EternaTrust Insurance Group LLC (“EternaTrust,” “we,” “our”) protects, uses, and discloses certain health-related information collected during the insurance application and underwriting process. Although we are not a HIPAA-covered entity, we voluntarily follow HIPAA-aligned privacy and security practices to protect sensitive health information submitted by consumers. By applying for insurance, you acknowledge and understand the practices outlined in this Notice.

1What Health Information We Collect

Medical history information
Prescription drug history
Height and weight
Tobacco or nicotine use
Family medical history
Details of illnesses, injuries, or surgeries
Physician and medical provider details
Health-related personal statements
Information obtained through MIB (Medical Information Bureau) reports

This information is necessary for underwriting and determining eligibility for insurance coverage.

2Why We Collect Health Information

Determining eligibility for coverage
Assessing underwriting risk
Providing accurate quotes
Submitting applications to Insurance Companies
Responding to carrier or underwriting requests
Verifying application accuracy
Detecting or preventing fraud

We do not use health information for marketing purposes.

3How We Protect Your Health Information

Although we are not directly regulated by HIPAA, we employ HIPAA-aligned safeguards:

Administrative Safeguards

Limited access to health-related data
Confidentiality agreements for staff
Training on privacy procedures
Secure record retention practices

Technical Safeguards

Encrypted data transmission (SSL/TLS)
Encrypted storage of sensitive information
Multi-factor authentication for internal systems
Identity verification for agents
Audit logs and access tracking

Physical Safeguards

Secure workspaces
Locked filing or storage systems (if applicable)
Access-controlled office locations

4How We Use and Disclose Health Information

We may use or disclose your information for:

A. Insurance Application & Underwriting

To determine eligibility, we may share information with:

Insurance Companies
Underwriting staff
Affiliated reinsurers

These parties may request:

Attending physician statements
Prescription checks
MIB disclosures
Additional health questionnaires

B. Regulatory Requirements

We may disclose information when required by:

State Departments of Insurance
New York DFS
California DOI
Other regulatory or legal authorities

C. Fraud Prevention

We may disclose information to detect:

Identity fraud
Misrepresentation
Application inconsistencies
Unauthorized activity

D. Authorized Representatives

We may share information with:

Your licensed agent
Your designated representative
A legally authorized third party

E. Operational Purposes

Limited information may be used for:

Quality review
Training
Policy servicing
Customer support

5We Do Not Sell Health Information

We never sell or trade health information to third parties, advertisers, or external marketing companies.

We restrict disclosures strictly to operational, underwriting, legal, and regulatory purposes.

6Your Rights Regarding Health Information

You have the right to:

Request access to your application data
Request correction of inaccurate health information
Request a description of disclosures made
Request restrictions on certain disclosures (where feasible)
Withdraw consent for electronic communications
File a privacy-related complaint

Certain limitations may apply due to insurance laws or underwriting requirements.

7How to Request Access or Corrections

You may request:

Copies of submitted health information
Corrections to inaccurate data
A list of disclosures

Requests may be made via:

Compliance Office:

Identity verification is required.

8Data Retention Requirements

Insurance laws require us to retain:

Applications
Underwriting files
Health questionnaire data
MIB-related documentation

for at least 7 years after completion, expiration, or termination of a policy or application. We cannot destroy records upon request unless legally permitted.

9Minors’ Information

We do not knowingly collect information from anyone under the age of 18.

If a minor’s information is collected unintentionally, we will delete or restrict access as permitted by law.

10Complaints Regarding Privacy or Confidentiality

If you believe your health information was used improperly, you may submit a complaint:

EternaTrust Insurance Group LLC — Privacy Office

We will:

Investigate complaints
Respond promptly
Take corrective action where appropriate

Users may also contact their state Department of Insurance.

11Updates to This Notice

We may revise this Notice from time to time to reflect:

Regulatory changes
Updated practices
Operational improvements
Carrier or state requirements

The “Effective Date” will reflect changes.

12Contact Information

For questions or privacy rights requests:

EternaTrust Insurance Group LLC

Compliance Department:

Contact Compliance Department

HIPAA Notice of Privacy Practices (Modified for Insurance Use)

(Privacy Disclosure)