Your privacy is very important to us. As a privately held company, Benafica takes matters related to privacy very seriously. Matters related to privacy are directed to the Benafica Chief Privacy Officer or the Data Protection Officer. If you have a privacy question, concern, or complaint for Benafica, please contact us by using our web form. We will respond to questions or concerns as required by law and within a period no longer than 30 days. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.
When Benafica is the data controller, our address is:
If you would like to exercise your rights under the California Consumer Privacy Act, you may contact Benafica at the address above, use our web form, or call our US number 651-287-3253.
If you have a technical or support question, please email Benafica Support. If you have an account password question on our Benngi software products, please email Benngi Account Support.
Benafica,LLC (aka Benafica) collects data from you, through our interactions with you and through our products (either our products and administration services or third party insurance and non-insurance products) for a variety of purposes described below, including to operate effectively and provide you with the best experiences with our products and services. You provide some of this data directly, such as when you create a Benafica Benngi account, administer your organization’s licensing account, upload a document to Benngi, sign up for an insurance product, a part of an organization that uses Benafica or Benngi, or contact us for support. We get some of it by collecting data about your interactions, use, and experience with our products and communications.
We rely on a variety of legal reasons and permissions (sometimes called “legal bases”) to process data with your consent, including but not limited to, a balancing of legitimate interests necessary to enter into and perform contracts, and compliance with legal obligations, for a variety of purposes described below.
We also obtain data from third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time and include:
You have choices when it comes to the technology you use and the data you share. Sharing health related data on BenngiHealth with other individuals that you chose to share with is at your discretion and is optional. When you are asked to provide personal data, you can decline. Many of our products require some personal data to operate and provide you with a service. If you choose not to provide data required to operate and provide you with a product or feature, you cannot use that product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing product you’re using, we may have to suspend or cancel it. We will notify you if this is the case at the time. Where providing the data is optional, and you choose not to share personal data, features like personalization that use the data will not work for you.
The data we collect depends on the context of your interactions with Benafica and the choices you make (including your privacy settings), the products and features you use, your location, and applicable law.
The data we collect can include the following:
Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.
Credentials. Passwords, password hints, and similar security information used for authentication and account access.
Demographic data. Data about you such as your age, gender, country, and preferred language.
Payment data. Data to process payments, such as your payment instrument number (such as a debit or credit card number) and the security code associated with your payment instrument.
Subscription and licensing data. Information about your subscriptions, licenses, and other entitlements.
Insurance-related information. Benafica is an insurance broker and administrator. In this regard, we collect information needed to facilitate the administration and sale of insurance products.
Medical Information. Medical information voluntarily provided by you, about you or your family members or other people who have chosen to share their medical information with you. Medical information that has been provided to Benafica in our role as a claims processor in the medical and benefit field.
Interactions. Data about your use of Benafica products. In some cases, such as search queries, this is data you provide in order to make use of the products. In other cases, such as error reports, this is data we generate. Other examples of interactions data include:
Video or recordings. Recordings of events and activities at Benafica buildings, retail spaces, and other locations. If you enter a Benafica office location or other facilities or attend a Benafica or partner event that is recorded, we may process your image and voice data.
Feedback and ratings. Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write.
Traffic data. Data generated through your use of Benngi’s communications services. Traffic data indicates with whom you have communicated and when your communications occurred. We will process your traffic data only as required to provide, maintain, and improve our communications services and we do so with your consent.
Product-specific sections below describe data collection practices applicable to use of those products.
– Back to top –
Benafica uses the data we collect to provide you a rich, interactive experience. In particular, we use date to:
We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research.
For these purposes, we combine data we collect from different contexts (for example, from your use of multiple Benafica products) to make personalized recommendations.
Our processing of personal data for these purposes includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods. For example, our automated methods include artificial intelligence (AI), which we think of as a set of technologies that enable computers to perceive, learn, reason, and assist in decision-making to solve problems in ways that are similar to what people do. To build, train, and improve the accuracy of our automated methods of processing (including AI), we manually review some of the predictions and inferences produced by the automated methods against the underlying data from which the predictions and inferences were made. This manual review may be conducted by Benafica employees or vendors who are working on Benafica’s behalf.
