Privacy Policy

Summit Health Administration ("Summit," "we," "us," or "our") is committed to protecting the privacy and security of personal information, including protected health information (PHI), entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use our services, or interact with us.

1. Information We Collect

Information you provide

• Contact information: name, email address, phone number, mailing address, and employer name when you submit a form, request a proposal, or contact us.
• Account credentials: username and password when you register for our member, employer, or consultant portals.
• Health plan information: enrollment data, eligibility information, claims data, and other PHI necessary to administer your health plan.

Information collected automatically

• Usage data: pages visited, time spent on our site, referring URLs, browser type, device type, and IP address.
• Cookies and similar technologies: we use cookies, pixel tags, and similar technologies to improve site functionality and analyze usage patterns.

2. How We Use Your Information

We use the information we collect to:

• Administer and manage health benefit plans, including claims processing, eligibility verification, and care management.
• Communicate with you about your plan, services, or account.
• Respond to inquiries and provide customer support.
• Process proposals and service agreements.
• Improve our website, services, and user experience.
• Comply with legal and regulatory obligations, including HIPAA, ERISA, and applicable state laws.
• Detect, prevent, and address fraud, security issues, or technical problems.

3. HIPAA and Protected Health Information

As a Third Party Administrator, Summit Health Administration handles PHI in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations. Our use and disclosure of PHI is governed by the Business Associate Agreements we maintain with the health plans we administer. We maintain administrative, physical, and technical safeguards to protect PHI as required by the HIPAA Security Rule.

For a detailed description of how we may use and disclose your PHI and your rights under HIPAA, please refer to the Notice of Privacy Practices provided by your health plan.

4. How We Share Information

We do not sell your personal information. We may share information with:

• Plan sponsors and employers: as necessary for plan administration, but only in accordance with the plan document and applicable law.
• Service providers: third-party vendors who assist with claims processing, pharmacy benefits, care management, data analytics, and IT services, subject to appropriate confidentiality and security agreements.
• Network providers and carriers: PPO networks, stop-loss carriers, PBMs, and other partners involved in plan administration.
• Legal and regulatory authorities: when required by law, regulation, legal process, or governmental request.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption, access controls, network monitoring, and regular security assessments. All employees and contractors with access to personal information or PHI are required to complete security and privacy training.

6. Data Retention

We retain personal information and PHI for as long as necessary to fulfill the purposes outlined in this policy, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. Health plan records are retained in accordance with ERISA requirements and applicable state retention schedules.

7. Your Rights

Depending on your relationship with us and applicable law, you may have the right to:

• Access and receive a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to legal retention requirements.
• Opt out of non-essential communications.
• Exercise your rights under HIPAA regarding your PHI (access, amendment, accounting of disclosures, restriction requests, and confidential communications).

To exercise any of these rights, please contact us using the information below.

8. Cookies

Our website uses cookies to enable core functionality (session management, security) and to understand how visitors use our site. You can control cookie preferences through your browser settings. Disabling cookies may limit certain features of our website.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 through our website. Health plan administration for minors is conducted in accordance with the plan document, applicable law, and parental or guardian authorization.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Summit Health Administration
Privacy Officer
100 S Ashley Dr, Suite 600
Tampa, FL 33602
Email: privacy@summithealthadmin.com
Phone: 1-800-555-0199