This Consumer Health Data Privacy Policy supplements our Privacy Policy and describes how 254 FINANCIAL GROUP collects, uses, shares, and protects consumer health data, including as required by Washington's My Health My Data Act.
Categories of Consumer Health Data We Collect
Health and medical history information provided in connection with an insurance application or underwriting
Information about medical conditions, diagnoses, treatments, or medications when required by a carrier
Tobacco, alcohol, or lifestyle information relevant to insurance eligibility and rating
Height, weight, age, and similar physical characteristics used in underwriting
Information about health-related insurance products or coverage you request or hold
Sources of Consumer Health Data
Directly from you, by phone, email, text, video conference, forms, or in person
From insurance carriers, underwriters, and their authorized service providers
From authorized agents or representatives acting on your behalf
From third parties involved in the insurance application or service process, where you have authorized the disclosure
How We Use Consumer Health Data
To evaluate, submit, and process insurance applications
To obtain quotes and coverage decisions from insurance carriers
To administer and service insurance policies
To respond to your questions and requests
To comply with legal, regulatory, and contractual obligations
We do not use consumer health data for purposes unrelated to the purposes disclosed when it is collected. We do not use consumer health data for targeted advertising.
How We Share Consumer Health Data
We do not sell consumer health data. We may share consumer health data only as necessary to provide requested insurance services or as required by law, with:
Insurance carriers and underwriters
Authorized agents and representatives
Service providers who support our business operations under confidentiality obligations
Regulatory or governmental authorities when required
Other parties when you authorize or request the disclosure
Your Rights
Washington residents, and others where applicable law provides these rights, may:
Confirm whether we collect, share, or sell your consumer health data
Access the consumer health data we maintain about you, including a list of third parties with whom it has been shared
Withdraw consent to the collection and sharing of your consumer health data
Request deletion of your consumer health data
Appeal a denial of a request by contacting us using the information below
To exercise these rights, contact us by phone or email using the details below. We may need to verify your identity before completing a request, and we will respond within the timeframes required by applicable law. Certain records may be retained where retention is required by insurance, legal, or regulatory obligations.
Data Security & Retention
We maintain reasonable administrative, technical, and physical security practices appropriate to the nature and volume of the consumer health data we handle, and we limit access to personnel and partners with a legitimate business need. We retain consumer health data only as long as necessary to provide requested services and to meet legal, regulatory, and recordkeeping requirements.
Changes to This Policy
We may update this policy to reflect changes in our business, services, technology, or legal requirements. When we do, we will update the Effective Date above.