ILLUMIFIN WEBSITE PRIVACY POLICY

Effective Date: May 1, 2023

1. Introduction

Purpose

illumifin Corporation. ("illumifin," "we," "our" or "us") is committed to controlling the collection, use and disclosure of your personal information and protecting your privacy online. 

This "Privacy Policy" describes the types of information we may collect from you or that you may provide when you visit our websites, including this website (the "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information. If you are an employee, independent contractor or job applicant of illumifin, your information collected in those contexts will be subject to a separate privacy notice that we provide to you where and when appropriate.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it before using this Website and engaging illumifin for products and services. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using our Website, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of our Website after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Scope; Applicability to You

We are a third-party administrator for long term care, life, health, annuity and other insurance products. As part of our services, our clients may share your information with us to perform support services including, but not limited to, policyholder support services, application processing, commission administration, provider databases, underwriting, policy administration, claims and care management, and cognitive and functional assessments.  To facilitate these services, we also host web portals, on behalf of our clients to provide services related to long term care needs and the insurance products sold by your carrier.  When we are collecting information from you on behalf of our clients, we will only collect, use, and otherwise process your information as directed by our clients, as set forth in our contractual agreements with such clients or as otherwise permitted by applicable law. Accordingly, this Privacy Policy does not apply to the extent we process your Personal Data (as defined below) in the role of a data processor on behalf of our clients.  

To this end, if you register for an account or log in to an existing account on the Website, this Privacy Policy does not apply to any information you provide as part of the registration process or that you may provide upon or after logging in to your account, as we merely collect this information on behalf of our clients. For detailed privacy information related to our collection and use of your information on behalf of the illumifin client (the insurance carrier) who uses our products and services, please reach out to the insurance carrier directly. We are not responsible for the data security practices of our clients, which may differ from those set forth in this Privacy Policy. For more information, please also see Section 6 below.

In addition, if you are accessing the Website as a policyholder or a third-party provider performing care services for a claimant ("Provider"), this Privacy Policy may not apply to the information you submit on our Website to the extent these interactions are governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the Gramm-Leach-Bliley Act (GLBA).

In the event that illumifin is not acting as a data processor, and your Personal Data is not otherwise excluded as set forth above, the following information applies to how we, collect, use, and share your Personal Data.

2. Information We Collect About You and How We Collect It

Generally

We collect the following types of information from and about users of our Website ("Personal Data"), specifically:

We collect this information:

Information You Provide to Us

The information we collect on or through our Website is:

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, specifically:

The information we collect automatically may include Personal Data. It helps us to improve our Website and to deliver a better and more personalized service to you. The technologies we use for this automatic data collection may include:

No Information from Children Under the Age of 18

Our Website is not intended for children under 18 years of age. We do not knowingly collect or solicit Personal Data from children under 18. If you are under 18, do not use or provide any information on our Website including, but not limited to, your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from a child under 18, please contact us at .

3. How We Use Your Information

We use information that we collect about you or that you provide to us, including any Personal Data:

4. Disclosure of Your Information

We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Policy or any applicable state-specific addenda to this Privacy Policy. However, we may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose Personal Data that we collect or you provide as described in this Privacy Policy:

We may also disclose your Personal Data:

If you have questions or concerns about the disclosure of your personal information, or if you believe your information has been improperly disclosed by illumifin, please contact us at the contact information below.

5. Choices About How We Use and Disclose Your Information

In addition, we strive to provide you with choices regarding the Personal Data you provide to us. We have created mechanisms to provide you with control over your Personal Data:

Tracking Technologies and Advertising.   You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. However, if you choose to refuse cookies you may be unable to access certain parts of our Websites. You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative ("NAI") on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info).

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can also opt out of receiving targeted ads from members of the NAI on its website.

SMS/Text Communications. By providing a mobile phone number to us, you consent to receive communications at that number via SMS, text message, or other electronic means from or on behalf of illumifin. For more information regarding our SMS communications, including how to opt-out of receiving these communications, see our Terms of Use.

We may share the mobile phone number you provided to us with service providers who support these services, but we will not share your mobile phone number with third parties for their own marketing purposes without your consent. Text messages are distributed via third party mobile network providers and, therefore, we cannot control certain factors relating to message delivery. Depending on the recipient’s mobile carrier, it may not be possible to transmit the text message to the recipient successfully; nor is content available on all carriers. We do not claim or guarantee availability or performance of this service, including liability for transmission delays or message failures.

