Bixal's Privacy Policy
This Privacy Policy explains what personal data or information Bixal Solutions, Inc. (“Bixal”) collects and how we may use, share, store and process such data. If you have any questions about this Policy or our collection/use of your personal data, please contact us at [email protected].
Jump to Topic:
- What Personal Data Do We Collect and How Do We Collect It?
- How Will We Use Your Personal Data?
- Who Does Bixal Share Your Personal Data With?
- Data Retention
- Data Security
- International Data Transfers
- Your Privacy Rights
- Marketing
- Cookie Notice
- Minors
- Contact Us
- Third-Party Links
- Privacy Policy Changes and Effective Date
What Personal Data Do We Collect and How Do We Collect It?
“Personal Data” (sometimes also called Personally Identifiable Information or PII) means any information that may be used to identify a specific individual or user. “Personal Data” does not include any anonymized information or data.
Here are the ways that Bixal may collect or obtain your Personal Data, as well as the types (or “categories”) of Personal Data collected for each situation:
- Website Visitors: Bixal collects IP addresses, browser strings, page paths, clicks and visits, browser and session data, and date and time of visit from its website visitors. Bixal uses Google Analytics on its website to collect visitor data, including sessions, views, events, conversions, changes in clicks and visits, session channel groups and visitor sources (i.e., how people find and access our website), page paths, date of visit, country, region, city, event names, day of week of visit and level link clicks, as well as other information or data about use of our website.
- Filling out Bixal’s forms on our website, such as our “Contact” form: Your first and last name, company name, email address and any other information that you choose to give Bixal.
- When you attend a Bixal event or an event or conference sponsored by Bixal: Your first and last name, company name, email address, job title, images, any associations, skills, profiles, service interests or skills, and any other information that you choose to provide to Bixal.
- Job Candidates: Your first and last name, email address, phone number, locations, physical address, current employer and employment history, education, training, certifications, licensing (as applicable), professional skills, marital status, professional memberships, security clearances (as applicable), language proficiencies, citizenship and/or work authorization, volunteer activities, professional references, desired positions and/or compensation, resume, and, when required or permitted by applicable law, demographic information and/or legally protected characteristics, including but not limited to race, ethnicity, national origin, sex, gender and gender identity, age, veteran and/or military status and/or disability status, and any other information that you choose to provide to Bixal.
- Additionally, applicants who apply through Bixal’s website may have additional information collected. Please see “Website Visitors” for more information.
- Bixal Employees: In addition to the types of Personal Data listed under “Job Candidates,” social security number or other government identification numbers, date of birth, middle names, maiden names or former names, financial information, age, health insurance information, physical and/or mental health or conditions, medical clearance forms for travel, marital status, family member names, contact information and dates of birth, browsing history, search history, location information (including geolocation data when using Bixal devices), inferences, photos and visual images, device information, browser information, IP addresses, fingerprints, Face IDs, unique personal identifiers and other information that is routinely obtained through employment relationships or that you choose to provide to Bixal.
- Bixal customers, contractors, vendors and/or service providers: Full names, company or employer names, email addresses, phone numbers, physical or mailing addresses, resumes, job titles, and any of the above listed information which may be obtained by Bixal as a result of its relationship with you as a customer, contractor, vendor or service provider.
Bixal may also obtain your Personal Data through third parties that we work with, such as:
- Insurance and benefit providers;
- Professional references;
- Background check providers;
- Security clearance investigators;
- ISPs and web hosting providers;
- Technology providers;
- Event and conference organizers;
- Your current and former employers;
- Recruitment services;
- Job recruitment and professional networking websites and/or services;
- Social media networks and websites;
- Bixal’s marketing communications vendors;
- Google Analytics. Click here to learn about how Google uses information from sites or apps through Google Analytics or other Google Services.
Sensitive Personal Data
Some of the types of Personal Data that Bixal may obtain from you may be considered “Sensitive Personal Data” under certain jurisdictions or laws that may apply to you and your Personal Data. Sensitive Personal Data includes things like race, ethnicity, religious or philosophical beliefs, political views or affiliations, marital status, trade union membership, sexual orientation or identity, citizenship, immigration information, physical or mental health condition and/or genetic data. Bixal will use any such Sensitive Personal Data in accordance with the applicable data protection and privacy laws.
How Will We Use Your Personal Data?
