How we protect your information
Effective October 25, 2026. This policy explains how Discover Claims, LLC (“Discover Claims,” “we,” “us”) collects, uses, shares, protects and keeps information when you use discoverclaims.com or work with our licensed agent, Jewel Palen, on your Medicare coverage.
Our procedures comply with the general requirements of the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security and Breach Notification Rules, and with the Centers for Medicare & Medicaid Services (CMS) rules for independent insurance agents and third-party marketing organizations (TPMOs).
Who we are
Discover Claims, LLC is an independent insurance agency. Our licensed agent helps people compare and enroll in Medicare Advantage, Medicare Part D, Medicare Supplement and related plans. We are contracted with the insurance companies whose plans we offer; we are not the federal government or the Medicare program.
Information we collect
- Scope of Appointment. Your name, phone number, address, the Medicare products you want to discuss, who signed (you or an authorized representative), your typed electronic signature, and the date, time, IP address and browser used to sign.
- Optional intake questions. Anything you choose to give us: date of birth, sex, contact details, mailing address, authorized representative, Medicare number and effective dates, Medicaid eligibility, prescription drugs and dosages, pharmacies and doctors.
- Searches. When you look up a drug, pharmacy or doctor, we send the search words and ZIP code to public federal directories (the National Library of Medicine’s RxNorm and the CMS NPI Registry) to show you results. We don’t send your name or other details with these searches.
- Website analytics. Our general information pages use Google Analytics to count visits and see which pages are useful. Our Scope of Appointment and intake forms do not run Google Analytics or any other third-party tracking. The forms use one strictly necessary cookie that keeps your session secure; it holds no personal information and expires within 4 hours.
How we use your information
We use your information only to help you with your Medicare coverage: to prepare for and hold the appointment you asked for, compare plans that fit your doctors, drugs and pharmacies, help you enroll if you choose, service your coverage afterward, and keep the records the law and CMS require. We use only the minimum information necessary for each task.
We do not sell your information, and we do not share it for advertising. We do not share your personal information with any other marketing organization or agent without your prior express written consent.
When we share information
- With the insurance company you choose, to process an enrollment or service your plan.
- With service providers that host and protect our systems, such as Amazon Web Services. They act only on our instructions, and those that handle health information are bound by a HIPAA business associate agreement.
- When required by law or by CMS, for example in response to an audit, oversight request, court order or to report fraud.
How we protect your information
We use administrative, physical and technical safeguards that follow the HIPAA Security Rule, including:
- encryption in transit (HTTPS) and at rest, using encryption keys we control;
- access limited to the licensed agent and the people who need it to help you, with multi-factor authentication;
- signed Scope of Appointment records stored write-once, so they cannot be changed or deleted during the retention period;
- protections against forged and automated form submissions, and monitoring and logs that never record what you type into our forms.
If a breach of unsecured protected health information ever affects you, we will notify you without unreasonable delay, and no later than 60 days after we discover it, as HIPAA requires.
How long we keep information
- Scope of Appointment forms: at least 10 years, as CMS requires.
- Recorded sales and enrollment calls, where CMS requires recording: at least 10 years.
- Intake answers and other records: as long as we are helping you and as long as our carrier contracts and the law require, then securely deleted.
Our Medicare marketing practices
- Before a sales appointment, we ask you to complete a Scope of Appointment listing the products you want to discuss, and we discuss only those products. CMS generally requires 48 hours between the Scope of Appointment and the appointment itself, with limited exceptions such as visits you start yourself or the last four days of an enrollment period.
- We contact you only with your permission. Signing a Scope of Appointment or submitting our forms does not obligate you to enroll in a plan.
- We do not offer every plan available in your area. Currently we represent 3 organizations which offer 93 products in your area. Please contact Medicare.gov, 1-800-MEDICARE, or your local State Health Insurance Program (SHIP) to get information on all of your options.
Your choices and rights
- See or correct your information. Ask for a copy of the information we hold about you, or ask us to correct it.
- Accounting of disclosures and restrictions. Ask for a list of certain disclosures, ask us to limit how we use or share your information, or ask us to contact you in a particular way.
- Stop contact. You can withdraw permission to be contacted by phone, email or text at any time, even if you gave it on one of our forms. Reply STOP to any text message to stop texts.
- File a complaint. If you believe your privacy rights were violated, you can contact us, or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will never retaliate against you for filing a complaint.
Contact us
For any privacy question or request, email privacy@discoverclaims.com. We respond to requests within 30 days.
Changes to this policy
We may update this policy. The effective date at the top shows when it last changed; significant changes will be posted here before they take effect.