Bamboo Health Privacy Policy

Last updated: August 25, 2021

About this Privacy Policy

This Bamboo Health Privacy Policy (“Privacy Policy”) describes how Bamboo Health collects and uses your information in the context of our marketing, sales, advertising, and support practices through our website www.bamboohealth.com and any other Bamboo Health websites or social media platforms such as Facebook, Twitter, LinkedIn, or Instagram (the “Sites”).

This Privacy Policy does not apply to our collection of data through our Bamboo Health platforms, mobile applications, products or services provided to our customers, which are subject to a separate privacy policy.

Any references to “Bamboo Health,” “we,” “us,” “our,” or the “Company” is a reference to Bamboo Health, with headquarters in Louisville, Kentucky, U.S.A. The Sites are directed to residents of North America, and the laws of Kentucky and the United States apply.

Information Bamboo Health Collects about You

When you contact us for support or other inquiries through the Sites, we may collect these types of identifying information:

Contact Information: If you request additional information about our products or services, request customer support, use our “Contact Us” or similar features, register to attend our seminars, webinars, or other presentations, or download certain content, we generally require you to provide us with your contact information, such as:

• your name, interest, job title, company name, address, phone number, email address, communications preferences, or username and password

Job Application Information: If you apply for available positions through our Sites, we may ask you to provide personal information such as:

• your name, date of birth, phone number, email address, career and educational history, areas of expertise, resumes or CVs, writing samples, letters of recommendation, social media profiles, demographic information, criminal record history, or other information which may be obtained in a background check

Registration Information: If you register for any web-based or app-based online community that we host, or register to attend our seminars, webinars, or other presentations, we may ask you to provide registration information, such as:

• a username, photo, and/or biographical information, such as your occupation, social media profiles, company name, and areas of expertise

Device and Usage Information: If you use and interact with our Sites or send us direct emails, we may automatically collect device and usage information, through common information-gathering tools such as:

• log files and other information about your computer or mobile device and your usage of our websites through cookies, web beacons, or similar technologies, such as IP-addresses, location, or other identifiers, which may qualify as identifying information

Our Sites may also implement the Google reCAPTCHA tool to help prevent spam and abuse. The reCAPTCHA tool collects hardware and software information from your device, which is sent to Google for purposes of providing, maintaining, and improving the reCAPTCHA tool as well as for general security purposes. This information is not used by Google for personalized advertising. Your use of the reCAPTCHA tool is subject to Google’s Privacy Policy and Terms of Use.

User Submissions: If you publicly post any personal or other information to the Sites or any web-based or app-based online community that we host, which information may include your tips, updates, alerts, comments, feedback, or any other information that you voluntarily provide (your “Submissions”), we may display your Submissions on any of our Sites, apps, mobile platforms, or any web-based or app-based online community that we host.

Affiliates and Third Parties: We may also collect information about you from certain affiliates and other third parties, including but not limited to:

• Social networks, when you grant us permission to access your data on one or more networks;
• Service providers that help us determine a location in order to customize certain products to your location;
• Businesses with which we may offer co-branded services or engage in joint marketing activities;
• Publicly-available sources and data suppliers from which we obtain data.

How Bamboo Health Uses Your Information

Bamboo Health may use your identifying information for the following purposes:

• Provide you with relevant information on the Sites;
• Send you information about Bamboo Health products and services and similar information on request;
• Conduct market research and customer surveys;
• Where you have submitted a job application, evaluate your candidacy for employment;
• Investigate and respond to comments or inquiries from users of the Sites and/or customers;
• Detect, prevent, or otherwise address fraud, security, or technical issues, as well as protect against harm to the rights, property or safety of Bamboo Health or the public;
• Analyze your use and measure effectiveness of the Sites for purposes of improvement, engagement, and retention;
• Place cookies and use tracker technologies on the Sites and in email communications, pursuant to our Cookies Policy;
• Diagnose problems on the Sites;
• In connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure or information in connection with government agency requests, legal process or litigation); and
• As part of a corporate transaction, such as a transfer of assets to or an acquisition by or merger with another company.

We may share or publish aggregate information that doesn’t specifically identify you, such as statistical information about visitors to our websites or statistical information about how customers use our products and services.

How Your Information May be Shared

Internal sharing

Bamboo Health may share your information with our corporate group of affiliated companies for the purposes listed in this Privacy Policy. Employees and contractors of Bamboo Health may share your information internally for the delivery of Bamboo Health services, to the extent necessary to fulfill a request you have submitted via our Sites, or for customer support, marketing, technical operations, and account management purposes.

Service providers

We may also share your information with third party service providers, which provide Bamboo Health with services such as IT and system administration and hosting, research and analytics, marketing, customer support and data enrichment.

Fraud prevention, safety and security

We may share your information with organizations or individuals outside of Bamboo Health if we believe that doing so is reasonably necessary to detect, prevent, or address fraud, security, or technical issues. We may also share your information with others in order to protect against harm to the rights, property or safety of Bamboo Health and our employees, users, children, or the public as required or permitted by law.

Sharing consistent with your choices

With your consent, we may share your information with sponsors, joint venture entities and other third parties, including entities for which we are acting as an agent, licensee, application host or publisher, that wish to send you information about their products and services that may be of interest to you, as determined by your choices in managing your communications preferences and other settings.

Legal purposes

We also may also share your information with third parties if we have a good faith belief that such disclosure is necessary to:

• meet any applicable law, regulation, legal process or other legal obligation; or
• as part of a corporate transaction, such as a transfer of assets to or an acquisition by or merger with another company.

Retention Period for Your Information

When you provide us with personal information via the Sites, Bamboo Health may store, process, and use that information for as long as is necessary for our business purposes, and to the extent necessary to comply with our legal, accounting, or compliance obligations.

Where We Store Your Information

Your information may be stored and processed on physical or cloud servers in any region where Bamboo Health, its affiliates, and their service providers maintain servers and facilities.

Children’s Privacy

The Sites are designed to provide information about our products and services, and we do not target the Sites at children. Bamboo Health does not knowingly collect or process information from children under the age of 18.

Your Data Privacy Rights

Depending on where you live, you may have certain privacy rights regarding your personal information pursuant to local data protection laws. Those rights may generally include access to, correction, deletion, and or restricting our use of the personal information you provide to us through the Sites.
California Consumer Privacy Act: If you are a resident of California, under the California Consumer Privacy Act of 2018 (CCPA), and subject to certain qualifications, you may have the right to:

• request a list of categories of personal information collected about you, and other information such as the source of the information, categories of information shared with third parties, and the purpose for such sharing. Bamboo Health has provided you with this information in this Privacy Policy;
• request a copy of the personal information you have provided to us;
• subject to certain exceptions, request that we delete the personal information you have provided to us; and/or
• request that we send a copy of your information in a structured, machine-readable format to another data controller.

Bamboo Health does not sell any personal information we may collect directly from residents of California to any third party.

Global privacy laws:

The purpose of our Sites is to provide information about our products and services, which are not currently marketed or offered outside of the United States. As such, we do not target our Sites to any individuals outside the United States.If you have provided Bamboo Health with personal information through any of our Sites and are located in the European Union or the United Kingdom, you may have rights under the General Data Protection Regulation of 2018 (GDPR) or the UK Data Protection Act (UK DPA) (subject to certain exceptions and limitations) to:

• request access to a copy of your information;
• request correction or erasure of your personal information;
• ask us to stop or temporarily pause our active processing of your information;
• request that we send a copy of your information in a structured, machine readable format to another data controller; and/or
• make an objection to our processing of your personal information in certain circumstances, such as if we use your information for direct marketing.

How to Exercise Your Data Privacy Rights

Residents of California can visit the following link to submit a verifiable request pursuant to CCPA regarding your personal information: https://privacyportal.onetrust.com/webform/ff1a14f1-6f5b-42b4-a090-2d8844350e7c/44d59638-9787-45bf-8d0a-dd34ec1ec7c9
Residents of California or countries outside the U.S. may also contact us using the information listed in the “Contact Us” section below or by sending a direct email to our Data Protection Officer at [email protected].

Only you or someone legally authorized to act on your behalf may make a verifiable request regarding your personal information. To verify your request, we must collect certain pieces of information about you that confirm your identity. We will use such information for verification and compliance purposes only.

Communications Preferences and Withdrawing Consent

You can stop receiving marketing and non-transactional communications from us by clicking on the “unsubscribe” link located on the bottom of our emails, by replying or texting ‘STOP’ if you receive SMS communications, or by turning off push notifications on our apps on your device. Additionally, you may unsubscribe by contacting us using the information in the “Contact Us” section below.

Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as information about your subscriptions, service announcements, or security information.

Data Privacy and Security

Bamboo Health has a dedicated team of information security specialists working 24/7 to protect the information we collect and store. We implement a variety of data privacy and security measures, such as physical security controls, data encryption and confidentiality obligations for our employees. We take great care to protect the personal information we hold about you.

With respect to your use of the Sites, where applicable you are solely responsible for protecting the confidentiality of your passwords, limiting access to your computer and mobile devices, and signing out of websites, apps, and mobile platforms after your sessions.

Third-party Sites

The Bamboo Health Sites may include links to other third-party websites or resources (“Third-Party Sites”) offered by independent organizations that may or may not be affiliated with Bamboo Health. Bamboo Health has no control over these Third-Party Sites and does not endorse and is not responsible for any content, advertising, products, services, or other materials found on the Third-Party Sites.

Changes to this Privacy Policy

We will update this Privacy Policy from time to time to reflect changes in our practices, updated technologies, emerging legal and regulatory requirements, and other factors. If we do, we will post the revised version here with an updated revision date. We encourage you to periodically review this Privacy Policy to stay informed about our collection, processing and sharing of your personal information.

Contact Us

If you have questions regarding this Privacy Policy or our privacy practices, please contact Bamboo Health’s Data Protection Officer at [email protected], or write to us at the following mailing address:

Bamboo Health
Attn: Data Protection Officer
9901 Linn Station Rd., Suite 500
Louisville, Kentucky 40223, USA

Phone: 1-866-277-7477

Bamboo Health is committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the EU, you have the right to lodge a complaint with the competent supervisory authority.