Bixal may use your Personal Data for the following purposes:
- Recruiting, staffing and hiring to fill open positions with Bixal, as well as in evaluating potential staffing needs;
- Communications regarding open positions and employment opportunities with Bixal;
- Providing services to our customers, and evaluating areas for potential future changes or growth in our services, potential future markets, as well as potential future customers and marketing opportunities;
- Identifying and evaluating customer or potential future customer needs;
- Receiving, managing and evaluating services and products from our service providers and vendors, evaluating future needs of such services and products, as well as service and/or product procurement;
- Developing and improving our website, email campaigns, social media campaigns and online advertising;
- Making our website more accessible and easier to use;
- Improving our search engine optimization, page views and visitor engagement;
- Marketing emails and communications;
- Assessing and evaluating the efficacy of online marketing and advertising campaigns and communications, as well as ways to potentially grow, change or improve future marketing efforts and campaigns;
- Aggregating and anonymizing Personal Data for use in obtaining or generating analytics or reporting regarding any of the above categories;
- Complying with, enforcing and improving Bixal’s workplace security, technology security and information security efforts;
- Legal compliance and reporting;
- Enforcing, protecting and/or defending Bixal’s legal rights and interests;
- Research and analysis to help Bixal improve and develop its current services and offerings, performance, employees, workplace and operations;
- Training of Bixal employees;
- Internal administration.
For Bixal Job Candidates, Employees and Contractors:
In addition to the above purposes, Bixal may also use the Personal Data of Bixal job candidates, employees and contractors for the following employment purposes:
- Communications related to hiring and/or employment;
- Scheduling;
- Screening and evaluating job candidates and making hiring decisions;
- Obtaining background checks, security clearances, reference checks, employment verification and/or drug testing;
- Bidding on contract opportunities and procurement of work;
- Customer communications regarding filling contract roles and positions, performing services, customer worksite access, schedules and logistics;
- Evaluating job assignments and placements;
- Communications related to your employment with Bixal;
- Administrative purposes, such as payroll, expense reporting, work-related travel, benefits eligibility and administration;
- Tracking time, attendance and performance;
- Communications with your listed emergency contacts (if necessary);
- Employee training, certifications and education-related programs;
- Assessing Bixal’s diversity, equity and inclusion program development and goals;
- Supervising and managing employees;
- Monitoring employee use of Bixal devices, software, internet and/or accounts (as permitted by applicable law);
- Workplace investigations;
- Workplace security and safety;
- Meeting or providing customers with employee qualifications, skills or experience for contract placement;
- Security and protection of Bixal’s intellectual property, confidential information, trade secrets and technology, as well as our customers’ intellectual property, confidential information, trade secrets and technology;
- Workplace and worksite security and access;
- Protecting, exercising or defending our legal rights;
- Assessing and evaluating Bixal’s contractors, vendors and service providers;
- Assessing, developing and improving Bixal’s equipment, devices, technology, software and performance;
- Legal compliance and reporting;
- Insurance reporting;
- Auditing;
- Marketing campaigns, social media campaigns and on Bixal’s website;
- All other employment-related purposes.
Please note that Bixal monitors its technology, devices, servers, systems, networks and accounts and does so in accordance with applicable law. This monitoring includes how employees and contractors use Bixal’s technology, devices, servers, systems, networks, and accounts. Your use of any Bixal provided or managed technology, devices, servers, systems, networks, and accounts is dependent on your compliance with Bixal’s Technology Acceptable Social Media and Computer Use Policy, which can be found in your Corporate Policies or obtained from Human Resources.
Legal Bases — EU, UK and Switzerland:
Under the General Data Privacy Regulation (“GDPR”), the UK Data Protection Act 2018 and UK General Data Protection Regulation (together, the “UK GDPR”), and the Swiss Federal Act on Data Protection (“FADP”), Bixal is permitted to obtain and process your Personal Data under the following legal bases:
- Your Personal Data is necessary to the performance of a contract;
- You have given Bixal consent to process your Personal Data for specific purposes;
- Bixal’s legitimate interest in processing your Personal Data without overriding your rights under the GDPR, such as identifying website usage trends, improving our website, marketing campaign performance and efficacy, developing future business, improving or providing services and/or to protect or improve Bixal’s information security;
- Bixal is legally required to process your Personal Data.
Which of these bases applies depends on the type of Personal Data being used and the purpose for its use or collection. For further information about Bixal’s specific bases for its processing of your Personal Data, please contact us directly by clicking here.
California Residents:
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, Bixal is permitted to obtain and process your Personal Data as long as it is reasonably necessary and proportionate to the above listed purpose(s) and/or any other purpose for collecting such information as long as such purpose was disclosed at or before the time of collection.
For further information about Bixal’s processing of your Personal Data, please contact us directly by clicking here.
Who Does Bixal Share Your Personal Data With?
Bixal does not sell your Personal Data. Bixal may share your Personal Data with third parties for legitimate business purposes, as described below, and as permitted by applicable law:
- Potential employers;
- Customers;
- Potential customers;
- Bixal’s website hosting, ISP, marketing and advertising vendors and service providers;
- Bixal’s employment benefits providers and administrators;
- Bixal’s administrative service providers and vendors who provide services or products to Bixal related to its operations, personnel, payroll, information technology and other internal operations;
- Background check, drug testing, employment verification and/or security clearance vendors and service providers;
- Employment references provided by you;
- Bixal’s contractors and/or other companies which work with or for Bixal on its contracts;
- Third parties for the purpose of discussing, exploring or completing mergers, acquisitions and similar transactions;
- Government and/or regulatory agencies or entities, as may be required by or in accordance with applicable law;
- Bixal’s external accountants, lawyers, forensics providers, auditors and/or compliance professionals, as well as other third parties for the purpose of protecting, enforcing or defending Bixal’s legal rights and interests;
- Where you have provided Bixal with your consent to share your information with third parties for certain purposes.
Data Retention
Bixal will retain your Personal Data for only as long as necessary to fulfill the purpose for which it was obtained or collected (including, but not limited to, any legal, tax, or reporting requirements). Bixal’s designated data privacy personnel routinely review the Personal Data retained by Bixal to ensure that such data is kept in conformance with this policy and within the legally acceptable limits.
Once Bixal no longer needs to retain your Personal Data, it will be deleted or anonymized in a way that conforms with applicable law. If Bixal cannot reasonably delete or anonymize such Personal Data, then Bixal shall store such data in a secure, isolated manner to prevent any further use or processing of your Personal Data until it can be deleted.
Data Security
Bixal has implemented security measures designed to protect the Personal Data it has collected, processed or retained to prevent such Personal Data from being accessed, used, disclosed or transferred in an unlawful or unauthorized manner. These security measures are designed to conform with industry standards and those laws which apply to Bixal and its collection, processing and/or retention of Personal Data.
International Data Transfers
Bixal is a US-based company, meaning your Personal Data may be internally transferred, stored and processed within the United States as well as any other locations where Bixal operates and/or performs services. Further, Bixal may transfer, process or store your Personal Data to its customers, service providers, contractors or vendors which may be located within the United States or elsewhere around the world. This means that Bixal may transfer, store and/or process your Personal Data outside of your country of residence (or outside of the European Economic Area (“EEA”) for individuals living within the EEA, UK or Switzerland). Any such data transfers shall be made in compliance with any applicable laws as they apply to Bixal in its collection, use or transfer of Personal Data. Bixal has implemented adequate safeguards to protect your Personal Data in accordance with this Policy and such applicable laws.
For individuals in the EEA, UK or Switzerland:
Bixal’s transfer of any applicable Personal Data outside of the EEA, UK or Switzerland (as applicable) shall comply with the GDPR, the UK GDPR and the FADP. This means that we may transfer your Personal Data outside of the EEA, UK or Switzerland to countries which have been approved by the EU, UK and/or Switzerland’s governing bodies as providing an adequate level of protection for Personal Data (via reciprocity agreements, frameworks, certifications or other legally valid mechanisms), or where the Personal Data shall be given the same protections it has under the GDPR, UK GDPR or FADP through contractual agreements or clauses. If neither of the above circumstances exist, we may request that you provide your explicit written consent to a specific transfer, which may be withdrawn by you at any time.
Your Privacy Rights
Depending on your location and whether Bixal is subject to any data privacy laws for your country or state, you may have certain rights regarding Bixal’s collection, use, transfer or storage of your Personal Data. For example, individuals within the EEA, UK or Switzerland have certain rights in their Personal Data under the GDPR, UK GDPR or FADP. California residents have certain rights in their Personal Data under the CCPA and CPRA.
GDPR, UK GDPR and FADP Privacy Rights
For individuals located in the EEA, UK or Switzerland, the following privacy rights apply to you:
- The right to access — You have the right to request that Bixal provide you with copies of your Personal Data. We may charge you a small fee for this service.
- The right to rectify/correct — You have the right to request that Bixal correct any inaccuracies in your Personal Data.
- The right to erase — You have the right to request that Bixal erase your Personal Data, under certain conditions.
- The right to restrict processing — You have the right to request that Bixal restrict the processing of your Personal Data, under certain conditions.
- The right to object to processing — You have the right to object to Bixal’s processing of your Personal Data, under certain conditions.
- The right to data portability — You have the right to request that Bixal transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you wish to exercise any of the above privacy rights, please submit a request to Bixal by contacting us directly. Click here to view our contact information. We will comply with all legal deadlines and requirements in responding to your request.
Please keep in mind that Bixal may require additional information from you to verify that you are the rightful owner of such Personal Data. You will be required to provide such verification to Bixal so that we may protect all Personal Data from unauthorized or unlawful access.
Complaints: You have a right to complain about how Bixal has collected, handled, used or transferred your Personal Data. All complaints shall be directed to the appropriate Data Protection Authority based on where you are located, where Bixal is based and/or where the alleged violation occurred.
California Privacy Rights (CCPA/CPRA)
California residents have the following privacy rights:
- The right to know — You may request the following information from Bixal: (1) the categories and/or specific elements of your Personal Data that we have collected, (2) the categories of sources for that Personal Data, (3) the purposes for which we use that Personal Data, (4) the categories of third parties with whom we share your Personal Data, and (5) the categories of your Personal Data that we disclose to third parties. Please note that the categories of Personal Data collected or disclosed by Bixal, sources from which such data is collected and categories of third parties with which it is shared are all outlined in this Privacy Policy. You can make a request to know up to twice a year, free of charge.
- The right to delete — You have the right to request that Bixal delete any of your Personal Data that we have retained, as well as any Personal Data transferred to our service providers or vendors, subject to certain exceptions.
- The right to opt-out — Bixal does not currently share the Personal Data of website visitors or people who complete its website forms. You may request that Bixal does not share your personal information (“opt-out”) at any time. California residents, click here to opt-out of sharing. Bixal may also share the personal data of its employees, job candidates and/or contractor personnel as set forth in this Policy and in accordance with the recognized exemptions and exceptions to the CCPA.
- The right to rectify/correct — You have the right to request that Bixal correct any inaccuracies in your Personal Data.
- The right to limit — You have the right to request that Bixal limit its use or disclosure Personal Data which falls under the CCPA’s definition of Sensitive Personal Information.
- The right to non-discrimination — Bixal may not discriminate against you for your exercise of your CCPA/CPRA rights. However, please keep in mind that Bixal may require certain Personal Data from you for certain transactions or purposes, and your request may prevent Bixal from being able to complete such transactions or purposes.
If you wish to exercise any of the above privacy rights, please submit a request to Bixal by contacting us directly. Click here to view our contact information. We will comply with all legal deadlines and requirements in responding to your request.
Please keep in mind that Bixal may require additional information from you to verify that you are the rightful owner of such Personal Data. You will be required to provide such verification to Bixal so that we may protect all Personal Data from unauthorized or unlawful access.
Marketing
Bixal may use Personal Data for marketing purposes and communications in accordance with this Policy. This includes sending you marketing emails at email addresses provided to or collected by Bixal regarding events or services which we believe may be of interest to you. For potential job candidates, we may also reach out to you regarding potential job openings which may interest you. These marketing communications may be directly from Bixal or its mailing list service provider, MailChimp (legal name: The Rocket Science Group LLC d/b/a Mailchimp). Mailchimp is a subsidiary of Intuit. Click here to learn more about Mailchimp/Intuit’s privacy practices and how it may obtain and/or use your Personal Data.
You may unsubscribe from our marketing emails at any time by clicking unsubscribe in any of our emails, or by sending us an email with the subject line “UNSUBSCRIBE.” Please contact us at [email protected] to unsubscribe.
Cookie Notice
Bixal uses “cookies” to help understand how visitors use our website so that we can improve our website offerings, make our website more accessible, and for tracking analytics. A cookie is a small text file stored on your device which helps us learn or remember certain information about you, such as the time at your location, what language you prefer, accessibility preferences (when available), whether you are using a mobile device or a computer, and so on.
“First-Party Cookies” are cookies that are directly set by a website owner. “Third-Party Cookies” are cookies provided by third parties to enable certain third-party features, functions or analytics on a website.
Bixal only uses strictly necessary first-party cookies to provide basic website functions and allow users to access certain website features, including the features made available under this Policy. Bixal uses the following third-party cookies for these purposes:
- Recognize returning website visitors and remember their website preferences;
- Obtain and compile data regarding how our website is used to help improve and further develop our website and visitor experiences, as well as identify potential areas of interest for future services or marketing programs. This data includes but is not limited to website traffic data, page clicks and views, time spent on each page or on average, how visitors reached our website and usage patterns, and are further outlined below;
- Secure and protect our website, systems and the information contained within from unauthorized or unlawful use or access.
Bixal uses Google Analytics, including third-party cookies and tracking tools provided by Google Analytics. Google Analytics is a website analytics service provided by Google (Parent Company: Alphabet, Inc.) which helps us gather data so that we can better understand how users interact with our website, and also analyze and compile reports regarding website use, trends and data. The data we obtain through Google Analytics includes sessions, views, events, conversions, changes in clicks and visits, session channel groups and visitor sources (i.e., how people find and access our website), page paths, date of visit, country, region, city, event names, day of week of visit and level link clicks, as well as other information or data about the use of our website. The information obtained by Bixal through Google Analytics is aggregated, anonymized data, and Bixal does not use Google Analytics to obtain any personally identifying information or Personal Data. Information obtained through Google Analytics is transmitted and stored by Google and is subject to Google’s data privacy policies. Click here to learn about how Google uses information from sites or apps through Google Analytics or other Google Services.
Individuals may disable Google Analytics cookies or opt-out of Google Analytics tracking. For more information about disabling Google Analytics cookies or opting out of Google Analytics, click here.
All of the cookies used by Bixal are considered performance and functionality cookies. Bixal does not use any “Strictly Necessary” cookies that cannot be turned off or opted out of. None of Bixal’s cookies collect or obtain Personal Data.
This Cookie Notice was last updated by Bixal on September 5, 2024. It will be updated as needed to reflect any changes in the cookies used by Bixal on its website. For further information about our use of cookies, please contact us at [email protected].
Minors
Bixal’s website is not intended to be used by minors under the age of 16. Bixal does not knowingly collect any Personal Data of any minors under the age of 16, and, in the event Bixal learns that it has collected Personal Data belonging to a minor under the age of 16, it will be deleted.
Contact Us
To learn more about Bixal’s privacy policy, data privacy and retention practices, or to submit a request under this Policy (as may be available under applicable law), please contact us using the following methods:
By mail:
Joy McCrady
Privacy Officer
Bixal Solutions Incorporated
3050 Chain Bridge Rd., Suite 305
Fairfax, VA 22030
Email [email protected].
Individuals who live or work in California, the United Kingdom, Switzerland or a country or territory that is part of the European Economic Area may use this form to make inquiries and/or requests regarding Bixal’s potential use and/or possession of their personal data.
All other inquiries can be submitted by sending an e-mail to [email protected].
Bixal employees, former employees and/or job applicants who reside in California may also call 1-855-662-SAFE toll-free to make inquiries and/or requests regarding Bixal’s potential use and/or possession of their personal data.
Third-Party Links
Our website may include links to third-party controlled or run websites, services or applications (together, “Third-Party Links”). Clicking on these Third-Party Links may result in your Personal Data being shared with the third parties who control, own, or operate those Third-Party Links. These Third-Party Links are not controlled or operated by Bixal. Bixal is not responsible for the content of Third-Party Links, what Personal Data they may collect and how they may use, share, transfer, store or retain Personal Data. Any Personal Data shared with such third parties is not covered by this Privacy Policy, and you are reminded that this Privacy Policy applies only to Bixal’s website. Please read the privacy policies on each Third-Party Link that you visit for more information about any Personal Data collected via that link.
Privacy Policy Changes and Effective Date
This Privacy Policy is designed and intended to comply with all applicable laws, regulations and legal requirements which are in effect as of this Policy’s effective date. This includes, but is not limited to, the General Data Privacy Regulation, the UK Data Protection Act 2018 and the UK General Data Protection Regulation, the Swiss Federal Act on Data Protection, the California Consumer Privacy Act and the California Privacy Rights Act, as they may apply, and any other laws or regulations which may apply to this Privacy Policy and/or Bixal’s collection, use, processing, retention, storage, disclosure and/or transfer of Personal Data.
Bixal may update this Policy from time to time and to the extent needed to reflect changes in applicable laws, regulations, practices, policies or procedures. Please check this Policy periodically to obtain the latest information on our Privacy Policy and practices. Any material changes to this Policy will be posted on a banner on our home page.
This Privacy Policy is effective as of September 5, 2024.