Privacy Policy

The Pannell Agency ("we," "us," "our," or "Company") operates pannellagency.com (the "Website"). We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains our data practices and your rights. Last Updated: January 2026

A. Information You Provide Directly: • Name, email address, phone number, mailing address, zip code • Medicare enrollment status and medical history (if shared) • Preferred contact methods and best times to contact you • Any additional information you provide in inquiries or forms B. Information Collected Automatically: • Browser type, operating system, and device information • IP address and location data (general) • Pages visited, time spent on site, and user behavior (via Google Analytics) • Cookies and similar tracking technologies • Referral source and search keywords C. Third-Party Sources: • Data from insurance company partners for plan comparison • Public records for verification purposes • Social media if you link accounts

• Process Medicare plan inquiries and comparisons • Send consultation scheduling information • Provide updates on Annual Enrollment Period (AEP) and enrollment deadlines • Contact you regarding your Medicare coverage needs • Improve website functionality and user experience • Comply with legal and regulatory requirements • Respond to inquiries and provide customer support • Send marketing communications (with your consent)

We process personal information based on: • Your consent (explicit opt-in for marketing) • Contractual necessity (to provide services you request) • Legitimate business interests (website improvement, fraud prevention) • Legal compliance (insurance regulations, tax laws) • Vital interests (in case of emergencies affecting your health)

We may share your information with: • Insurance carriers (Medicare Advantage, Supplement, Prescription Drug plans) - ONLY with your explicit consent • Third-party vendors for website hosting, email delivery, analytics (Base44, Google, etc.) • Legal authorities when required by law • Business partners for service improvement We DO NOT: • Sell your personal data to third parties for profit • Share health information beyond what's necessary for plan comparison • Use your data for purposes you haven't explicitly consented to

• All health information is encrypted in transit (SSL/TLS) • Data stored on secure, encrypted servers • Access limited to authorized personnel only • Retention period: 6+ years (per healthcare/insurance regulations) • You have the right to request, access, amend, or delete your health information • We maintain audit logs of all data access for compliance

As a Medicare insurance advisory service, The Pannell Agency may be considered a Business Associate under HIPAA regulations when handling health information on behalf of health plans or healthcare providers. BAA Compliance Commitments: • We maintain written BAA agreements with all healthcare entities whose data we handle • Access to protected health information (PHI) is limited to authorized personnel only • PHI is encrypted at rest and in transit using 256-bit SSL/TLS encryption • We conduct annual security risk assessments • We maintain detailed audit logs of all PHI access (6+ years retention) • We have documented incident response procedures • Subcontractors handling PHI are required to sign BAA addendums • We cooperate with HIPAA audits and investigations • Upon contract termination, PHI is securely destroyed or returned Contact for BAA Questions: joeypannell@gmail.com or (256) 221-0417 If you believe we have violated a BAA or your HIPAA rights, you may file a complaint with: HHS Office for Civil Rights 200 Independence Avenue, S.W. Washington, D.C. 20201 Toll-Free: 1-800-368-1019 Website: www.hhs.gov/ocr/hipaa

• 256-bit SSL/TLS encryption for all forms and data transmission • Multi-factor authentication for admin access • Regular security audits and vulnerability assessments • Encrypted databases with restricted access • Incident response plan in place • We cannot guarantee 100% security but use industry-standard protections

• Analytics cookies (Google Analytics 4) track page views, conversions, user behavior • No third-party advertising cookies • You can disable cookies in browser settings (may affect website functionality) • We do not use retargeting or behavioral tracking for ads

You have the right to: • Access your personal data (request a copy anytime) • Correct inaccurate information • Delete your data (right to be forgotten) - except where legally required to retain • Opt-out of marketing emails (unsubscribe link in every email) • Restrict data processing • Data portability (export your data in standard format) To exercise these rights, contact: joeypannell@gmail.com or (256) 221-0417

• Contact form submissions: Retained 6+ years (regulatory requirement) • Email marketing list: Deleted upon unsubscribe request • Cookies: Auto-delete after 2 years of inactivity • Website analytics: Anonymized after 26 months

If you're a California resident, you have additional rights: • Right to know what personal information is collected • Right to delete collected personal information • Right to opt-out of data sales (we don't sell data) • Right to non-discrimination for exercising CCPA rights • Right to correct inaccurate personal information • Right to limit use and disclosure of sensitive personal information Contact: joeypannell@gmail.com for CCPA requests

Our Website is not directed to children under 13. We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete the information immediately.

Our Website links to Medicare.gov, insurance carrier websites, and other third parties. We are not responsible for their privacy practices. Review their privacy policies independently.

If you're in the EU/EEA: • We process data based on lawful bases under GDPR • You have rights to access, correct, delete, and restrict processing • You have the right to lodge complaints with your local data protection authority • Data transfers are protected by appropriate mechanisms

Nevada residents can request opt-out of the sale of covered information. Contact: joeypannell@gmail.com

We may update this Privacy Policy periodically. Changes will be posted with a 'Last Updated' date. Continued use of the Website constitutes acceptance of updates.

Privacy Officer: Joey Pannell Email: joeypannell@gmail.com Phone: (256) 221-0417 Address: 1904 Commerce Ave NW, Cullman, AL 35055