Last Updated: February 11, 2016

Cornerstone Enrollment Services (“CES”, “we” or “us”) respects that privacy is important to you. This Privacy Policy discloses the privacy practices for, a website of CES LLC(the “website”). As described in detail in this Privacy Policy, we may collect and use information about you from your use of the website in the following ways:

  • We collect information about your use of the website, which does not contain your name or other personal information, in order to analyze and improve the usefulness of our website.
  • We may share this non-personal information with our business partners to improve our service to you and others.
  • We may collect personal information about you from information you chose to disclose on the website to provide you with information about Medicare coverage or access to benefits and services. We will not sell or share this information for marketing purposes without your consent.
  • We may combine, in a way that is not identifiable to you, your personal information with information from other users to create aggregate data that we may disclose to others for advocacy activities and other purposes.
  • We may provide certain third-party contractors technical access to your personal information in the course of providing products or services to us, such as hosting the website, but we require these parties to maintain the confidentiality of your personal information.

Please read the full Privacy Policy below for a more detailed description of how we collect and use information about you.

By using the website, you consent to the collection, use and disclosure of your information in the ways described in this Privacy Policy. If you do not agree with these terms, please do not use the website.

We may change this Privacy Policy from time to time so we ask that you revisit this Privacy Policy to be sure that you are familiar with our current policies. In the event we make any changes to this Privacy Policy, we will post these changes on this website, together with the date on which we made the most recent change.

About this Privacy Policy and using the website

CES LLC, created this Privacy Policy in support of our commitment to the user’s online privacy. This Privacy Policy discloses what information we collect and use about you from the website. For an explanation of capitalized terms used in this Privacy Policy, please refer to the definitions at the end.

We will inform you of the following in this Privacy Policy:

  • What personal information of yours may be collected;
  • What organization is collecting the information;
  • How the information is used;
  • With whom the information may be shared;
  • What choices are available regarding collection, use and distribution of the information;
  • What kind of security procedures are in place to protect the loss, misuse or alteration of information under our control; and,
  • How you can correct any inaccuracies in the information.

Please take the time to read and understand this Privacy Policy so that you can understand how we use your personal information.

Using the website

The purpose of the website is to provide information and resources concerning Medicare and related services, including resources concerning access to benefits and programs, to the aging community in the United States.

While you may use features of the website without providing Personal Data about yourself (i.e., information that can directly identify you or indicate where you might be contacted), certain tools and services on the website require that you complete forms and provide certain Personal Data. Depending on the website features you choose to use, we may also collect information about your health in combination with other Personal Data about you (“Personal Health Information”). You are responsible for ensuring the accuracy of the Personal Data and Personal Health Information you submit. Inaccurate information will affect the information you receive when using the website and our ability to contact you as described in this Privacy Policy.

Applicability of Privacy Policy

CES values and respects your trust and believes you have a right to know about how we collect and secure information we collect about you on the website. This Privacy Policy applies to this website only. The website may contain links to other websites. Once you enter another website (whether through a service or content link), be aware that CES is not responsible for the privacy practices of those other websites. CES does not endorse and is not responsible for the privacy practices of these sites.

We encourage you to look for and review the privacy statements of each and every website that you visit through a link on CES’s website, including those recommended by CES.

What information is collected and how is it used or disclosed?

Non-personal information we collect about you

We collect non-personal information about your use of the website, including the geographic location in which you live or work. CES collects non-personal information to determine the potential eligibility for benefits, to conduct analysis to determine the effectiveness and use of the services offered on the website and availability of benefits or programs, to assist in improving the service offerings on the website and for advocacy purposes.


We may collect non-personal information about your use of the website and your use of the websites of selected sponsors through the use of cookies. Cookies are text files placed on your hard disk by our web server to store your preferences. Cookies, by themselves, do not tell us your email address or other Personal Data unless you choose to provide this information to us. However, once you choose to provide the Personal Data, this information may be linked to the data stored in the cookie. Cookies cannot be used to run programs or deliver viruses to your computer.

The information collected by cookies may be used for the following purposes: (i) to help us generate content on web pages or in newsletters and make improvements to the website, (ii) to allow us to statistically monitor how many people are using the website and selected sites to which the website links, (iii) to allow us to monitor how often different functions of the website are used, and (iv) to help us determine for what purposes these actions are being taken. Cookies may also be used to transmit non-personal information between website pages in support of application features, as navigation aids and/or to determine popularity of specific content.

Most browser software can be set to reject all cookies. If you reject our cookies, certain of the functions and conveniences of the website may not work properly, but you do not have to accept our cookies in order to productively use the website. We do not link non-personal information from cookies to Personal Data and do not use cookies to collect or store Personal Health Information about you.

Clickstream data

As you use the Internet, a trail of electronic information is left at each website you visit. This information, sometimes referred to as “clickstream data,” can be collected and stored by a website’s server. Clickstream data can tell us the type of computer and browsing software you use and the address of the website from which you linked to the website. We may use clickstream data as a form of non-personal information to anonymously determine how much time visitors spend on each page of the website, how visitors navigate throughout the website and how we may tailor our web pages in the future to better meet the needs of visitors. This information will only be used to improve our website. Any collection or use of clickstream data will be anonymous and aggregate.

Personal data we collect about you

Certain features of the website may collect personally identifiable information (“Personal Data”) from you through several types of electronic transactions, including registering with the website, providing responses to questionnaires seeking information regarding your Medicare coverage or access to benefits, managing your member profile, participating in online registration and surveys and participating in advocacy alerts and social media.

CES may disclose Personal Data to its advocacy partners and others as described in this Privacy Policy. Except as described in this Privacy Policy, CES will not sell or share your Personal Data for marketing purposes without your consent.

Disclosure of your information

Except as set forth in this Privacy Policy or as specifically agreed to by you, CES will not disclose any Personal Data it gathers from you on the website, provided that CES may release Personal Data to third parties: (1) to comply with valid legal requirements such as a law, regulation, subpoena or court order; (2) to certain advocacy partners and third parties to determine your eligibility for certain benefits and as otherwise described in this Privacy Policy; (3) to third parties in a de-identified manner to provide benchmarking and analysis of benefits and programs and to improve service offerings to the aging community; or (4) with your consent. In addition, we may disclose Personal Data as described below.

Aggregate information

CES may combine, in a non-identifiable format, the Personal Data you provide with information from other users to create aggregate data that may be disclosed freely to third parties and used by CES for any lawful purpose. Aggregate data does not contain any personal identifiers that could be used to contact or identify you, such as name or email address.

CES may disclose this aggregate information to its advocacy and business partners and members of its aging network in order for these parties to conduct advocacy activities on behalf of older adults and to improve product and service offerings for older adults. CES and its advocacy partners may disclose non-personal, aggregate information to government officials and representatives in order to conduct advocacy activities on behalf of older adults.

Voluntary disclosures

Sharing Personal Data is entirely voluntary. This Privacy Policy does not apply to content, business information, ideas, concepts or inventions that you send to CES by email or by use of the website to access social media. If you want to keep content, business information, ideas, concepts or inventions private or proprietary, do not send them to CES.

Third-party service providers

CES operations and other third-party contractors sometimes have access to your Personal Data in the course of providing products or services to CES. These contractors include vendors and suppliers that provide us with technology, services (such as website hosting) and/or content related to operation and maintenance of the website. CES requires that our contractors 1) protect the privacy of Personal Data consistent with this Privacy Policy, and 2) do not use or disclose Personal Data for any purpose other than providing CES and you with products and services.

Linked sites

CES may share information among sites that it owns or controls, but such information will be protected under the terms of this Privacy Policy.

The website may contain links to other websites operated by parties other than CES (“Third-Party Websites”). With your consent, CES may share Personal Data with third parties via links to certain Third-Party Websites in order for you to explore certain benefits and product or service offerings. These Third-Party Websites have their own independent privacy and data collection practices. CES does not control and has no responsibility or liability for these third parties or their Third-Party Websites, their privacy policies, accuracy of content available on any Third-Party Website or their actions. CES does not endorse any Third-Party Websites.

How CES handles privacy and security

Here are some of the security procedures that CES uses to protect your privacy:

CES uses a variety of security measures designed to protect against loss, misuse and alteration of the information under our control. The website and database servers are hosted in a secured physical and network environment maintained by a third-party hosting provider. Reasonable efforts are made to secure web servers, networks, host operating systems and databases against unauthorized access. We use a variety of security measures to protect Personal Data when stored or transmitted by CES, including Secure Socket Layer (SSL) Encryption. In order to take advantage of encryption, you must have an Internet browser that supports 128-bit Encryption.

Despite CES’s efforts to protect your Personal Data, there is always a risk that an unauthorized third party may find a way around our security systems or that transmission of your information over the Internet will be intercepted. CES cannot ensure or warrant the security of any information you transmit over the Internet, and you do so at your own risk.

Please remember that no security measures are foolproof, and CES cannot guarantee that information will be protected in all situations. We will make reasonable efforts to protect your Personal Data from unauthorized access.

Terms of Service

This Privacy Policy co-exists with our displayed on the website, and together both policies govern your use of this website. By accessing, browsing or using the website you acknowledge that you have read, understand and agree to this Privacy Policy and our Terms of Service. We encourage you to familiarize yourself with both this Privacy Policy and our Terms of Service. The website Terms of Service may be found as a link on the page where this Privacy Policy is posted. If you do not agree with these terms (including any revisions to them), please do not use the website.

Changes to this privacy policy

We may change this Privacy Policy at any time by posting revisions to our website, so please review it frequently. Your use of this website means that you accept the terms of this Privacy Policy and your continued use after such changes are posted means that you accept the revised Privacy Policy.


The website is not designed to attract or be used by children under the age of 13. CES does not knowingly collect Personal Data from anyone under the age of 13.

How to contact us

For more information about our privacy practices (including compliance with applicable law), or if you want to (1) delete your Personal Data from our systems, (2) update the Personal Data that you have provided to us, or (3) change your preferences with respect to marketing contacts or other activities, contact us by email at CES or write to us at PO Box 58434, Nashville, TN 37205.


“Encryption” means the translation of data into a secret code. Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it.

“Firewall” means a system designed to prevent unauthorized access to or from a public or private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private portions of public networks. All messages entering or leaving the network pass through the Firewall, which examines each message and blocks those that do not meet the specified security criteria.

“Personal Data” means information that is identifiable to a particular individual. Examples of Personal Data include your name, likeness (such as in video or photographs), email address, demographic information, educational level, income and occupation. If other pieces of information are linked to Personal Data, they may also become Personal Data.

“Secure Sockets Layer” (SSL) means a security protocol for transmitting private information via the Internet. SSL works by using a private key to encrypt data that’s transferred over the SSL connection. URLs that utilize an SSL connection start with https: instead of http.

“Cookie” means a data file that is stored on the hard drive of the computer you use to view a website. Cookies are placed by that site or by a third party with a presence on the site and are accessible only by the party or site that placed the Cookie (i.e., a Cookie placed on your computer by CES isn’t accessed by any other site you visit, but a Cookie placed on your computer by an advertiser may be accessed by any site on which that same advertiser has a presence). Cookies can contain pieces of Personal Data. Cookies may be used to make the site easier to use. For example, if you check a box to ask that we store your user name on your computer so that you don’t have to enter it each time you visit the site, it’s stored in a Cookie on your computer.

Register for our Newsletter