Privacy Policy

Last Updated: July 8, 2026

This Privacy Policy explains how IMH ASSETS CORP. d/b/a bioaccess® ("we") collects, uses, and discloses personal information via bioaccessla.com (the "Site"). It is incorporated into our Terms of Service. We are the controller. Contact: info@bioaccessla.com · 1200 Brickell Ave., Suite 1950 #1034, Miami, FL 33131, USA.

1. Personal information we collect

Information you provide via contact/feasibility forms, newsletter sign-up, gated resource requests, or email (typically name, business email, company, country, message). Scheduling is handled by a third-party scheduling provider. Automatically collected device/usage information (IP, browser, pages viewed, referrer) via cookies and similar technologies, and — for business visitors — business-firmographic identification as described in Section 3. We do not intentionally collect sensitive data; do not submit PHI or confidential data through forms.

2. How we use personal information, and legal bases

To respond to inquiries; send communications and our newsletter where permitted; operate, secure, analyze, and improve the Site; understand which organizations are interested; and comply with law. GDPR legal bases: consent (analytics/identification cookies, marketing email), legitimate interests (operating and improving the Site; understanding business interest), and legal obligation.

3. Cookies, analytics, and business-visitor identification

The Site uses cookies and similar technologies, including: Google Analytics 4 (usage analytics); PostHog (product analytics including person-level profiles); RB2B (business-visitor identification that seeks to identify the company and, for some U.S. visitors, the individual professional associated with a visit); Tely AI (on-Site chat widget); Cloudflare (delivery, security, bot mitigation); Vimeo (embedded video, loaded on play). Where required by law, non-essential cookies and the analytics/identification technologies load only after you consent via our cookie banner, and we configure these technologies NOT to run for visitors in the EU, UK, and other regions requiring prior consent unless and until consent is given. Manage choices anytime via "Cookie Settings" in the footer; opt out of Google Analytics via Google's browser add-on; control cookies via your browser. We honor Global Privacy Control (GPC) signals where applicable.

4. How we disclose personal information

To service providers/processors (hosting, analytics, identification, scheduling, email/newsletter, chat) under contracts limiting their use; to professional advisors, auditors, and authorities where required by law or to protect our rights; and to an acquirer or successor in a merger, acquisition, financing, or asset sale. We do not disclose your information to unrelated third parties for their own independent marketing.

5. "Sale" / "sharing" and California privacy rights

We do NOT sell personal information for money. Some analytics/identification technologies in Section 3 (e.g., PostHog person-profiles and RB2B) may be considered a "sale" or "sharing" for "cross-context behavioral" purposes under the CPRA and similar U.S. state laws. Opt out anytime via "Cookie Settings" in the footer, or by sending a Global Privacy Control signal, which we honor. Subject to law, California and other U.S. state residents may have rights to know/access, delete, correct, and opt out of "sale"/"sharing" and targeted advertising. No discrimination for exercising rights. Contact info@bioaccessla.com; we verify requests before responding.

6. Your GDPR/UK rights

Access, rectify, erase, restrict, or object to processing; data portability; withdraw consent (without affecting prior processing); and lodge a complaint with your supervisory authority. Contact info@bioaccessla.com.

7. International data transfers

We are U.S.-based; data is processed in the U.S. and other countries where our providers operate. For EU/UK transfers we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and UK Addendum) or another lawful mechanism.

8. Data retention

We retain personal information only as long as necessary for the purposes described (responding to inquiries, administering the newsletter while subscribed, and legal/tax/recordkeeping), then delete or de-identify it.

9. Security

Reasonable administrative, technical, and organizational measures; no method is completely secure and we cannot guarantee absolute security.

10. Children

The Site is for business/professional audiences, not directed to children under 18; we do not knowingly collect their information.

11. Third-party sites

We are not responsible for the content or privacy practices of linked third-party sites (e.g., ClinicalTrials.gov, agency sites, scheduling/newsletter providers); their policies govern.

12. Changes to this Policy

We may update by posting a revised version and updating the "Last Updated" date; material changes are effective upon posting or a later stated date.

13. How to contact us / exercise your rights

Email info@bioaccessla.com or write to IMH ASSETS CORP. (bioaccess®), Attn: Privacy, 1200 Brickell Ave., Suite 1950 #1034, Miami, FL 33131, USA.