Privacy Policy

Effective date: July 29, 2026
Last updated: August 17, 2026

Plain-Language Summary

BP Online Consulting & Management, LLC (“BPOCM,” “we,” “us,” or “our”) collects and uses information to operate our website, respond to inquiries, schedule meetings, provide consulting and Implementation Management, process payments, deliver courses or digital resources, communicate with clients and customers, operate approved automations and AI systems, protect our business, and comply with legal obligations.

We aim to:

• collect only information reasonably needed for a legitimate purpose;
• explain how information is used;
• limit access;
• use service providers under appropriate terms;
• protect information using reasonable safeguards;
• retain it only as long as needed;
• provide privacy choices and rights where applicable;
• keep AI, automation, voice, avatar, and digital-twin use within approved roles and permissions.

This summary does not replace the complete policy below.

1. Scope

This Privacy Policy applies to personal information BPOCM collects or processes through:

• https://bpocm.com ;
• contact, newsletter, Fit-Check Meeting, intake, and other forms;
• appointment scheduling;
• email, SMS, telephone, voicemail, chat, and social communication;
• proposals, agreements, invoices, payments, and client portals;
• online courses, memberships, downloads, resource libraries, and communities operated by or for BPOCM;
• consulting and Implementation Management;
• BPOCM-created or BPOCM-managed automations;
• AI assistants, chatbots, coaches, agents, knowledge systems, voice systems, avatars, digital twins, image/video tools, and related experiences;
• analytics, security, fraud prevention, and website operations;
• events, webinars, speaking engagements, and business relationships.

This policy does not control the privacy practices of a client, platform, website, or third party that has its own privacy notice.

2. Our Roles

2.1 When BPOCM Acts for Its Own Business

BPOCM generally determines the purposes and means of processing when we collect information for our own:

• website;
• marketing;
• Fit-Check Meetings;
• client relationships;
• billing;
• courses or products;
• support;
• business administration;
• security;
• legal obligations.

Depending on the law, BPOCM may be described as a business, controller, or similar responsible party.

2.2 When BPOCM Processes Information for a Client

During client work, BPOCM may process personal information only to perform services under a client’s instructions. For example, we may configure or manage a client’s:

• website;
• CRM;
• forms;
• calendars;
• email or SMS workflows;
• customer records;
• course platform;
• automation;
• AI assistant or agent;
• reporting system.

In that situation, the client generally decides why the information is processed, and BPOCM may act as a service provider, contractor, or processor. Privacy requests about client-controlled information should usually be directed to the client. BPOCM may forward a request or assist the client as required by contract or law.

A signed agreement, statement of work, data-processing addendum, business associate agreement, or similar document may provide additional terms and will control that engagement if it conflicts with this general policy.

3. Information We May Collect

The information collected depends on how a person interacts with BPOCM.

3.1 Identifiers and Contact Information

Examples include:

• name;
• business name;
• title or role;
• email address;
• telephone number;
• mailing address;
• social-media profile;
• account username;
• signature;
• preferred communication method.

3.2 Business and Professional Information

Examples include:

• industry;
• business size;
• services and products;
• business goals;
• project needs;
• timeline;
• budget range;
• decision-makers;
• team members;
• contractors and vendors;
• professional history;
• credentials;
• business processes and policies.

3.3 Inquiry, Meeting, and Communication Information

Examples include:

• form responses;
• appointment details;
• emails;
• text messages;
• chat messages;
• call notes;
• voicemail;
• meeting recordings or transcripts when authorized;
• support requests;
• feedback;
• survey responses.

3.4 Transaction and Billing Information

Examples include:

• purchase or service selected;
• invoice number;
• amount;
• billing status;
• payment date;
• subscription or renewal status;
• refund request;
• tax-related transaction records.

When a third-party payment processor collects payment credentials directly, BPOCM generally receives transaction and billing metadata rather than a complete payment-card number. Actual handling depends on the processor and checkout configuration.

3.5 Website, Device, and Technical Information

Examples include:

• IP address;
• browser;
• device type;
• operating system;
• pages viewed;
• referring page;
• dates and times;
• approximate location derived from IP;
• cookie and similar-technology identifiers;
• form and page interactions;
• error and security logs;
• analytics and advertising events.

3.6 Account, Course, Membership, and Progress Information

Examples include:

• account registration;
• login and access status;
• enrollment;
• purchases;
• lesson or resource access;
• progress;
• activities;
• quiz or assessment responses;
• certificates;
• community participation;
• support history;
• feedback.

3.7 Project and Client Materials

Examples include:

• documents;
• brand guides;
• business plans;
• website content;
• images;
• videos;
• audio;
• presentations;
• spreadsheets;
• CRM exports;
• course files;
• policies;
• SOPs;
• research;
• customer or learner information;
• system maps;
• workflow specifications;
• credentials shared through an approved secure method.

Do not submit passwords, API keys, complete payment-card data, protected health information, or other highly sensitive information through a general website form.

3.8 Automation Information

Examples include:

• trigger and eligibility data;
• workflow inputs and outputs;
• contact or record identifiers;
• branches and actions;
• message status;
• consent or suppression status;
• task and notification records;
• execution logs;
• error details;
• retry and recovery records;
• human-review and escalation records.

3.9 AI Information

Examples include:

• prompts and instructions;
• chat messages;
• uploaded files;
• source documents;
• knowledge-base content;
• retrieved passages;
• model inputs and outputs;
• classifications;
• summaries;
• drafts;
• evaluations and grades;
• tool calls;
• action logs;
• feedback;
• safety and moderation results;
• human-review decisions;
• traces and monitoring data.

AI providers, model features, search tools, data stores, voice systems, avatar systems, and third-party tools may have separate retention and data terms. Those terms should be reviewed for the approved use case.

3.10 Voice, Image, Video, Likeness, and Digital Identity

For approved media, digital-twin, avatar, voice, video, image, or multimodal projects, we may process:

• photographs;
• video recordings;
• audio recordings;
• voice samples;
• transcripts;
• facial or performance data;
• likeness;
• generated media;
• editing and production files;
• consent, release, and usage records.

BPOCM should process a person’s voice or likeness only within the scope of written authorization and applicable law. Portfolio or promotional use should require separate permission when not already clearly authorized.

3.11 Sensitive Information

We ask people not to provide sensitive information unless it is necessary, authorized, and covered by an appropriate scope and security process.

Sensitive information may include:

• government identifiers;
• financial-account credentials;
• precise location;
• account passwords;
• health information;
• biometric or identity information;
• racial or ethnic origin;
• religious beliefs;
• sexual orientation;
• union membership;
• contents of private communications;
• information about children;
• other information treated as sensitive by law.

4. Information by Service

Not every engagement uses every category.

5. How We Collect Information

We may collect information:

• directly from a person;
• from a business or client that authorizes us to process it;
• from employees, contractors, vendors, or referral partners;
• from forms, calendars, checkouts, CRM, course, communication, or support systems;
• from website cookies and similar technologies;
• from public sources;
• from social networks and business directories;
• from analytics and advertising providers;
• from payment processors;
• from AI, automation, search, transcription, media, and other service providers;
• from systems that a client authorizes BPOCM to access.

6. How We Use Information

We may use information to:

• provide, administer, and improve the website;
• respond to inquiries;
• determine Fit-Check Meeting readiness;
• schedule and conduct meetings;
• prepare proposals, agreements, Roadmaps, and project plans;
• deliver consulting and Implementation Management;
• provide products, courses, memberships, downloads, and support;
• create or manage websites, systems, campaigns, customer experiences, courses, automations, and AI capabilities;
• process payments and maintain financial records;
• send transactional messages;
• send marketing communications with appropriate consent or another lawful basis;
• personalize content and user experience;
• operate CRM and business systems;
• maintain security and prevent fraud or misuse;
• test and evaluate systems;
• document decisions and completion evidence;
• maintain project, legal, tax, insurance, and dispute records;
• comply with law, contracts, and lawful requests;
• protect BPOCM, clients, users, and others;
• support a business transfer, reorganization, or due diligence process.

7. Cookies, Analytics, Advertising, and Similar Technologies

BPOCM and service providers may use cookies, pixels, local storage, scripts, tags, or similar technologies for:

• essential website operation;
• security;
• saved preferences, including light or dark mode;
• forms and scheduling;
• analytics;
• performance;
• marketing attribution;
• advertising and audience measurement;
• remembering choices.

Some analytics or advertising technologies may be treated as a “sale,” “sharing,” or targeted advertising under certain state laws, depending on the technology, configuration, and law.

BPOCM does not knowingly sell personal information for money. Where required, BPOCM will provide appropriate opt-out methods and honor recognized browser-based opt-out signals, such as Global Privacy Control, for legally covered sale or sharing.

A separate cookie or preference center may be required after BPOCM’s technology inventory is finalized.

Browser Controls

Most browsers permit users to block or delete cookies. Blocking essential cookies may cause forms, preferences, logins, calendars, checkouts, or other features to stop working.

Do Not Track

Because there is not one uniform response standard for browser “Do Not Track” signals, the website may not respond to every DNT signal. BPOCM will respond to legally recognized opt-out signals when required.

8. Email, SMS, Telephone, and Other Communications

8.1 Transactional Communications

We may send communications about:

• inquiries;
• appointments;
• agreements;
• payments;
• projects;
• access;
• support;
• security;
• service updates;
• other requested transactions.

8.2 Marketing Email

Marketing email should include an unsubscribe method. A person may unsubscribe at any time. Some transactional or relationship messages may still be sent when necessary to provide a requested service or comply with law.

8.3 SMS and Telephone

When a person provides a telephone number and gives applicable consent, BPOCM may send text messages or place calls for the stated purpose. Message frequency may vary. Message and data rates may apply.

Reply STOP to opt out of marketing text messages and HELP for help when supported by the provider. Consent to marketing messages is not a condition of purchase where prohibited by law.

Client projects involving automated texts, calls, prerecorded messages, or voicemail require client-approved consent, timing, identity, opt-out, do-not-contact, and legal rules. BPOCM does not provide legal advice.

8.4 Mobile Information and SMS Consent

Mobile information, SMS opt-in data, and SMS consent will not be shared with third parties or affiliates for their marketing or promotional purposes. BPOCM may disclose limited information to telecommunications providers, messaging platforms, and other service providers or subcontractors only as reasonably necessary to deliver requested messages, maintain the messaging service, provide customer support, prevent fraud or abuse, or comply with law.

All other use categories in this Privacy Policy exclude text-messaging originator opt-in data and consent. BPOCM records the consent purpose, source, time, and version when reasonably available and honors supported opt-out and do-not-contact requests.

9. Payments

Payments may be processed by third-party payment providers. Those providers collect and process information under their own terms and privacy notices.

BPOCM may receive and retain:

• purchaser name;
• contact information;
• billing address;
• transaction amount;
• date;
• payment status;
• limited payment-method information;
• subscription or renewal status;
• refund and dispute information.

10. Courses, Memberships, and Digital Products

For courses, memberships, resource libraries, and information products, BPOCM or its providers may process:

• enrollment;
• payment;
• access;
• lesson activity;
• progress;
• assessments;
• completion;
• certificates;
• community participation;
• learner questions;
• feedback;
• support information.

If a client controls the course or membership, that client’s privacy policy may apply.

11. Automation and AI

11.1 Automated Workflows

Approved automations may create or update records, route information, send messages, schedule tasks, provide access, generate reports, or trigger other approved actions.

Automations should use:

• defined eligibility;
• required data;
• consent and suppression rules;
• stop conditions;
• human-review and escalation rules;
• logs and monitoring;
• error and recovery processes.

11.2 AI-Assisted Processing

BPOCM may use AI to support approved tasks such as:

• research;
• retrieval;
• summaries;
• drafting;
• classification;
• extraction;
• analysis;
• reporting;
• customer or learner assistance;
• tool-using workflows.

AI output may be incomplete, inaccurate, outdated, or inappropriate. Human review may be required, especially for sensitive, high-impact, irreversible, regulated, financial, legal, health, safety, employment, identity-related, or relationship-critical work.

BPOCM does not intentionally use client confidential information to train a public or shared AI model unless the client expressly authorizes that use in writing.

12. How We Disclose Information

We may disclose information to:

12.1 Service Providers and Contractors

Examples may include providers of:

• website hosting and content delivery;
• CRM;
• forms and scheduling;
• email, SMS, telephone, and chat;
• payment processing;
• accounting;
• cloud storage and collaboration;
• analytics and advertising;
• course and membership delivery;
• automation and integration;
• AI models, retrieval, search, transcription, voice, image, video, avatar, and digital-twin services;
• security and fraud prevention;
• development, design, media, and professional services.

Providers may change. They should receive only the information reasonably necessary for their approved role.

12.2 Clients and Client-Authorized Parties

When BPOCM processes data for a client, information may be disclosed according to the client’s instructions and agreement.

12.3 Professional Advisers

We may disclose information to attorneys, accountants, insurers, auditors, security professionals, or other advisers when reasonably necessary.

12.4 Legal, Safety, and Rights Protection

We may disclose information when reasonably necessary to:

• comply with law or legal process;
• respond to lawful government requests;
• investigate misuse, fraud, or security incidents;
• enforce agreements;
• protect rights, safety, or property;
• establish, exercise, or defend legal claims.

12.5 Business Transfers

Information may be reviewed or transferred in connection with a financing, merger, acquisition, sale, reorganization, bankruptcy, or transfer of some or all business assets, subject to appropriate confidentiality and legal requirements.

