EnlightnU USA (the “School”, “our”, or “we”) is committed to maintaining the privacy of Consumer Health Data, as defined by the Washington My Health My Data Act. This Consumer Health Data Privacy Policy (“Policy”) supplements the School’s Privacy Policy, and describes how we process Consumer Health Data collected through our websites, social media accounts, and other interactions and communications.

Consumer Health Data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. This Policy does not apply where an exception or exemption applies such as for Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). For additional information on privacy for non-Consumer Health Data, please see our Privacy Policy.

We may update this Policy from time to time, and any updated Policy will be effective when posted. We encourage you to frequently check this page for any changes.

Consumer Health Data We Collect

The personal data we collect depends on the context of your interactions with the School, the choices you make, your location, and applicable law.

We may collect the following categories of Consumer Health Data:

• Individual health conditions, treatment, diseases, or diagnosis;
• Social, psychological, behavioral, and medical interventions;
• Health-related surgeries or procedures;
• Use or purchase of prescribed medication;
• Diagnoses or diagnostic testing, treatment, or medication;
• Gender-affirming care information;
• Reproductive or sexual health information;
• Precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health services or supplies;
• Data that identifies a consumer seeking health care services.

Sources of Consumer Health Data

The School collects Consumer Health Data from the following categories of sources:

• Directly from you. We may collect Consumer Health Data that you provide to use directly when you use our services; participate in programs or events, including social media, hosted by the School; engage with customer service; and any other way that you may be able to interact with us.
• From third parties. We may collect Consumer Health Data from third party sources including service providers, data brokers, or business partners.

How We Use Consumer Health Data

We may use Consumer Health Data for the following purposes:

• To provide you services. The School may use Consumer Health Data to provide you with services that you have requested or authorized, such as helping you to understand how to search for the Medicare plan that fits your particular health needs.
• For marketing our products and services. While the School will not utilize Consumer Health Data to target you for specific marketing, we may use portions of The Medicare School Daily Show calls, which may contain Consumer Health Data, in our social media posts and advertising.
• Other purposes for which we obtain your consent as required by law. For example, if you choose to participate in our The Medicare School Daily Show calls, we will request your permission to use recordings of your call with us, which may contain Consumer Health Data, to educate viewers on the Medicare plan selection process.

How We Share Consumer Health Data With Third Parties

We may disclose the Consumer Health Data described above to third parties, including the categories of recipients described below:

• Government agencies or law enforcement. We disclose data to law enforcement or other government agencies to comply with applicable law or respond to valid legal process, to enforce our agreements or policies, and to protect safety and property rights of the School, our consumers, or third parties.
• Our vendors. We may disclose data to our vendors and service providers who help us provide products and services to you.
• The public. Any Consumer Health Data in comments, reviews, or other content that you share in public areas of our websites or social media pages may be read, collected, or used by other users or the public. If you provide consent to participate in our The Medicare School Daily Show calls, the publicly available recordings may contain portions of your Consumer Health Data that you have elected to share with us.
• Third Parties Acquiring our Assets. We may disclose your data to a third party if we sell our business or are otherwise part of a merger, acquisition, bankruptcy or other transaction involving that third party taking over our assets.

Your Consumer Health Data Rights

The Washington My Health My Data Act provides certain rights regarding their Consumer Health Data, including the right to access, delete, or withdraw consent.

You may exercise these rights by contacting us via privacy@medicareschool.com or (800) 864-8890. If your request to exercise one of these rights under the Washington My Health My Data Act is denied, then you may appeal that decision by contacting us via either method as stated above. If your appeal is unsuccessful, you may raise concerns or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

This document was last updated on Feb 2, 2026