Skip to content
This Privacy Policy explains how NexaEnroll collects, uses, discloses, and protects information through its websites, digital Medicare request experiences, partner portals, communications, and services. NexaEnroll is a privately operated B2B healthcare technology and lead-generation company and is not affiliated with, endorsed by, or operated by CMS, Medicare, or the United States government.
CONSUMER INFORMATION We may collect contact details; date of birth; address and
service area; Medicare, coverage, eligibility, and election-period information; provider,
prescription, pharmacy, and benefit preferences; current insurance information; electronic signatures; consent and scope selections; communications; and other information a consumer chooses to provide.
IDENTITY AND VERIFICATION INFORMATION Where the applicable workflow requires and permits it, we may collect Medicare identifiers or limited identity-verification data and receive verification or eligibility results from authorized sources.
PARTNER INFORMATION We may collect business contact details, organization name, National Producer Number, licenses, certifications, carrier and product footprint, requested volume, account activity, support communications, and order and billing information.
TECHNICAL INFORMATION We may collect IP address, device and browser details, referral source, ad and campaign identifiers, page and form activity, timestamps, cookie or similar-technology identifiers, security events, and portal activity.
We collect information directly from consumers and partners; automatically from websites, advertisements, and portals; from service providers that support advertising, identity or eligibility verification, analytics, security, communications, payments, hosting, and integrations; and from carriers, plans, agencies, FMOs or IMOs, and other authorized business partners.
We use information to create and deliver digital Medicare requests; document consumer permissions and choices; align requests with an authorized licensed partner; provide downloadable records; operate and secure accounts; confirm licenses and partner eligibility; process orders and support requests; prevent fraud, duplicates, misuse, and security incidents; measure campaign and service performance; comply with contracts and law; respond to audits, complaints, legal process, or regulators; and improve our services.
NO AUTOMATED ENROLLMENT NexaEnroll does not use the digital request to complete an insurance enrollment or make the licensed agent’s final plan recommendation
LICENSED RECIPIENT We disclose a consumer’s request to the licensed agent, agency, or other recipient identified in the consumer-facing disclosure and authorized by the consumer. Where separate consent is required for each recipient, each entity is listed and the consumer’s choice is recorded separately.
SERVICE PROVIDERS We disclose information to providers that perform hosting, security, communications, verification, analytics, advertising, payment, integration, records, and professional services for us under appropriate restrictions.
BUSINESS AND LEGAL DISCLOSURES We may disclose information to carriers, plans, FMOs or IMOs, auditors, regulators, law enforcement, courts, or transaction counterparties when authorized, contractually required, reasonably necessary to protect rights or safety, or permitted by law.
NO UNAUTHORIZED RESALE We do not authorize a recipient to resell or reuse consumer information for a purpose outside the consumer’s permission and the applicable business agreement.
STATE-LAW NOTICE Some state privacy laws define sale, sharing, or targeted advertising broadly. Depending on the law and activity, certain advertising identifiers or disclosures to an authorized insurance recipient may fall within one of those definitions. Where required, we provide applicable notice and a way to exercise the relevant choice through Your Privacy Choices or by contacting support@nexaenroll.com.
We and our providers may use cookies, pixels, local storage, and similar technologies to keep the site working, remember settings, protect accounts, measure performance, attribute advertising, prevent fraud, and improve campaigns. Browser controls may limit some technologies. Where required, a consent or preference control is provided.
We retain information for the period reasonably necessary for the purpose collected and according to our legal and contractual role, including applicable insurance, carrier, plan, audit, dispute, security, tax, investigation, preservation, and legal-hold requirements. Different records may have different retention periods. A client’s payment or portal status may control routine hosted access but does not override a legal or contractual retention duty that continues to apply to NexaEnroll.
CLIENT COPIES Each delivered request includes a downloadable PDF record. Licensed partners are responsible for securely retaining their own copies for the periods that apply to them
SAFEGUARDS We use administrative, technical, and organizational safeguards designed to protect information, including access controls, logging, secure transmission, vendor controls, and incident-response procedures appropriate to the information and our role. No storage or transmission method can be guaranteed completely secure
ROLE-BASED APPLICATION Privacy obligations depend on the data, activity, and parties involved. When NexaEnroll receives protected health information under an agreement that makes NexaEnroll a business associate, NexaEnroll handles that information under the agreement and applicable HIPAA requirements. Other information may instead be governed by Medicare program rules, state privacy or health-data laws, consumer-protection laws, and contractual restrictions
RIGHTS Depending on residence and applicable law, a person may have rights to know, access, correct, delete, or obtain a copy of personal information; opt out of certain sale, sharing, targeted advertising, profiling, or marketing; limit certain sensitive- data uses; withdraw consent; or appeal a decision. Legal exceptions may apply, including when records must be preserved.
REQUEST METHOD Submit a privacy request or appeal to support@nexaenroll.com with the subject line PRIVACY REQUEST. We may verify identity and authority before completing a request. Authorized agents may be required to provide proof of authority.
MARKETING CHOICES Follow the unsubscribe link in an email, reply STOP to an eligible text message, or tell the caller to revoke permission. A service or transactional message may still be sent when permitted.
NON-DISCRIMINATION NexaEnroll will not unlawfully discriminate against a person for exercising an applicable privacy right
CHILDREN The services are not directed to children under 18, and we do not knowingly collect their personal information through these services.
CHANGES We may update this Privacy Policy by posting a new effective date. We will provide additional notice when required by law.
CONTACT Privacy questions, requests, or appeals: support@nexaenroll.com
