Consumer Health Data Privacy Policy

1. Scope and standalone statement

This is our Consumer Health Data Privacy Policy. It is separate from our general Privacy Policy on purpose. Washington’s My Health My Data Act requires us to keep a standalone consumer health data policy, with its own prominent link on our homepage.

This policy covers the consumer health data we collect through this website and through related communications with us, such as calls, emails, text messages, and contact-form submissions. J&R Health Insurance LLC (“J&R Health Insurance”) is an insurance brokerage. If we handle data on behalf of a health plan or carrier as their business associate, for example data about your active enrollment in a plan, that data is protected health information under HIPAA and is governed by HIPAA rather than this policy. We do not treat the information you give us through this website, including your form, your questions, and your messages, as protected health information, and this policy fully covers it.

This policy covers Washington consumers, which includes Washington residents and people whose consumer health data is collected in Washington. Our general Privacy Policy covers all other information we handle, and our Terms and Conditions cover your use of this site.

If you live in another state where we are licensed that does not have a standalone consumer health data law, this consumer health data policy may not apply to you. Our general Privacy Policy explains the privacy rights you have under your state’s law, and we will honor those rights to the extent the law gives them to you.

2. What some words mean

These short descriptions are here to help you read this policy. The full legal meanings are set by Washington law.

• Consumer health data. Information that can be linked to you and that relates to your past, present, or future physical or mental health.
• Collect. To get, keep, use, or create consumer health data in any way.
• Share. To give consumer health data to another company or person.
• Sell. To exchange consumer health data for money or other valuable things.
• Consent. Your clear, freely given “yes,” made by a real action, after we tell you what you are agreeing to. We cannot get it through pre-checked boxes, confusing designs, or buried terms.
• Processor. A company we hire to handle data for us, under a contract, and only for us.
• Affiliate. A company that shares common branding with us and that controls us, is controlled by us, or is under common ownership or control with us.

3. Categories of consumer health data we collect

We collect a small amount of consumer health data, mostly what you give us directly. This can include:

• the fact that you contacted us for help with Medicare, Veterans coverage, or another health plan
• the kind of coverage you tell us you are interested in, if you mention it
• any health needs or situation you choose to share so we can help you

Even when you do not describe a health condition, the fact that you ask us about coverage can suggest something about your health, so we treat this information as consumer health data.

We do not collect your medical records. We do not have a patient portal, so we do not collect data through one. We do not track you across other websites, and we do not use advertising cookies or pixels.

Please do not send us medical records, your Social Security number, or payment card numbers through the website form. If we ever need sensitive information like that, we will ask for it through a secure method.

4. Sources of consumer health data

We collect most of this data directly from you. You give it to us when you:

• fill out the contact or lead form on this site
• send us a message, email, or text
• talk with us by phone

We may also get this data from a person you ask to help you, such as a family member, caregiver, or authorized representative.

On occasion, our marketing partner Advocate Health Advisors sends us a small number of prospect referrals. When that happens, we treat any consumer health data in those referrals under this policy.

We do not buy or sell consumer health data, and we do not collect it by tracking you across other websites.

5. How we use consumer health data

We use your consumer health data to:

• contact you about the coverage help you asked for
• find and explain plan options that may fit your needs
• answer your questions and provide our brokerage services
• keep the records the law requires us to keep, and guard against fraud and security threats
• meet our legal and regulatory duties

We do not use this data for unrelated purposes. If we ever want to use it for a new purpose, or collect a new type of it, we will ask for your separate consent first.

We do not use your consumer health data for targeted advertising. This website has no advertising cookies, pixels, or trackers. If we ever add tools like those, we will update this policy first and ask for any consent the law requires.

6. Data we share and why

We do not sell your consumer health data. We do not share it with other companies for their own advertising or marketing. We do not sell leads or hand off the information you give us to a third party.

To run our business and help you, we may share the categories of consumer health data listed in Section 3 with these kinds of recipients:

• Insurance carriers and plans, when you ask us to help you compare options or apply, and only as much as is needed
• Service providers (processors) that handle data for us under a written contract, and only to provide services to us (we name these in the Processors, third parties, and affiliates section)
• Professional advisors, such as our lawyers or accountants
• Government agencies or courts, when the law requires it
• A future owner of our business, if we are ever part of a merger, sale, or similar change, and as the law allows

7. Processors, third parties, and affiliates

We use service providers, also called processors, to run parts of our business. A processor may only handle your data to provide services to us, under a written contract.

The processor that stores your contact information and messages is AgencyBloc, our customer relationship management system.

When you opt in to text messages, Intulse handles our text messaging for us as a processor.

Our email runs on Google Workspace, also as a processor. If you email us, including a privacy-rights or accessibility request, Google Workspace stores and delivers those messages for us under a written contract.

Our website runs on privacy-first tools that do not use tracking cookies: Cloudflare for security and basic, cookieless analytics. Our fonts are served from our own website rather than a third-party font service, so viewing a page does not send a request to an outside font provider. These tools are not used to track you across other websites.

We have no affiliates as that term is defined by Washington law, meaning a company that shares common branding with us and that controls us, is controlled by us, or is under common ownership or control with us. Because we have no affiliates, we do not share your consumer health data with any. If this ever changes, we will name each specific affiliate here, as the law requires.

Advocate Health Advisors is our upline marketing partner. It is a separate company, it is not our affiliate, and we do not share your consumer health data with it.

8. Your rights

You have these rights for your consumer health data:

• Confirm and access. You can ask whether we are collecting, sharing, or selling your data, and you can ask for a copy of it.
• See who has it. You can ask for a list of every third party and affiliate we have shared or sold your data with. For each one, we will give you an active email address or another online way to contact them.
• Withdraw consent. You can take back your consent to our collecting or sharing your data at any time.
• Stop collecting, sharing, or selling. Where the law gives you this right, you can ask us to stop collecting, sharing, or selling your data. We do not sell it.
• Delete. You can ask us to delete your data.

We will not deny you our services, charge you a different price, or treat you differently because you used any of these rights.

9. How to exercise your rights

To make a request, contact us by email at info@jrhealthins.com or by phone at (253) 528-8805. To protect your privacy, we will take reasonable steps to confirm who you are before we act on your request. We will not ask for more than we need to do that, and we will use the information you give us only to check your identity.

You do not need to create an account to make a request.

Someone can act for you. You can name another person, such as a family member or caregiver, to make a request for you. We may ask that person for proof that you gave them permission, and we may also ask you to confirm your identity with us directly.

We will respond within 45 days. If we need more time, we may take up to 45 more days, and we will tell you why before the first 45 days end.

Responses are free up to twice per calendar year. If a request is clearly excessive, repetitive, or has no real basis, we may charge a reasonable fee to cover our costs, or decline to act, and we will explain why.

10. Appeals

If we deny your request, we will tell you why and how you can appeal. To appeal, contact us at info@jrhealthins.com with “Consumer Health Data Appeal” in the subject line. We will review your appeal and give you a written answer, with our reasons, within 45 days.

If you live in Washington and you are not satisfied with our answer, you can file a complaint with the Washington State Office of the Attorney General.

11. Deletion and data retention

If you ask us to delete your consumer health data, we will act on your request without undue delay, and in all cases within 45 days after we confirm your identity. We may extend that time once, by up to 45 more days, when reasonably necessary, and we will tell you before the first 45 days end. If some of your data sits on a backup or archive system, we may wait to delete it from that system until the system is next restored or rebuilt, but no later than 6 months after we confirm your identity. We will also tell our processors to delete your data.

We may keep records only when the law requires us to, for example Medicare or insurance recordkeeping rules, or to establish, exercise, or defend a legal claim. We do not keep your consumer health data for marketing or analytics after you ask us to delete it.

12. Consent and no secondary use

We collect, use, or share your consumer health data only for the purposes described in this policy. We will not use it for anything else without asking you first.

We collect your consumer health data with your consent, or because we need it to give you the help you asked for. We share it only as needed to give you that help, such as sending your information to a carrier or plan you chose.

If we ever want to share your consumer health data for any other purpose, we will first ask for a separate consent to share, kept distinct from your consent to collect.

We do not bundle these consents together. We do not use pre-checked boxes. We do not use confusing or pressuring designs to push you toward agreeing. We do not hide these choices inside our Terms and Conditions.

13. No sale without your authorization

We do not sell your consumer health data, and we have no plans to.

The law treats a “sale” as exchanging your data for money or other valuable things. If we ever wanted to sell your data, the law would first require you to sign a separate authorization that meets strict rules. Among other things, that authorization must:

• describe the exact data and who would buy it
• state that we cannot make our help conditional on your signing
• tell you how to take it back
• expire no later than one year after you sign

We would not sell your data unless you signed that authorization, and you could take it back at any time.

We will never require you to allow a sale of your consumer health data to get our help.

14. No geofencing of health-care facilities

We do not use geofencing around any health-care facility. This means we do not set up a virtual boundary around a place where you get health care to find you, track you, collect your consumer health data, or send you ads or messages based on your location. We also do not allow our service providers to do this for us.

In Washington, this applies within 2,000 feet of any place that provides in-person health-care services.

15. Security

We use reasonable administrative, technical, and physical safeguards to protect your consumer health data. We limit who can see it to people and service providers who need it to do their work. We require our service providers to protect your data under a written contract and to use it only as we instruct.

No website, email, phone, or text system is perfectly secure. See the Categories of consumer health data we collect section for what not to send us.

16. Other websites we link to

Our website may link to other sites, such as insurance carriers, government pages, or review pages. Those sites have their own privacy practices, and their own policies govern how they handle your information.

17. Changes to this policy

We may update this policy from time to time. If we make an important change, we will post a notice on our website and update the effective and last-updated dates before the change takes effect. We will not collect, use, or share new types of consumer health data, or use it for new purposes, without first telling you and getting any consent the law requires.

18. Effective date and contact

If you have questions about this policy or your consumer health data, contact us:

Email: info@jrhealthins.com
Phone: (253) 528-8805
Fax: (253) 363-8808
Address:
702 S Hill Park Dr, Ste 205
Puyallup, WA 98373
Hours: Monday to Friday, 9:30 AM to 5:30 PM Pacific time, closed weekends and holidays

If you are deaf, hard of hearing, or have a speech disability, you can reach us through your telecommunications relay service, or by dialing 711. If you need this policy in another format, see our Accessibility Statement, which explains how to request an accessible version.

We will post any changes to this policy on this page and update the effective and last-updated dates.

Change log

• June 30, 2026: Initial publication of this Consumer Health Data Privacy Policy.