Privacy Policy for Health Plan Enrollees Using HealthLink Secure
Introduction
HealthLink Secure, provided by Informed + Choice, securely connects your healthcare providers and insurance agents with your health plan claims data to help them better understand your medical history. Our priority is protecting your privacy and clearly explaining how your data is accessed, displayed, and protected.
This policy applies to:
- Insurance Agent Interactions
- Clinician/Physician Interactions
- Healthcare Provider Interactions
How the Process Works
Your healthcare provider or insurance agent may ask your permission to access your health plan claims data. Upon your consent, you will receive a text or email notification from HealthLink Secure, clearly stating:
- Who is requesting access (name, address, and phone number of the doctor or agent)
- Exactly what data they will be able to access
- How long they will have access to this information
By approving this request, you will be securely redirected to your health plan’s official website, where you will log in to authorize access.
Your Control Over Data Access
- Explicit Consent: Your data will only be accessed after you explicitly agree.
- Transparency: You will always know who is requesting access and exactly what information they are viewing.
- Revocation: You can revoke access at any time directly on your health plan’s website or by contacting your health plan.
Data Privacy and Protection
We protect information while it’s moving and while it’s stored, limit who can access our systems, and regularly review our safeguards.
What We Store (and for How Long)
- Temporary copies of claims data: To display the page during a visit, we create a short-lived, protected copy of your claims information. This copy is automatically removed within 8 hours after the visit ends.
- Contact details (phone/email): Used only to send your approval link. We do not keep your phone number or email address after the request is completed or expires.
- Secure key for providers (not agents): Allows your provider to request the latest information from your plan until the approval period ends. Typically kept for up to 13 months, or until you revoke access, then removed from our systems.
- Audit records: For safety, security, and compliance, we keep a record that an approval happened (for example, “you approved on this date”). These records do not include your medical details and are retained only as legally required.
Minimum Necessary Principle
We only store the information required to deliver the service you approved—nothing more.
What Information Your Provider or Agent Receives
- Providers: Your historical health plan claims data, including treatments, medications, and visits, along with a secure key to refresh data during the approval period.
- Agents: Prescription lists, doctor lists, and coverage information. Agents do not receive ongoing keys and cannot refresh or request updates after the session ends.
Protecting Your Family’s Privacy
We only retrieve and use the information necessary to help you with your insurance or care. We do not collect, store, or share any genetic or family health history information.
Handling De-identified Data
We do not collect, store, or analyze de-identified, anonymized, or pseudonymized data from your health records.
Changes and Notification
- If our privacy practices change, we will notify you clearly and promptly.
- In the unlikely event of a data breach, we will inform you immediately and take corrective action.
Contacting Us
If you have questions about this policy or your health plan data handling, please contact our Data Protection Officer:
- Email: [email protected]
- Address: Ardor Service LLC, d/b/a Informed + Choice, 1034 North Madison Avenue, Pasadena, California 91104
Legal Contact — Lyndsy Rodgers
- Email: [email protected]
- Address: 1034 N. Madison Ave, Pasadena, CA 91104
Acknowledgment
By authorizing your healthcare provider or insurance agent to access your data through HealthLink Secure, you confirm that you understand and agree to these privacy practices.