This website is intended for a United States audience. Any information you provide, including any personal information, will be transferred to and processed by a computer server located within the United States.
Collection and Use of Information
Personally Identifiable Information (PII)
We collect PII from users of this Website who voluntarily choose to disclose this information in order to access the products and services available through this Website. Available products and services include personalized online decision support systems to help you review, compare and select policies of insurance, health savings accounts (HSAs) and other products and services made available by Gravie. We will also help you to arrange for payment of insurance policies.
In order to provide these services (the “Gravie Service”), we need to collect some of your PII, which may include your name, date of birth, address, contact information, and whether you use tobacco. If you are considering family coverage, we will need to collect the same information on family members. To arrange for payment, you will need to provide us with bank information. To determine your eligibility for government subsidies (such as premium tax credits on a state or federal health care exchange), we will need your social security number and financial information. Finally, to help you choose the plan that is right for you, we will ask you to complete an online survey. The survey will assess your tolerance of risk and utilization of medical services. It won’t ask you specific questions about illnesses or medical conditions.
The decision to provide your information is completely voluntary and is not required. However, if you choose not to provide the requested information, Gravie will not be able to make its products and services available to you.
We collect PII from you when you:
- register to become a Member;
- use tools on the Website;
- conduct a transaction (e.g., purchase coverage) through the Gravie Service, and
- choose to provide us with additional information.
Legal Authority to Collect PII
We collect information other than PII (“Non-Personal Information”) from all visitors to this Website in order to enhance the user’s experience while visiting the Website and to improve the design and content of the Website, including:
- the number of visitors to this Website;
- the websites from which visitors enter this Website;
- the pages visitors visit while on this Website;
- the actions (e.g., button clicks) visitors take while on this Website;
- the length of these visits;
- the names of the visitors’ Internet providers and internet protocol addresses;
- the visitors’ browser information;
- the speed of the visitors’ connections, and
- the search terms used to find this Website, as applicable.
We also use technology that helps us compile aggregated statistics about our users and their use of the Website. This aggregated information does not contain any PII and is used for improving the Website and the tools on the Website (including improvements to the recommendation engine), aggregated reports, benchmarking and other marketing purposes. Aggregated information cannot be traced back to specific users by third parties other than third parties who are acting as our agents. We may contract with third parties to compile these aggregated statistics for us.
Gravie Pages on Third-Party Websites
We maintain accounts on third-party websites, such as social media sites, as tools to better interact with the public. The security and privacy policies of third-party websites apply to your activity on those sites. Users of third-party websites often share information with the general public, user community, and/or the third party operating the website. You should review the privacy policies of all websites before using them and ensure that you understand how your information may be used. You should also adjust privacy settings on your account on any third-party website to match your preferences.
Choices About Your Personal Information
We want to keep your PII accurate.
You may contact us at
Links to Other Websites
Information Automatically Collected and Stored
When you browse through our Website, we use Google’s Universal Analytics software to gather and store a variety of information about your visit. This information can be used to identify you as an individual by Gravie and may be connected to other data Gravie has about you, including PII.
The basic information we collect during your visit includes:
- the name of the domain you use to access the Internet (for example, comcast.com, if you are using a Comcast online account, or stanford.edu, if you are connecting from Stanford University's domain);
- the date and time of your visit to our Website;
- the pages, your activity on those pages, and documents you viewed on our Website;
- the URL of the Website you visited prior to ours;
- the type and version of your Web browser and operating system, and
- your location at the time of your visit, down to the city-level.
Some examples of the ways we use your activity information:
- customizing your experience on the Website including managing and recording your preferences;
- marketing, product development and research purposes;
- tracking resources and data accessed on the Website;
- developing reports regarding Website usage, activity and statistics;
- assisting users experiencing Website problems;
- enabling certain functions and tools on the Website, and
- tracking paths of visitors to the Website and within this Website.
The data is available to designated staff who require this information to perform their duties. It is retained only for as long as needed for proper analysis.
Data security is implemented through physical, administrative and technical safeguards we put in place and operational procedures we follow to protect PII. We protect your transactions involving PII over the Internet using Transport Layer Security (TLS) technology. We restrict access to your PII in our database to our authorized employees, our agents and certain of our authorized partners.
Some PII we collect may be Protected Health Information (“PHI”) within the meaning of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Examples of PHI include the demographic information you provide during registration combined with enrollment and payment information. To the extent applicable, Gravie agrees to comply with HIPAA and the rules issued pursuant to HIPAA. Certain applicable laws and contracts may also require insurers and third-party vendors to protect PHI collected by us through this Website.
Disclosure of Information
Pursuant to the "Gravie Release of Information” form that you are required to agree to and sign if you wish to access the Gravie Service, or to the extent allowed by HIPAA without such Release of Information, we may use and/or disclose the information you provide in the following ways:
- With marketing vendors, in order to keep you informed about Gravie’s products and services, via phone, email or other means. Please note that we will never sell your information for marketing purposes and you always have the right to opt-out of receiving communications from us.
- With our business partners, including employers, third party vendors, and referral partners, in order to coordinate payments, provide products and services, and enable administrative functions related to the products and services you choose.
You do not have to sign the “Gravie Release of Information” form; however, if you do not sign, Gravie will not be able to make its products and services available to you.
Any other disclosures of the information you provide will only be made with your written authorization, or as required by law.
This Website is not intended for use by children under the age of 18. We will not knowingly collect any Personal Information from visitors under the age of 18 online through this Website, except that parents/legal guardians or Personal Representatives of children under the age of 18 may register on a child’s behalf in order to purchase a child-only plan. If you think that we have collected Personal Information from a visitor under the age of 18, please contact us.
California Residents’ Privacy Rights
Do Not Track
Gravie does not currently use technology that recognizes web browser “Do Not Track” signals or other similar mechanisms.
Other Third Parties
Pursuant to the “Gravie Release of Information” form, Gravie shares some information with third party marketing vendors for Gravie’s marketing and communications. However, Gravie will not share your information with third parties for their direct marketing purposes. Therefore, we are not subject to the requirements of California Civil Code 1798.83.
Grievances and Complaints
In accordance with California Civil Code Sec. 1789.3, California residents are entitled to know that they may file grievances and complaints with the Complaint Assistance Unit of the Division of Consumer Services of the Department of Consumer Affairs. Grievances and complaints may be submitted in writing to 400 R Street, Suite 1080, Sacramento, CA 95814; or by phone at 916.445.1254 or 800.952.5210; or by email to firstname.lastname@example.org.
Complaints and Grievances
You may contact us directly with any complaints by phone at
You may also submit a complaint to the Centers for Medicare and Medicaid Services (CMS) via the Federally Facilitated Marketplace (FFM) Call Center by calling: 800.318.2596, 24 hours per day, 7 days per week.
California residents also have the right to submit any complaints or grievances, as described above in the “California Residents’ Privacy Rights” section.
This page was last updated December 1, 2016