When we process personal data about you, we do so with your consent and/or as required to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests of Benafica as described in this section and in the Reasons we share personal data section of this privacy statement. When we transfer personal data from the European Economic Area, we do so based on a variety of legal mechanisms, as described in the Where we store and process personal data section of this privacy statement.
While Benafica does not share your health information with outside entities, an individual with a BenngiHealth account may chose to form a Family Group and share health related information with the people in their family group. While the term Family Group is commonly used, it does not require people in such a group be family members. Instead the term is used in a communal sense to include people in your life that participate in your well-being. Your ability to share health information about yourself to others is controlled by you, and you are responsible in full for any breach of privacy related to this information. If you chose to record information about another person, not including dependent children, you do so at the express permission of the other person. The age when children are considered adults and are able to act as adults varies according to the jurisdiction and the subject matter. Often times for insurance the age of an adult is considered to be 18, 21, or 26. From a medical viewpoint children are considered adults at the age of 13.
More on the purposes of processing:
– Back to top –
We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. For example, we share your content with third parties when you tell us to do so, such as when you link accounts with another service or use the BenngiHealth sharing feature with another user. If you use a Benafica product provided by an organization you are affiliated with, such as an employer or school, or use an email address provided by such organization to access Benafica products, we share certain data, such as interaction data and diagnostic data to enable your organization to manage the products. When you provide payment data to make a purchase or to receive payment on a reimbursement claim, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.
We share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.
Finally, we will retain, access, transfer, disclose, and preserve personal data, including your content when we have a good faith belief that doing so is necessary to do any of the following:
Please note that some of our products include links to or otherwise enable you to access products of third parties whose privacy practices differ from those of Benafica. If you provide personal data to any of those products, your data is governed by their privacy policies.
– Back to top –
You can also make choices about the collection and use of your data by Benafica. You can control your personal data that Benafica has obtained, and exercise your data protection rights, by contacting Benafica or using various tools we provide. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law. How you can access or control your personal data will also depend on which products you use. For example, you can:
Not all personal data processed by Benafica can be accessed or controlled. If you want to access or control personal data processed by Benafica that is not available via the tools above or directly through the Benafica products and services you use, you can always contact Benafica at the address in the How to Contact Us section or by using our web form. We will respond to requests to control your personal data as required by applicable law.
You can access and control your personal data that Benafica has obtained by contacting Benafica. For instance:
You can also object to or restrict the use of your personal data by Benafica. For example, you can object at any time to our use of your personal data:
You may have these rights under applicable laws, including the EU General Data Protection Regulation (GDPR), but we offer them regardless of your location. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law.
If your organization, such as your employer, school, or service provider, provides you with access to and is administering your use of Benafica products, contact your organization to learn more about how to access and control your personal data.
You can access and control your personal data that Benafica has obtained, and exercise your data protection rights, using various tools we provide. The tools most useful to you will depend on our interactions with you and your use of our products. Here is a general list of tools we provide to help you control your personal data; specific products may provide additional controls.
Not all personal data processed by Benafica can be accessed or controlled via the tools above. If you want to access or control personal data processed by Benafica that is not available via the tools above or directly through the Benafica products you use, you can always contact Benafica at the address in the How to Contact Us section or by using our Benafica Support web form. We will respond to requests to control your personal data as required by applicable law.
Your communication preferences
You can choose whether you wish to receive promotional communications from Benafica by email, SMS, physical mail, and telephone. If you receive promotional email or SMS from us and would like to opt out, you can do so by following the directions in that message. You can also make choices about the receipt of promotional email, telephone calls, and postal mail by using the Marketing Opt-Out Page.