6. Your Rights Regarding Your Information and Accessing and Correcting Your Information

You may notify us at the contact information below of any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect or if we don’t maintain sufficient Personal Data to validate you.

As described above, we may also process Personal Data submitted by or for a client to our cloud products and services, including web portals. To this end, if not stated otherwise in this Privacy Policy, in any state-specific addendum to this Privacy Policy or in a separate disclosure, we process such Personal Data in the role of a mere processor on behalf of our clients (and/or its affiliates) who is the responsible controller of the Personal Data concerned. We are not responsible for and have no control over the privacy and data security practices of our clients, which may differ from those set forth in this Privacy Policy. If your data has been submitted to us by or on behalf an illumifin client and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable client directly.

7. State-Specific Privacy Rights

The law in some states may provide you with additional rights regarding our use of Personal Data. To learn more about any additional rights that may be applicable to you as a resident of one of these states, please see the privacy addendum for your state that is attached to this Privacy Policy.

Your California Rights

If you are a California resident, you have the additional rights described in the California Addendum

8. Security of Your Information

illumifin is committed to the security of your personal information and illumifin has policies and procedures in place to protect the privacy of your Personal Data. Personal Data shall be protected in a manner commensurate with its sensitivity and reasonable steps will be taken to secure it from accidental loss, and from unauthorized access, use, alteration and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to the Website. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

9. Do Not Track

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they "do not track" your online activities. However, there is no accepted standard for how a website or online service should respond to this signal and at this time, we do not take any action in response to such a signal.

10. Changes to Our Privacy Policy

We may change this Privacy Policy at any time. It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Website’s home page. If we make material changes to how we treat our users’ Personal Data, we will notify you by email, if applicable, to the email address specified, or through a notice on the Website’s home page. You are responsible for periodically visiting our Website and this Privacy Policy to check for any changes.

11. Contact Information

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy, have any requests related to your Personal Data pursuant to applicable laws, or otherwise need to contact us, you may do so by emailing , or writing to us at:

illumifin Corporation
Attn: Privacy Officer
11000 Prairie Lakes Drive, Suite 600
Eden Prairie, MN 55344


ILLUMIFIN CALIFORNIA ADDENDUM TO PRIVACY POLICY

Effective Date: May 1, 2023

This Privacy Addendum for California Residents (the "California Addendum") supplements the information contained in illumifin Corporation’s  ("illumifin," "we," "our," or "us") Privacy Policy above and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this California Addendum to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CPRA") and, unless defined in this California Addendum or the Privacy Policy, any terms defined in the CPRA have the same meaning when used in this California Addendum. If you are a California resident with disabilities and need to be provided with an accessible version of this California Addendum, please contact us at the information below.

Applicability

Generally, illumifin acts as a service provider or contractor (as defined by the CPRA and collectively referred to herein as "service provider") and assists insurance carriers by acting as a third-party administrator for long-term care, life, health, annuity, and other insurance products. As part of our services, our clients may share your information with us to perform administrative support services including, but not limited to, policyholder support services, application processing, commission administration, provider databases, underwriting, policy administration, claims and care management, and cognitive and functional assessments. To facilitate these services, we also host web portals, on behalf of our clients to provide services related to long term care needs and the insurance products sold by your carrier. 

To this end, if not stated otherwise in this California Addendum, our Privacy Policy above, or in a separate disclosure, we process your CPRA Covered Personal Information (as defined below) in the role of a mere service provider on behalf of our clients (and/or its affiliates) who are the responsible business for your CPRA Covered Personal Information. When acting as a service provider, we will only collect, use, and otherwise process your CPRA Covered Personal Information as directed by our clients, as set forth in our contractual agreements with such clients and as otherwise permitted by the CPRA and applicable law. If your data has been submitted to us by or on behalf of our client and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable client directly (i.e., the insurance carrier).

For detailed privacy information related to our collection and use of your data on behalf of the illumifin client who uses our products and services, please reach out to the insurance carrier directly. We are not responsible for and have no control over the privacy and data security practices of our clients, which may differ from those set forth in our Privacy Policy and California Addendum.

Additionally, this California Addendum does not apply to employment-related CPRA Covered Personal Information collected from or about our California-based employees, job applicants, contractors, or similar individuals ("Personnel"). Please contact us at the contact information below or your local human resources department if you are part of our California Personnel and would like additional information about how we process your CPRA Covered Personal Information.

Further, this California Addendum does not apply to information or organizations excluded from the CPRA’s scope, including:

If you are accessing the Website as a policyholder or a Provider, this California Addendum may not apply to the information you submit on our Website to the extent these interactions are governed by HIPAA or the GLBA.

In the event that we are not acting as a service provider, and your CPRA Covered Personal Information is not otherwise excluded as set forth above, the following information applies to how we, collect, use, and share your CPRA Covered Personal Information.

Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("CPRA Covered Personal Information" or "personal information"). In particular, this website (the "Website"), has collected the following categories of personal information from consumers within the last twelve (12) months:

Category

Examples

Collected

A. Identifiers.

A real name, online identifier, Internet Protocol address, email address, or other similar identifiers.

YES

B. Personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

A name or telephone number.

*Note: Personal information included in this category may overlap with other categories.

YES

C. Internet or other electronic network activity information.

Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.

YES

D. Geolocation data.

Physical location or movements. We only collect IP-based geolocation data, which may be used to locate the city and state that you are in when you access our network. This information cannot be used to precisely locate you.

YES

We will not collect additional categories of CPRA Covered Personal Information without providing you notice. As further described in To Whom Do We Sell or Share Your Personal Information section of this California Addendum , we do not (i) "sell" any categories of CPRA Covered Personal Information for monetary or other valuable consideration, or (ii) "share" any categories of CPRA Covered Personal Information for cross-context behavioral advertising.

Sources of Personal Information

illumifin collects the categories of personal information listed above from the categories of sources described in our Privacy Policy

Use of Personal Information

We use all the above categories of personal information we collect for one or more of the business or commercial purposes described in our Privacy Policy

illumifin will not use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Disclosures of Personal Information

Disclosures of Personal Information for a Business Purpose

In the past twelve (12) months, illumifin has disclosed identifiers and internet or other similar network activity to its affiliates, contractors, service providers, insurance carriers (who purchased our products or services), or other third parties we use to support our business for the following business purposes:

In addition to the above, we may disclose any or all categories of personal information to any third party (including government entities and/or law enforcement entities) as necessary to:

Sales of Personal Information

illumifin does not sell consumers’ personal information and has not sold consumers’ personal information in the preceding twelve (12) months. We also have no actual knowledge that we sell the personal information of minors who reside in California and are under the age of 16 for monetary or other valuable consideration.

Sharing Personal Information

illumifin does not share consumers’ personal information and has not shared consumers’ personal information for the purpose of cross-context behavioral advertising in the preceding twelve (12) months. We also have no actual knowledge that we share the personal information of minors who reside in California and are under the age of 16 for such purpose.

Your Rights and Choices

The CPRA provides California residents with specific rights regarding their personal information. This section describes your CPRA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent (as defined below). For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your CPRA Privacy Rights.

Exercising Your CPRA Rights

To exercise the rights described above, please submit a verifiable consumer request (a "Consumer Request") to us by either:

If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.

Only you, or someone that you have authorized to act on your behalf (an "Authorized Agent"), may make a Consumer Request related to your personal information. You may also make a Consumer Request on behalf of your minor child.

All Consumer Requests must:

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm which personal information relates to you or the individual for whom you are making the request as their Authorized Agent.

Making a Consumer Request does not require you to create an account with us. We will only use personal information provided in a Consumer Request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Retention of Personal Information

We retain all categories of personal information that we collect for the length of time required by applicable law or our record retention guidelines applicable to the type of personal information or category of record.

However, we may also retain any or all categories of personal information when your information is subject to one of the following exceptions:

Your personal information will be deleted when we no longer require your personal information for any of the above purposes.

Changes to Our California Addendum

illumifin reserves the right to amend this California Addendum at our discretion and at any time. When we make changes to this California Addendum, we will post the updated California Addendum on the Website and update the California Addendum’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this California Addendum, the ways in which illumifin collects and uses your information described below, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: