Privacy Policy

1. Introduction

This Privacy Policy describes how Holy Impact Media, LLC (“Holy Impact Media,” “we,” “us,” or “our”), the operator of this website (the “Site”), collects, uses, shares, and protects information about you. By using the Site, you agree to the practices described here.

Because we collect information used to apply for insurance products, we are subject to the federal Gramm-Leach-Bliley Act (GLBA) and corresponding state insurance privacy regulations. This policy serves as our GLBA Privacy Notice in addition to general consumer privacy law disclosures.

2. Information We Collect

2.1 Information You Provide

We collect personal information that you voluntarily provide when using the Site, including:

• Name and contact information (email, phone, mailing address)
• Date of birth and age
• Location information (ZIP code, city, state)
• Household size and composition
• Estimated annual household income range
• Current insurance status and coverage needs
• General health-related preferences relevant to plan matching (e.g. whether you have a significant medical history)
• Communications consent records (TCPA / FTSA / state telemarketing law consents and TrustedForm certificates)

2.2 Automatically Collected Information

We automatically collect certain information when you visit the Site:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited, time spent, and click events
• Referring website or source (UTM parameters)
• Date and time of visit

2.3 Sensitive Personal Information

We do not knowingly collect Social Security numbers, government identification numbers, financial account numbers, precise geolocation, biometric data, racial or ethnic origin, religious beliefs, sexual orientation, or detailed medical records through the Site. If a licensed insurance agent later requires this information to complete an enrollment, that information is collected directly by the agent or carrier under their own privacy practices and is not retained by Holy Impact Media.

3. How We Use Your Information

We use the information we collect to:

• Connect you with licensed insurance agents who can present coverage options
• Provide private health insurance plan recommendations
• Communicate with you about insurance products and follow up on your inquiry
• Respond to your inquiries and provide customer support
• Improve the Site and our services
• Comply with legal, regulatory, and audit obligations
• Prevent fraud and maintain security

4. Information Sharing and Disclosure

Lead Recipients: Holy Impact Media shares your information with Dynasty Insurance Group, operated by licensed independent insurance agents, and the US Health Advisors agent network so that licensed agents can present you with coverage options. Compensation we receive for providing qualified leads is described in our Terms of Use.

4.1 Licensed Insurance Agents

We share your information with licensed insurance agents and brokers who can help you evaluate and enroll in private health insurance plans. Those agents are independent contractors or employees who are licensed in the state where you reside.

4.2 Insurance Carriers

With your consent, we and our licensed insurance partners may share your information with insurance carriers to obtain quotes and process applications.

4.3 Service Providers

We share information with third-party service providers performing services on our behalf, including hosting (Vercel, Supabase), email delivery (Resend), TCPA proof-of-consent (TrustedForm by ActiveProspect), analytics (Google Analytics), and lead distribution (LeadArena / USHA Marketplace). These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 Legal Requirements

We may disclose information if required by law, subpoena, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.5 Business Transfers

If Holy Impact Media is involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.

4.6 We Do Not Sell Your Information for Advertising

We do not sell your information to data brokers, advertisers, or unrelated third parties for their own marketing. Routing your information to a licensed insurance partner so a real agent can contact you is considered “sharing” or “selling” under some state laws (see Section 11 below). You can opt out at any time.

5. GLBA Privacy Notice (Insurance Information)

Because we collect personal information used to apply for an insurance product, we are subject to the federal Gramm-Leach-Bliley Act (GLBA) and applicable state insurance privacy laws.

Categories of nonpublic personal information we collect: identifiers (name, email, phone, mailing address); demographic information (age, household composition, estimated income range); and limited insurance-related information (current coverage status, general coverage preferences, qualifying-event status).

How we share it: with our licensed insurance partners, their carriers, and our service providers as described in Section 4. We do not share or disclose nonpublic personal information for marketing purposes unrelated to the insurance services you requested.

Your right to opt out of certain sharing: Under GLBA and corresponding state insurance regulations, you have the right to opt out of certain disclosures of your nonpublic personal information to nonaffiliated third parties. To opt out, email privacy@holyimpactmedia.com with the subject line “GLBA Opt-Out.” Note that opting out may prevent us from connecting you with a licensed insurance agent.

Information security: We maintain administrative, technical, and physical safeguards designed to protect nonpublic personal information against unauthorized access, disclosure, or misuse.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Site. Cookies are small files stored on your device that help us remember your preferences, understand how you use the Site, and improve our services. You can control cookies through your browser settings, but disabling cookies may limit certain Site features.

