2. Children Under the Age of 13
The Platform is not intended for children under the age of 13 and children under the age of 13 are not permitted to use the Platform. No one under age 13 may provide any information to or on the Platform. We do not knowingly solicit or collect Personal Data from children under 13. If you are under 13, do not use or provide any information on our Platform or on or through any of its features, use any of the interactive or public comment features of our Platform or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received Personal Data from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from a child under 13, please contact us at contact@BMOXI.com and we will delete that information.
3. Your Rights Regarding Your Personal Data
If you reside in the EU, applicable data protection laws may provide you with certain rights under the GDPR with regards to our processing of your Personal Data.
Access and Update. You can review and change your Personal Data by logging into the Platform and visiting your “Profile” page. You may also notify us through the Contact Information below of any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.
Restrictions. You have the right to restrict our processing of your Personal Data under certain circumstances. In particular, you can request we restrict our use of it if you contest its accuracy, if the processing of your Personal Data is determined to be unlawful, or if we no longer need your Personal Data for processing but we have retained it as permitted by law.
Portability. To the extent the Personal Data you provide BMOXI is processed based on your consent or that we process it through automated means, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in structured, commonly used and machine-readable format. You also have the right to request that we transmit this Personal Data to another controller, when technically feasible.
Withdrawal of Consent. To the extent that our processing of your Personal Data is based on your consent, you may withdraw your consent at any time by closing your account. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Data.
Right to be Forgotten. You have the right to request that we delete all of your Personal Data. We cannot delete your Personal Data except by also deleting your user account, and we will only delete your account when we no longer have a lawful basis for processing your Personal Data or after a final determination that your Personal Data was unlawfully processed. We may not accommodate a request to erase information if we believe the deletion would violate any law or legal requirement or cause the information to be incorrect. In all other cases, we will retain your Personal Data as set forth in this policy. If you delete your User Contributions from the Platform, copies of your User Contributions may remain viewable in cached and archived pages or might have been copied or stored by other Platform users.
Complaints. You have the right to lodge a complaint with the applicable supervisory authority in the country you live in, the country you work in, or the country where you believe your rights under applicable data protection laws have been violated. However, before doing so, we request that you contact us directly in order to give us an opportunity to work directly with you to resolve any concerns about your privacy.
How You May Exercise Your Rights. You may exercise any of the above rights by contacting us through any of the methods listed under contact information below. If you contact us to exercise any of the foregoing rights, we may ask you for additional information to verify your identity. We reserve the right to limit or deny your request if you have failed to provide sufficient information to verify your identity or to satisfy our legal and business requirements. Please note that if you make unfounded, repetitive, or excessive requests (as determined in our reasonable discretion) to access your Personal Data, you may be charged a fee subject to a maximum set by applicable law.
See https://www.gdpreu.org/gdpr-requirements/ for more information.
4. Information Collection, Use, and Disclosure
Categories of Information Collected
Visitor Data: BMOXI collects, uses, and stores data regarding user visits to its Platform ("Visitor Data"), including but not limited to the particular pages visited or viewed by the user, the amount of time the user spent on the Platform, Platform errors experienced by the user, visits to the "FAQ" page, and information about the browser or device used to access the Platform, such as the user’s mobile device ID and IP address. These practices apply to users who visit pages for prospective new customers as well as those who visit pages for prospective Mentors
Onboarding Data: In addition to the questionnaire responses provided by users (including Mentors) in the process of initial registration, BMOXI collects, uses, and stores certain additional data from users during the onboarding process ("Onboarding Data"). This data includes but is not limited to the pages viewed by the user, whether the user clicks the "Get Started" link to begin completing the questionnaire, and whether the user responds to any of the questionnaire prompts.
Account Registration Data: BMOXI collects, uses, and stores certain information in connection with the account registration process, such as whether users registered using their Facebook, Google or Apple profiles and the like, and whether a user verifies their reported email address or phone number ("Account Registration Data").
Transaction Data: BMOXI collects, uses, and stores certain information regarding payment for its services by users and related transactions on its Platform, such as whether a user completed payment for BMOXI’s services, signed up for BMOXI’s services using a trial offer, canceled or otherwise ended a trial, or completed a request to receive financial aid for BMOXI’s services ("Transaction Data").
Login Data: BMOXI collects, uses, and stores data regarding logins to BMOXI’s Platform by registered users (including Mentors) and activity conducted during that log in such as when a user logs in, the number of messages received or sent through BMOXI’s Platform during that log in, and whether a user has been assigned, started, or completed a Mentoring goal ("Login Data"). Login Data does not include the content of any messages sent or received by users or the content of any Mentoring goals.
Mentoring Session Data: BMOXI collects, uses, and stores certain general data regarding user Mentoring sessions such as whether a live session has been scheduled by the user, whether a Mentor or user joins a scheduled session, when a Mentoring session began and ended, and whether a Mentoring session was canceled or re-scheduled.
Customer Data: BMOXI collects, uses, and stores certain data from users that have signed up for BMOXI’s services such as a user’s self-reported name or nickname, age, e-mail address, phone number, date of birth, or any other identifier ("Customer Data").
Mentor Data: In order to credential, recredential, run checks and pay Mentors, BMOXI collects, uses, and stores certain data from Mentors. This data includes information such as the Mentor’s name, e-mail address, and phone number, address, NPI number (if applicable), CAQH number (if applicable) and education and job history ("Mentor Data").
Communications Data: BMOXI collects, uses, and stores communications between users and Mentors on the Platform, and communications between users and BMOXI’s customer service team ("Communications Data").
User Contributions Data: You may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Platform or transmitted to other users of the Platform or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although you may set certain privacy settings for such information while creating each post (including posting publicly, posting anonymously, and limiting the transmission of posts only to other users in a specific group), please be aware that no security measures are perfect or impenetrable.
Additionally, we cannot control the actions of other users of the Platform with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
Purposes for Which Information is Used
We may use the information we collect for one or more of the following purposes:
Communication with you
To contact you or provide you with information, alerts and suggestions that are related to the Platform.
To verify your identity.
To complete an activity you requested, such as register for the Platform or obtain more information.
To reach out to you, either ourselves or using the appropriate authorities, if we have a good reason to believe that you or any other person may be in danger or may be either the cause or the victim of a criminal act.
Delivery of services to you
To create your account on our Platform and let you log in to your account and use the Platform.
To manage your account, provide you with customer support, and ensure you are receiving quality service.
For billing and transaction processing purposes.
To match users with Mentors and facilitate the Mentor Services.
To provide, support, personalize, and develop our Platform and the Mentor Services.
Administration and improvement of services
To supervise, administer and monitor the Platform.
To measure and improve the quality, effectiveness and delivery of our services.
To personalize the Platform experience and to deliver content and service offerings relevant to individual interests, including targeted offers and ads through our Platform and via email.
Compliance with law
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
To comply with applicable state and federal laws, including, but not limited to laws related to protecting client and public health and safety.
Other uses with consent
Any other purpose with your consent.
Purposes for Which Information is Disclosed to Third Parties
Information about you may be disclosed to third parties for one or more of the following purposes:
For business purposes: Only as necessary for facilitating the Mentor Services, we may share a user’s information with a Mentor and a Mentor’s information with a user. We may also share your information with vendors and service providers, including our data hosting and data storage partners, analytics and vendors providing technology services and support, payment processing, and data security. We also may share information with professional advisers, such as auditors, law firms, and accounting firms.
With your direction or consent: We may share your information with third parties if you request or direct us to do so.
With affiliates within our corporate group: We may share your information with any subsidiaries or parent companies within our corporate group.
Compliance with law: We may share your information with a court, a regulatory entity, law enforcement personnel, or pursuant to a subpoena, to comply with applicable law or any obligations thereunder.
In the context of a transaction: We may share your information in connection with an asset sale, merger, bankruptcy, or other business transaction.
Note that if you make any information publicly available on the Platform, anyone may see and use such information.
5. Opting out of Marketing Communication
You can opt out of receiving email marketing by unsubscribing using the unsubscribe link provided in all of our marketing email communications.
6. Cookies and Web Beacons
Like many websites, we use "cookies" and "web beacons" (also known as pixels) to collect information. A "cookie" is a small data file that is transferred to your computer's hard disk for record-keeping purposes. We collect cookies that are necessary for the Platform to function, cookies that enhance the Platform’s performance, and cookies used for third-party tracking. A "web beacon" is a tiny and sometimes invisible image or embedded code, placed on a Web page or email that can report your visit or use to a third party. Web beacons are typically used by third parties to monitor the activity of users at a website for the purpose of web analytics, advertising optimization, or page tagging. Additional information regarding web beacons is available on Wikipedia.
You can change your browser's settings so it will stop accepting cookies and web beacons or to prompt you before accepting a cookie or web beacon.
Our Platform also uses analytics vendors to collect information (for example, Visitor Data and Onboarding Data) about user actions on our websites for purposes of analytics and analysis of certain Platform usage.
Do Not Track Signals
We currently do not honor do-not-track signals that may be sent by some browsers. California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of Personal Data about your online activities over time. Because there is not yet a common understanding of how to interpret the DNT signal, we do not currently respond to the browser DNT signals when you use our services and products or interact with our Platform
7. Consent to Processing Data in the United States
We may process your Personal Data outside of your home country, including to the United States. We only do this when we are legally permitted to do so and when we have appropriate safeguards in place to protect your Personal Data.
If you are a resident of the European Economic Area (“EEA”), in order to provide our Platform services to you, we may send and store your Personal Data outside of the EEA, including to the United States. Accordingly, your Personal Data may be transferred outside the country where you reside or are located, including to countries that may differ from, and are potentially less protective than, the laws of your country. You agree to this risk when you create a profile and click “I agree” to data transfers, irrespective of which country you live in. If you later wish to withdraw your consent, you can request to delete your account.
8. Social and General Information Tools
Online identity theft and account hacking, including the practice currently known as "phishing", are of great concern. You should always be diligent when you are being asked for your account information and you must always make sure you do that in our secure system. We will never request your login information or your credit card information in any non-secure or unsolicited communication (email, phone or otherwise).
11. Security of Information
Information transmitted over the Internet is not completely secure. We do our best to protect your Personal Data but cannot guarantee the security of your Personal Data transmitted on the Platform. We have implemented industry standards and best practices to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. We comply with all applicable federal laws, state laws, and regulations regarding data privacy. However, any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Platform like public message boards. The information you share in public areas may be viewed by any user of the Platform.
12. Service Providers
We may employ third party companies and individuals to facilitate our Platform, to perform certain tasks which are related to the Platform, or to provide audit, legal, operational or other services for us. These tasks include, but not limited to, customer service, technical maintenance, monitoring, email management and communication, database management, billing and payment processing, reporting and analytics. We will share with them only the minimum necessary information to perform their task for us and only after entering into appropriate confidentiality agreements.
13. Compliance with Laws and Law Enforcement
We cooperate with government and law enforcement officials to enforce and comply with the law. We may disclose information necessary or appropriate to protect the safety of the public or any person, to respond to claims and legal process (including but not limited to subpoenas), and to prevent or stop activity that may be illegal or dangerous. You should also be aware that Mentors may be obliged to disclose information to law enforcement or other authorities to conform to their professional and legal responsibilities. Specifically, and without limitation, you should be aware that the law requires mental health professionals to disclose information and/or take action in the following cases: (a) reported or suspected abuse of a child or vulnerable adult; (b) serious suicidal potential; (c) threatened harm to another person.
15. Contacting Us
Last Updated and Effective: December 17, 2022.