1. Our Data Privacy Commitment
We believe privacy is a fundamental human right, especially when researching healthcare options. Our systems are built around data minimization — collecting only the bare minimum information necessary to provide clear health educational guidance.
2. State & Regional Privacy Compliance
We comply with consumer data privacy regulations across the United States, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA). We extend these robust protections to all users regardless of state residency.
3. Do Not Sell My Personal Information
MediBright Health does NOT sell, trade, or share your personal data with third parties for monetary or marketing compensation. We do not participate in predatory insurance lead-generation auctions.
4. Encryption & Cyber Defense Standards
All communications with our servers are protected with TLS 1.3 encryption. Internal data access is restricted under strict least-privilege role-based access control (RBAC), and session data is automatically purged when appropriate.
5. Submitting a Data Rights Request
If you wish to review, correct, export, or permanently delete any personal data associated with your interaction with MediBright Health, you may submit a request through our contact channel and our compliance team will process it within standard statutory timeframes.
Other Legal Policies