Your advertising choices
To opt out of receiving interest-based advertising from Benafica, visit our Marketing opt out page. When you opt out, your preference is stored in a cookie that is specific to the web browser you are using. The opt-out cookie has an expiration date of five years. If you delete the cookies on your device, you need to opt out again. Because the data used for interest-based advertising is also used for other required purposes (including providing our products, analytics, and fraud detection), opting out of interest-based advertising does not stop that data collection. You will continue to get ads, although they may be less relevant to you.
You can opt out of receiving interest-based advertising from third parties we partner with by visiting their sites (see above).
Browser-based controls
When you use a browser, you can control your personal data using certain features. For example:
– Back to top –
Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. This data often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well. Some cookies are placed by third parties acting on our behalf. We use cookies and similar technologies to store and honor your preferences and settings, enable you to sign-in, provide interest-based advertising, combat fraud, analyze how our products perform, and fulfill other legitimate purposes described below.
Benafica apps use additional identifiers, such as the advertising ID in Windows, for similar purposes, and many of our websites and applications also contain web beacons or other similar technologies, as described below.
Our use of cookies and similar technologies
Benafica uses cookies and similar technologies for several purposes, depending on the context or product, including:
Sign-in and authentication.
We use cookies to authenticate you. When you sign in to a Benafica software product, we store a unique ID number, and the time you signed in, in an encrypted cookie on your device. This cookie allows you to move from page to page within the site without having to sign in again on each page. You can also save your sign-in information so you do not have to sign in each time you return to the site.
How to control cookies
Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. For more information about how to delete your cookies see your browser’s instructions.
Where required, we obtain your consent before placing optional cookies that are not (i) strictly necessary to provide the website or (ii) for the purpose of facilitating a communication.
Our use of web beacons and analytics services
Some Benafica webpages contain electronic tags known as web beacons that we use to help deliver cookies on our websites, count users who have visited those websites, and deliver co-branded products. We also include web beacons or similar technologies in our electronic communications to determine whether you open and act on them.
In addition to placing web beacons on our own websites, we sometimes work with other companies to place our web beacons on their websites or in their advertisements. For Example, this helps us to develop statistics on how often clicking on an advertisement on a Benafica website results in a purchase or other action on the advertiser’s website. It also allows us to understand your activity on the website of a Benafica partner in connection with your use of a Benafica product or service.
– Back to top –
If you use a Benafica product with an account provided by an organization you are affiliated with, such as your work or school account, that organization can:
If you lose access to your work or school account (in event of change of employment, for example) or through a Family Group account, you may lose access to products and the content associated with those products, including those you acquired on your own behalf, if you used your work or school account to sign in to such products. BenngiHealth can be re-activated as an individual account if you choose to become a direct pay client.
Many Benafica products are intended for use by organizations, such as schools and businesses. If your organization provides you with access to Benafica products, your use of the Benafica products is subject to your organization’s policies, if any. You should direct your privacy inquiries, including any requests to exercise your data protection rights, to your organization’s administrator. When you use social features in Benafica products, other users in your network may see some of your activity. To learn more about the social features and other functionality, please review documentation or help content specific to the Benafica product. Benafica is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this privacy statement.
When you use a Benafica product provided by your organization, Benafica’s processing of your personal data in connection with that product is governed by a contract between Benafica and your organization. Benafica processes your personal data to provide the product to your organization and you. As mentioned above, if you have questions about Benafica’s processing of your personal data in connection with providing products to your organization, please contact your organization. If you have questions about Benafica’s business operations in connection with providing products to your organization as provided in the Product Terms, please contact Benafica as described in the How to Contact Us.
Benafica account
With a Benafica Benngi account, you can sign in to Benafica Benngi products, as well as those of select Benafica partners. Personal data associated with your Benafica account includes credentials, name and contact data, payment data, device and usage data, and if provided and relevant your dependents, and information about your healthcare and insurance. Signing in to your Benafica account enables personalization, consistent experiences across products and devices, permits you to use cloud data storage, allows you to make payments using payment instruments stored in your Benafica account, and enables other features.
There are three types of Benafica account:
Personal Benafica accounts. The data associated with your personal Benafica account, and how that data is used, depends on how you use the account.
