Privacy Policy

Introduction

HF Group Benefits LLC, doing business as ThirdWave Benefits ("we," "our," or "us"), is committed to protecting the privacy of visitors to our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, including any forms or features accessible through the site. It describes our actual practices and is provided for your information; it is not a contract and your use of the website is not treated as agreement to it. If you do not agree with the practices described here, please do not use our website, and contact us with any questions.

Information We Collect

Information You Provide to Us

When you use our website to request contact from our team or subscribe to our mailing list, we may collect the following personal information that you voluntarily provide:

• Your name
• Company name
• Phone number
• Email address
• Your message or inquiry

Information Collected Automatically

When you visit our website, certain information may be collected automatically through analytics tools, including Google Analytics. This information may include:

• Your IP address
• Browser type and version
• Operating system
• Pages visited and time spent on those pages
• Referring website addresses
• General geographic location (city or region level)

Two separate services collect this. Google Analytics collects the list above, and only when your browser is not sending a Global Privacy Control signal — see below. Google Analytics 4 uses your IP address to estimate your general location and to protect the service; it does not log or store IP addresses, and we never see yours. Cloudflare, which hosts the site, separately counts page requests without cookies in order to measure traffic; that measurement runs on every visit, including visits that send Global Privacy Control. We use what both produce as reports about our website as a whole, not to build a profile of you.

Cookies and Tracking Technologies

Our website uses a limited number of cookies to enhance your browsing experience and to help us understand how visitors use our site. A cookie is a small text file stored on your device by your web browser. We use the following types of cookies:

• Analytics Cookies: We use cookies set by Google Analytics to understand how visitors interact with our website — page visits, traffic sources, and general behavior — so that we can improve its content and functionality. These cookies do not contain your name or contact details, but they do distinguish your browser from other visitors' browsers, and the underlying data is collected visit by visit before we see it as reports.

We do not use cookies for advertising, remarketing, or to track your activity across other websites. You may disable cookies through your browser settings at any time. For more information about how Google Analytics uses cookies, please refer to the Third-Party Services We Use section below.

Global Privacy Control and Do Not Track

Global Privacy Control (GPC) is a signal your browser or a browser extension can send on your behalf to tell websites not to sell or share your personal information. Firefox, Brave, and DuckDuckGo can send it, among others. Our website honors it: when we receive a GPC signal, we do not load Google Analytics for your visit at all, so no Google Analytics cookies are set and none of your activity reaches Google. Cloudflare still counts the request, because that is part of delivering the page to you; that measurement sets no cookies and does not identify you.

Some browsers also offer an older "Do Not Track" (DNT) feature. DNT was never finalized as a standard and browsers send it inconsistently, so we do not respond to DNT separately. If you want to limit collection, enable Global Privacy Control, which we do honor.

Protected Health Information

We do not collect protected health information (PHI) through our website. Any collection of PHI occurs exclusively through our independent, secure quoting process, which is entirely separate from this website. The handling of PHI through our quoting process is governed by separate privacy and security policies in compliance with applicable federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA).

How We Use Your Information

We use the information we collect through our website for the following purposes:

• To respond to your inquiries and contact requests
• To send you information about the benefits industry through our mailing list, if you have opted in
• To improve and optimize our website and its content
• To analyze website usage trends and visitor behavior in aggregate
• To comply with applicable legal obligations

Sharing of Your Information

We do not sell, trade, or rent your personal information collected through our website, and we do not share it for anyone else's advertising. Your website data is used solely for the purposes described in this Privacy Policy.

Running the website does require a few service providers to handle your information on our behalf — for example, the service that delivers your contact form message to our inbox and the service that sends our mailing list. They are listed in the Third-Party Services We Use section below, along with what each one receives; we do not authorize any of them to use your information for their own marketing.

If you engage with us through our separate, secure quoting process and provide permission for us to seek quotes on your behalf, your information may be shared with insurance carriers and partners solely for the purpose of obtaining those quotes. This sharing is governed by the terms and authorizations provided during that process, not through this website.

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order, subpoena, or government investigation.

Third-Party Services We Use

Our website depends on a small number of outside services. None of them are advertising networks or data brokers. Each receives only the information described below, and its own privacy policy and terms govern what it may do with that information:

• Google Analytics: helps us understand how visitors interact with our website. Google Analytics collects information about website usage through automated means, and the information generated is used to evaluate visitor activity and compile reports for us. Google's ability to use and share this information is governed by the Google Analytics Terms of Service and the Google Privacy Policy. We do not load it when your browser sends a Global Privacy Control signal.
• Web3Forms: receives what you type into our contact form and delivers it to our business email so that we can reply.
• MailerLite: stores our mailing list and sends the emails you subscribe to, including the unsubscribe link in every message.
• Cloudflare: hosts and delivers this website, and provides the cookieless traffic measurement we use alongside Google Analytics. Cloudflare processes your request in order to serve the page to you.

Data Security

We take reasonable administrative, technical, and physical measures to protect the personal information we collect through our website from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security of your information.

Data Retention

How long we keep information depends on what it is:

• Contact form inquiries: your message arrives in our business email and stays there while it is relevant to a possible or existing client relationship. We do not run a fixed deletion schedule for these messages. You may ask us to delete yours, and we will, subject to the limits described under Your Rights and Choices below.
• Mailing list: we keep your email address until you unsubscribe. After you unsubscribe, MailerLite keeps a record of the address on our suppression list so that we do not email you again; we do not use it for any other purpose.
• Website analytics: Google deletes the event-level analytics data from your visit after 2 months. The associated user-level data is deleted after 14 months, measured from your most recent visit rather than your first, so the period starts over each time you return. The aggregate traffic reports produced from that data — visit counts and similar totals, which identify no one — are not deleted on either schedule.
• Client and policy records: if you become a client, the records of your coverage are collected through our separate quoting and enrollment process rather than this website, and Florida law requires us to keep them — at least 5 years after a policy expires, and at least 3 years for records of premium payments.

We may keep information longer where a law, regulation, or an unresolved dispute requires it. If you wish to have your information removed from our records, please contact us using the information provided below.

Your Rights and Choices

You have the following rights with respect to your personal information:

• Opt-Out of Mailing List: You may unsubscribe from our mailing list at any time by using the unsubscribe link included in our emails or by contacting us directly.
• Access and Correction: You may request access to the personal information we hold about you and ask us to correct any inaccuracies.
• Deletion: You may request that we delete your personal information from our records, subject to any legal obligations that may require us to retain certain data.

To exercise any of these rights, please contact us using the information in the Contact Us section below.

State-Specific Privacy Rights

Depending on your state of residence, you may have additional rights regarding your personal information under comprehensive state privacy laws. These may include the right to request access, deletion, or correction of your data, and the right to opt-out of the sale or sharing of your data. While we do not sell your personal information, if you are a resident of a state with applicable privacy laws and wish to exercise your rights, please contact us using the information provided below.

Children's Privacy

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

HF Group Benefits LLC DBA ThirdWave Benefits
3416 Heartwood Lane, Melbourne, FL 32934
Phone: 321.345.9482
Email: [email protected]
Website: www.thirdwavebenefits.com