7. Third-Party Analytics & Advertising

7.1 Google Analytics

We use Google Analytics to understand how visitors use the Site. You can opt out by installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.

7.2 Advertising and Remarketing

We may use third-party advertising services to show ads to users who have previously visited the Site. These services may use cookies to serve ads based on prior visits. We do not share the personal information you submit through quiz forms with advertisers.

7.3 Global Privacy Control

We honor browser-based Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat that as a request to opt out of any sharing or sale of your personal information for cross-context behavioral advertising.

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. No method of transmission over the Internet or electronic storage is 100% secure. We will notify affected individuals and regulators of a security breach involving personal information as required by applicable law.

9. Data Retention

We retain quiz submission data and TCPA consent records for at least four (4) years from the date of collection, the federal statute of limitations for TCPA claims, and longer where state law or audit/litigation needs require. Marketing-suppression and Do-Not-Call records are retained indefinitely. Aggregated and de-identified analytics data may be retained without time limit. When we no longer need your personal information, we securely delete or anonymize it.

10. Your Rights and Choices

You have these rights regarding your personal information:

• Access: Request a copy of the personal information we have about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to legal exceptions
• Opt-Out of Marketing: Reply STOP to a text message, click the unsubscribe link in any email, or email us
• Internal Do-Not-Call: Be added to our internal Do-Not-Call list. We also honor the National Do Not Call Registry as required by law.
• Honor Global Privacy Control: See Section 7.3.

To exercise any of these rights, contact us at privacy@holyimpactmedia.com. We will verify your identity before responding.

11. State Privacy Rights

Depending on the state where you reside, you may have additional rights under the privacy laws listed below. Where state law conflicts with this policy, the state-law rights apply for residents of that state. To exercise any of these rights, email privacy@holyimpactmedia.com with the subject line “State Privacy Request” and include your full legal name, residency ZIP code, and the email/phone you submitted to us. We will verify your identity and respond within the timeframe required by your state's law (typically 45 days, with one 45-day extension if reasonably necessary).

11.1 California (CCPA / CPRA)

California residents have the right to know, delete, correct, opt out of sale or sharing for cross-context behavioral advertising, limit use of sensitive personal information, and not face discrimination for exercising these rights.

Do Not Sell or Share My Personal Information: Holy Impact Media shares your contact information with licensed insurance partners. Under the CCPA, this transfer may be considered a “sale” or “sharing” of personal information. You have the right to opt out at any time by emailing the address above with subject line “CCPA Opt-Out.”

California “Shine the Light” (Civil Code § 1798.83): California residents may request a list of third parties to whom we have disclosed personal information for direct-marketing purposes during the prior calendar year.

11.2 Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, obtain a copy, and opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects. You may also appeal a denial of these rights.

11.3 Colorado (CPA)

Colorado residents have the right to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, or profiling. You may also appeal a denial. Colorado residents may use a Universal Opt-Out Mechanism (such as Global Privacy Control) to exercise opt-out rights.

11.4 Connecticut (CTDPA)

Connecticut residents have rights substantially similar to Colorado, including access, correction, deletion, portability, and opt-out of targeted advertising, sale, and significant profiling.

11.5 Utah (UCPA)

Utah residents (a serviced state) have the right to access, delete, obtain a copy of personal data, and opt out of the sale of personal data and targeted advertising.

11.6 Texas (TDPSA)

Texas residents (a serviced state) have rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and significant profiling, under the Texas Data Privacy and Security Act.

11.7 Florida (FDBR)

Florida residents (a serviced state) have rights under the Florida Digital Bill of Rights to access, correct, delete, obtain a copy, and opt out of targeted advertising, the sale of personal data, and profiling. Florida residents are also covered by the Florida Telephone Solicitation Act (FTSA), and our communications consents are designed to comply with FTSA in addition to federal TCPA.

11.8 Authorized Agents

In every state above, you may designate an authorized agent to make a request on your behalf by including a signed written authorization with the request.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR / UK GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and data portability. The Site is primarily directed at United States residents, and we do not specifically target EEA residents. If GDPR applies to you, contact us at privacy@holyimpactmedia.com.

13. Children's Privacy

The Site is not directed to children under 18 and we do not knowingly collect personal information from children. If we become aware that a child has submitted information, we will delete it. If you believe we have collected information from a child, contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page and update the “Last Updated” date. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

15. Third-Party Websites

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

16. Contact Us

For questions, concerns, or to submit a privacy request: