Privacy Policy

1. Information We Collect

Depending on how a person interacts with OGG, we may collect the following categories of information:

• Identity and contact information, such as name, mailing address, email address, telephone number, date of birth, member ID, and account credentials.
• Eligibility and employment information, such as employer or agency, position or classification, active or retired status, dates relevant to eligibility, and documents used to verify membership qualification.
• Enrollment and membership records, including agreements, acknowledgments, signatures, plan selections, effective dates, status changes, cancellations, and communications.
• Billing and payment information, including dues amounts, payment status, transaction references, payroll-allotment information, and payment-processor tokens or identifiers. OGG does not store full payment card numbers. OGG uses a third-party payment processor that is PCI compliant.
• Benefit, claim, and incident information, including descriptions of events, dates, documents, correspondence, provider referrals, status information, and other information a member submits to request or administer a benefit.
• Sensitive professional, legal, or health-related information when a member voluntarily provides it in connection with a benefit, claim/incident, counseling or wellness service, or other member request.
• Communications with OGG, including customer-support inquiries, portal messages, forms, surveys, call notes, and records of notices sent to or received from a member.
• Technical and usage information, such as IP address, browser and device information, login activity, security events, page interactions, cookies, and similar technologies used to operate and secure the Services.

2. How We Use Information

OGG may use information to:

• Establish, verify, administer, and maintain membership and benefit eligibility.
• Process enrollment, billing, recurring dues, payroll-allotment reconciliation, cancellations, refunds, credits, and account status.
• Receive, document, route, and administer benefit requests and claims/incidents.
• Provide information to insurance carriers, law firms, licensed professionals, sponsoring organizations, and other benefit providers when necessary to administer a benefit.
• Authenticate users; detect, prevent, investigate, and respond to fraud, account compromise, misuse, cyber threats, or other security incidents.
• Communicate about membership, billing, benefits, policy changes, claims/incidents, support, security, and legal or regulatory matters.
• Maintain audit trails, records, reporting, reconciliation, quality control, and operational analytics.
• Comply with law, lawful process, contractual obligations, insurance requirements, audits, and requests from regulators or government authorities where legally required.
• Protect the rights, safety, security, and legitimate interests of OGG, members, providers, sponsoring organizations, and others.

3. How We Share Information

OGG does not disclose member information indiscriminately. Information may be shared only as reasonably necessary for the purposes described in this Policy, including with:

• Insurance carriers, program administrators, risk purchasing groups, brokers, law firms, assigned counsel, licensed professionals, counselors, and other benefit providers.
• A member's union, professional organization, association, or other sponsoring organization when necessary to administer the sponsored program, confirm eligibility or participation, reconcile program obligations, or as otherwise authorized or required by the applicable arrangement and law.
• Payment processors, banks, payroll-allotment or payment-support providers, e-signature services, CRM/platform providers, cloud hosting, secure storage, communications, cybersecurity, analytics, and other vendors that support OGG operations.
• Professional advisers such as attorneys, accountants, auditors, insurers, and consultants subject to appropriate confidentiality obligations.
• Government authorities, courts, regulators, law enforcement, or other parties when disclosure is required by law, legal process, or necessary to protect rights, safety, security, or prevent fraud or abuse.
• A successor, purchaser, or transaction counterparty in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and applicable law.

OGG does not use claim/incident content or sensitive benefit information for targeted advertising. OGG does not sell member personal information for monetary consideration.

4. Claims, Legal Matters, and Sensitive Information

Members should use the secure member portal or another OGG-approved secure method for claims/incidents and sensitive documents. Members should not send highly sensitive claim, legal, health, or identity information through unsecured channels unless instructed to do so by OGG or an applicable provider.

Information relating to insurance claims, legal matters, counseling, or licensed professional services may also be subject to the privacy, confidentiality, privilege, record-retention, and disclosure rules of the applicable carrier, law firm, professional, or provider. OGG does not control those independent providers' privacy practices and members should review any provider-specific notices that apply.

5. Security

OGG uses administrative, technical, and physical safeguards designed to protect member information. OGG's security program is intended to include role-based least-privilege access, multi-factor authentication for administrative users, encryption in transit and at rest where appropriate, secure cloud infrastructure, logging and audit controls, monitoring and alerting, backups and recovery procedures, vendor security review, and periodic security testing. No system can be guaranteed to be completely secure. Members are responsible for protecting their account credentials, using unique passwords, enabling available security features, and promptly notifying OGG of suspected unauthorized access.

6. Data Minimization and Access Controls

OGG seeks to collect only information reasonably necessary for membership, benefits, billing, security, compliance, and operations. Access to sensitive member information is limited to personnel and service providers with a legitimate need to know. OGG may separate or restrict access to claims, legal matters, payment information, and other sensitive records based on role and purpose.

7. Data Retention

OGG retains information for as long as reasonably necessary to administer membership and benefits, satisfy contractual and insurance requirements, maintain audit and reconciliation records, resolve disputes, enforce agreements, meet legal or regulatory obligations, and protect legitimate business interests. Retention periods may vary by record type and provider requirement. Information may be retained longer when subject to a legal hold, active claim, investigation, audit, or other preservation requirement.

8. Cookies and Similar Technologies

OGG may use cookies, session identifiers, device information, logs, and similar technologies to operate the website and member portal, maintain sessions, remember preferences, measure performance, prevent fraud, and protect account security. Where required by law, OGG will provide additional notice or choice regarding non-essential cookies or similar technologies.

9. Member Choices and Privacy Rights

Members may update certain account information through the member portal or by contacting OGG. Depending on applicable law and the Member's jurisdiction, a Member may have rights to request access, correction, deletion, restriction, portability, or other treatment of personal information. These rights may be limited by legal, insurance, audit, security, record-retention, or contractual obligations. OGG may need to verify identity before fulfilling a privacy request. A request to delete information does not require OGG to delete records that must be retained for insurance, claims, legal, fraud-prevention, accounting, audit, security, or other lawful purposes.

10. Communications

OGG may send transactional and service communications relating to membership, billing, benefits, claims/incidents, security, policy changes, and account administration. Marketing communications, if any, will be handled in accordance with applicable law and available opt-out mechanisms. Opting out of marketing does not stop necessary service or legal communications.

11. Children

OGG membership is intended for eligible adults and is not directed to children. Family-related benefits may involve information about dependents when necessary to provide a benefit, but OGG does not knowingly solicit children to create independent OGG membership accounts unless a specific program expressly permits it and appropriate authorization is obtained.

12. State-Specific and Other Supplemental Notices

Privacy rights and disclosure obligations may vary by jurisdiction. OGG may provide supplemental state-specific, federal, or provider-specific privacy notices when required. If a supplemental notice conflicts with this Policy, the supplemental notice controls for the scope it addresses.

13. Changes to This Privacy Policy

OGG may update this Privacy Policy from time to time. The current version will be posted through the OGG website or member platform, and material changes will be communicated when required by law or reasonably appropriate.

14. Contacting OGG

Privacy questions, requests, or concerns may be submitted through the contact method designated in the OGG member portal or on the OGG Government Services website. You may also direct Privacy Policy concerns to:

OGG Government Services
PMO-Privacy
1130 Ogletown Road Ste 2
Newark, DE 19711

Or email at: service@ogggov.com