Bchex Privacy Policy

Last Updated: January 1, 2026

Bchex is committed to safeguarding your privacy

We believe client privacy and data security is essential to our business. To protect our clients' personal information, our associates follow strict confidentiality standards.

Our websites collect the name of the domain from which you access the Internet and the site from which you came. This information is used for internal analysis only and helps us improve the content of our websites.

Our websites contain forms that you can use to request more information about our products and services. The personal information we collect is exclusively used to respond to your inquiries.

Our websites use IP addresses and cookies to help diagnose challenges with our servers and / or websites, and to gather demographic information on website visitors. We also use cookies for session management and to assure you have access to the service configuration appropriate for your account.

Cookies & Data Collection

Use of Cookies: Our websites and platform use cookies, web beacons, and other tracking technologies ("Cookies") to enhance your experience, understand how our services are used, and for analytics purposes. A cookie is a small data file stored on your device that helps us improve our services and your experience.

Types of Cookies We Use:

• Essential Cookies: Necessary for the operation of our websites and platform. These enable core functionality such as security, account access, and session management.
• Performance and Functionality Cookies: Enhance your experience by remembering your preferences and settings.
• Analytics and Customization Cookies: Collect information on how you interact with our websites and services, helping us understand usage patterns and improve our offerings.
• Advertising Cookies: May be used to show relevant advertisements and measure their effectiveness. We do not sell your personal information for advertising purposes.

For more details on how we use cookies, see our Cookie Notice.

Data Automatically Collected: Our websites and platform automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Device information
• Browsing activity and pages visited
• Referring website
• Date and time of access
• General location data (derived from IP address)

Managing Cookies: You can manage or disable cookies through your browser settings. Please note that some features of our websites and platform may not function properly if cookies are disabled. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies from specific sites
• Block all cookies from being set
• Delete all cookies when you close your browser

Do Not Track: We do not currently respond to browser "Do Not Track" signals. However, you can manage your cookie preferences as described above.

Information Sharing

In connection with providing our services, Bchex may send personally identifiable information about you to other companies or people including:

1. when we have your consent to share the information;
2. when we need to share your information with third parties, such as banks and credit card processors in order to process your payments;
3. in connection with products and services offered by Bchex where we use a product or service subcontractors to perform functions on our behalf;
4. when required to comply with law;
5. when it is necessary to enforce or apply the terms and conditions of our Service Agreement and other applicable customer agreements.

Data Security

Bchex complies with all applicable data privacy and security laws. Our systems use the strongest industry-standard encryption protocols to protect data transmitted through our website. When you access your account or submit information through secured pages, your data is encrypted to prevent unauthorized access.

Physical records containing sensitive information are securely destroyed through a certified document destruction provider.

We reserve the right to modify or amend this Privacy Statement as needed.

State-Specific Privacy Notices

California Privacy Rights (California Consumer Privacy Act - CCPA)

Your California Privacy Rights

If you are a California resident, you may have certain rights regarding your personal information under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act (CPRA). These rights include:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, or sell.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing of Personal Information: We do not sell your personal information, but if we ever do, you have the right to opt-out of the sale of your personal information. You also have the right to opt-out of the sharing of your personal information for cross-contextual behavioral advertising.
• Right to Correct: You have the right to request that we correct any inaccuracies in your personal information.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your privacy rights under the CCPA.

To exercise any of these rights, please contact us. We will verify your request and respond within the timeframe required by law. Please note that we may request additional information to verify your identity before processing your request.

"Shine the Light" Law

Under California Civil Code Section 1798.83, California residents may request information about our disclosures of certain categories of personal information to third parties for direct marketing purposes. To request this information, please contact us.

Do Not Track Disclosure

We do not respond to browser "Do Not Track" signals. However, you can learn more about your options regarding cookies and interest-based advertising in our Cookie Policy.

Colorado Privacy Rights (Colorado Privacy Act - CPA)

If you are a Colorado resident, the Colorado Privacy Act (CPA) provides you with specific rights regarding your personal information, which may include:

• Right to Access: You have the right to confirm whether we are processing your personal data and to access such data.
• Right to Correct: You may request the correction of inaccuracies in your personal information.
• Right to Delete: You may request the deletion of personal information provided by or obtained about you.
• Right to Opt-Out: You have the right to opt out of the processing of your personal information for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of your rights under the CPA, please contact us.

Virginia Privacy Rights (Virginia Consumer Data Protection Act - VCDPA)

Under the Virginia Consumer Data Protection Act (VCDPA), if you are a Virginia resident, you have the following rights:

• Right to Access: You may confirm whether we are processing your personal data and access such data.
• Right to Correct: You have the right to correct inaccuracies in your personal data.
• Right to Delete: You can request the deletion of your personal information that we have collected from you.
• Right to Data Portability: You can request a copy of your personal data in a portable and readily usable format.
• Right to Opt-Out: You can opt out of the processing of your personal information for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise your rights under the VCDPA, please contact us.

Nevada Privacy Rights

Nevada residents have the right to request that we do not sell certain personal information that we have collected about you. Although Bchex does not currently sell personal information as defined under Nevada law, you can still submit a request to opt-out of any future sale of your information. If you are a Nevada resident and would like to make such a request, please contact us.

Connecticut Privacy Rights (Connecticut Data Privacy Act - CTDPA)

Under the Connecticut Data Privacy Act (CTDPA), effective July 1, 2023, Connecticut residents may have the following rights:

• Right to Access: You have the right to access the personal data we collect about you.
• Right to Correct: You may request corrections of inaccuracies in your personal data.
• Right to Delete: You have the right to request that we delete your personal information under certain conditions.
• Right to Data Portability: You can request a copy of your personal data in a portable and usable format.
• Right to Opt-Out: You may opt-out of the processing of your personal data for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise your rights under the CTDPA, please contact us.

Utah Privacy Rights (Utah Consumer Privacy Act - UCPA)

The Utah Consumer Privacy Act (UCPA) provides Utah residents with the following rights regarding their personal data:

• Right to Access: Confirm whether we are processing your personal data and access such data.
• Right to Delete: You can request the deletion of your personal information collected from you.
• Right to Data Portability: You can obtain a copy of your personal data in a portable format.

To make a request related to your rights under the UCPA, please contact us.

How to Exercise Your Privacy Rights

To exercise any of the rights described above, please contact us. We will verify your request and respond in accordance with applicable state laws. Please note that certain rights are subject to legal limitations and exceptions, and we may require you to provide information to verify your identity before processing your request.

Authorized Agents

If you would like to designate an authorized agent to make a privacy rights request on your behalf, please contact us using the information provided above. We may require proof of the agent's authority to act on your behalf.