PRIVACY POLICY
This privacy policy has been compiled to better serve those who are concerned with how their Personally Identifiable Information (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person or to identify an individual in context. Please read our privacy policy carefully to understand how we collect, use, protect, or otherwise handle your Personally Identifiable Information on our website.
What personal information do we collect from the people that visit our blog, website, or app?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, or other details to help you with your experience.
When do we collect information?
We collect information from you when you fill out a form, use Live Chat or enter information on our site.
How do we use your information?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
- To personalize your experience and allow us to deliver the type of content and product offerings you are most interested in.
- To improve our website to serve you better.
- To allow us to better service you in responding to your customer service requests.
- To ask for ratings and reviews of services or products.
- To follow up with them after correspondence (live chat, email, or phone inquiries).
How do we protect your information?
Our website is scanned regularly for security holes and known vulnerabilities to make your visit to our site as safe as possible.
We use regular Malware Scanning.
Your personal information is contained behind secured networks. It is only accessible by a limited number of persons who have special access rights to such systems and must keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.
All transactions are processed through a gateway provider and are not stored or processed on our servers.
Do we use ‘cookies’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, enabling us to provide improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction to offer better site experiences and tools in the future.
We use cookies to:
- Understand and save users’ preferences for future visits.
- Compile aggregate data about site traffic and site interactions to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since the browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
If you turn cookies off, some features will be disabled. It won’t affect the user’s experience, making your site experience more efficient and not functioning correctly.
However, you will still be able to place orders.
Third-party disclosure
We do not sell your personal information. We share it only in these cases: with the insurance companies and health insurance Marketplaces you ask us to work with on your coverage; with the service providers that run our customer records, email, phone, text and document systems, under contracts that limit what they may do with it; with advertising platforms, only as described in the Advertising and analytics section below; and when the law requires it, such as a review of our Marketplace records by the Centers for Medicare & Medicaid Services (CMS).
SMS
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Third-party links
We do not include or offer third-party products or services on our website.
Google’s Advertising Principles can sum up Google’s advertising requirements. They are put in place to provide a positive experience for users.
We have not enabled Google AdSense on our site, but we may do so in the future.
Advertising and analytics
We advertise on Meta platforms (Facebook and Instagram) and use Google tools to understand how people find and use our website. To do that, our site uses the Meta Pixel, Meta’s Conversions API and Google tags. These tools collect information such as your IP address, your browser and device details, the pages you visit on our site, and cookies set by Meta and Google when your browser allows them. Our web server may send some of this information to Meta directly as well as through your browser. Meta and Google use it to measure our ads, to show our ads to people who have visited our site, and for their own purposes as described in their privacy policies.
Short-term health quote form: when you submit our short-term health quote form, we send Meta a scrambled (hashed) version of the email address, phone number, name and ZIP code you entered, so Meta can match the submission to the ad that brought you here. Meta receives the hashed values only, not readable text.
Health Insurance Marketplace application form: we never send the answers you enter on our Marketplace application form to Meta, Google or any other advertising platform. The only thing Meta receives from that page is the standard Pixel information described above and a signal that a form was submitted. No names, contact details, Social Security numbers, income or health answers are sent. Our Privacy Notice for Marketplace applications below has the full details.
You can opt out of Meta ads based on your activity on other websites in your Facebook or Instagram settings under Ad preferences, and out of Google’s personalized ads at adssettings.google.com. You can also block or delete cookies in your browser.
California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. – See more at:
According to CalOPPA, we agree to the following:
Users can visit our site anonymously.
Once this privacy policy is created, we will add a link to it on our home page or, as a minimum, on the first significant page after entering our website.
Our Privacy Policy link includes the word ‘Privacy’ and can be easily found on the page specified above.
You will be notified of any Privacy Policy changes:
- On our Privacy Policy Page can change your personal information:
- By emailing us
- By calling us
- By chatting with us or by sending us a support ticket
How does our site handle Do Not Track signals?
Our site does not change what it does when it receives a Do Not Track signal from your browser. You can limit tracking by managing cookies in your browser and your ad preferences in your Meta and Google accounts.
Does our site allow third-party behavioral tracking?
Yes. We use the Meta Pixel and Google tags described in the Advertising and analytics section. We use no other third-party trackers.
COPPA (Children Online Privacy Protection Act)
When it comes to collecting personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under 13 years old.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States. The concepts they include have played a significant role in developing data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
To be in line with Fair Information Practices, we will take the following responsive action should a data breach occur:
We will notify you via email
- Within seven business days We also agree to the Individual Redress Principle, which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires that individuals have enforceable rights against data users and that individuals have recourse to courts or government agencies to investigate and prosecute non-compliance by data processors.
CAN-SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address to:
- Send information, respond to inquiries, and other requests or questions
- Process orders and send information and updates about orders.
- Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.
To be by CANSPAM, we agree to the following:
- Not use false or misleading subjects or email addresses.
- Identify the message as an advertisement in some reasonable way.
- Include the physical address of our business or site headquarters.
- Monitor third-party email marketing services for compliance if one is used.
- Honor opt-out/unsubscribe requests quickly.
- Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails, you can email us at: support@curlinsuranceservices.com
- Follow the instructions at the bottom of each email. And we will promptly remove you from ALL correspondence.
Privacy Notice for Health Insurance Marketplace applications
Who we are. Curl Insurance Services is a licensed insurance agency (NPN 21297200) registered with the Health Insurance Marketplace. Douglas Curl is our Principal Broker (NPN 9893707).
Why we collect your information and our authority to do it. We collect the information on our Marketplace application form to help you apply for and enroll in health coverage through the Health Insurance Marketplace, including any savings you qualify for, and to serve as your agent of record. We do this under the Affordable Care Act (section 1312(e)), the federal rules for Marketplace agents and brokers (45 CFR 155.220 and 155.260), our agreements with the Centers for Medicare & Medicaid Services (CMS), and, for California and Georgia residents, our agreements with Covered California and Georgia Access.
What we collect. Names, dates of birth, email address, phone number, home and mailing address, household members and tax filing status, income, Social Security numbers for each person applying for coverage, current coverage, tobacco use, and your signed consent.
Who may receive it and why.
- The Health Insurance Marketplace for your state, to process your application: HealthCare.gov, which is run by CMS, a federal agency, or Covered California, or Georgia Access. Information submitted to HealthCare.gov is kept by CMS in a federal system of records, the Health Insurance Exchange Program (HIX), system number 09-70-0560.
- The insurance company whose plan you choose, to enroll you.
- Another licensed insurance agency we work with, only if that agency is better able to help you, as your consent form describes.
- The service providers that run our customer records, email, phone, text and document systems, under contracts that limit what they may do with your information.
- CMS, when it reviews our records, including your consent, for monitoring, audit or enforcement.
We do not sell your information, and we do not share your application information with advertising platforms.
How we use it. Only for the purposes listed in the consent you sign: searching for an existing Marketplace application; completing an application for Marketplace coverage, Medicaid, CHIP or the premium tax credit; submitting your application to the Marketplace; ongoing account maintenance and enrollment help; responding to Marketplace questions about your application; sharing your information with another licensed agency when that agency can help you better; and keeping the records needed for compliance and commissions. Any other use or disclosure needs your separate permission, which you can withdraw at any time.
Is this voluntary? Giving us your information is voluntary. To decide your eligibility, the Marketplace requires names, dates of birth, address, household and income information, and Social Security numbers for everyone applying for coverage.
If you choose not to provide it. We may not be able to complete your application or find the savings you qualify for. You are welcome to reach out to us to talk through your options.
How we protect it. Your information travels to us over an encrypted connection and is stored in secured systems where access is limited to licensed staff who need it. Social Security numbers are encrypted in our records. We keep your consent and application records for at least ten years, as CMS requires.
Your choices. You can ask what information we hold about you, ask us to correct it, or withdraw your consent at any time by texting (949) 506-2746 or emailing info@curlinsuranceservices.com. Withdrawing consent does not affect anything done before you withdrew it.
Complaints. If you have a concern about how we handled your information, text (949) 506-2746 or email info@curlinsuranceservices.com. You may also contact CMS through the Marketplace Call Center at 1-800-318-2596 (TTY 1-855-889-4325).
This notice was last reviewed on October 12, 2026. We review it at least once a year and whenever our practices change.
Contacting Us
If there are any questions regarding this privacy policy, you may contact us using the information below.
Experience Premium Healthcare
& personalized support
Secure world-class healthcare solutions for you and your family.