Privacy Policy

Oaceus Online Privacy Policy

LAST UPDATED: July 2025

Welcome to the Oaceus Insurance Services, LLC (“Oaceus”) website (www.oaceus.com) and portal (https://portal.oaceus.com) (collectively, the "Website"). This written policy (the "Privacy Policy") is designed to tell you about our practices regarding collection, use, and disclosure of information that you may provide via this Website and certain related services. Please be sure to read this entire Privacy Policy before using, or submitting information, to this Website.

Your Consent

This Privacy Policy sets forth the Website's current policies and practices with respect to nonpublic personal information of the users of the Website. By using this Website, you agree with the terms of this Privacy Policy. Whenever you submit information via this Website, you consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy.

At Oaceus, we put the needs of our customers first. The information gathered from you on our website includes personal information such as your name, address, phone number(s), and email address is stored in our in-house database and is used to contact you in response to your inquiries. If you work with us, any information shared electronically is subject to this Privacy Policy and third-party CRM provider at HubSpot. Please review the HubSpot's privacy policy to the extent you work with us because the separate website maintains and stores more specific personal information that may be considered sensitive.

PLEASE READ THE FOLLOWING PRIVACY POLICY (OTHERWISE NOTED AS THIS “AGREEMENT”) CAREFULLY BEFORE USING THE WEBSITE BY USING THIS WEBSITE, YOU SIGNIFY YOUR ASSENT TO THIS AGREEMENT. IF YOU DO NOT ASSENT TO THIS AGREEMENT, PLEASE DO NOT USE THIS WEBSITE.

See our Notice of HIPPA Privacy Policies Section Below if You Subscribe to Our Services.

At Oaceus, we share your concerns about privacy. We have created this privacy statement in order to demonstrate our firm commitment. The following discloses our information gathering and dissemination practices for all our Website web pages.

Information We Collect

Our Website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). In particular, Oaceus has collected the following categories of personal information from its consumers within the last twelve (12) months:

Category:
A. Identifiers.

Example:

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

Collected:
[YES]

Category:

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

Example:

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

Some personal information included in this category may overlap with other categories.

Collected:

[YES]

Category:

C. Protected classification characteristics under California or federal law.

Example:

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Collected:

[YES]

Category:

D. Commercial information.

Example:

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Collected:

[YES]

Category:

E. Biometric information.

Example:

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

Collected:

[YES]

Category:

F. Internet or other similar network activity.

Example:

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Collected:

[YES]

Category:

G. Geolocation data.

Example:

Physical location or movements.

Collected:

[YES]

Category:

H. Sensory data.

Example:

Audio, electronic, visual, thermal, olfactory, or similar information.

Collected:

[YES]

Category:

I. Professional or employment-related information.

Example:

Current or past job history or performance evaluations.

Collected:

[NO]

Category:

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Example:

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

Collected:

[NO]

Category:

K. Inferences drawn from other personal information.

Example:

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Collected:

[NO]

Personal information does not include:

Publicly available information from government records.
De-identified or aggregated consumer information.
Information excluded from the CCPA's and CPRA's scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Oaceus obtains the categories of personal information listed above from the following categories of sources:

Directly from you. For example, from forms you complete or products and services you purchase.
Indirectly from you. For example, from observing your actions on our Website.

Use of Personal Information

We may use, or disclose the personal information we collect for one or more of the following business purposes:

To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
If you seek to be connected with a physician/healthcare provider.
To provide, support, personalize, and develop our Website, products, and services.
To create, maintain, customize, and secure your account with us.
To process your requests, purchases, transactions, and payments and prevent transactional fraud.
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law).
To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.
For testing, research, analysis, and product development, including to develop and improve our Website, products, and services.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information or as otherwise set forth in the CCPA and CPRA.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Oaceus's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Oaceus about our Website users is among the assets transferred.

Oaceus will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We will share your personal information with third parties only in the ways that are described in this privacy statement. We do not sell, rent, trade, or otherwise share your personal information with third parties without first providing you notice and choice.

Oaceus may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We may provide your personal information to healthcare/clinical providers introduced to you for the purposes of performing the services for which you contract through our company.

We may provide your personal information to agents or service providers acting on our behalf for limited purposes. For example, we may share personal information with our agents or service providers when enrolling you in our service contract. These third parties are authorized to use your personal information only to perform the service they are providing for us or to you.

Additionally, we reserve the right to disclose your personal information as required by law (e.g., to comply with a subpoena, warrant, court order, or similar legal process served on our website) and when we believe that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, and/or respond to a government request. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including meeting national security or law enforcement requirements. To the extent that we are permitted, we will always alert you to such outside requests or demands for information.

In the event Oaceus goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personally identifiable information will likely be among the assets transferred. You will be notified via email and/or a prominent notice on our website of any such change in ownership or control of your personal information, as well as any choices you may have regarding your personal information.

Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, Oaceus has disclosed the following categories of personal information for a business purpose:

[Category A: Identifiers.]

[Category B: California Customer Records personal information categories.]

[Category C: Protected classification characteristics under California or federal law.]

[Category D: Commercial information.]

[Category E: Biometric information

[Category F: Internet or other similar network activity.]

[Category G: Geolocation data.]

[Category H: Sensory data.]

We disclose your personal information for a business purpose to the following categories of third parties:

Service providers.
Data aggregators

Sales of Personal Information

Oaceus does not sell personal information. In the preceding twelve (12) months, Oaceus has not sold personal information.

Your Rights and Choices

Subject to applicable law which may not require adherence to such requests, you have the right to request access to and receive details about the personal information we maintain about you, update and correct inaccuracies in your personal information, and have the information blocked or deleted, as appropriate. The right to access personal information may be limited in some circumstances by local law requirements. We may take reasonable steps to verify your identity before granting access or making corrections. You may request to review, change or delete your personal information by sending an email to info@oaceus.com or clicking on our Data Request.

Access to Specific Information and Data Portability Rights

You have the right to request that Oaceus disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties with whom we share that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
sales, identifying the personal information categories that each category of recipient purchased; and
disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that Oaceus delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

Complete the transaction for which we collected the personal information, provide a good or service that you or your benefit provider(s) have requested, take actions reasonably anticipated within the context of our ongoing business relationship with you or your benefit provider(s), or otherwise perform our contract with you or your benefit provider(s).
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us or that of the benefit provider(s).
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Right to Correct

You have the right to request that Oaceus corrects inaccurate personal information

Right to Limit Use and Disclosure

You have the right to request that Oaceus limits the use and disclosure of sensitive personal information.

Exercising Access, Data Portability, Deletion, Correction, and Limit Use and Disclosure Rights

To exercise the access, data portability, deletion, correction, and limit use and disclosure rights described above, please submit a verifiable consumer request to us by either:

Completing our Data Request Form.
Calling us at 866-662-4155; or
Writing us at 5701 Lonetree Blvd, Suite 210, Rocklin, CA 95765

Only you, or a person properly authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.

We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

IP Address

We log all connections to our web servers. Those log files include your IP address. An IP address is NOT personally identifiable information, but general information about your location, connection to the Internet, and your Internet Service Provider. We use your IP address to help diagnose problems with our server and to administer the Sites. Additionally, we will use your IP address to track your navigation of the Sites and we may use your navigation history in current and future marketing efforts to you and to others.

Security

We care about protecting the security of your personal information, and we have implemented security procedures to protect the personal information that you provide to us. However, no method of transmitting or storing electronic data is ever completely secure, and we cannot guarantee that such information will never be accessed, used, or released in a manner that is inconsistent with this policy. Some of the measures we take are:

• Limiting access to personal information to those employees who are critical to communicating with you.

• Implementing appropriate physical, electronic and procedural safeguards to guard against unauthorized access or use.

• Requiring appropriate consents and protections from our business partners before we share any personally identifiable information.

While we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations of the internet which are beyond our control; (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through this Website cannot be guaranteed; and (c) any such information and data may be viewed or tampered with in transit by a third party. Moreover, where you may be required to use passwords, or other special access features on this Website, it is your responsibility to safeguard them.

Passive Information Collection (IP Addresses, cookies, and tags)

As you navigate through a website, certain information can be passively collected (that is, gathered without you actively providing the information) using various technologies and means, such as Internet Protocol addresses, cookies, Internet tags, and navigational data collection.

This Website may use Internet Protocol (IP) addresses. An IP Address is a number assigned to your computer by your Internet service provider so you can access the Internet and is generally considered to be non-personally identifiable information, because in most cases an IP address is dynamic (changing each time you connect to the Internet), rather than static (unique to a particular user's computer). We use your IP address to diagnose problems with our server, report aggregate information, determine the fastest route for your computer to use in connecting to our Website, and administer and improve services to our consumers.

A "cookie" is a bit of information that a website sends to your web browser that helps the site remember information about you and your preferences.

"Session cookies" are temporary bits of information that are erased once you exit your web browser window or otherwise turn your computer off. Session cookies are used to improve navigation on websites and to collect aggregate statistical information. This Website uses session cookies.

"Persistent cookies" are more permanent bits of information that are placed on the hard drive of your computer and stay there unless you delete the cookie. Persistent cookies store information on your computer for a number of purposes, such as retrieving certain information you have previously provided (e.g., username), helping to determine what areas of the website visitors find most valuable, and customizing the website based on your preferences. This Website uses persistent cookies.

