California Privacy Notice

In the 12 months preceding the date of this Notice, MarketLink has collected the following categories of personal information from California residents:

Sensitive Personal Information: We collect Social Security Numbers (encrypted), health information, and financial information, all of which are classified as Sensitive Personal Information under the CPRA. This information is used only to provide the health insurance enrollment services you requested and is not used for profiling or secondary purposes.

We collect personal information:

• Directly from you when you use our Platform to apply for or manage health coverage;
• From your licensed broker with your documented consent;
• From CMS and the Federal Marketplace as part of the EDE enrollment process;
• From insurance carriers when confirming coverage details.

We collect personal information to:

• Determine eligibility for and facilitate enrollment in Marketplace health coverage;
• Calculate eligibility for APTCs and CSRs;
• Comply with CMS EDE program requirements (45 CFR § 155.220, § 155.260);
• Prevent fraud and ensure platform security;
• Fulfill our legal and regulatory obligations.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use Sensitive Personal Information for purposes other than enrollment services.

In the 12 months preceding this Notice, we have shared personal information with:

• CMS / Federal Marketplace: As required for enrollment processing;
• Insurance Carriers: To initiate and service your health coverage;
• Service Providers: HIPAA-aligned cloud hosting, database, and email service providers under Business Associate Agreements;
• Your Broker: With your documented Appointment of Representative consent.

We have not sold personal information and have not shared it for cross-context behavioral advertising in the preceding 12 months.

As a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties with whom we share it;
• Right to Delete: Request deletion of your personal information, subject to exceptions for legal compliance and enrollment record retention requirements;
• Right to Correct: Request correction of inaccurate personal information;
• Right to Opt Out of Sale/Sharing: We do not sell personal information. This right is not applicable, but you may submit a request to confirm our practices;
• Right to Limit Use of Sensitive Personal Information: Request that we limit use of your Sensitive Personal Information to the purposes permitted under the CPRA. Note: We already limit use of Sensitive PI to enrollment purposes;
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, submit a verifiable consumer request to:

• Email: privacy@marketlink.ai with subject line “California Privacy Request”;
• Or complete the form on our Trust Center.

We will verify your identity before fulfilling any request. We will respond within 45 days. If we require additional time (up to 90 days), we will notify you in writing. We will fulfill up to 2 requests per 12-month period at no charge.

You may designate an authorized agent to submit requests on your behalf. We will require written authorization from you and may verify the agent's identity.

We retain personal information for the periods specified in our Privacy Notice. California residents may request information about our retention practices at any time.