Privacy Policy
Effective date: August 18, 2026
Last updated: August 18, 2026
1. Scope
This Privacy Policy explains how California Plans, doing business as California Plans (“California Plans,” “we,” “us” or “our”), collects, uses, discloses, retains and protects personal information through californiaplans.org, our forms, calls, messages and insurance-assistance services.
This Policy does not govern Covered California, Medicare, insurance carriers, plan sponsors or other third parties. Their privacy notices apply to information they collect or receive.
2. Personal information we collect
Depending on how you interact with us, we may collect:
Identifiers and contact information: Name, postal address, email address, telephone number, date of birth, online identifiers and, when necessary for an approved application or identity verification, government-issued identifiers such as Social Security, Medicare or immigration document numbers.
Insurance, eligibility and application information: Current coverage, desired coverage, household and dependent information, county and ZIP code, enrollment history, qualifying life events, citizenship or immigration eligibility information, tax household information, estimated income and other information required to evaluate eligibility or complete an application.
Health and demographic information: Information relevant to plan selection or eligibility, which may include age, disability status, health conditions, prescriptions, preferred providers, language, race or ethnicity and other protected or sensitive characteristics. We collect only information reasonably needed for an authorized purpose.
Financial information: Information needed for premiums, subsidies or eligibility, such as household income and payment-related information. (Note: Payments are made directly to the insurance carrier).
Communications and recordings: Emails, texts, chat messages, appointment details, documents you submit, customer-service records, call recordings and transcripts. Medicare marketing, sales and enrollment calls may be recorded in their entirety as required by CMS.
Device and website information: IP address, browser and device type, operating system, referring pages, pages viewed, links clicked, approximate location derived from IP address, cookie identifiers and interaction data.
Inferences: Preferences or likely insurance interests inferred from the information above, solely to provide, personalize or improve services and communications as permitted by law.
3. Sources of personal information
We may obtain personal information:
directly from you or an authorized representative;
from a parent, spouse, household member or employer when legally authorized;
from Covered California, CalHEERS, Medicare/CMS, Medi-Cal/DHCS or another government program, as permitted;
from insurance carriers, Medicare Advantage organizations, Part D sponsors, FMOs and business partners;
from service providers that support our forms, scheduling, communications, security and analytics; and
automatically from your browser or device.
4. How we use personal information
We may use personal information to:
respond to requests and schedule appointments;
verify identity and authority;
explain, compare and recommend coverage options we are authorized to offer;
assist with eligibility, quotes, applications, enrollment, renewal and servicing;
act as agent of record when authorized;
communicate about an application, policy, plan, renewal or requested service;
send marketing communications when legally permitted and consented to where required;
operate, secure, troubleshoot and improve the Site and services;
prevent fraud, misuse and security incidents;
train and monitor staff and document compliance;
meet carrier, Covered California, CMS/Medicare, licensing, recordkeeping, audit and legal obligations; and
establish, exercise or defend legal claims.
For information obtained through Covered California, we limit collection, use and disclosure to the minimum necessary to perform authorized functions and use it only for purposes permitted by the Covered California agreement and applicable law.
5. How we disclose personal information
We may disclose personal information to the following categories of recipients for the purposes described above:
Government programs and enrollment systems: Covered California, CalHEERS, Medi-Cal/DHCS, CMS/Medicare and other agencies or systems involved in eligibility, enrollment, subsidies, program integrity or consumer requests.
Insurance carriers and plan sponsors: Health insurers, Medicare Advantage organizations, Part D sponsors, Medicare Supplement insurers and their authorized administrators when needed to provide quotes, compare plans, submit enrollment, service coverage or comply with program requirements.
Authorized insurance and distribution partners: Licensed agents, agencies, FMOs and other authorized partners that support the service you request. Personal Medicare beneficiary data collected for marketing or enrollment will not be shared with another TPMO for that TPMO to contact you unless you first provide clear, prior express written consent separately for each TPMO receiving the data.
Service providers and contractors: Vendors that provide secure hosting, CRM, forms, appointment scheduling, communications, call recording, document management, analytics, cybersecurity, customer support and similar functions. They may use information only for contracted purposes and must protect it as required by contract and law.
Professional advisers and legal recipients: Auditors, attorneys, accountants, regulators, law enforcement or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or respond to legal process.
Business transactions: A potential or actual buyer, successor or other party in a merger, financing, reorganization or sale, subject to appropriate confidentiality and legal protections.
At your direction: Other persons or organizations when you direct us or provide legally valid authorization.
6. Sale and sharing of personal information
California Plans does not sell personal information for monetary compensation. We may allow analytics and advertising partners to collect identifiers and internet activity through cookies or similar technologies for cross-context behavioral advertising, which California law may define as “sharing.” California residents can opt out through the Your Privacy Choices link and an enabled browser-based opt-out preference signal such as Global Privacy Control (GPC). We do not knowingly sell or share the personal information of consumers under 16 years of age.