"Internet tags" (also known as single-pixel GIFs, clear GIFs, invisible GIFs, and 1-by-1 GIFs) are smaller than cookies and tell the website server information such as the IP address and browser type related to the visitor's computer. This Website uses Internet tags. "Navigational data" ("log files," "server logs," and "clickstream" data) and "Internet Tags" are used for system management, to improve the content of the site, market research purposes, and to communicate information to visitors. This Website uses navigational data.

Links

This Website may contain links to websites of third parties not affiliated with us. This Privacy Policy will not apply to these third-party websites and the Website is not responsible for the privacy practices or the content on any of these other websites, even where these third-party sites indicate a special relationship or "partnership" with the Website. We do not disclose personally identifiable information to those responsible for the linked sites. The linked sites, however, may collect personal information from you when you link to their site. This collecting of information is not subject to the control of the Website. To ensure protection of your privacy, always review the privacy policies of the sites you visit by linking from this Website.

Testimonials

We may display personal testimonials on our website in addition to other endorsements. With your consent, we may post your testimonial along with your name and city/state of residence. If you wish to update or delete your testimonial, you can contact us at info@oaceus.com.

California Medical Board Notice to Patients

Click here to view the California Medical Board Notice to Patients

California Do Not Track Disclosures

How do we respond to Web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party websites or online services?

We currently do not respond to DNT signals in browsers.

May other parties collect personally identifiable information about an individual consumer’s online activities over time and across different websites when they visit www.oaceus.com?

No.

Protecting Children’s Privacy Online

The Website is not directed to individuals under the age of eighteen (18), and we request that these individuals do not provide Personal Information through the Website. We do not knowingly collect information from children under 18 without parental consent. Visit the Federal Trade Commission website for more information about the Children's Online Privacy Protection Act (COPPA). If you believe that we have received information from a child or other person who is not of a majority age in their relevant jurisdiction, please contact us at our email or physical mailing address listed in the “Contact Us” section below and we will take all reasonable efforts to remove the information.

Notice of HIPAA Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED, AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY AND REPORT ANY ISSUES, OR CONCERNS, TO OACEUS AT 5701 Lonetree Blvd, Rocklin, CA 95765 with a copy to Oaceus's Provider, 610 Eml St., Ste. 710, McKinney, TX 75069[FH8]

The Health Insurance Portability & Accountability Act of 1996 (HIPAA) is a federal program requiring that all medical records and other individually identifiable health information used, or disclosed, by us in any form, whether electronically, on paper, or orally, are kept properly confidential. This Act gives you, the Patient, significant new rights to understand and control how your health information is used. HIPAA provides penalties for covered entities that misuse personal health information.

We have prepared this "Notice of HIPAA

Privacy Practices" to explain how we as a Business Associate of the telemedicine provider are required to maintain the privacy of your health information and how we may use and disclose your health information.

We may use and disclose your medical records for each of the following purposes: treatment, payment, and health care operations:

TREATMENT means providing, coordinating, or managing health care and related services by one or more health care providers.
PAYMENT means such activities as obtaining payment or reimbursement for services, billing or collection activities and utilization review.
HEALTH CARE OPERATIONS include managing your Electronic Medical Record to facilitate diagnostic medical consultations with associated physicians, as well as conducting quality assessment review and service improvement planning activities, auditing functions, cost-containment analysis, and customer service.

We may also create and distribute de-identified health information by removing all references to individually identifiable information.

We may contact you to provide information about our services or other health-related services that may be of interest to you.

Any other uses and disclosures will be made only with your written authorization. You may revoke such authorization in writing and we are required to honor and abide by that written request, except to the extent that we have already taken actions relying on your authorization.

You have the following rights with respect to your protected health information, which you can exercise by presenting a written request to the Company:

You have the right to ask for restrictions on the ways we use and disclose your health information for treatment, payment, and healthcare operations. You may also request that we limit our disclosures to persons assisting your care. We will consider your request, but are not required to accept it.
You have the right to request that you receive communications containing your protected health information from us by alternative means or at alternative locations. For example, you may ask that we only contact you at home or by mail.
Except under certain circumstances, you have the right to inspect and copy medical, billing and other records used to make decisions about you. If you ask for copies of this information, we may charge you a nominal fee for copying, packaging, and postage.
If you believe that information in your records is incorrect, or incomplete, you have the right to ask us to correct the existing information, or add missing information. Under certain circumstances, we may deny your request, such as when the information is accurate and complete.
You have a right to receive a list of certain instances when we have used or disclosed your medical information. If you ask for this information from us more than once every twelve months, charges may apply, to cover our costs for administration, archive retrieval, copying, packaging, and postage.

Changes to Our Privacy Notice

Oaceus reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which Oaceus collects and uses your information described above, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Phone: 866-662-4155

Website: https://portal.oaceus.com

Postal Address:

Oaceus

Attn: Compliance - Privacy Officer

5701 Lonetree Blvd

Rocklin, CA 95765