Consumer Health Data Privacy Notice

This notice explains how Halcyon Insurance Agency (“we,” “us,” or “our”) handles consumer health data in compliance with the Washington State My Health My Data Act (MHMDA). It supplements our general Privacy Policy and applies only to individuals who reside in Washington State or whose consumer health data is collected in Washington.

While Halcyon operates in Texas, Florida, New Mexico, Louisiana, Tennessee, and Oklahoma, this notice applies solely to data covered by the MHMDA.

What Is Consumer Health Data?

Consumer health data refers to personal health information that can identify you or that relates to your health status, care, or inquiries about health services. We may collect this type of information through:

Sources of this information may include:

Conversations with our licensed agents
Insurance carrier partners
Service providers and lead vendors

How We Use Consumer Health Data

We may use or disclose this data to:

Assist with insurance product applications
Connect you with an agent or insurance carrier
Support transactions and customer service
Operate our website and improve user experience
Send product information based on your interests
Develop and improve our offerings
Comply with laws and protect against fraud
Support business operations or corporate transactions

We may also use or disclose your consumer health data to detect and respond to cybersecurity risks, identity theft, fraud, or illegal activities.

Sharing Consumer Health Data

We may share consumer health data with:

You, upon request
Licensed insurance companies (to help them provide quotes)
Our service providers and vendors
Data analytics and business support partners
Affiliated companies

We do not sell your consumer health data.

Your Rights Under the MHMDA

If you are a Washington State resident or your consumer health data was collected in Washington, you have the following rights:

Right to Confirm: Ask whether we collect, use, or share your health data.
Right to Access: Request a copy of your health data and a list of third parties we've shared it with.
Right to Withdraw Consent: Stop us from collecting or sharing your health data.
Right to Delete: Request that we delete your consumer health data.
Right to Appeal: If we deny your request, you can ask us to reconsider. If the appeal is denied, you can file a complaint with the Washington Attorney General: www.atg.wa.gov/file-complaint.

Submitting a Privacy Rights Request

To exercise your rights, please email info@halcyonins.com.

To protect your data, we’ll need to verify your identity. If we can’t confirm your identity, we may not be able to process your request. Only you can submit requests related to your own consumer health data. Authorized agents may not act on your behalf for these specific requests.

Policy Updates

We may update this notice from time to time. If we make significant changes, we’ll notify you by email or on our website. Continued use of our services after updates means you agree to the revised terms.