Privacy Policy.

1. Who we are

MaliCare Insurance Agency, trading as MaliCare Agency ("MaliCare", "we", "us" or "our"), is a licensed insurance agency operating in the United States under National Producer Number 21552442, with offices at 11670 Strand Way, Hollywood, Florida 33026. We place coverage across health, life, personal and commercial lines on behalf of individuals, families and businesses, and we support licensed producers and agencies.

This policy applies to malicareagency.com and to every page, form and interactive feature it contains, including the Executive Concierge assistant. By using this site you accept the practices described here. If you do not accept them, please do not submit information to us.

2. Information we collect

We collect the following categories of personal information.

Information you provide directly

• Identifying details such as your name, postal address, email address and telephone number.
• Household details relevant to a quotation, including household size, dates of birth, marital status and dependants.
• Financial details such as estimated household income, which determines eligibility for premium assistance.
• Employment and business details where you are enquiring on behalf of a company.
• Coverage details, including policies you already hold, renewal dates, carriers and declarations pages you choose to upload.
• Licensing and professional details where you are enquiring about joining as an agent or agency.
• The content of your messages to us, including conversations with the Executive Concierge.

Information collected automatically

• IP address, browser type, device type, operating system and approximate location derived from your IP address.
• Pages visited, time spent, referring website and interactions with forms and features.
• Cookie identifiers and similar technologies, as described in section 8.

Information from other sources

• Details supplied by insurance carriers, aggregators and quoting platforms in the course of preparing a quotation.
• Details supplied by lead partners and affiliates, where you previously consented to be contacted.
• Publicly available information and information from service providers used to verify or supplement records.

3. How we collect it

Most information reaches us because you give it to us: by completing a form, uploading a document, telephoning the office, sending an email, or holding a conversation with the Executive Concierge on this site.

Conversations with the Executive Concierge are recorded and retained so that a licensed advisor can continue from where the conversation left off, and so that we can improve the quality of the guidance provided. Please do not submit sensitive information through the assistant that you would not wish us to retain.

4. Why we use it

We use personal information for the following purposes, and no others.

• To respond to your enquiry and to prepare, present and place quotations.
• To match you with a licensed advisor appropriate to your state, the coverage you are asking about and, where possible, the language you prefer.
• To submit applications to carriers and to service policies once they are in force, including renewals and claims support.
• To meet legal, regulatory and licensing obligations, including record-keeping requirements that apply to insurance agencies.
• To operate, secure and improve this website and our internal systems.
• To send you information about products and services that may be relevant, subject to the consent and opt-out provisions in sections 5 and 15.
• To assess applications from prospective agents, agencies and business partners.

We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under applicable state privacy law.

5. Consent to be contacted

When you provide a telephone number through this website, you expressly authorise MaliCare Agency and the licensed advisors acting on its behalf to contact you at that number regarding insurance products and services. That authorisation extends to telephone calls, text messages, artificial or prerecorded voice messages, and automatic telephone dialling systems.

Consent of this kind is not a condition of purchasing any product or service. You may decline it and still obtain a quotation by telephoning or emailing us directly using the details in section 22.

Message and data rates may apply. Message frequency varies. You may withdraw consent at any time by replying STOP to any text message, by telling any representative during a call, or by writing to us. Withdrawal takes effect promptly and does not affect contact that has already occurred. Contact necessary to service a policy already in force may continue where the law permits.

We retain a record of the consent you provided, including the date, the wording shown to you and the number supplied, as required to demonstrate compliance.

6. How we share information

We disclose personal information only in the circumstances described below.

• Insurance carriers, aggregators and quoting platforms, so that quotations can be produced and applications submitted.
• Licensed advisors and appointed producers associated with MaliCare Agency who are handling your enquiry.
• Service providers who act on our instructions, including technology, hosting, communications, document management and analytics providers. They may use the information only to perform services for us.
• Professional advisers such as auditors and legal counsel, where reasonably necessary.
• Regulators and authorities, where required by law, subpoena, court order or a lawful regulatory request, and where necessary to establish or defend legal claims or to protect the rights and safety of any person.
• A successor entity, in connection with a merger, acquisition, reorganisation or sale of assets. Any successor would remain bound by the commitments in this policy in respect of information collected under it.

7. Health information

Where you enquire about health coverage you may choose to give us information about medical conditions, prescriptions or treating physicians. We treat such information as confidential and use it solely to determine which plans are suitable and to submit applications on your behalf.

Health information is disclosed only to the carriers and platforms necessary to place the coverage you have asked about, and to the licensed advisor handling your case. It is not used for marketing and it is not sold. Where the Health Insurance Portability and Accountability Act applies to a particular engagement, we handle protected health information in accordance with it.

8. Cookies and tracking

This site uses cookies and similar technologies. Strictly necessary cookies allow core features to function, including the continuity of your Executive Concierge conversation between pages and visits, which is stored in your own browser. Analytics cookies help us understand how the site is used so that we can improve it.

Most browsers allow you to refuse or delete cookies through their settings. Disabling cookies may prevent parts of this site from working as intended, including saved conversations. Where your browser sends a Global Privacy Control signal, we treat it as a valid opt-out request in the states that recognise it.

9. Data retention

We keep personal information for as long as it is needed for the purposes described in this policy and for as long as applicable law requires. Insurance and licensing regulations impose minimum retention periods for records relating to applications, policies and consent, and in some cases these extend for several years after a relationship ends. Information no longer required is deleted or de-identified.

10. Security

We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction. Access is limited to personnel and service providers who need it to perform their role.

No method of transmission over the internet and no method of electronic storage is completely secure. While we take the protection of your information seriously, we cannot guarantee absolute security, and any transmission is made at your own risk.

