1. Who We Are

BackBeam Network LLC ("BackBeam," "we," "us," or "our") is a Maryland limited liability company and a subsidiary of Wenley Technologies, LLC. We operate a provider credential monitoring service for healthcare organizations in the medical aesthetics, wellness, and adjacent healthcare sectors.

Our website is located at backbeamnetwork.com. Our primary contact for privacy matters is hello@backbeamnetwork.com.

2. Scope of This Policy

This Privacy Policy applies to information collected through the BackBeam website (backbeamnetwork.com) and through our service intake and delivery processes. It governs:

• Information collected from visitors to our website
• Information submitted by prospective clients through our contact and intake forms
• Provider credential data submitted by client organizations for monitoring purposes
• Information generated through our verification and monitoring activities

3. Information We Collect

3.1 Website Visitors

When you visit backbeamnetwork.com, we may collect:

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation paths
• Referring website or search query

This information is collected through Google Analytics and is used to understand how visitors use our site. It is not linked to individual identities unless you submit a contact form.

3.2 Contact and Intake Forms

When you submit a contact or sample report request form on our website, we collect:

• Your name and work email address
• Your organization name and practice type
• Any information you include in the message field

This information is used solely to respond to your inquiry and determine whether BackBeam's services are a fit for your organization. We do not add you to marketing lists without your explicit consent.

3.3 Provider Credential Data (Client Submissions)

Client organizations that engage BackBeam's monitoring service submit provider credential data for verification. This data typically includes:

• Provider full legal name
• State professional license number and issuing state
• National Provider Identifier (NPI) number
• DEA registration number (where applicable)
• Board certification information
• Practice location and credential type

This data is submitted by the client organization, not by the individual providers. Client organizations are responsible for ensuring they have appropriate authority to submit provider information to BackBeam for credentialing purposes.

4. How We Use Information

BackBeam uses collected information for the following purposes:

• To perform primary source verification checks against authorized public databases (OIG, SAM.gov, NPDB, state licensing boards, CMS NPI Registry, DEA Diversion Control Division, and applicable certifying boards)
• To produce monthly compliance reports and adverse finding alerts for client organizations
• To maintain compliance logs and audit trails as described in the Master Services Agreement
• To respond to website inquiries and communicate with prospective and current clients
• To analyze website usage patterns and improve our site (via Google Analytics)
• To comply with applicable legal obligations

We do not use provider credential data for any purpose other than performing the monitoring services described in the client's Master Services Agreement.

5. How We Share Information

BackBeam does not sell, rent, or license personal information to third parties. We share information only in the following circumstances:

• Authorized verification sources: Provider credential data is submitted to authorized public databases (OIG, SAM.gov, NPDB, state boards, CMS, DEA) as required to perform verification checks. This is the core function of our service.
• Service providers: We use Google Analytics for website analytics and Google Workspace for file storage and communication. These providers are bound by their own privacy policies and data processing terms.
• Legal requirements: We may disclose information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our legal rights or the safety of others.
• Business transfers: If BackBeam Network LLC or Wenley Technologies, LLC is involved in a merger, acquisition, or asset sale, client data may be transferred as part of that transaction. We will provide notice before data is transferred and becomes subject to a different privacy policy.

6. Data Security

BackBeam implements reasonable technical and organizational security measures to protect the information we hold. These measures include:

• Secure, access-controlled file storage through Google Workspace
• Role-based access controls limiting data access to authorized personnel
• Encrypted transmission of data in transit (HTTPS)
• Regular review of access permissions and security practices

No security system is impenetrable. We cannot guarantee the absolute security of information transmitted to or stored by BackBeam. In the event of a data breach affecting your information, we will notify affected parties as required by applicable law.

7. Data Retention

BackBeam retains information as follows:

• Compliance reports and audit logs: Retained for a minimum of seven years following the end of the client engagement. This retention period is required to support the legal defensibility purposes for which the records are produced.
• Provider credential data submitted by clients: Returned or confirmed deleted within 30 days of engagement termination, subject to the audit record retention above.
• Website inquiry data: Retained for 24 months from the date of submission, then deleted unless an active client relationship exists.
• Google Analytics data: Governed by Google's data retention settings, typically 26 months.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete information we hold about you. To exercise any of these rights, contact us at hello@backbeamnetwork.com.

If you are a provider whose credential information has been submitted to BackBeam by a client organization, your rights with respect to that data are governed by your relationship with that client organization. Please contact the organization that employs or contracts with you to exercise data rights with respect to your credential information.

9. NPDB Data

BackBeam accesses the National Practitioner Data Bank (NPDB) as an authorized querying entity under HRSA entity authorization. NPDB data is subject to the confidentiality provisions of the Health Care Quality Improvement Act (HCQIA), 42 U.S.C. § 11137(b), which are separate from and in addition to this Privacy Policy. NPDB information is used solely for the credentialing purposes for which the query was authorized and is not disclosed to any party other than the client organization that enrolled the provider for monitoring.

10. Children's Privacy

BackBeam's website and services are directed exclusively at business organizations and their authorized representatives. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information through our website, contact us at hello@backbeamnetwork.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.