How we protect your personal information
In General. We may collect personal information that can identify you such as your name and e-mail address, as well as other information that does not identify you such as your zip code. When you provide personal information through our website, the information may be sent to Rhode Island Health Plans servers located in the United States and other countries around the world.
Information You Provide. As mentioned above, we may collect information you submit on our website, such as your name, e-mail address and zip code. We may also track your interaction with email advertisements sent to you by Rhode Island Health Plans or our e-mail service providers on our behalf (for example, when you register, purchase, or browse in response to such emails).Interactions with our website, including page clicks, time spent, and other meta-data may also be collected. In addition, we may also collect data from internet cookies.
Information from Other Sources. We may also periodically obtain both personal and non-personal information about you from business partners, contractors and other third parties, as well as information from public databases. Examples of information that we may receive include information about your home and additional demographic information.
Other Technologies. We may use other standard Internet activity tracking technologies, such as web beacons and similar technologies, to track your use on our website or your interaction with our advertisements. A web beacon is a programming code used to display an image on a web page and can also transfer an individual's user identification to a database and associate the individual with previously acquired information about the individual. Such information may be used in targeted or behavioral advertising, as well as for the other uses described in this paragraph. We may include web beacons in promotional e-mail messages or newsletters or online advertisements to determine whether messages have been opened or acted upon. We may use the information we obtain in this manner to customize the services and offers we provide our website's visitors, to deliver targeted advertisements, and to measure the overall effectiveness of our online advertising, content, programming or other activities. We do not tie web beacons to any personal information you submit while on our website.
Targeted or Behavioral Advertising
Targeted advertising (also known as behavioral advertising) uses information collected on an individual's web browsing behavior such as the pages they have visited or the searches they have made. This information is then used to select which Rhode Island Health Plans advertisement should be displayed to a particular individual on websites other than an Rhode Island Health Plans site.
In addition, we may place (or allow third parties to place) cookies and pixels on our website which enable our authorized service providers, advertising companies and advertising networks to collect information about our users who view or interact with their or our advertisements on our website or complete certain actions on our site, such as submitting a form. However, we do not tie these cookies and pixels to personal information that you submit on our website. The information collected by the cookies and pixels allows us and our partner companies to deliver, and gauge the effectiveness of, targeted advertisements, both on our website and when you are browsing other websites. Some of these third-party advertising companies may be advertising networks that are members of the Network Advertising Initiative (www.networkadvertising.org), which offers a single location to opt out of ad targeting from member companies.
Storage of Information We Collect
We may store the personal information described above as necessary to accomplish the business purposes for which it was collected, as well as to comply with our legal and audit obligations, resolve reported and potential disputes, and enforce our agreements. We also maintain an information security program that limits storage of personal information to what is needed to fulfill our reasonable business, legal and audit requirements.
In general. We may use information that we collect about you to:
We want you to understand when and with whom we may share personal or other information we have collected about you or your activities on our website, while using our services or in your other interactions (such as responding to e-mails) with us.
We may share your personal information with the following third parties:
Authorized Service Providers. We may share your personal information with our authorized service providers that perform certain services on our behalf. For example, we may engage other companies to provide data storage, to assist in marketing Rhode Island Health Plans products or services, to conduct audits, to provide web analytics, and to provide hosting, design, development and other operations which make our website work. Other third-party service providers may help us communicate with you through e-mail. Our policy is to permit these third-party service providers to obtain only the personal information they need to provide the services, and to require them to protect personal information to the same extent as Rhode Island Health Plans, including not using it for any improper purpose.
Business Partners. When you express interest in products, services or promotions offered through our website or our services, we may share your expression of interest with the businesses with which we partner to offer you those products, services and promotions, and, as applicable, their affiliates and third-party finder or marketing companies. When you elect to engage in a particular offer or program, you authorize us to provide your e-mail address, phone number, and other information to those businesses.
Insurance Companies. If you provide your zip code, we will find insurance companies in your area whom we think may be of interest to you. Once you submit your zip code and select the company you wish to obtain a quote from, you will then be redirected to that third party site and provide information to them directly. Because the insurance companies and other partners on the Rhode Island Health Plans network with whom you are matched may retain or use your personal information whether or not you qualify for, or obtain, insurance or another product from them, you should contact these persons directly concerning their privacy and information sharing practices.
Aggregated and Non-Personal Information. We may share aggregated information (i.e., information about you and other customers collectively, but not specifically identifiable to you) and other non-personal information we collect under any of the above circumstances. We may also share it with third parties and affiliated companies to develop and deliver targeted advertising on our websites and on websites of third parties. We may combine non-personal information we collect with additional non-personal information collected from other sources. We also may share aggregated information with third parties, including advisors, advertisers and investors, for the purpose of conducting general business analysis. For example, we may tell our advertisers the number of visitors to our website and the most popular features or services accessed. This information does not contain any personal information and may be used to develop website content and services that we hope you and other users will find of interest and to target content and advertising.
We take appropriate security measures (including physical, electronic, and procedural measures) to help safeguard your personal information from unauthorized access and disclosure. For example, with regard to Rhode Island Health Plans's internal operations, only authorized employees and authorized third party service providers are permitted to access personal information, and they may do so only for permitted business functions. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.
The California Consumer Privacy Act (CCPA) provides California residents with the additional rights listed below.
Right to Know. You have the right to know and see what data we have collected about you over the past 12 months, including:
Right to Delete. You have the right to request that we delete the personal information we have collected from you. There are a number of exceptions, however, that include, but are not limited to, when the information is necessary for us or a third party to do any of the following:
Do Not Sell My Personal Information. You have the right to request that we do not sell your personal information. Please click here so that we can process your request in an efficient manner. Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally-required affirmative authorization.
Authorized Agent. You have the right to appoint another person or entity registered with the Secretary of State ("Authorized Agent") to make a request for you. If you appoint an Authorized Agent you must provide us with legal authorization indicating your consent to have an Authorized Agent act on your behalf. Examples of acceptable forms of legal authorization include, but are not limited to, a fully executed Power of Attorney or a notarized affidavit.
Other Rights. You can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. You also have the right not to be discriminated against for exercising any of the rights listed above.
Exercising Your California Privacy Rights. To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us or direct your authorized agent to contact us using the following methods:.
How We Verify Your Request. When submitting a request via one of the approved methods you will be prompted to provide some information, including your full name, address, email address and phone number. This information is used to validate your request. Upon collection of your information, you will receive an email asking you to validate ownership of that email address by means of a one-time link or code. Without confirmation of ownership of your email address your request may not be processed. The link in the verification email is set to expire after a few days to protect your information should someone gain unauthorized access to your email account at a later stage.To protect your data from unauthorized access, we use the other data points you provide and match it with the information we may have previously obtained from you. If there is a mismatch in the data provided, we shall inform you of this and deny your request, at which point you may start a new claim with corrected information. If the information matches, we will proceed with the processing of your request. The level of data verification may vary depending on the type of request as allowed by the law.
Response Timing. After submitting your request for access or deletion, you will receive a confirmation receipt within 10 business days that includes additional information. We aim to respond to a consumer request for access or deletion within 45 days of receiving that request. If we require more time, we will inform you of the reason and extension period in writing.
NOTE: We may revise this privacy notice from time to time as implementing regulations further develop and come into effect.
Our website is for adults, and we do not knowingly collect personal information from children under the age of 18.
For residents of the European Union, Rhode Island Health Plans, LLC makes all efforts to comply with the General Data Protection Regulation, which took effect on May 25, 2018. EU residents have certain rights under data protection laws. They don't apply in all circumstances. If you wish to use any of them, we'll explain at that time if they are engaged or not. The right of data portability is only relevant from May 2018.
You have the right to complain to the Information Commissioner's Office which enforces data protection laws: https://ico.org.uk/. You can contact us using the details below.
Your right to object
You have the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on our legitimate interests. You can contact us by going to the How to Contact Us section located below.
Legal basis for processing your personal information
Rhode Island Health Plans, LLC relies on the following legal bases to use your personal data: