Privacy Policy
Effective date: December 1, 2025
BlackRock is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our health benefits portal and related services. Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
We collect several types of information to provide and improve our services to you:
Personal Identification Information
When you register for an account or use our services, we collect personal information including your name, email address, employee ID, date of birth, contact information, and other identifying information necessary for health benefits enrollment and administration.
Health Information
We collect health-related information necessary for benefits enrollment, including dependent information, medical history for pre-existing condition assessments, and coverage selections. This information is handled in accordance with HIPAA and other applicable privacy regulations.
Usage Data
We automatically collect information about how you interact with our portal, including IP address, browser type and version, device information, time zone settings, browser plug-in types and versions, operating system and platform, pages visited, time spent on pages, and navigation paths.
Cookies and Tracking
We use cookies, web beacons, and similar tracking technologies to track activity on our portal and hold certain information. Cookies are files with small amounts of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
2. How We Use Your Information
We use the information we collect for various purposes, including:
- To provide and maintain our health benefits enrollment and management services
- To process your health plan selections and enrollment applications
- To communicate with you regarding your benefits, plan changes, and important updates
- To comply with legal obligations and regulatory requirements
- To analyze usage patterns and improve our portal functionality and user experience
- To detect, prevent, and address technical issues and security threats
- To verify your identity and prevent unauthorized access to your account and information
- To provide customer support and respond to your requests, questions, and feedback
- To send you administrative information, including updates to our terms and policies
3. Sharing and Disclosure of Information
We may share your personal information in the following situations:
Health Plan Providers
We share necessary information with health insurance carriers and administrators to process your enrollment and provide coverage. These providers are bound by strict confidentiality and privacy requirements under HIPAA and other applicable laws.
Service Providers
We employ third-party companies and individuals to facilitate our services, provide services on our behalf, perform service-related functions, or assist us in analyzing how our portal is used. These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to protect our rights, property, or safety, or that of our users or others.
Business Transfers
If BlackRock is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
4. Data Security
The security of your personal information is important to us. We implement appropriate technical and organizational security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures include encryption of data in transit and at rest, secure socket layer (SSL) technology, firewalls, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Please notify us immediately of any unauthorized use of your account.
5. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your information and whether we can achieve those purposes through other means, and applicable legal requirements.
In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
6. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: You have the right to request copies of your personal information
- Rectification: You have the right to request correction of any inaccurate or incomplete information
- Erasure: You have the right to request deletion of your personal information under certain circumstances
- Restriction: You have the right to request restriction of processing of your personal information
- Objection: You have the right to object to our processing of your personal information
- Data Portability: You have the right to request transfer of your information to another organization or directly to you
- Withdraw Consent: Where we rely on your consent to process your information, you have the right to withdraw that consent at any time
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.
7. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we take steps to remove that information from our servers.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective date" at the top of this policy.
We will notify you via email and/or a prominent notice on our portal prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
10. California Privacy Rights
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) regarding your personal information, including:
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt-out of the sale of your personal information (we do not sell your information)
- The right to non-discrimination for exercising your CCPA rights
11. Contact Information
If you have any questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, please contact us: