how Geozoning Inc. d/b/a Priority Health and its subsidiaries and affiliates (“Priority Health”, “us”, “our”, or “we”) collect, use, disclose, sell, share, and/or retain personal information subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CCPA”). This CCPA Disclosure applies solely to California residents (“consumers” or “you”).

This CCPA Disclosure does not apply to any information we may collect and use about you that is governed by or held in conformity with the Health Insurance Portability and Accountability Act of 1996, as amended, including its implementing regulations (“HIPAA”). For more general information about our privacy practices, please see our Privacy Notice.

Notice at Collection

The following identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared, in the last 12 months.

Category Sold to Third Parties or
Shared with Third Parties for Cross-Context Behavioral Advertising
Identifiers: For example, real name, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security number, employee number (when applicable), or other similar identifiers. Yes
Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, name, signature, Social Security number, physical characteristics or description, address, telephone number, insurance policy number, employment, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. No
Characteristics of CA or Federal Protected Classifications: For example, age, medical condition, physical or mental disability, and sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions) as necessary to request an insurance quote or enroll in insurance.
You may also voluntarily disclose your race, color, ancestry, national origin, citizenship, religion or creed, marital status, veteran or military status, genetic information (including familial genetic information), and sexual orientation. 		No
Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. No
Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. Yes
Surveillance Data: For example, call recordings or other audio, electronic, or visual monitoring or surveillance. No

Purposes for Collecting and Using Personal Information

We may collect and use the above-listed categories of personal information for various business purposes, including:

  • To fulfill or meet the reason for which the information is provided;
  • For our internal operation purposes;
  • To comply with requirements imposed by law, regulations, contracts, and programmatic recordkeeping requirements, including for auditing relating to consumer transactions including ad impressions and compliance with regulations;
  • To protect and enforce our rights and the rights of other users against unlawful activity, including fraud and security detection;
  • To operate our website, including, but not limited to, providing quotes, and submitting and monitoring health insurance applications, website administration, internal operations, troubleshooting, data analysis, testing, research, statistical and survey purposes, and debugging to identify and repair errors;
  • Short-term data use for the current interaction that is not used to build a profile;
  • Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service providers (e.g., financing, advertising or marketing, analytics);
  • To communicate with you or provide you with information and advertisements about products, services, and promotions, from us or third parties, that may interest you;
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred;
  • Undertaking internal research for technological development and demonstration or to otherwise operate, evaluate, and improve our business, as well as our products and services;
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business;
  • To share the personal information with service providers to carry out other business purposes; or
  • For any other purpose for which to may provide consent.

Sensitive Personal Information

Some of the personal information that we collect from you may be considered “sensitive personal information” under the CCPA, such as your Social Security number, account log-in, or health information. We have not sold or shared your sensitive personal information, and we do not use or disclose sensitive personal information for purposes other than those business purposes specifically permitted under the CCPA, including:

  • To perform services or provide goods you request and reasonably expect from us;
  • To detect, prevent, and investigate security incidents involving your information;
  • To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible;
  • To ensure the safety of you and others;
  • To enhance your experience on our website in real time, so long as we do not disclose your information to a third party;
  • To perform services for our business needs such as maintaining accounts, providing customer service, and fulfilling orders; or
  • To ensure the quality or safety of a product, service, or device.

As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

We may collect sensitive personal information from the following categories of sources:

  • You directly, or
  • Third parties, including affiliates or third parties with which we partner.

We do not collect: contents of a consumer’s mail, email, and text messages (unless we are the intended recipient of the communication); genetic data; or biometric information for the purpose of unique identification.

Your Right to Know

You have the right to request any of the following:

  • The categories of personal information we have collected about you.
  • The categories of sources from which the personal information is collected.
  • The business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g., targeted advertising).
  • The categories of third parties to whom we disclose personal information.
  • The specific pieces of personal information we have collected about you.

You can exercise this right through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

What We Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out

We have disclosed to third parties, including for cross-context behavioral advertising purposes, personal information in the preceding 12 months as set forth in the table below. This may be considered sale or sharing of personal information. However, we have not sold or shared and do not sell or share your information which is considered sensitive personal information under the CCPA.

General Personal Information

Categories sold to or shared with third parties over the last 12 months Categories of third parties to whom this category of personal information has been sold or shared
Identifiers
  • Social media companies and advertising partners
  • Web analytics providers
Internet or Other Similar Network Activity
  • Social media companies and advertising partners
  • Web analytics providers

The purpose of the notice of Right to Opt-Out is to inform you that as a California resident, you have the right to direct us to stop selling or sharing your personal information, which is called the “Right to Opt-Out.” We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

You may exercise your Right to Opt-Out by: (1) Clicking the “Do Not Sell or Share My Personal Information” link in the footer of the website, or (2) Rejecting non-essential cookies via the website cookie banner or submitting your request through an opt-out preference signal (described further in the section titled “Opt-Out Preference Signals”).

Your Right to Request Correction of Inaccurate Personal Information

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used for the purpose of correcting your personal information and complying with our recordkeeping requirements. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months, unless you provide new or additional documentation that the information at issue is inaccurate.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

Your Right to Request Deletion of Your Personal Information

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

There may be scenarios where we deny your deletion request, including when required by applicable laws. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

Submitting a Verified Consumer Request

You have the right to submit verified consumer requests to know information, to correct information, or for deletion.

The response to a request to know will provide all personal information collected and maintained about you in the prior 12 months, unless doing so proves impossible or would involve disproportionate effort. Please note that we are not required to provide personal information to you more than twice in a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can submit a verified consumer request through any of the below methods:

  • Emailing us at customer_support@healthsherpa.com
  • Calling us at (855) 772-2663

Submitting a request via phone or email will require you to provide your name, email address, and phone number. If we are unable to verify your identity, we may ask you to provide additional information necessary to verify your identity.

If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies.

Your request will be verified by matching the information you provide to information that we have collected. This process may include verifying your request through your email address on record, calling you on your phone number on record (which may include the use of an automated dialer), sending you a text message and requesting that you text us a confirmation, or sending you a confirmation through US mail.

Once we receive your verifiable consumer request, we will work to respond to your request within 45 calendar days, if we are able to verify your identity. In certain circumstances, we may require additional time to process your request. We will advise you after receiving your request if such an extension is necessary and why it is needed. If we cannot fulfill your request, our response to you will also explain the reason why we cannot fulfill your request. In any event, we will abide by the timelines imposed by the CCPA to respond to your verifiable request.

We do not charge a fee to process or respond to your consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Requests to Know or Delete for Child Under the Age of 16: We do not knowingly collect information of minors under the age of 16. If you are the parent or guardian of a child under the age of 16 and you believe the child has provided us with personal information, please contact us so that we can assist you with deleting that information from our systems.

Using an Authorized Agent to Submit a Request

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. You may also make a verifiable consumer request or request to opt-out/limit on behalf of your minor child. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request. An authorized agent can submit a request on a consumer’s behalf through any of the below methods:

  • Emailing us at customer_support@healthsherpa.com
  • Calling us at (855) 772-2663

Opt-Out Preference Signals

Our use of cookies and other tracking technologies may be considered a sale or sharing under California law. You can opt out of being tracked by these third parties by rejecting all non-essential cookies, using the “Cookie Preferences” link in the footer of this website. After doing so, a side bar will open where you can choose to end tracking. You may also opt out of non-essential cookies by making a selection in the cookie preference management platform displayed on this website. Your request to opt out of sale/sharing will be linked to your browser only. It is not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to opt out again if you access our website through different online devices (e.g., computers, smartphones, tablets).

Your Right to Non-Discrimination for the Exercise of a Privacy Right

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
  • Retaliate against you, as an employee, applicant for employment, or independent contractor.

Data Retention

The categories of personal information or sensitive personal information we collect from you may be retained by us for as long as your account is active or as needed to provide the services, including with respect to our compliance with our legal obligations.

Changes to Our CCPA Disclosure

We reserve the right to amend this CCPA Disclosure at our discretion and at any time. When we make changes to this CCPA Disclosure, we will post the updated notice on the website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Other California Privacy Rights

Under California’s “Shine the Light” law (Ca. Civ. Code Section 1798.83), California residents are entitled to request and obtain, once per calendar year, information about when we share your personal information with third parties for those third parties’ own direct marketing purposes. To request this information, please email us at the address indicated below in the “Contact for More Information” section below and note “California Shine the Light” in the subject line.

Contact for More Information

If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us via phone at (855) 772-2663, via email to customer_support@healthsherpa.com, or write to us at:

HealthSherpa
Attn: Legal Department
PO Box 1739
Sacramento, CA, 95812