11. Your privacy rights

Subject to applicable law and to verification of your identity, you may ask us to:

• confirm whether we hold personal information about you, and provide a copy of it;
• correct information that is inaccurate or incomplete;
• delete information, where no legal or regulatory obligation requires us to keep it;
• restrict or object to particular uses of your information;
• stop sending you marketing communications.

Requests may be made using the contact details in section 22. We will respond within the period the applicable law allows. We will not discriminate against you for exercising any of these rights.

12. State-specific rights

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas and other states with comprehensive privacy legislation hold additional rights, which may include the right to know the categories of information collected and disclosed, the right to opt out of sale or of targeted advertising, and the right to appeal a refused request. MaliCare Agency does not sell personal information and does not share it for cross-context behavioural advertising.

An authorised agent may submit a request on your behalf where the law permits, provided we can verify both the authorisation and your identity. If we decline a request, we will explain why and how you may appeal.

Under California law you may also request details of any disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year.

13. Children

This website is intended for adults. We do not knowingly collect personal information from anyone under thirteen. Where coverage is arranged for a household, information about minors is provided by a parent or legal guardian and used only to place that coverage. If you believe a child has provided information directly, please contact us and we will delete it.

14. Third-party links

This site may link to carrier websites, government resources such as HealthCare.gov, and other third parties. Those sites are governed by their own privacy policies, which we do not control and are not responsible for. We encourage you to read them before providing information.

15. Do Not Call

MaliCare Agency maintains an internal do-not-call list and honours the National Do Not Call Registry. To be added to our internal list, tell any representative during a call, reply STOP to a text message, or write to us using the details in section 22. Requests are recorded and honoured within the period required by law, and the record is retained for at least five years.

16. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The effective date at the top of this page shows when it was last revised. Material changes will be signalled prominently on this page. Continued use of the site after a change indicates acceptance of the revised policy.

17. Security measures in detail

Our security programme is designed to meet the standards expected of a licensed insurance agency, including the NAIC Insurance Data Security Model Law as adopted in the states where we operate, and state-specific requirements such as the Massachusetts data security regulations.

• Encryption. Information submitted through this site travels over a secure HTTPS connection. Data held in our systems and with our cloud providers is encrypted at rest where appropriate, and sensitive fields receive additional protection.
• Access controls. Personal information is available only to personnel whose role requires it. We use authentication controls including strong credentials and, where practicable, multi-factor authentication.
• Training and internal policy. Staff and contractors are bound by confidentiality obligations and receive regular training on handling personal information.
• Network protection. Firewalls, monitoring and current security software guard our systems, and we apply updates as they are released.
• Data minimisation. We collect and retain only what is necessary for the purposes described in this policy, which reduces exposure in the event of an incident.
• Incident response. We maintain a response plan. Where an incident affects personal information, we investigate, contain it, and notify affected individuals and regulators as the applicable state breach-notification and insurance data security laws require.

Please help us protect you: do not send Social Security numbers, financial account numbers or detailed medical records by ordinary email. If we provide a secure portal or credentials, keep them confidential, and tell us immediately if you suspect unauthorised access.

18. Gramm-Leach-Bliley and insurance privacy notices

Separately from the rights described above, you hold rights as an insurance consumer under the federal Gramm-Leach-Bliley Act and under state insurance privacy regulations. Those laws govern how we handle "nonpublic personal information" and generally allow you to opt out of disclosure to non-affiliated third parties for purposes unrelated to servicing your policy.

Where you become a policy customer, you receive our GLBA privacy notice at the outset of the relationship and annually thereafter, as required. MaliCare does not disclose your information to non-affiliates so that they may market unrelated products. Disclosure is limited to what is necessary to carry out the insurance transaction you asked for, which is the most protective position those regulations permit.

Information governed by GLBA or by the Health Insurance Portability and Accountability Act may be exempt from certain state consumer privacy statutes. We nonetheless apply the protections described in this policy to all personal information in our care.

19. Verification and response times

Before acting on a request to access, correct or delete information, we must verify your identity. We may ask you to confirm details already held on file, such as the name, email address or telephone number associated with your enquiry. Information supplied for verification is used only for that purpose.

We aim to respond within forty-five days of receiving a request. Where more time is genuinely required, we may extend that period by up to a further forty-five days and will tell you why in writing. Responses are provided electronically unless you ask otherwise, and the first two requests in any twelve-month period are free.

An authorised agent may act on your behalf where the law permits. We will require written proof of the authorisation and may still verify your identity with you directly.

20. Advertising platform standards

Where we use advertising and measurement tools provided by third parties such as Google and Meta, we comply with the disclosure and data-use requirements those platforms impose on advertisers.

• Our use of tracking and advertising technologies is disclosed in section 8, so that you know your activity on this site may be used for measurement and advertising.
• We honour applicable consent and opt-out requirements, and we provide the means to opt out described in section 8, including recognition of Global Privacy Control signals.
• We do not upload sensitive personal information to advertising platforms. Health details, income and similar information are never used for ad targeting or custom audiences.
• Where customer data is used for audience matching, it is provided in hashed form and only in accordance with the relevant platform’s terms.

21. Visitors from outside the United States

Our services are offered to residents of the United States. We do not target or solicit personal information from individuals in other jurisdictions, and this site is not designed to meet the requirements of the EU General Data Protection Regulation or comparable laws elsewhere.

If you access this site from outside the United States, any information you provide will be transferred to and processed in the United States under United States privacy standards. If you would prefer your information not be handled on that basis, please do not submit it.

22. How to contact us

For any question about this policy, or to exercise any right described in it, please contact us.

MaliCare Agency is an independent insurance agency and is not a government agency. This policy describes our privacy practices and does not constitute legal advice.