Last Updated: August 10, 2026
This Medicare Privacy Policy (“Privacy Policy”) describes how Arroyo Media, doing business as Insurance Purse (“Insurance Purse,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, sells, shares, and otherwise processes Personal Data in connection with the Medicare portion of InsurancePurse.com, including https://insurancepurse.com/medicare (the “Medicare Service”).
This Privacy Policy also explains the privacy rights that may be available to you under applicable U.S. state privacy laws and how you may exercise those rights.
This Privacy Policy applies specifically to the Medicare Service and does not necessarily describe the privacy practices applicable to other insurance products or services available through InsurancePurse.com.
Insurance Purse is operated by:
Arroyo MediaInsurance Purse provides marketing and lead-generation services related to Medicare insurance products.
The Medicare Service may provide a telephone number that allows consumers to call for information concerning Medicare insurance products. Calls generated through the Medicare Service are answered by an insurance carrier or other Medicare insurance partner (“Carrier Partner”), rather than by Insurance Purse.
Insurance Purse receives compensation for qualified leads generated through the Medicare Service. Accordingly, certain transfers of Personal Data to a Carrier Partner may constitute a “sale” of Personal Data or Personal Information under certain state privacy laws.
The Carrier Partner that answers your call may independently collect additional information from you. The Carrier Partner's collection, use, disclosure, retention, and protection of information is governed by its own privacy practices and applicable law.
This may include:
We do not currently use an online Medicare lead form to collect this information through the Medicare Service.
Telephone calls placed through telephone numbers associated with the Medicare Service may be recorded and monitored for quality assurance, compliance, training, fraud prevention, documentation, and related business purposes.
The Carrier Partner answering the telephone call may operate the call-recording system and may collect additional information during the call.
Where required by applicable law, notice or consent regarding call recording will be provided through the telephone system or by the party recording the call.
When you visit the Medicare Service, we and our service providers may automatically collect information such as:
We may use cookies, pixels, tags, web beacons, scripts, and similar technologies to operate the Medicare Service, understand how visitors use it, measure advertising effectiveness, prevent fraud, and support advertising and marketing activities.
These technologies may involve third-party analytics and advertising providers.
We may collect Personal Data:
We may use Personal Data to:
We may provide or make Medicare lead information available to an insurance carrier or Carrier Partner so that the consumer can obtain information regarding Medicare insurance products.
Insurance Purse receives compensation for qualified leads. As a result, a transfer of Personal Data associated with a lead may be considered a “sale” under certain state privacy laws even when the transfer occurs because the consumer requested information about Medicare products.
We may disclose Personal Data to companies that perform services on our behalf, including providers of:
We may allow analytics, advertising, and marketing providers to collect Internet, device, and usage information through cookies, pixels, tags, and similar technologies.
Depending on the applicable state law and the particular technology involved, these activities may constitute “sale,” “sharing,” or processing for “targeted advertising.”
We may disclose or transfer Personal Data in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.
We may disclose Personal Data when we reasonably believe disclosure is necessary to:
Depending on applicable law, we may have sold, shared, or disclosed the following categories of Personal Data:
Identifiers and contact information — including telephone number, IP address, device identifiers, and similar identifiers.
Medicare lead information — including ZIP code and current Medicare or Medicare eligibility/enrollment status.
Internet or electronic network activity — including browsing activity, interactions with the Medicare Service or advertisements, referring pages, and similar usage information.
Approximate location information — such as location inferred from an IP address or ZIP code.
Audio or sensory information — including recordings of telephone calls, where applicable.
The categories of third parties to which Personal Data may be sold, shared, or disclosed include Carrier Partners, advertising and marketing partners, analytics providers, call-tracking and telecommunications providers, and other service providers.
We do not knowingly sell Personal Data belonging to individuals under 18 through the Medicare Service.
Your current Medicare status may constitute health-related, insurance-related, or sensitive Personal Data under certain state laws.
We limit our collection and use of Medicare-related information to information reasonably necessary for the Medicare Service and related business, compliance, and legal purposes.
A Carrier Partner may request additional health, insurance, or eligibility information after answering your telephone call. Unless Insurance Purse separately receives that information, information provided directly to the Carrier Partner during the call is controlled by the Carrier Partner and subject to its privacy practices and applicable law.
Where applicable law requires consent or provides additional rights concerning sensitive or consumer health data, we will process such information in accordance with those requirements.
Calls placed to telephone numbers displayed or promoted through the Medicare Service may be monitored and recorded.
