Self Fund Platforms, Inc.
Effective Date. October 5, 2026
Self Fund Platforms, Inc. ("Self Fund," "we," "us," or "our") respects the privacy of the people who use our website at [selffund.com], our bid platform, and our related tools and services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, safeguard, and otherwise process information in connection with the Services.
Self Fund helps employers that sponsor self funded health plans, and the advisors who work with them, run a structured bid process for plan vendors such as third party administrators, stop loss carriers, pharmacy benefit managers, and other service providers. The people who use the Services are business users: representatives of employers and plan sponsors, brokers and consultants, and representatives of vendors. The Services are not offered to plan members or to the general public.
Gluva Health is a division of Self Fund Platforms, Inc. and has its own privacy policy for its programs. This Privacy Policy covers Self Fund's Services only.
1. HIPAA and Protected Health Information
The Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA") apply to certain health care providers, health plans, health care clearinghouses, and their business associates.
Self Fund is not a health plan or a health care provider. Most of the information Self Fund handles is business information that is not subject to HIPAA.
In some engagements Self Fund receives Protected Health Information ("PHI"), such as claims files or large claimant reports, from or on behalf of a group health plan so that vendors can prepare bids. When Self Fund receives, creates, maintains, or transmits PHI as a business associate of a group health plan, or as a subcontractor of a plan's business associate, Self Fund uses and discloses that information in accordance with HIPAA and the applicable Business Associate Agreement.
Where HIPAA applies, Self Fund maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of PHI. Our HIPAA Notice has more detail.
2. Information We May Collect
Depending upon how you use the Services, Self Fund may collect:
Contact and Account Information. Information such as your name, employer, job title, business email address, telephone number, mailing address, and account credentials.
Company and Plan Information. Information about an employer and its health plan, such as plan documents, vendor contracts, enrollment and census information, claims and cost experience, renewal terms, and bid requirements. This information may include PHI, which is handled as described in Section 1.
Bid and Proposal Information. Quotes, proposals, pricing, contract terms, questionnaire responses, and supporting documents that vendors submit in response to a bid request.
Communications. Messages sent through the Services, and information you provide when you contact Self Fund, request a demonstration, submit a form, or respond to a survey.
Technical and Usage Information. Information concerning your browser, device, operating system, IP address, pages viewed, access times, referring URLs, and similar technical information.
Information From Others. We may receive information from employers, advisors, plan administrators, vendors, and other parties to a bid, and from public sources such as government filings, public records, and industry directories.
3. How We Use Information
Self Fund may use information to:
- provide, operate, administer, and improve the Services;
- establish and maintain user accounts;
- prepare bid requests and deliver them to the vendors invited to respond;
- collect vendor responses and present them to the employer and its advisors;
- carry questions and messages between the parties to a bid;
- communicate with users regarding their accounts and the bids in which they take part;
- provide customer and technical support;
- send business communications about Self Fund's Services, which you may opt out of at any time;
- maintain the security and integrity of the Services;
- detect, investigate, and prevent fraud, misuse, security incidents, or other unlawful activity;
- perform analytics and prepare aggregated benchmarks as described in Section 11;
- comply with legal, regulatory, contractual, and reporting obligations; and
- use information for other purposes disclosed to you at the time it is collected or with your consent.
When Self Fund processes PHI as a business associate, its use and disclosure of that information is additionally restricted by HIPAA and the applicable Business Associate Agreement.
4. When We May Disclose Information
Self Fund does not disclose personal information except as described in this Privacy Policy, as authorized by you, or as otherwise permitted or required by law. Information may be disclosed to:
Parties to a Bid. Sharing information among the parties to a bid is how the Services work. An employer's bid request and supporting information are provided to the vendors invited to respond. A vendor's response is provided to the employer that requested it and to that employer's advisors. [Self Fund's process is designed so that one vendor's bid is not shared with competing vendors.]
Service Providers. Vendors that perform services on Self Fund's behalf, including hosting, cloud infrastructure, security, communications, document processing, analytics, customer support, and technology services.
Legal and Safety Purposes. Self Fund may disclose information when reasonably necessary to comply with applicable law, regulation, subpoena, court order, or other lawful governmental request; establish or defend legal rights; investigate fraud or security incidents; or protect the rights, property, or safety of Self Fund, its users, or others.
Business Transactions. Information may be transferred in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal restrictions.
Where PHI is involved, disclosure will be subject to HIPAA whenever HIPAA applies.
5. We Do Not Sell Personal Information or PHI
Self Fund does not sell personal information.
Self Fund does not sell PHI and does not use PHI for advertising or marketing.
6. Confidential Business Information
Bids, pricing, contracts, and other business information submitted through the Services are often confidential. Self Fund's handling of that information is governed by the agreements between Self Fund and the employer, advisor, or vendor that provided it. This Privacy Policy addresses personal information and does not replace those agreements.
7. Cookies, Analytics, and Online Technologies
Self Fund's public website may use cookies and similar technologies to operate the website, remember user preferences, measure website performance, maintain security, and understand how visitors interact with the site.
Self Fund does not intend for advertising or analytics technologies deployed on its public website to receive PHI.
Users may be able to manage certain cookies through browser settings or other privacy controls made available by Self Fund.
8. Data Security
Self Fund uses administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, use, alteration, disclosure, or destruction.
When Self Fund maintains electronic PHI subject to HIPAA, Self Fund applies safeguards designed to comply with applicable requirements of the HIPAA Security Rule.
No information system can be guaranteed to be completely secure. Accordingly, Self Fund cannot guarantee absolute security of information transmitted to or maintained through the Services.
9. Data Retention
Self Fund retains information for as long as reasonably necessary to provide the Services, fulfill the purposes for which the information was collected, satisfy contractual requirements, comply with applicable legal and regulatory obligations, resolve disputes, enforce agreements, and maintain appropriate business records.
10. Your Privacy Rights
Depending upon where you live, the type of information involved, and applicable law, you may have rights regarding your personal information. These rights may include the ability to request access to, correction of, or deletion of certain information.
Where Self Fund maintains PHI as a business associate, HIPAA rights are exercised through the health plan responsible for the PHI. Self Fund will cooperate with the plan as required by HIPAA and the governing Business Associate Agreement.
Requests regarding information maintained directly by Self Fund may be submitted using the contact information in Section 15.
11. Aggregated and Deidentified Information
Where permitted by applicable law and contract, Self Fund may create and use information that has been aggregated or deidentified so that it does not identify any individual and does not reveal a specific employer's or vendor's confidential information.
Self Fund may use that information for purposes such as analytics, benchmarking, service improvement, and development of new products or services, subject to applicable contractual and legal restrictions.
Where information is deidentified pursuant to HIPAA, Self Fund will apply the standards required by HIPAA.
12. Third Party Services
The Services may contain links to or integrate with third party websites, applications, or services. Self Fund is not responsible for the privacy practices of independent third parties. Users should review the privacy policies of those organizations before providing information to them.
13. Changes to This Privacy Policy
Self Fund may update this Privacy Policy periodically to reflect changes to its Services, business practices, contractual obligations, or applicable law. When we make material changes, we will update the effective date and provide additional notice when required by applicable law.
14. Contact Us
Questions concerning this Privacy Policy, Self Fund's privacy practices, or requests concerning personal information may be directed to:
Self Fund Platforms, Inc.
Email: [privacy@selffund.com]
For information Self Fund maintains on behalf of a health plan, you may also contact that plan using the contact information in its Notice of Privacy Practices.