Finally, Medicare guidance you can trust and understand.

Privacy Policy

Introduction

NEXUS Insurance Brokerage (“NEXUS,” “we,” “us,” or “our”) is committed to protecting your privacy and complying with:

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations
CMS Medicare Advantage & Part D Communications/Marketing rules, including website requirements.
Applicable state privacy statutes

By using nexusinsurancebrokerage.com (the “Site”) you consent to the practices described below.

1. Information We Collect

Category	Examples	Legal Basis / Purpose
Personally Identifiable Information (PII)	Name, address, phone, email, date of birth	Contact you per your request, schedule appointments, send plan materials
Protected Health Information (PHI)	Medicare Beneficiary Identifier, health conditions, drug lists	Provide plan comparisons & enrollments; CMS-required record-keeping
Website Usage Data	IP address, browser type, referral pages, cookies	Site security, analytics, CMS §422.2265(a) (1)(ii) “exit-notice” tracking

No Sale of Data. We never sell, rent, or license your PII/PHI. Data are shared only with CMS-approved carriers, State Health Insurance Assistance Programs, or subcontractors bound by HIPAA Business Associate Agreements.

2. How We Use & Disclose Information

Quoting & Enrollment. Submit applications to MA, MAPD, Part D or Medigap carriers.
Customer Service. Respond to inquiries through our toll-free & TTY lines.
Regulatory Compliance. Verify plan suitability, maintain call recordings, and meet CMS record-retention rules (10 years).
Legal Requests. Disclose if required by subpoena, CMS audit, or fraud-waste-abuse investigation.

3. Your Rights

Inspect & Receive Copies of your PHI (45 CFR § 164.524).
Request Restrictions on certain uses (45 CFR § 164.522).
Opt-Out of marketing e-mails or SMS at any time (reply “STOP”).
File a Complaint with us or the HHS Office for Civil Rights if you believe your privacy rights were violated.

4. Data Security

We employ TLS 1.3 encryption, role-based access controls, PHI-segmented databases, and annual penetration testing. Staff complete 100+ hours of CMS-approved continuing education each year—including privacy, FWA, and cybersecurity modules.

5. Third-Party Links & “Exit” Notice

When a link will take you away from our Medicare-specific pages, a pop-up or banner notifies you pursuant to §422.2265(a)(1)(ii). NEXUS is not responsible for third-party privacy practices.

6. Policy Updates

Content is reviewed every October to reflect new CMS Final Rules and will remain posted through December 31 of each contract year (§422.2265(a)(1)(i). Last updated: July 31, 2025.