Privacy Policy
MedElevate LLC, DBA MedElevate Insurance
Florida Insurance Agency License No. L138486
Last updated: October 16, 2026
1. Who We Are and What This Policy Covers
MedElevate LLC, DBA MedElevate Insurance ("MedElevate," "we," "us," or "our"), is a Florida insurance agency serving people seeking information and assistance with Medicare, other insurance coverage, and healthy-aging resources. This Privacy Policy explains how we collect, use, disclose, safeguard, and retain personal information when you visit a MedElevate-branded website linking to this Policy, submit a contact or appointment form, attend an event, speak or correspond with us, or request insurance-related assistance.
This Policy applies to our own collection and handling of information. Insurance companies, Medicare plans, enrollment platforms, health care professionals, scheduling providers, and other independent parties may have separate privacy notices and legal duties. This Policy does not replace a health plan's HIPAA Notice of Privacy Practices or any privacy notice we separately must deliver under applicable insurance privacy rules.
2. Information We May Collect
We collect information reasonably related to an inquiry or an insurance-service relationship, including:
- Contact and identification details: name, email, telephone number, mailing address, county, ZIP code, and preferred way to be contacted.
- Medicare and insurance inquiry details: the coverage topics you select, Medicare eligibility or enrollment timing questions, existing coverage type, requested appointment or event, and information you voluntarily provide to help us understand your needs.
- Information necessary for a requested quote or enrollment: only through an appropriately secured workflow when needed, this may include date of birth, health or prescription details relevant to plan suitability, Medicare identifiers, beneficiary or policy numbers, and other application information.
- Communications and consent records: appointment history, emails, messages, notes, call logs, recordings of calls when legally obtained, Scope of Appointment records, signed event Permission to Contact forms, the exact consent language/form version, separate SMS checkbox selections, electronic signatures or signed paper forms, consent timestamps, source records, and opt-out requests.
- Website and device data: IP address, browser/device information, approximate location from IP address, page views, referral URLs, cookies, and website performance/security logs.
- Information received from permitted sources: insurance carriers, enrollment platforms, individuals you authorize, referral sources, and service providers as reasonably necessary for requested service.
A form selection asking about a recent diagnosis, chronic-condition coverage, or similar topic may reveal sensitive health-related information. We limit such collection to what is reasonably necessary and ask that you not include detailed medical records in general website fields.
3. Please Use Secure Channels for Sensitive Information
Do not send Social Security numbers, Medicare Beneficiary Identifiers, financial account numbers, photographs of Medicare cards, detailed diagnoses, medication lists, or medical records using public contact forms, ordinary email, text messages, or voicemail. We will explain how to submit information securely if it is required for a quote, eligibility review, or application. Do not put sensitive information in an open-ended website message field.
4. How We Use Your Information
We use personal information to:
- Answer questions and provide the education, appointments, events, and insurance assistance you request.
- Assess insurance options and assist with quotes, plan comparisons, applications, enrollment, and ongoing service when authorized and legally permitted.
- Confirm appointments, send service-related communications, and maintain requested follow-up.
- Meet Medicare marketing and enrollment rules, document permissions and Scope of Appointment, maintain required call recordings, and respond to audits or complaints.
- Operate and improve the website, detect misuse, protect systems, and fulfill legal and recordkeeping duties.
- Send optional promotional email or marketing calls/texts only when permitted by law and supported by appropriate consent or other lawful authority.
Submitting a general inquiry does not authorize enrollment, give us unlimited permission to contact you, or require you to agree to unrelated marketing.
5. When We Disclose Information
We may disclose only information reasonably needed for the following purposes:
- Insurance carriers, Medicare plans, enrollment or quoting systems, and authorized service partners when needed to respond to your request, obtain an insurance quote, submit an application, or service coverage.
- Vendors working for us, such as secure hosting, customer relationship management, appointment scheduling, email delivery, telephone and recording, document storage, cybersecurity, and compliance providers, subject to reasonable confidentiality and security controls.
- A person you expressly authorize to help you, subject to appropriate identity and authorization checks.
- Regulators, auditors, courts, or other parties when a lawful request, legal obligation, security incident, or protection of rights requires disclosure.
- A successor in a lawful business transaction, subject to applicable privacy and consumer-protection requirements.
We do not sell Medicare numbers, Social Security numbers, medical records, sensitive insurance or health data, or contact-form submissions to unrelated third-party lead brokers or data brokers. We do not share SMS opt-in or consent records with third parties or affiliates for their independent marketing; our contracted messaging providers may process consent information only to deliver authorized messages and administer opt-outs. We do not sell your information for unrelated advertising. Disclosures necessary to provide a product or service you requested are different from selling information for unrelated marketing.
If we ever propose to share personal beneficiary data collected for Medicare Advantage or Part D marketing or enrollment with another third-party marketing organization (TPMO) for that organization's marketing or enrollment contact, we will first obtain the clear, separate written permission required under CMS rules, identifying each intended recipient and allowing you to accept or reject each. We will not treat a general website submission as that permission.
6. Software Providers, Portals, and Electronic Documents
We may use scheduling software, customer relationship management systems, electronic signatures, secure document exchanges, telephony/recording providers, and insurer enrollment portals to carry out requests. Some providers act on our behalf under applicable service and confidentiality arrangements; insurers and independent portal operators may control information under their own privacy notices. We seek to limit each service provider's access to the information it needs for its assigned function. If you are asked to consent to legally required electronic records, that consent is handled separately from accepting ordinary website terms. Information submitted as general website feedback is not automatically authorized for publication as a named testimonial or for unrelated marketing.
7. Financial and Health Information; HIPAA
As a licensed insurance agency, MedElevate may be subject to the Gramm-Leach-Bliley Act and Florida insurance privacy rules governing nonpublic personal financial and health information. We will provide additional initial, revised, annual, and opt-out privacy notices when required for the particular information and relationship, and will honor applicable restrictions and exceptions on disclosure.
The Health Insurance Portability and Accountability Act (HIPAA) applies to covered entities and their business associates, not automatically to every independent insurance broker or every record on a broker's website. When MedElevate acts in a role to which HIPAA applies, we will meet those applicable obligations. Whether or not HIPAA applies, we handle information about health and insurance needs as sensitive and seek to limit its collection and disclosure. Do not assume public contact forms are a HIPAA-secure medical-record submission system.
8. Phone Calls and Recording
MedElevate currently uses a telephone service with Medicare call-recording capabilities. When a call is subject to CMS Medicare Advantage or Part D marketing and sales recording requirements, we record the covered call in its entirety, including the audio portion of a covered web-based call. We provide an appropriate recording notice and obtain the consent required by law before recording; Florida generally requires all-party consent to record a private call. If you do not consent, we may be unable to conduct a covered Medicare marketing or sales discussion by telephone and will discuss whether another compliant option is available.
We use recordings for required documentation, compliance reviews, quality assurance, training, servicing, and dispute resolution. We restrict access to authorized personnel and service providers with a legitimate need, using applicable security controls. Under current CMS TPMO rules, covered Medicare marketing and sales recordings must be retained at least six years: audio format for the first three years; in years four through six, audio or complete and accurate transcripts are permitted. A carrier agreement, litigation hold, or other applicable duty may require longer retention. Not every general service call is subject to CMS recording requirements.
9. Email, Telephone, and Text Communications
We may telephone or email you in response to a specific inquiry, permission-to-contact request, appointment, or existing service relationship to the extent permitted by law. Providing a phone number or submitting an inquiry does not by itself authorize promotional text messages, automated marketing calls, or unrelated solicitations. Permission to contact is not permission to enroll you in a plan or a substitute for any required Scope of Appointment.
As of October 10, 2026, our outgoing SMS/text messaging program has not launched. Before we begin sending text messages of any kind—including appointment or service reminders—we will require your prior, affirmative, documented written consent for the applicable category of texts. Consent may be provided through a separate, unchecked checkbox and electronic acknowledgment on our website, or through an appropriately signed, separate selection on a paper or electronic Permission to Contact form at an event. A general request to be contacted, an event sign-in sheet, or permission for a phone call is not SMS consent.
We intend to distinguish optional service/appointment texts from optional promotional/marketing texts, and you may select either, both, or neither. Marketing texts, where offered, will not be sent without the separate consent required by law and applicable Medicare rules. Consent to texts or automated marketing communications is not required to request assistance, schedule a telephone call, receive a quote, or purchase insurance. If a communication method or technology requires more specific language or consent under the Telephone Consumer Protection Act or Florida law, that disclosure and permission will be presented before we use it.
If you choose to get text messages from MedElevate Insurance, we use your mobile number only to send the texts you asked for and to keep a record of your choice. We do not sell, rent, or share mobile numbers or text message opt-in consent with third parties or affiliates for their marketing or promotional purposes. We share your number only with the service providers that help us send texts (such as our text messaging platform and mobile carriers), and only so they can deliver our messages. Text message opt-in data and consent will not be shared with any third parties, except those service providers.
Stopping texts. You can stop texts at any time by replying STOP, by calling 833-752-6465, or by emailing molly@medelevatehealth.com. We'll honor your request promptly, and within 10 business days at most.
How long we keep it. We keep a record of your text consent and any opt-out (the date and time, the wording you agreed to, and the page where you agreed) for as long as needed to show we respected your choices, as required by law. After you opt out, we keep your number only to make sure you don't get more texts.
For promotional emails, use any unsubscribe link or contact us to change preferences. To request no further promotional telephone calls, tell us during a call or email privacy@medelevatehealth.com. Legally required or requested service communications may still be permitted, subject to applicable restrictions.
Wellness & Resources email list. If you sign up for Wellness & Resources updates, we collect only your first name, email address, and the topics you choose. We use them only to send wellness and community resource emails. We won't use this sign-up to contact you about insurance or Medicare plans, and it doesn't create an insurance request.
Not sold or shared. We don't sell, rent, or share wellness sign-ups with anyone, including insurance companies, carriers, agents, or lead buyers. We keep the wellness list separate from insurance inquiries and client records. Only the email service that sends our messages handles your information, and only to deliver them.
Unsubscribing and how long we keep it. You can unsubscribe at any time using the link in any wellness email or by emailing molly@medelevatehealth.com. We process unsubscribe requests within 10 business days. We keep your sign-up while you're subscribed. If you unsubscribe, we delete your sign-up details within 30 days and keep only your email address on a do-not-email list so we don't email you again. If you don't open or click any wellness email for 24 months, we remove you from the list.
10. Cookies, Analytics, and Advertising Tools
We may use essential cookies, basic website analytics, and security technologies to operate the site and understand site performance. We will not intentionally place advertising retargeting pixels, session-replay tools, or similar marketing trackers on sensitive Medicare or insurance intake pages without a separate privacy review and appropriate disclosures and choices. If we introduce technologies or practices that legally require additional notices or opt-outs, we will provide them before use. Your browser may let you block cookies, though that can affect website functions.
11. Safeguards and Security Incidents
We use risk-appropriate administrative, technical, and physical safeguards, which may include restricted access, multifactor authentication, secure forms and storage, encryption where appropriate, vendor oversight, staff confidentiality practices, and secure record disposal. No internet transmission or storage system can be guaranteed completely secure.
If a breach involving information under our control occurs, we will investigate, work with affected vendors and regulators as appropriate, and provide notifications within the time and manner required by applicable law, including Florida Statutes § 501.171 where applicable. We do not promise that a privacy policy alone prevents every security incident.
12. How Long We Keep Information
We keep personal information only as long as reasonably necessary for the purpose collected, client servicing, lawful business needs, regulatory and carrier retention requirements, claims, audits, and disputes. Applicable Medicare marketing and sales call records have the minimum periods described in Section 7. Other records may have different retention requirements; a request to delete information may therefore be limited by legal or contractual duties. When no longer needed, records are deleted or securely disposed of using methods appropriate to their sensitivity. Wellness & Resources email sign-ups are marketing contacts, not insurance records, and follow the shorter retention described in Section 9.
13. Privacy Choices and Requests
You may ask us to review, correct, or, where permitted, delete personal information we hold about you; obtain information about our disclosures; change contact preferences; or exercise an opt-out right available under applicable insurance or privacy law. Some records must be retained for compliance, enrollment, security, or legal reasons, and certain requests require identity verification. We will explain when a request cannot be completed and why. We do not discriminate against individuals for exercising legally protected privacy rights.
To submit a request, email privacy@medelevatehealth.com with "Privacy Request" in the subject line. Please do not include a full Medicare number, Social Security number, or sensitive medical details in that email.
14. Family Members and Authorized Representatives
We welcome questions from adult children, caregivers, and family members, but receiving an inquiry does not authorize us to disclose a beneficiary's confidential information. We may require the beneficiary's permission or proof of legal authority before discussing individual insurance, health, or enrollment records. Do not provide another adult's sensitive information without appropriate authority.
15. Children
Our website is directed to adults seeking insurance and healthy-aging information. We do not knowingly collect personal information directly from children under 13 through general website forms. Parents or authorized guardians should contact us before submitting sensitive dependent information.
16. Outside Websites and Services
Our content may link to Medicare.gov (opens in a new tab), insurers, health resources, scheduling services, secure application portals, and other third-party websites. These organizations control their own privacy practices. Review their notices before submitting information to them.
17. Changes to This Policy
We may update this Policy when services, technology, or legal requirements change. We will publish the revised date and provide any additional notice legally required for material changes. Changes do not retroactively create marketing permission or authorize a disclosure that requires your separate consent.
18. Contact
MedElevate LLC, DBA MedElevate Insurance
Putnam County, Florida
Email: privacy@medelevatehealth.com
Website: https://medelevatehealth.com
Florida Insurance Agency License No. L138486
For information about Medicare and all available choices, visit Medicare.gov (opens in a new tab) or call 1-800-MEDICARE (1-800-633-4227).