Recordings may be used for:
Because calls are answered by a Carrier Partner, the Carrier Partner may be responsible for recording and maintaining the call and may independently determine how long its copy of a recording is retained.
Insurance Purse's receipt or retention of call information or recordings, if any, is subject to this Privacy Policy and applicable law.
Insurance Purse generally retains Medicare lead Personal Data for five (5) years from collection.
We may retain information for a longer period when reasonably necessary to:
Some information may be retained for a shorter period when it is no longer reasonably necessary for the purpose for which it was collected.
Carrier Partners and service providers may maintain information according to their own legally permissible retention schedules.
The Medicare Service may use third-party analytics and advertising technologies, including technologies associated with Google, Microsoft/Bing, Meta/Facebook, TUNE, and other advertising, analytics, or marketing providers used by Insurance Purse.
These providers may collect information about your device, browser, website activity, and interactions with advertisements.
We may use this information to:
Certain disclosures of information to advertising technology providers may be considered a “sale,” “sharing,” or processing for “targeted advertising” under applicable state privacy laws.
You may submit privacy requests by emailing:
Please include “Privacy Request” in the subject line and describe the right you wish to exercise.
You may also use any “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar privacy-choice mechanism made available through the Medicare Service.
Depending on your state of residence and applicable law, you may have some or all of the following rights:
The precise rights available to you depend upon your state of residence and whether the applicable law applies to Insurance Purse and the particular Personal Data involved.
To exercise an applicable privacy right, email:
Please provide:
We will use information submitted in connection with a privacy request for verification and fulfillment of that request and as otherwise permitted by law.
We may request additional information when reasonably necessary to verify your identity. We will not require you to create an account to submit a privacy request.
We will respond within the period required by applicable law. Many state privacy laws generally require a response within 45 days, subject to permitted extensions.
Certain information may be exempt from a privacy request, including information we are required or permitted by law to retain.
Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.
We may require evidence that the agent has authority to act for you and may ask you to verify your identity directly with us.
We will process authorized-agent requests in accordance with applicable law.
If we deny a privacy request and your state law provides a right to appeal, you may appeal our decision by emailing:
Use “Privacy Appeal” as the subject line and explain why you believe our decision should be reconsidered.
We will review and respond to the appeal within the time required by applicable law.
If an appeal is denied, we will provide information concerning any additional complaint rights required by the law of your state, including, where applicable, information about contacting your state's Attorney General or other privacy regulator.
Where required by applicable law, we recognize legally valid browser-based universal opt-out preference signals, including Global Privacy Control (“GPC”), as requests to opt out of the sale or sharing of Personal Data and/or processing for targeted advertising.
When we receive a legally recognized opt-out signal and can reasonably associate that signal with a consumer or device to which the applicable law applies, we will process the signal as required by law.
A universal opt-out signal generally applies to the browser or device from which the signal is sent. You may need to enable the signal separately on other browsers or devices.
Residents of states that have enacted applicable comprehensive consumer privacy laws may have additional rights concerning their Personal Data.
These may include residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and any other state whose applicable privacy law provides rights relevant to our processing of Personal Data.
We will provide the rights required by the law applicable to the consumer and the particular processing activity.
State laws differ in their scope, applicability thresholds, exemptions, definitions of sale, sensitive data requirements, opt-out requirements, appeal procedures, and other provisions. Nothing in this Privacy Policy is intended to limit a consumer right provided by applicable law.
If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies, you may have rights including:
For purposes of the CCPA, Personal Information associated with a Medicare lead may include identifiers, customer-record information, Internet/network activity, approximate location information, and potentially health- or insurance-related information.
Insurance Purse receives monetary compensation for Medicare leads transferred to Carrier Partners. To the extent such a transfer constitutes a “sale” under the CCPA, California residents may opt out by contacting [email protected] or by using our applicable privacy-choice mechanism.
We may also engage in disclosures through advertising technologies that constitute “sharing” for cross-context behavioral advertising under California law.
We do not knowingly sell or share Personal Information of consumers we know are under 16 years of age.
Colorado residents may have rights to access, correct, delete, and obtain portable copies of Personal Data and to opt out of sale, targeted advertising, and certain profiling. Where required, we honor recognized universal opt-out mechanisms.
Connecticut residents may have rights to access, correct, delete, and obtain portable copies of Personal Data and to opt out of sale, targeted advertising, and certain profiling. Connecticut residents may also have appeal rights. Where required, we honor applicable opt-out preference signals.
Delaware residents may exercise the rights available under the Delaware Personal Data Privacy Act, including applicable rights concerning access, correction, deletion, portability, sale, targeted advertising, profiling, and sensitive data.
Indiana residents may exercise applicable rights under the Indiana Consumer Data Protection Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Iowa residents may exercise applicable rights under the Iowa Consumer Data Protection Act, including rights concerning access, deletion, portability, and opting out of the sale of Personal Data.
Kentucky residents may exercise applicable rights under the Kentucky Consumer Data Protection Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Maryland residents may exercise applicable rights under the Maryland Online Data Privacy Act, including rights to know, access, correct, delete, and obtain Personal Data and to opt out of applicable sale, targeted advertising, and profiling activities.
Minnesota residents may exercise applicable rights under the Minnesota Consumer Data Privacy Act, including rights to access, correct, delete, obtain portable data, opt out of certain processing, and obtain information regarding certain third parties to whom Personal Data has been disclosed.
Montana residents may exercise applicable rights under the Montana Consumer Data Privacy Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Nebraska residents may exercise applicable rights under the Nebraska Data Privacy Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
New Hampshire residents may exercise applicable rights under the New Hampshire privacy law, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
New Jersey residents may exercise applicable rights under the New Jersey Data Privacy Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Oregon residents may exercise applicable rights under the Oregon Consumer Privacy Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling. Oregon law may also provide a right to obtain information concerning third parties to whom Personal Data has been disclosed.
Rhode Island residents may exercise applicable rights under the Rhode Island Data Transparency and Privacy Protection Act where applicable.
Tennessee residents may exercise applicable rights under the Tennessee Information Protection Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Texas residents may exercise applicable rights under the Texas Data Privacy and Security Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Utah residents may exercise applicable rights under the Utah Consumer Privacy Act, including rights concerning access, deletion, portability, sale, and targeted advertising.
Virginia residents may exercise applicable rights under the Virginia Consumer Data Protection Act, including rights concerning access, correction, deletion, portability, sale, targeted advertising, and certain profiling.
Residents of other states may have rights under state-specific privacy, health-data, insurance, biometric, data-broker, marketing, or other privacy laws.
If an applicable state law provides you with rights not expressly described above, you may exercise those rights by contacting [email protected].
Nevada residents may have a right under Nevada law to direct an operator not to make certain sales of covered information.
A Nevada resident may submit an applicable opt-out request to:
Please include “Nevada Privacy Request” in the subject line.
Certain state laws provide additional protections for “consumer health data” or similarly defined health-related information.
Because the Medicare Service concerns Medicare insurance, information indicating a person's Medicare status may potentially constitute consumer health data, sensitive data, or health-related information under an applicable state law.
Where a consumer health privacy law applies to Insurance Purse and the information involved, we will provide the notices, consent mechanisms, access rights, deletion rights, withdrawal rights, and other protections required by that law.
We do not intend to use Medicare status information to infer medical diagnoses or health conditions unrelated to the Medicare insurance services requested by the consumer.
The Medicare Service is intended for adults 18 years of age and older.
We do not knowingly collect Medicare lead information from individuals under 18 through the Medicare Service, and we do not knowingly sell or share Personal Data belonging to minors through the Medicare Service.
If you believe a minor has provided Personal Data through the Medicare Service, please contact [email protected].
We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, destruction, loss, alteration, disclosure, or misuse.
However, no Internet transmission, telecommunications system, or electronic storage system can be guaranteed to be completely secure.
The Medicare Service may connect you with or direct you to third parties, including Carrier Partners.
Once you interact directly with a Carrier Partner, that organization may independently collect and process your Personal Data according to its own privacy policy and legal obligations.
Insurance Purse does not control the privacy practices of independent Carrier Partners and encourages consumers to review the privacy notices provided by those organizations.
Residents of states that provide an applicable right to opt out of the sale or sharing of Personal Data may exercise that right by emailing:
Use “Do Not Sell or Share My Personal Information” as the subject line.
Please provide your telephone number and state of residence so that we can identify the relevant records and determine the rights applicable to your request.
You may also exercise applicable browser-based opt-out rights through a recognized universal opt-out preference signal such as Global Privacy Control.
We will not discriminate against you for exercising an applicable opt-out right.
We may update this Medicare Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, Carrier Partner relationships, or other circumstances.
When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.
If required by law, we will provide additional notice or obtain consent before materially different uses of Personal Data.
If you have questions about this Medicare Privacy Policy or wish to exercise a privacy right, contact:
Arroyo Media / Insurance PurseWhen submitting a privacy-rights request, please include sufficient information for us to identify the relevant records and process your request.