Health And Legacy Organization (HALO) – Privacy Policy

Effective Date: February 6th, 2026

Health And Legacy Organization (“HALO,” “we,” “our,” or “us”) is committed to protecting the privacy, security, and integrity of the information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use our website, communication tools, applications, and related digital services (“Services”).

By using our Services, you consent to the practices described in this Privacy Policy.

1. Who We Serve

HALO provides secure communication and workflow technology for:

• Insurance agents
• Medical professionals
• Volunteers
• Consumers
• Internal staff
• Other authorized users

HALO is an Information Technology Services (ITS) platform. We do not operate as an insurance agency, medical provider, or lead generation company.

2. Information We Collect

We collect only the information necessary to operate our communication platform, verify professional users, and maintain compliance.

2.1 Information You Provide

We may collect:

• Name
• Email address
• Phone number
• Mailing address
• Licensing information
• Professional credentials
• Volunteer role information
• Communication preferences
• Information submitted through registration forms or interactive tools

We do not collect uploaded documents unless explicitly provided for verification.

2.2 Information Collected Automatically

To secure and operate our Services, we automatically collect:

• IP address
• Device identifiers
• Browser type
• Operating system
• Usage logs
• Cookies and analytics data
• Message metadata (timestamps, routing information, delivery status)

2.3 Message Content

We may temporarily store message content only for compliance, security, and operational purposes. Message content is retained for a limited period and is not used for marketing, profiling, or sales.

3. Information We Do NOT Collect

HALO does not collect, store, or process:

• Health information
• Insurance application data
• Payment information
• Sensitive personal data (such as SSN, financial account numbers, biometric data, or protected classifications)

We also do not access or store information that users enter into third party systems, including external CRM platforms.

4. How We Use Information

We use collected information to:

• Provide and operate our communication and workflow Services
• Verify professional credentials (e.g., through NIPR)
• Facilitate secure messaging and voice interactions
• Maintain compliance with telecom and regulatory requirements
• Improve platform performance and user experience
• Respond to inquiries and support requests
• Protect against fraud, abuse, and unauthorized access

We do not sell personal information.

5. Professional Use, Lead Access, and CRM Data

Some users of the HALO platform—such as licensed insurance agents, medical professionals, or volunteers—may engage in conversations with individuals through our Services. These interactions may result in professional opportunities, including the ability for an agent or volunteer to follow up with an individual, provide services, or maintain that individual as a “lead” within their own business systems.

HALO provides communication and workflow technology only. We do not sell consumer information, distribute leads, or operate as a lead generation service. Any “lead” relationship that arises is solely the result of the user’s own professional interaction with the individual.

HALO offers both free and paid service tiers. Paid plans may include enhanced communication features, increased interaction capacity, or expanded access to platform tools. These plans allow users to manage a greater number of conversations or contacts, but HALO does not sell personal data as part of these plans.

If a user chooses to record information about an individual in their own CRM or business system, that information:

• Is collected independently by the user
• Is not collected, stored, accessed, or controlled by HALO
• Is governed solely by the user’s own privacy practices

HALO does not access or manage CRM data, and we do not store information that users maintain outside of our platform.

6. How We Share Information

We may share information only with:

• Telecom providers (such as Telnyx) to route SMS and voice communications
• Analytics providers (such as Google Analytics)
• Identity verification services (such as NIPR)
• Internal staff and authorized contractors who support our operations
• Service providers who assist in delivering our technology infrastructure
• Legal authorities when required by law

We do not share information with insurance carriers for marketing, sales, or quote generation purposes.

7. SMS and Voice Communication Compliance

HALO provides communication tools that may include SMS, MMS, and voice services. To ensure compliance with telecom regulations:

• We collect message metadata for routing, delivery, and security
• We may temporarily store message content for compliance and abuse prevention
• Users may opt out of SMS at any time by replying STOP
• Users may request assistance by replying HELP
• Message frequency may vary
• Standard message and data rates may apply

We honor all opt out requests promptly.

8. Cookies and Analytics

We use cookies and analytics tools to:

• Understand how users interact with our Services
• Improve performance and reliability
• Detect and prevent security issues

Analytics data does not personally identify users unless they voluntarily provide personal information.

9. Data Retention

We retain information only for as long as necessary to:

• Provide our Services
• Maintain security
• Meet legal and compliance obligations

Message content is retained for a limited period and then securely deleted.

10. Data Security

We implement administrative, technical, and physical safeguards to protect information, including:

• Encryption
• Access controls
• Secure transmission
• Monitoring and logging
• Data minimization practices

No system is completely secure, but we take reasonable steps to protect your information.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect
• Request deletion of personal information
• Request correction of inaccurate information
• Opt out of the sale or sharing of personal information (HALO does not sell personal information)
• Limit the use of sensitive personal information (HALO does not collect sensitive personal information)

Requests may be submitted using the contact information below.

12. Third Party Systems

Information entered by users into external systems, including third-party CRMs, is not collected, stored, accessed, or controlled by HALO. Users are responsible for reviewing the privacy policies of those systems.

13. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect information from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Changes take effect upon posting. Continued use of our Services constitutes acceptance of the updated policy.

15. Contact Us

For questions or privacy requests, contact us at:

Email: support@healthandlegacy.org

Mailing Address:

Health And Legacy Organization

PO Box 121

Startex, SC 29377