Benafica Work and Benafica Family accounts. The data associated with a work account or a family account, and how it will be used, is generally similar to the use and collection of data associated with a personal Benafica account.
If you sign in to Benafica products with a work or family account, note:
Third-party accounts. The data associated with a third-party Benafica account, for example accounts at insurance companies for a policy obtained through using Benafica’s services, and how it will be used, is generally similar to the use and collection of data associated with a personal Benafica account. Your service provider has control over your account, including the ability to access or delete your account. You should carefully review the terms the third party provided you to understand what it can do with your account.
– Back to top –
When a Benafica product collects age, and there is an age in your jurisdiction under which parental consent or authorization is required to use the product, the product will either block users under that age or will ask them to provide consent or authorization from a parent or guardian before they can use it. We will not knowingly ask children under that age to provide more data than is required to provide for the product.
Once parental consent or authorization is granted, the child’s account is treated much like any other account.
Parents or guardians can change or revoke the consent choices previously made, and review, edit, or request the deletion of the personal data of the children for whom they provided consent or authorization. As the organizer of a Benafica family group, the parent or guardian can manage a child’s information and settings.
Accessing child data. As the organizer of a Benafica family group, a parent can view and delete a child’s data on their Profile Dashboard. The dashboard allows you to review your child’s personal information, have it deleted, and refuse to permit further collection or use of your child’s information.
If you collect health care data regarding a child, you may only share that child data with person who is entitled by law to see and access that data. This is at your discretion, and we ask you exercise this discretion with extreme caution. Whether you keep your child health data manually on paper or electronically using BenngiHealth, the same privacy standards apply that guard and protect children’s health information.
– Back to top –
Benafica is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as a credit card number or password) over the internet, we protect it through the use of encryption. Benafica complies with applicable data protection laws, including applicable security breach notification laws.
– Back to top –
Personal data collected by Benafica may be stored and processed in your region, in the United States, and in any other country where Benafica or its affiliates, subsidiaries, or service providers operate facilities.
We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to other countries, some of which have not yet been determined by the European Commission to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms, including contracts such as the standard contractual clauses published by the European Commission under Commission Implementing Decision 2021/914, to help protect your rights and enable these protections to travel with your data. To learn more about the European Commission’s decisions on the adequacy of the protection of personal data in the countries where Benafica processes personal data, see this article on the European Commission website.
Benafica, LLC complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom, and Switzerland to the United States, although Benafica does not rely on the EU-U.S. Privacy Shield Framework as a legal basis for transfers of personal data in light of the judgment of the Court of Justice of the EU in Case C-311/18. If third-party agents process personal data on our behalf in a manner inconsistent with the principles of either Privacy Shield framework, we remain liable unless we prove we are not responsible for the event giving rise to the damage.
If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.
Individuals whose personal data is protected by Japan’s Act on the Protection of Personal Information should refer to the article on the Japanese Personal Information Protection Commission’s website (only published in Japanese) for more information on the Commission’s review of certain countries’ personal data protection systems.
– Back to top –
Benafica retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.
Other criteria used to determine the retention periods include:
– Back to top –
If you are a California resident, we process your personal data in accordance with the California Consumer Privacy Act (CCPA). This CCPA section of our Privacy Statement contains information required by the CCPA and supplements our Privacy Statement.
Sale. We do not sell your personal data. So, we do not offer an opt out to the sale of personal data.
Rights. You have the right to request that we (i) disclose what personal data we collect, use, disclose, and sell and (ii) delete your personal data. You may make these requests yourself or through an authorized agent.
If you have a Benafica account, you must exercise your rights through the Benafica Profile dashboard, which requires you to log in to your Benafica account. If you have an additional request or questions after using the dashboard, you may contact Benafica at the address in the How to Contact Us section, use our web form, or call our US headquarters 651-287-3253. We will respond to requests as required by applicable law. If you do not have an account, you may exercise your rights by contacting us as described above. We may ask for additional information, such as your country of residence, email address, and phone number, to validate your request before honoring the request.
