Legal

Privacy Policy

Last updated September 3, 2026

Overview

This Privacy Policy describes the types of information that BxaGlobal Insurance Services, Inc., doing business as Beni Global, and its affiliates (together, “BxaGlobal,” “Beni Global,” “we,” “us,” or “our”) may collect from you and/or your company (together, “you”) or that you may provide when you visit beniglobal.com (our “Site”), use our client portal, or otherwise interact with us, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Key points

What we collect. Contact and business details you give us, account and sign-in information, benefits plan and enrollment data needed to service your program, and technical information such as IP address and portal activity.
How we use it. To provide employee benefits consulting and brokerage services, operate the Site and client portal, communicate with you, secure our systems, and meet legal obligations.
Who we disclose it to. Insurance carriers and administrators, the technology vendors that run our Site, portal, email, document storage, and AI-assisted document review, and others as described below.
Do we sell or share it? No. We do not sell personal information or use it for targeted advertising, and we do not use third-party advertising or analytics trackers on our Site.
Your choices. You can request access to, correction of, or deletion of your information by contacting us at info@beniglobal.com.

This Policy also applies to information about your former and current employees, dependents, and other eligible plan participants when we provide employee benefits consulting, brokerage, or related services.

This Policy applies to information we collect on or through our Site, through electronic messages between you and us, and through other means related to the services we provide. It does not apply to information collected (i) offline or through any other means, including through any other website or platform operated by a third party, or (ii) by any third party, including through any application or content that may link to or be accessible from our Site.

This Policy does not apply to your use of a third-party site linked from our Site. The inclusion of a link does not imply endorsement of the linked site or service. Those websites are governed by their own terms and privacy notices, and you are responsible for reviewing them. We are not responsible for how those third parties handle your personal information.

Please read this Policy and our Terms of Use carefully. By accessing or using our Site or services, you agree to this Privacy Policy. You may withdraw your consent at any time by contacting us using the information below.

California residents: To the extent the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA”), applies to our processing of your personal information, this Policy describes your rights under that law. As a matter of practice, we extend the rights described in the California section below to all California residents. Personal information we collect from our own job applicants, employees, and contractors in that capacity is addressed in separate notices provided to them.

Information We Collect About You and/or Your Company

As you navigate our Site or use our services, we may collect certain information about your equipment, IP address, browsing actions, and usage patterns to operate and improve the Site and deliver a more useful experience. The technologies we use may include cookies and similar technologies.

We may use email to communicate with you, including for account verification, security codes, password resets, invitations, service notices, and customer support. By providing your email address, you consent to receive those messages from us. We do not currently send marketing email, and we do not track whether you open or click the emails we send.

Where we get personal information

From you or your company. For example, contact forms, account registration, documents you upload, or information you provide so we can quote, place, or service a benefits program.
From third parties in the course of providing services. For example, plan, rate, contribution, eligibility, and document data received from insurance carriers, benefits administration platforms, or your prior broker.
From your devices and your use of our Site and portal. For example, form submissions, sign-in activity, and usage details collected automatically through cookies and server logs.

If you are an employee, dependent, or other plan participant of one of our clients, we generally receive your information from your employer or its carriers and administrators rather than from you directly, and your employer’s plan documents and notices also govern how that information is used.

General population

Personal information: Name, date of birth, postal address, email address, telephone number, company name, industry, company size, account credentials, and other data that could identify you and/or your company. In connection with benefits services we may also receive Social Security numbers or other government identifiers when they are required to place or administer coverage.
Site visit and usage information: Interest in products or services, company demographics, messages you send through our contact form, and how you use the Site or portal.
Coverage and plan details: Information relating to employee benefits coverage, insurance premiums, employer and employee contributions, claims summaries, and plan documents when needed to provide our services. We do not collect payment card or bank account information through our Site.
Cookies and similar technologies: We use session cookies to keep you signed in and to make the Site easier to use. A session cookie typically expires when you close your browser or after a period of inactivity. We also use persistent cookies where needed to remember preferences (for example, a selected portal view) so you do not have to set them on every visit. You may refuse cookies in your browser settings. If you do, some parts of the Site or portal may not work. Unless you have set your browser to refuse cookies, our system may issue cookies when you visit the Site.
Server logs and portal activity: When you sign in to or use our client portal, we record security and activity events such as sign-ins, password changes, pages visited, and documents viewed, together with the IP address and browser information associated with the request. We use these records to secure accounts, investigate suspicious activity, and understand how the portal is used.
Security and service partners: Our public contact form is protected by Google reCAPTCHA, which may collect device and usage information as described in Google’s Privacy Policy and Terms of Service.

California residents

In the preceding 12 months we may have collected or disclosed the following categories of personal information:

Identifiers and professional information: Name, postal address, contact information, unique personal identifier, IP address, email address, account name, Social Security number, and current or past employment information such as employer, job classification, and eligibility status.
Inferences: Limited inferences drawn from other personal information, such as preferences related to benefits products or services you inquire about.
Commercial information: Coverage history, plan elections, premium and contribution information, and records of the services we provide.
Internet or network activity: Browsing activity on our Site or portal and information about your interaction with our Site.
Geolocation data: Approximate location derived from an IP address. We do not collect precise geolocation and we do not record telephone calls.
Protected classification characteristics: Information such as age, marital status, disability, gender, or veteran status when it is included in benefits, enrollment, or compliance materials you or your company provide.

How We Use and Disclose Your Information

We may use and process information we collect about you, including personal information, for our legitimate business interests. We may disclose aggregated or de-identified information to third parties without restriction. We may use, process, or disclose personal information without your permission in the circumstances described below.

How we use your information

To present our Site and its contents to you and/or your company.
To provide information, products, or services you request, including employee benefits consulting, brokerage, and portal access.
To create and secure user accounts, verify identity, send one-time sign-in codes, and reset passwords.
To review and summarize benefits documents (for example, Summaries of Benefits and Coverage) and answer staff questions about a client’s program, including with the assistance of third-party artificial intelligence services that process the content on our behalf under contractual confidentiality obligations.
To notify you about changes to our Site or any products or services we offer.
To fulfill any purpose for which you provide the information.
For our internal business purposes, including quality and training.
To carry out our obligations and enforce our rights arising from contracts between you and/or your company and BxaGlobal.
In any other way we describe when you provide the information, or for any other purpose with your consent.

How we disclose your information

To service providers that host our website, portal, and database, deliver email, provide security (including reCAPTCHA), store documents, provide AI-assisted document review, or otherwise support our operations. These vendors may only use the information to provide services to us.
To insurance carriers, administrators, enrollment platforms, and other parties needed to quote, place, administer, or service coverage.
To our affiliates, contractors, and other third parties we use to support our business or deliver insurance-related services.
To systems we use to service your account, which may include benefits administration, document, and data-sync platforms.
To an insurance carrier, regulator, or law enforcement agency to detect, prevent, or report fraud, misrepresentation, unauthorized transactions, or other liabilities in connection with an insurance transaction.
To comply with a court order, law, legal process, or government or regulatory request.
If we believe disclosure is necessary to protect the rights, property, or safety of BxaGlobal, our affiliates, customers, or service providers.
To a buyer or other successor in a merger, sale, or similar transfer of some or all of our assets, if personal information is among the assets transferred.
For any other purpose with your consent.

Service providers and sub-processors

The vendors that process personal information on our behalf fall into the following categories: website and application hosting, database hosting, transactional email delivery, document and file storage, AI-assisted document review, bot and spam protection (Google reCAPTCHA), and the benefits data platforms we connect to at a client’s direction, such as agency management systems, benefits administration platforms, and document repositories. Each is bound by contract to use the information only to provide services to us. A current list of providers is available on request at info@beniglobal.com.

Sale, sharing, and targeted advertising

We do not sell personal information, and we do not disclose personal information to third parties for targeted advertising (a concept California calls “sharing”). We have not done so in the preceding 12 months. Our Site does not use third-party advertising or analytics cookies. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA. We do not have actual knowledge that we sell or share the personal information of anyone under 16 years of age.

Because we do not sell or share personal information, there is nothing to opt out of. If we ever change that practice, we will update this Policy and honor Global Privacy Control (“GPC”) signals sent by your browser. We do not currently respond to Do Not Track signals.

Your Data Privacy Rights

You have certain rights in relation to your personal information. Those rights depend on where you live and, in some cases, on the processing activity we are undertaking.

General population

Right to opt out of marketing: We do not currently send marketing email. If we do in the future, every message will include an unsubscribe link, and you may opt out at any time by contacting us.
Right to correct or delete: You may request correction or deletion of personal information we maintain, to the extent the request would not violate a legal requirement, our obligations to a client or carrier, or cause the information to be incorrect.

How to submit a request. Email info@beniglobal.com or write to us at the address in the Contact Information section. If you are a plan participant, we may direct your request to your employer, which controls the plan records.

California residents

Right to know: You have the right to know what personal information we have collected and retained about you over the preceding 12 months.
Right to receive: You have a right to receive a copy of your personal information.
Right to delete: You have a right to request deletion of your personal information.
Right to correct: You may request correction of inaccurate personal information we maintain about you.
Right to limit: You may request that we limit use and disclosure of sensitive personal information to what is necessary to provide the services you requested.
Right to non-discrimination: You have a right to exercise CCPA rights without discriminatory treatment. Because we do not sell or share your personal information, we do not offer a “Do Not Sell or Share” opt-out.

How to submit a request. Call us toll-free at (888) 601-2345, email info@beniglobal.com, or write to us at the address in the Contact Information section. We will respond if we can verify your identity or the identity of your authorized agent. A California resident may designate an authorized agent registered with the California Secretary of State. We may ask for written permission and verify the resident’s identity, and we may deny a request from an agent who does not provide that proof. We will respond within the time required by law. If we decline all or part of a request, we will explain why. You may appeal by replying to our response with the subject line “Privacy Request Appeal.”

