Privacy Policy
Choice Benefits and The ICHRA Shop Insurance Agency respect the privacy of employers, brokers, employees and website visitors.
Information we collect
We may collect contact information, company and workforce details, benefit preferences, uploaded documents and technical website-use information. Sensitive census, claims or medical information should be submitted only through an authorized secure intake—not by ordinary email.
How information is used
We use information to respond to requests, analyze benefit strategies, support quoting and enrollment, coordinate authorized vendors, improve the website and meet applicable operational and legal obligations.
Service providers and analytics
Information may be shared with authorized service providers, administrators, licensed producers, carriers or vendors when needed to provide a requested service. Website analytics may collect device, referral and interaction data. We do not sell personal information for unrelated advertising.
Security and retention
We use administrative and technical safeguards appropriate to the information and retain it only as reasonably needed for service, recordkeeping and legal purposes. No online system can guarantee absolute security.
Your choices
You may ask to access, correct or delete information, subject to legal and operational retention requirements. Contact Janet@ichra.shop.
This policy describes website and service practices and does not replace plan-specific privacy notices or carrier and administrator policies.
Historical research-tool accounts
Public access to our employer-filing research tool has ended. Previously collected account profiles and usage records remain restricted to our authorized team and subject to the retention and access practices described above. Contact brad@ichra.shop about your information.
Enrollment information and broker permission
For coverage assistance, see our Enrollment privacy & HIPAA notice and Broker permission and revocation page. Individual enrollment permission and application review are separate from employer intake. Required Marketplace records are retained for at least 10 years, including after consent expires or is revoked. Other records remain subject to applicable retention requirements.
Quote authorization, privacy & AI
Quote requests authorize only the requested benefits services. Census matching, medical or pharmacy data research, predictive scoring and AI processing require a separate project scope identifying the data, population, vendors, recipients, purpose and retention period. Do not submit medical records, diagnoses, prescriptions, Social Security numbers or banking information in this form.
Employer permission is not an individual HIPAA authorization and does not grant access to third-party health records. Before sensitive processing, the applicable legal basis, vendor data and matching rights, security controls and signed BAAs where required must be verified. No identifiable health information may be sent to public AI tools or used to train general-purpose models. Approved AI processing must be restricted to the documented purpose, access and retention terms, with human review.
Employer-facing predictive reports require at least 30 covered lives and aggregate results only. Small cells, rare conditions and combinations that could identify a person must be suppressed, including complementary cells where needed. Thirty lives and removing names alone do not establish HIPAA de-identification. Predictions are estimates, not diagnoses or guarantees, and must not be used for employment decisions or individual eligibility discrimination.
Cross-client benchmarking, public case studies and external research are not included automatically. They require separate written project approval, contractual rights and documented HIPAA de-identification where applicable. Identifiable research requires its own lawful pathway. No sale of identifiable health data or unrelated marketing use is authorized.
Privacy, security and data handling · Questions or prospective withdrawal of optional permission: brad@ichra.shop / 303-903-2054. Withdrawal does not undo prior lawful processing or required retention. A quote checkbox does not execute a BAA or certify HIPAA compliance.