You have a right not to receive discriminatory treatment if you exercise your CCPA rights. We will not discriminate against you if you exercise your CCPA rights.
Personal Information Processing
In the bulleted list below, we outline the categories of personal data we collect, the sources of the personal data, our purposes of processing, and the categories of third-party recipients with whom we share the personal data. For a description of the data included in each category, please see the personal data we collect section.
Categories of Personal
While the bulleted list above contains the primary sources and purposes of processing for each category of personal data, we also collect personal data from the sources listed in the Personal data we collect section, such as developers who create experiences through or for Benafica products. Similarly, we process all categories of personal data for the purposes described in the How we use personal data section, such as meeting our legal obligations, developing our workforce, and doing research.
Disclosures of personal data for business or commercial purposes. As indicated in the Reasons we share personal data section, we share personal data with third parties for various business and commercial purposes. The primary business and commercial purposes for which we share personal data are the purposes of processing listed in the table above. However, we share all categories of personal data for the business and commercial purposes in the Reasons we share personal data section.
See the CCPA Notice for additional information.
– Back to top –
Advertising allows us to provide, support, and improve some of our products. Benafica does not use what you say in email, chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising in our products and on third-party properties. For example:
The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view.
The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favorites, usage data from our products and sites, and the information we collect about you from the sites and apps of our advertisers and partners. We refer to these ads as “personalized advertising” in this statement. To provide personalized advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving personalized advertising, data associated with these cookies will not be used.
Further details regarding our advertising-related uses of data include:
Data collected by other advertising companies. Advertisers sometimes include their own web beacons (or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their own cookie. Additionally, Benafica partners with third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites.
– Back to top –
Benafica offers preview, insider, beta or other free-of-charge products and features (“previews”) to enable you to evaluate them while providing Benafica with data about your use of the product, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products. If you participate in previews, we may contact you about your feedback or your interest in continuing to use the product after general release.
– Back to top –
We update this privacy statement when necessary to provide greater transparency or in response to:
If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how Benafica is protecting your information.
– Back to top –
Location service. Benafica operates a location service that helps determine the precise geographic location of a specific device. Depending on the capabilities of the device, the device’s location can be determined with varying degrees of accuracy and may in some cases be determined precisely. When you have enabled location on a Windows device, or you have given permission for Benafica apps to access location information on non-Windows devices, data about cell towers and Wi-Fi access points and their locations is collected by Benafica and added to the location database after removing any data identifying the person or device from which it was collected.
– Back to top –
Device encryption: Device encryption helps protect the data stored on your device by encrypting it. We strongly recommend you have device encryption on any device that runs Benafica products.
Malicious Software Removal Tool: Benafica strongly recommends that you check your devices regularly, at least monthly, for malicious software using a malicious software removal tool.
Sharing of Passwords and Accounts: It is prohibited to share the passwords from your Benafica products.
Benafica offers Third Party Administrative (TPA) Services in the Insurance Industry. A rough outline of our services is not limited to but including: Third Party Billing, collection, and remittance of premiums for specific insurance products, administrative services for benefit enrollments, applications, and customer service, limited insurance claim assistance and administration, and lastly very limited Software as a Service, (SaaS) services if specified in contracting with our clientele.
Benafica’s clients will not purchase actual retail products from Benafica, but rather the services to administer the products on behalf of retail entities. Due to our nature as a TPA, Benafica will not offer Refunds or Returns for these products that are sold, rather the company of which the product belongs will offer their own terms and conditions for refunds and returns.
For Benafica’s own services, we will not offer refunds and returns, however any contractual obligation will offer a termination of services and next steps thereafter.
We do not offer every plan available in your area. Currently we represent 10 organizations which offer 61 products in your area. Please contact Medicare.gov, 1-800-MEDICARE, or your local State Health Insurance Program (SHIP) to get information on all of your options.
© 2024 Benafica. All rights reserved.
