Compliance & Consent
How we collect, store, and protect consumer consent records
Prior Express Written Consent
Every form on our website requires prior express written consent before submission. This consent appears in clear, plain language directly above the submit button at a minimum font size of 14px on every device. The consent checkbox is never pre-checked — consumers must actively choose to consent.
FCC One-to-One Consent (Effective Jan 27, 2025)
In compliance with the FCC's updated rules effective January 27, 2025, our consent language specifically names the sellers who may contact consumers. Our partner list is publicly available at enrollsmartnow.com/partner-network and is version-controlled. Every consent record stores the partner list version that was active at the time of submission.
Consent Evidence We Store Per Lead
- Timestamp (UTC, microsecond precision)
- IP address (encrypted)
- User agent and device type
- Landing page URL and referrer URL
- Full UTM campaign parameters
- Consent text snapshot (exact text shown)
- Consent version and partner list version
- DOM hash of the consent section
- Jornaya LeadID token (third-party identity verification)
- TrustedForm certificate URL (session recording)
- SHA-256 cryptographic hash of the complete evidence record
Third-Party Verification
Jornaya LeadID: We integrate Jornaya's universal identity system to capture a unique token for every page load. This token can be used to independently verify the session and consent event.
TrustedForm by ActiveProspect: We integrate TrustedForm to capture a session recording certificate for every form session, providing an independent record of what the consumer saw and did during their session.
Revocation Rights
Consumers may revoke consent at any time through multiple channels: our online opt-out form, by emailing optout@enrollsmartnow.com, by calling (800) 555-0100, or by replying STOP to any text message. Revocations are processed immediately and added to our suppression list.
CMS TPMO Compliance
Our Medicare landing pages comply with CMS Third-Party Marketing Organization (TPMO) guidelines including displaying the required disclaimer: "We do not offer every plan available in your area. Any information we provide is limited to those plans we do offer in your area. Please contact Medicare.gov or 1-800-MEDICARE to get information on all of your options."