7. Cookies, analytics and privacy signals
We and our service providers may use cookies and similar technologies to keep the Site working, remember preferences, measure traffic, prevent fraud and support cross-context behavioral advertising as disclosed in Section 6.
You can control cookies through the Site’s cookie tool and your browser settings. Blocking some cookies may affect Site functionality.
Global Privacy Control: Where required by California law, we treat a recognized opt-out preference signal such as Global Privacy Control (GPC) as a request to opt out of the sale or sharing of personal information for the browser or device sending the signal.
8. Retention
We retain each category of personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing and servicing coverage, maintaining required insurance and program records, resolving disputes, preventing fraud and meeting legal, audit and contractual requirements.
Retention depends on the record type, the consumer relationship, applicable limitation periods and instructions from Covered California, CMS, carriers or plan sponsors. Medicare marketing, sales and enrollment call recordings are retained for at least six years as required by CMS; for the first three years, they are maintained in audio format, and for years four through six they may be maintained as audio or complete and accurate transcripts. Covered California information is returned or securely destroyed when required, unless retention is legally required or destruction is not feasible.
We do not retain personal or sensitive personal information longer than reasonably necessary for each disclosed purpose.
9. Security
We use reasonable administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration and destruction. For Covered California PII, required safeguards include encryption at rest and in transit, access controls, workforce training, vendor protections, incident procedures and secure disposal.
No method of transmission or storage is completely secure. Please do not send Social Security numbers, Medicare numbers, financial account information or medical records through ordinary email or a general contact form. Use only a secure method specifically provided or approved for that purpose.
10. Your choices and privacy rights
Communication choices
You can unsubscribe from marketing emails through the link in the email, reply STOP to marketing texts, or ask us to place you on our internal do-not-call list. Transactional or application-related communications may continue when needed to provide a requested service or comply with law.
Record and communication requests
Subject to verification and applicable law, you may ask to:
access or receive a copy of personal information we maintain;
correct inaccurate personal information;
request an accounting of certain disclosures;
request restrictions on certain uses or disclosures; or
receive communications at an alternative address, email or telephone number.
Requests concerning Covered California information may be forwarded to Covered California within five calendar days as required by our agreement.
California privacy rights
If the CCPA/CPRA applies to California Plans or to particular information, California residents may have the right to know, access, correct and delete personal information; opt out of sale or sharing; limit certain uses and disclosures of sensitive personal information; and receive equal service and pricing without unlawful retaliation for exercising a right. Some information and uses are exempt, including certain information governed by insurance privacy or federal financial privacy laws.
To submit a request, use:
Email: contact@californiaplans.org
Telephone: (909) 623-5050
We will verify your identity and authority before fulfilling a request. An authorized agent may submit a request as permitted by law, but we may require proof of authorization and identity. If we deny a request, we will explain the reason and any appeal process required by law.
Insurance privacy rights
California insurance privacy laws may provide additional rights concerning insurance information and require notices when a customer relationship begins and annually thereafter. This online Policy supplements and does not replace any separate insurance privacy notice we are required to provide.
11. Medicare beneficiary information
When we collect Medicare beneficiary information for marketing or enrollment:
we use it only as permitted by CMS rules, plan contracts and your authorization;
we disclose when information will be provided to a licensed agent for future contact;
we do not share it with another TPMO for marketing or enrollment contact without clear, prior express written, one-to-one consent identifying each recipient;
Medicare marketing, sales and enrollment calls may be recorded and retained as described above; and
you may contact Medicare.gov or 1-800-MEDICARE to learn about all available options.
12. Information about dependents and children
The Site is intended for adults and is not directed to children under 13. A parent, legal guardian or other authorized adult may provide information about a dependent when needed for insurance eligibility or enrollment. Do not provide a child’s information unless you have legal authority to do so.
13. Third-party privacy practices
Covered California, Medicare, carriers, plan sponsors and other linked services maintain their own privacy notices. Review those notices before submitting information. California Plans is not responsible for a third party’s privacy practices.
14. Changes to this Policy
We may update this Policy to reflect changes in law, technology or our practices. The “Last updated” date identifies the latest revision. We will provide additional notice or obtain consent when required for a material change or a new incompatible use of information.
15. Contact and complaints
Designated Privacy and Security Point of Contact:
California Plans
DBA California Plans
425 N Garey Ave, Pomona CA, 91767
contact@californiaplans.org
(909) 623-5050
For Covered California privacy questions, consumers may also contact Covered California’s Privacy Officer at PrivacyOfficer@covered.ca.gov or 800-889-3871.
For Medicare questions, contact 1-800-MEDICARE.
For insurance complaints, contact the California Department of Insurance at 800-927-4357.