13. Sale, Sharing, and Targeted Advertising

BPOCM does not knowingly sell personal information for money.

Certain analytics, advertising, or audience technologies may be considered a sale, sharing, or targeted advertising under some state laws even when no money is paid for the information.

Where applicable, a person may request to opt out by:

• using an available privacy-preference tool;
• enabling Global Privacy Control in a supported browser;
• emailing Admin@BPOCM.com with the subject Privacy Request ;
• contacting BPOCM through the methods below.

The final website configuration must be reviewed to determine which links or controls are legally required.

14. Privacy Rights

Depending on a person’s residence, BPOCM’s legal thresholds, and the context, a person may have the right to:

• confirm whether personal information is processed;
• access categories or specific information;
• correct inaccurate information;
• request deletion;
• obtain a portable copy;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses of sensitive information;
• withdraw consent where processing depends on consent;
• appeal a denied request;
• use an authorized agent;
• receive equal service without unlawful discrimination.

These rights are subject to verification, exceptions, and legal limitations.

14.1 How to Submit a Request

Email Admin@BPOCM.com with the subject Privacy Request and describe the request.

A person may also contact:

BP Online Consulting & Management, LLC
3610 Buttonwood Dr. #200, Columbia, MO 65201
(573) 881-4954

14.2 Verification

BPOCM may request information reasonably necessary to verify identity, authority, account, or relationship. Verification information will be used for that purpose and related security.

14.3 Authorized Agents

An authorized agent may submit a request where permitted. BPOCM may request proof of authorization and may verify the request directly with the person.

14.4 Appeals

If applicable law provides an appeal right, an appeal may be submitted to Admin@BPOCM.com with the subject Privacy Appeal .

14.5 Client-Controlled Information

When BPOCM acts only for a client, BPOCM may direct the requester to the client or assist the client in responding.

15. Data Retention

BPOCM retains information only as long as reasonably necessary for:

• the purpose collected;
• the service or relationship;
• contracts and project records;
• payment, tax, and accounting records;
• security and fraud prevention;
• legal and regulatory obligations;
• claims, disputes, and enforcement;
• backups and system integrity;
• consent, suppression, and do-not-contact records;
• legitimate business needs.

Retention may vary by category, system, agreement, and law. Information may be deleted, anonymized, aggregated, returned, archived, or securely disposed of when no longer needed.

Suppression records may be retained to honor an opt-out.

16. Security

BPOCM uses administrative, technical, organizational, and physical safeguards that are intended to be reasonable for the nature of the business and sensitivity of the information.

Measures may include:

• data minimization;
• role-based access;
• authentication;
• encryption provided by systems and vendors;
• secure credential-sharing methods;
• software and account updates;
• service-provider review;
• backups;
• logging and monitoring;
• incident response;
• secure disposal;
• employee or contractor instruction.

No website, system, transmission, provider, model, or storage method is completely secure. BPOCM cannot guarantee absolute security.

17. Security Incidents

If BPOCM discovers a security incident, we may:

• investigate;
• contain and remediate;
• notify affected clients;
• notify individuals or authorities when required;
• preserve evidence;
• improve safeguards.

Notification timing and content depend on the facts, contracts, law-enforcement needs, and applicable law.

18. Children and Minors

The general BPOCM website and services are not directed to children under 13, and BPOCM does not knowingly collect personal information directly from a child under 13 through the public website.

If BPOCM learns that information was collected from a child in violation of applicable requirements, we will take reasonable steps to delete or address it.

Projects involving minors, schools, youth programs, or child-directed services require a separate written scope, authorized organizational or parental permissions, and applicable privacy and safety review.

19. International Visitors and Processing

BPOCM is based in the United States. Information may be processed in the United States and other locations where service providers operate.

Privacy laws may differ from those in a person’s location. International engagements may require additional terms, transfer mechanisms, notices, or legal review.

20. Third-Party Links and Services

The website may link to or embed third-party:

• forms;
• calendars;
• videos;
• maps;
• social networks;
• payment tools;
• course platforms;
• chat tools;
• AI tools;
• other services.

BPOCM does not control all third-party privacy practices. Review the third party’s terms and privacy notice.

21. Changes to This Policy

BPOCM may update this policy to reflect changes in law, services, technology, vendors, or practices.

The updated policy will show a new “Last updated” date. Material changes may receive additional notice when appropriate.

22. Contact

For privacy questions or requests:

BP Online Consulting & Management, LLC
3610 Buttonwood Dr. #200, Columbia, MO 65201
Email: Admin@BPOCM.com
Phone: (573) 881-4954
Website: https://bpocm.com

Use the subject Privacy Request for rights requests.