This Privacy Policy describes how Bloom Value Corporation and Bloom Value India Private Limited, collectively referred to as “Bloom Value”, “we”, “our”, or “us”, collect, use, disclose, retain, and protect personal data when individuals visit bloomvalue.com, interact with our digital properties, communicate with us, or use our healthcare technology products and services. Bloom Value provides healthcare artificial intelligence, financial operations, analytics, care consumer engagement, and related advisory solutions. Because our services may involve sensitive business information and, where applicable, healthcare data, we maintain privacy and security controls designed to Bloom Value’s information security management practices. This Policy is intended for website publication and is written to be clear, transparent, and accessible. It does not replace any customer agreement, Business Associate Agreement, Data Processing Agreement, statement of work, or other written contract that governs specific services. If a written agreement provides stronger privacy or security protections, that agreement will apply to the relevant engagement.

1. Scope

This Policy applies to personal data processed through our website, communications, marketing activities, customer support, products, services, platforms, and business operations. It applies to website visitors, prospective customers, customers, client representatives, vendors, partners, applicants, and other individuals who interact with Bloom Value. This Policy does not apply to anonymised or aggregated information that cannot reasonably identify an individual. Where Bloom Value Processes Protected Health Information on behalf of a covered entity or another regulated customer, such processing is governed by the applicable Business Associate Agreement and relevant healthcare privacy and security requirements.

2. Information We Collect

2.1 Information You Provide

• Identity and contact details, such as name, business email address, phone number, job title, organisation, and address.
• Account and access information, such as user identifiers, role assignments, authentication records, and user preferences.
• Communications, such as enquiries, support requests, meeting notes, contact forms, feedback, and correspondence.
• Commercial information, such as subscriptions, service requests, billing details, purchase records, and contract-related information.
• Event and marketing information, such as webinar registrations, preferences, opt-in status, and communication choices.

2.2 Information Collected Automatically

• Device and technical data, including IP address, browser type, operating system, device identifiers, and log data.
• Usage data, including pages viewed, referral source, session duration, clicks, interactions, and website navigation patterns.
• Approximate location derived from IP address, unless precise location is separately requested and consented to.
• Cookie and similar technology data, as described in the Cookies section below.

2.3 Information From Third Parties

• Customer-authorised data provided by healthcare organisations, business partners, or service providers.
• Business contact and lead information from approved marketing, event, or professional sources.
• Security, fraud prevention, analytics, and compliance information from vendors who support our services.

We do not intentionally collect sensitive personal data unless it is necessary for a permitted purpose, authorised by the customer or individual, or required by law. Where sensitive data, healthcare data, or Protected Health Information is processed, Bloom Value applies additional safeguards, including access controls, encryption, logging, contractual controls, and workforce confidentiality obligations.

3. How We Use Personal Data

 

4. Cookies and Tracking Technologies

BloomValue.com may use cookies, pixels, tags, and similar technologies to operate the website, remember preferences, measure usage, improve content, and support marketing where permitted. Essential cookies are used to provide core website functionality. Analytics and marketing cookies are used only where permitted by applicable law and, where required, after consent.
You may manage cookie preferences through our cookie banner, preference centre, or browser settings. Disabling some cookies may affect website functionality. If our website includes comment or form functionality, information submitted through those features may be processed for spam prevention, security, support, and communication purposes.

5. Healthcare Data Protection and Regulatory Obligations

When Bloom Value acts as a Business Associate under applicable healthcare privacy and security obligations, we process Protected Health Information only as permitted by the applicable Business Associate Agreement, customer instructions, and applicable law. We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of electronic Protected Health Information.

• We apply role-based access controls, least privilege, authentication, and periodic access review.
• We use encryption for data in transit and at rest where appropriate.
• We maintain audit logging, monitoring, and incident response procedures.
• We require workforce confidentiality, security awareness training, and sanctions for policy violations.
• We use subcontractors only under written agreements that impose appropriate privacy and security obligations.

6. Bloom Value Security Compliance Requirements

Bloom Value’s privacy and security program is designed to support independent assessment and evidence collection for Bloom Value Security Compliance Requirements. Our controls are risk-based and include governance, asset management, access control, vendor management, change management, vulnerability management, logging and monitoring, incident response, business continuity, backup validation, and employee security training. These controls are reviewed periodically and updated based on business changes, emerging threats, customer requirements, audit findings, and regulatory developments.

7. Disclosure of Personal Data

We do not sell personal data. We may disclose personal data to affiliates, cloud hosting providers, security vendors, analytics providers, payment processors, professional advisers, subcontractors, auditors, regulators, courts, law enforcement, or other parties where required by law, necessary to provide services, or authorised by the individual or customer.
All vendors and processors that handle personal data on our behalf are subject to written confidentiality, privacy, and security obligations. Where healthcare data or Protected Health Information is involved, additional Business Associate or subcontractor obligations apply where required.

