Effective September 2015; last reviewed November 2017
What information do we collect?
We collect two types of information about you, personal and non-personal, from a few places: our services and your employer, as well as your employer’s current and prior insurance carriers and benefits administrators.
Personal information means any information that can be used to identify you—like your name, address, phone number, or email.
Non-personal information is information about you that doesn’t reveal your identity. Some examples are: your postal code, your age, or what browser you use to visit our site.
Sometimes, we may also collect information that relates to your health. This information may be Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). There are strict rules in place about sharing PHI. We’ll keep all PHI we receive confidential to follow the law.
When do we collect your information?
1. When you’re on our site or using our services, we may collect information about your visit. This can include:
• Your device type, IP address and browser type, language preferences and location, operating system, Internet domain and host name, date and time of your access, and referral URL
• How you interact with our site—what data you view, click on, or share, and the length of time you spend on each page
• Anything you search for on our site
2. When you register with us, we may ask for your name, email address, username, and password.
3. When your employer or your employer’s service provider supplies it—they may give us your name, work email address, address, Social Security number, date of birth, current benefit coverage, and dependent information.
4. When you fill out an application, or complete a form or another transaction. We may collect whatever personal information you enter into an online form, like an enrollment tool.
5. When you contact us or provide us with information—for example, if you send a question to our customer service team, or sign up for our online newsletter.
How do we use your personal information?
Here are some ways we may use your personal information:
• To give you access to services
• To respond to your questions and comments, send you messages from your employer about your benefits, and contact you about changes in your services
• To send you notices about your services or ones we think you may be interested in
Who do we share your personal information with?
1. Insurance companies, third party administrators, health and wellness program providers, and regulatory authorities
We’ll share your personal information with the company of any benefit product you enroll in—like a medical insurance policy or wellness tracking program. Sometimes, we’ll also have to share that information with regulatory authorities (who have to keep your information confidential) to stay compliant with the law.
2. Non-Fidelity service providers
Sometimes, we’ll share your information with companies not affiliated with Fidelity which are supporting our business operations. We require them to keep your information confidential, and to only use it as necessary.
3. Your employer, or your employer’s service provider
We’ll share some information with your employer so they can check on your enrollment status, as well as keep track of payroll deductions and insurance claims.
4. Other parts of Fidelity
We may share your information with our partners within Fidelity. For example, if you complete an enrollment form for a Health Savings Account (HSA) through Fidelity, we’ll share your personal information with our affiliate in order to enroll you in the account.
5. If it’s required by law
We may share your personal information if it’s necessary to protect against fraud or to stay compliant with the law.
Keeping your information safe
Your information is secure with us. We use physical, electronic, and procedural controls to safeguard it against unauthorized access, and only distribute it to those who need it. You should also take steps to make sure your information is secure by closing your browsers and keeping your login information confidential.
Nobody under the age of 13 should use this site. We do not knowingly collect personal information from children under 13. If we find out that anyone under 13 has submitted personal information through our services, we will do our best to delete that information as soon as possible.
You can always ask us to change your personal information to make it more accurate. You can also access and keep a copy of your personal information that we have. You also have the right to obtain a list of all of the people that have received your personal information for the last two years. We’ll respond to these requests within 30 business days, and you may be charged an administrative fee.
Changes to this policy
You should know that we reserve the right to make changes to this policy at any time. If we make changes that affect how we use or share your personal information, you’ll be notified.