Privacy Policy

About this English version

The version presented to consumers is published in Spanish at medicare.alianzaporlasalud.com/privacidad. Our form, our consent language and our messages are in Spanish, because the people we serve are in Puerto Rico. This English version is provided so that it can be reviewed by parties who do not read Spanish.

What information we collect

When you complete the guidance request form, we collect only the following:

• Your first and last name.
• A telephone number where we can reach you.
• Your email address, if you choose to give it to us. This is optional.
• Your municipality and postal code.
• Your date of birth, and the language you prefer we speak to you in.
• The best day and time to call you.
• Your answers to a few brief questions about your Medicare: whether you have Part A, whether you have Part B, whether you have a Medicare Advantage plan, and what kind of guidance you are looking for.
• If you are requesting guidance on behalf of another person, that person's name and your relationship to them.
• An optional comment, if you wish to add anything.

What information we never collect

We do not ask for or store your Medicare number, your Social Security number, banking information, diagnoses, medications, or any other medical or clinical information.

This is not a promise that depends on the good will of whoever assists you: the system has nowhere to store that data. If someone asks you for it over the phone claiming to be from Alianza, hang up and call us at the number on this page.

We treat your Medicare answers as sensitive information

Knowing whether you have Medicare Part A and Part B says something about your health coverage. Although this guidance activity is not covered by HIPAA, we treat those answers as sensitive information: we collect only what is necessary for an agent to guide you, and we limit who within Alianza can see them.

Alianza's Service Center does operate under HIPAA and complies with its provisions. This web form is a separate activity and does not collect medical information.

Technical information about your visit

When you submit the form, we store alongside your request the date, the time with your time zone, the internet (IP) address it was submitted from, the browser you used, and the page you arrived from, including advertising campaign parameters.

This is not used to profile you. It is stored for one reason only: to support the fact that you did authorize us to call you, in case that ever needs to be demonstrated.

Third parties and Do Not Track signals

No third party collects information about you on this site. We do not use advertising cookies, social media pixels, or tools that follow you from one site to another.

For that reason, when your browser sends a Do Not Track signal, there is nothing to disable: this site does not track you with or without that signal. If that ever changes, we will say so here before doing it.

What we use your information for

• So that an authorized agent can contact you and guide you regarding your options.
• To assign your request to an agent and document the follow-up.
• To retain evidence of the authorization you gave us.
• To understand which advertising campaigns work, in aggregate form and without personal data.

Who we share it with

The person who calls you is a representative of Alianza por la Salud. Your information does not leave Alianza by virtue of your completing this form.

During that call, if you agree, the call may be transferred to an authorized representative of a health plan. Alianza represents MMM and Triple-S Advantage. That transfer occurs only if you consent at that moment, and it is recorded: we log the date, the time, which plan the call was transferred to, and the fact that you authorized it. If you prefer not to, the guidance continues just the same.

We do not sell your information. We do not hand it over to other organizations so they can sell you anything. We do not send it to advertising platforms or analytics tools.

We would disclose it only if a law or a court order required us to.

Your authorization covers a phone call

The checkbox you mark on the form authorizes a representative of Alianza to call you at the number you gave us, in order to respond to your request, and authorizes that call to be transferred to an authorized representative of a health plan if you agree at that moment.

That authorization expires after twelve (12) months, or sooner if you withdraw it.

Authorization to receive text messages is a separate checkbox, optional and unchecked by default. Checking one does not check the other, and you can receive guidance without authorizing text messages.

Text messages

If you authorize receiving text messages — a separate checkbox, optional and unchecked by default — the following applies:

• Messages relate to your request for guidance.
• Message frequency varies.
• Message and data rates from your phone company may apply.
• Reply STOP at any time to stop receiving them.
• Reply HELP if you need assistance.
• Authorizing text messages is voluntary and is not required in order to receive guidance.
• Messages are sent in Spanish.

Your rights

You have the right to:

• Know what data we collect and what we use it for.
• Request access to the personal information we retain about you.
• Request that we correct or update it.
• Request that we delete it, subject to the legal retention obligations explained below.
• Withdraw your authorization for future communications at any time.
• Stop receiving text messages by replying STOP, and request assistance by replying HELP.
• Know which providers, agents, or entities we share your information with.
• Be notified when a security breach legally requires it.
• Submit questions or requests to us by phone, email, or postal mail, using the contact information on this site.

How to withdraw your authorization

You may ask us at any time to stop communicating with you. Call us, write to us, or tell the agent during the call. We record it immediately and your number is added to our do-not-contact list.

Withdrawing your authorization stops future communications, but does not affect the lawfulness of those made before we received your request.

How long we retain it

We will retain your personal information only for as long as necessary to handle your request and to comply with our legal, regulatory, contractual, and audit obligations.

Evidence of your consent, the communications made, and any revocation may be retained for up to ten (10) years, or for the longer period required by law, CMS, a contracting health plan, an audit, or a legal proceeding. Once your authorization has expired or been revoked, that evidence is kept under restricted access.

When the applicable period expires and there is no audit, claim, or legal hold in place, the record is securely destroyed, in accordance with Puerto Rico Act No. 234-2014.

If you ask us to delete your information

You may request it. We will delete or anonymize whatever is no longer necessary, and we will immediately stop communications.

There is information we must retain even if you ask us to delete it: that which demonstrates the consent you granted, that which demonstrates your revocation, and the minimum record that prevents us from contacting you again by mistake. That record includes your telephone number and the date on which you asked not to be contacted, and it is not deleted: if we erased it, a future import could reactivate the calls you asked us to stop.

We also retain whatever is needed to respond to audits, comply with contracts with health plans, and address claims or investigations.

If a security breach occurs

If a security breach involving your personal information were to occur, we will notify you and notify the Puerto Rico Department of Consumer Affairs, in accordance with Act No. 111-2005.

How we protect it

Information travels encrypted between your browser and our servers, is stored encrypted, and is seen only by the people at Alianza who need to see it in order to assist you. All access is logged.

Applicable legal framework

This policy is governed by Act No. 39-2012, the Privacy Policy Notification Act, and Regulation No. 8568 of the Department of Consumer Affairs; by Act No. 111-2005 on notification of security breaches; by Act No. 234-2014 on the secure destruction of personal records; and by the right to privacy recognized in the Constitution of Puerto Rico.

Minors

This site is not directed to persons under 18 years of age and we do not knowingly collect information from them.

Changes to this policy

If we change this policy, we will publish the new version on this page with its date and version number. Authorizations already granted are governed by the version in effect at the time you gave them: we retain the exact text you accepted and the version of the policy in effect that day.

Questions about this policy

You may write to us, call us, or visit us. Contact information is in the footer of this page.