Privacy and Security

Internet Privacy and Security Statement

Welcome to the Internet Privacy & Security Statement (“Privacy & Security Statement”) of Significa Benefit Services, LLC. (“Significa Benefit Services”).

The purpose of this Privacy & Security Statement is to summarize and disclose all information collecting and disseminating practices of Significa Benefit Services as concerning its web site, www.significabenefits.com.

This Privacy Statement is effective as of August 1, 2009. However, Significa Benefit Services reserves the right to change this Privacy & Security Statement as necessary and without notice to users of this site. This Privacy & Security Statement is not intended to and does not imply any contractual or other legal rights or remedies to or from Significa Benefit Services, its affiliates, subsidiaries, assigns, agents or any other party.

1. Security Features

   Secure connections are not supported on the current server supporting this site. Secure online inquiry functions are available to employees, their covered dependents and to the authorized representative(s) of our client employer groups. These online inquiry functions are secured as follows:

   • The member or client representative must successfully register on the appropriate new user registration page.
   • Information entered on these pages is edited against our database to ensure that the individual requesting the access is in fact eligible to use the site.
   • A user ID and password are required.
   • These connections are secured by a Verisign Global Server ID utilizing 128-bit encryption.
   • Claims lookup by client representatives require authentication via a Significa Benefit Services-issued digital certificate.
   • If the user’s session is idle for longer than a predetermined period of time, the user will be logged off of the site and must log back in to continue use of the secure site.

2. Collection of Personal Information

   Significa Benefit Services will not be tracking personal data. No cookies are placed on the hard drive of visitors to our public pages. Significa Benefit Services tracks only the requesting IP address from the public and secure pages of our web site. If an error exception occurs during the use of the public or secure pages of our web site, IP address, referrer and the specific error message are tracked.
   
   Significa Benefit Services does place a cookie on the hard drive of visitors to our secure pages. This cookie consists of a guest number and security code, which is used to further ensure the integrity of requests made over the secure pages.

3. Use of Data Collected from Input Forms

   Significa Benefit Services public web site pages do not contain input forms. Email submitted using specific email links on our web site merely allow the user to send an email to the individual shown. No additional information is saved.
   
   Information entered as part of secure web applications, including registration information, email requests to Significa Benefit Services customer service and policy administration Client Services, and employer or employee entered enrollment changes, is used by Significa Benefit Services solely for customer service purposes. Requests by client representatives for claims lookup is logged at a summary level for purposes of compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) regulations.

4. Disclosure of Data

   Significa Benefit Services will not sell, trade or disclose data to non-affiliated third parties for any purpose other than Significa Benefit Services operations.

5. Logging and Tracking

   Significa Benefit Services, as required for compliance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (HIPAA), maintains activity logs from our secure web pages. The information collected include IP address, date and time of visit, each page visited and the specific data requested including group and member identifiers. Changes to user profiles are also tracked.

6. Links to Non-Significa Benefit Services Web Sites

   Links to other entities’ web sites are provided on both the public and secure pages of Significa Benefit Services’ web site. By supplying a link to these web sites, Significa Benefit Services does not endorse these web sites nor are we responsible for their privacy and security policies or content. Concerns should be directed to the owner of these web sites. Note: All Significa Benefit Services web site pages display the Significa Benefit Services logo.

7. Privacy/Security Breaches

   Significa Benefit Services is concerned about the privacy and security of this site and its visitors. Because the privacy and security of this site cannot be fully protected from breaches, Significa Benefit Services has established an address for visitors to report breaches and suspected breaches of the privacy and security of this site. Visitors should report any such breaches at misdept@significabenefits.com.

8. Questions/Concerns

   If you have any questions, comments or concerns regarding Significa Benefit Services privacy policy and or practices, please send an email to dalbright@significabenefits.com or contact us at 1.800.433.3746.