Other U.S. states

Residents of certain other states, including Colorado, Connecticut, Oregon, Texas, and Virginia, have rights under their state’s comprehensive privacy law. As a matter of practice, we extend the following rights to all U.S. residents:

Right to access: You may confirm whether we process your personal information and request a copy of it in a portable format.
Right to correct and delete: You may request correction of inaccurate personal information and deletion of personal information we hold about you.
Right to opt out: You may opt out of the sale of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We do not engage in any of those activities.
Right to appeal: If we decline to act on your request, you may appeal our decision. If the appeal is denied, you may contact your state attorney general.

How to submit a request. Email info@beniglobal.com. To appeal a decision, reply to our response with the subject line “Privacy Request Appeal.” We will respond within the time required by your state’s law.

European Economic Area

Right to access: You may obtain information about what personal data is being processed, for what purpose, to whom it has been or will be disclosed, and how long it will be stored.
Right to rectify: You may request that we correct inaccurate personal data.
Right to erase: You may request erasure where the data is no longer necessary, you have withdrawn consent, or other circumstances in Article 17 of the GDPR apply.
Right to restrict or object: You may request that we restrict processing, or object to processing of your personal data.
Right to data portability: You may request to receive your personal data and transmit it to another controller.
Automated decision-making: If utilized, you have the right not to be subject to a decision based solely on automated processing, including profiling.

How to submit a request. Email info@beniglobal.com. We may ask for additional information to confirm your identity before disclosing personal information. We reserve the right to charge a fee where permitted by law if a request is manifestly unfounded or excessive. We may not always be able to fully address a request, for example if it would affect confidentiality we owe to others, or if we are legally entitled to handle it differently.

Health Information and Exception to Disclosure

In the course of providing employee benefits services, we may receive protected health information (“PHI”) on behalf of a group health plan. We use and disclose PHI only as permitted by the Health Insurance Portability and Accountability Act (“HIPAA”) and our agreements with the plan.

BxaGlobal will not use or disclose PHI (1) to conduct a criminal, civil, or administrative investigation into or impose criminal, civil, or administrative liability on any person for the mere act of seeking, obtaining, providing, or facilitating reproductive health care, where such health care is lawful under the circumstances in which it is provided; or (2) for the identification of any person for the purpose of conducting such an investigation or imposing such liability.

Data Retention and Security

Data retention

We retain personal information for as long as needed for the purposes described in this Policy, in accordance with our records retention practices and applicable law, including insurance record-keeping requirements and HIPAA. The specific period depends on the type of information, why we hold it, and whether it has been de-identified. We may also retain information as needed to resolve disputes and enforce legal agreements. Portal activity records are purged on a rolling basis.

Data security

We maintain physical, electronic, and procedural safeguards designed to protect against the loss, misuse, and unauthorized alteration of personal information under our control. Those safeguards are intended to meet or exceed applicable federal and state standards. Although we use commercially reasonable efforts to protect your personal information, we cannot guarantee the security of information transmitted to our Site. Any transmission is at your own risk.

Additional Notices

Children under the age of 13

Our Site is not intended for children under 13 years of age. No one under 13 may provide information through our Site. If you are under 13, do not use or provide any information on our Site or through any of its features. We do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. Please contact us if you believe we might have personal information about a child under 13.

Financial and insurance privacy laws

Nonpublic personal information we collect in connection with insurance products and services may also be protected by the Gramm-Leach-Bliley Act and state insurance privacy laws, including the California Financial Information Privacy Act and the California Insurance Information and Privacy Protection Act. We do not disclose nonpublic personal information about current or former customers to nonaffiliated third parties except as permitted or required by law, for example to insurance carriers and administrators in order to place and service coverage. Where those laws require a separate privacy notice, we provide it at the time coverage is placed.

Notice of financial incentives

California residents have a right to receive notice of any financial incentive or “price or service difference” offered in exchange for personal information. BxaGlobal does not currently offer financial incentives, gifts, or price or service differences in exchange for personal information. If that changes, we will describe the incentive at the time information is requested and explain how to opt in or withdraw.

Processing personal data under the GDPR

BxaGlobal Insurance Services, Inc. is a United States company with its principal place of business at 23716 Birtcher Dr, Lake Forest, CA 92630. Our Site is managed and operated on servers in the United States. We do not purposely avail ourselves of the European Economic Area (EEA). However, if you reside in the EEA, we may be a controller of personal data collected on our Site. Personal data of individuals who reside outside the United States will be transferred to and processed in the United States. The sections above describe the information we collect, how we use it, and when we disclose it.

Changes to this Privacy Policy

We may update this Policy from time to time. Any changes will be posted on our Site, and we will revise the date at the top of this page. Changes become effective when posted. Your continued use of our Site after we post changes is deemed acceptance of those changes. You are responsible for periodically visiting this page to check for updates.

Contact Information

Please direct questions or comments about this Privacy Policy, or requests to exercise your privacy rights, to:

BxaGlobal Insurance Services, Inc.
dba Beni Global
Attention: Privacy
23716 Birtcher Dr
Lake Forest, CA 92630
info@beniglobal.com
(888) 601-2345 (toll-free)

To report a security concern or suspected vulnerability, email info@beniglobal.com with “Security” in the subject line.