8. International Transfers

Bloom Value operates in the United States and India. Personal data may be processed in either jurisdiction and in other locations where our approved service providers operate. We use appropriate safeguards for international transfers, which may include contractual commitments, data transfer agreements, encryption, access restrictions, and transfer risk assessments where required.

9. Data Retention and Disposal

We retain personal data only for as long as necessary for the purposes described in this Policy, customer agreements, legal obligations, regulatory requirements, audit requirements, dispute resolution, security, and legitimate business needs. Retention periods are based on data category, purpose, contractual requirements, regulatory obligations, and risk.
When personal data is no longer required, we delete, anonymise, or securely archive it in accordance with our retention and disposal procedures. Backup copies are managed under defined backup retention and deletion processes.

10. Security Measures

Bloom Value implements reasonable and appropriate administrative, technical, and organisational safeguards to protect personal data from unauthorised access, loss, misuse, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest where appropriate.
• Multi-factor authentication and role-based access control.
• Least privilege access reviews and privileged access monitoring.
• Endpoint protection, device encryption, patch management, and data loss prevention.
• Network segmentation, firewall controls, threat monitoring, vulnerability scanning, and remediation tracking.
• Secure software development, change management, and production release controls.
• Incident response procedures, breach assessment, and notification workflows.
• Business continuity planning, backup testing, and recovery validation.
• Employee background checks, confidentiality obligations, and security awareness training.

No system is completely secure. We encourage users to protect their credentials, use strong passwords, avoid credential sharing, and promptly report suspected security events.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent, opt out of marketing communications, appeal certain decisions, or lodge a complaint with a competent authority. To exercise your rights, contact privacy@bloomvalue.com. We may verify your identity before responding. We will respond within the timeframe required by applicable law. If we process data on behalf of a customer, we may direct the request to that customer or assist the customer in responding.

12. Marketing and SMS Communications

Where permitted, we may send business communications about Bloom Value products, services, events, and insights. You may opt out of marketing emails by using the unsubscribe link or contacting us. If you consent to SMS or text communications, you may opt out at any time by following the instructions provided in the message or by contacting privacy@bloomvalue.com.

13. Children’s Privacy

Our website and services are intended for business and professional users and are not directed to children. We do not knowingly collect personal data from children under 13 or a higher age threshold where applicable law requires it. If we learn that we have collected children’s data without appropriate consent, we will take reasonable steps to delete it.

14. Artificial Intelligence and Automated Processing

Bloom Value may use artificial intelligence, machine learning, automation, and analytics to generate insights, recommendations, forecasts, exception reports, and operational intelligence for healthcare customers. These tools are intended to support human decision-making and improve operational visibility, not to replace qualified professional judgment.
Where automated processing has a legally significant or similarly significant effect, we will implement appropriate safeguards, which may include transparency, human review, validation, bias and accuracy assessment where applicable, and the ability to challenge or seek review of relevant outputs as required by law or contract.

15. Data Breach Notification

If we become aware of a personal data breach, we will investigate, contain, assess, remediate, and document the incident in accordance with our incident response procedures. Where required, we will notify affected customers, individuals, regulators, or authorities within legally required timeframes. For Protected Health Information or other regulated healthcare data, we will follow applicable breach notification obligations and contractual notification requirements.

16. Third-Party Links

Our website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy notices of any third-party service before providing personal data.

17. Contact and Grievance Redressal

United States

Bloom Value Corporation
5 Woodchuck Lane,
Norwalk, CT 06854-3310, USA
Email: contact@bloomvalue.com
Website: https://bloomvalue.com

India

Bloom Value India Private Limited
CIN: U72200KA2021FTC145582
No. 238, 1st Floor, 18th Main Road,
6th Block Koramangala,
Bengaluru, Karnataka 560095, India
Email: india- contact@bloomvalue.com

We aim to acknowledge and resolve privacy requests and grievances within the timeframe required by applicable law. If you are dissatisfied with our response, you may contact the competent supervisory authority, data protection board, or court with jurisdiction over your data.

18. Changes to This Policy

We may update this Policy periodically to reflect changes in our services, legal requirements, security practices, or business operations. This Privacy Statement is effective from 01 January 2022 and it supersedes all existing polices on the subject matter.. Material changes will be communicated where required by law.

19. Governing Law

This Policy is governed by the privacy and data protection laws applicable to Bloom Value and the individual concerned. For United States matters, applicable federal and state laws may apply. For India matters, applicable Indian privacy and data protection laws may apply. Nothing in this Policy limits rights that cannot be waived under applicable law.