How we handle your information.

Bonvia, the operating brand of Mar-Tin Enterprises LLC, is a Washington transportation company providing non-emergency medical transportation, clinical laboratory courier service, and healthcare airport transport. In this policy, "Bonvia," "we," "us," and "our" mean Mar-Tin Enterprises LLC.

You can reach us about anything in this policy at dispatch@bonvia.com or 1-877-BONVIA7.

This policy covers the Bonvia website, the information you send us when you contact us or request service, and the information we collect from the people who drive and work for Bonvia.

Health information that Bonvia holds as a HIPAA covered entity or business associate is governed by HIPAA and by our Notice of Privacy Practices, which is available from dispatch on request. Where HIPAA and that notice differ from this policy, HIPAA and that notice control.

• Information you give us. Your name, phone number, email address, and whatever else you choose to include when you use our contact form, request service, or call or email dispatch.
• Information from accounts and care teams. Facilities, care teams, and account holders who arrange transportation give us the details needed to run a trip, including who is traveling, where they are going, and when.
• Information from our own people. For drivers and staff, we collect the mobile number used to sign in to Bonvia systems, along with employment, licensing, and credentialing records.
• Information collected automatically. When you visit the website we collect your IP address, browser and device type, the page that referred you, and the pages you view, using cookies and similar technologies.

We do not ask for payment card numbers, Social Security numbers, or clinical records through this website, and you should not send them to us that way.

• To respond to requests and questions, and to schedule and dispatch service.
• To communicate about a scheduled trip, route, or account.
• To send one-time sign-in codes to authorized Bonvia drivers and staff.
• To bill accounts and keep the business records we are required to keep.
• To operate, secure, troubleshoot, and improve the website.
• To meet our legal, regulatory, contractual, and safety obligations.

Bonvia sends SMS sign-in codes and dispatch notifications to drivers and authorized staff who consented at onboarding. Mobile numbers and SMS consent are not shared with third parties for marketing purposes.

This is the only text message program Bonvia operates, and it is called Bonvia Secure Sign-In. We do not send marketing or promotional text messages to anyone, and there is no way to sign up for texts from this website.

For that program we collect the mobile number the individual gives us when they are set up to work, and the delivery status our messaging provider returns. Each sign-in code is valid for a single sign-in and expires after 5 minutes.

A dispatch notification tells a driver that their assignments have changed and to open the Bonvia driver app. It never includes a client's name, address, destination, or any detail of their care. Those details stay inside our secure systems and are shown only to the assigned driver after they sign in.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services, such as our messaging provider, is permitted solely so the message can be delivered. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell mobile numbers, and we do not sell any other personal information.

Message and data rates may apply. The full program terms, including how to get help and how to stop messages, are in the Messaging Terms section of our Terms and Conditions.

We share personal information only in these situations:

• Service providers. Companies that work on our behalf, such as our messaging provider, hosting provider, and email provider. They may use the information only to perform that work for us, and they are bound to protect it.
• Accounts and care teams. The facility, care team, or account holder who arranged a trip receives what is necessary to complete and confirm the service they arranged.
• Legal and safety. When we are required by law, subpoena, or court order, or when we reasonably believe disclosure is necessary to protect someone's safety or our legal rights.
• Business transfers. If Bonvia is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

The website uses cookies and similar technologies to keep the site working and to understand, in aggregate, how it is used. Our analytics never receive health information or any detail about a specific trip.

Most browsers let you refuse or delete cookies. Parts of the site may not work as intended if you do. We do not currently respond to browser Do Not Track signals, because no common standard for them has been adopted.

Where someone is going can say something about their health, so we treat trip information as protected health information rather than ordinary contact data.

That information is held in a separate, HIPAA-compliant environment from this website. It is encrypted in transit and at rest, reachable only by the people whose work requires it, and every access is written to an audit log we retain for seven years. Protected health information is never sent to analytics, advertising, or any marketing system, and it never appears on this website.

We use TLS 1.3 in transit, encryption at rest, role-based access limited to the minimum necessary, multi-factor sign-in for staff and one-time codes or authenticator-app sign-in for drivers, automatic session timeouts, and audit logging.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information, we will notify you as required by law.

We keep information for as long as needed for the purpose it was collected for, and for as long as the law requires. Audit records covering protected health information are retained for at least seven years. Information you send through the contact form is kept only as long as we need it to respond and to keep a record of the request.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email dispatch@bonvia.com or call 1-877-BONVIA7. We may need to verify your identity before we act, and we may need to keep information the law requires us to keep.

Rights over health information covered by HIPAA, including the right to request an accounting of disclosures, are described in our Notice of Privacy Practices. Privacy rights also vary by state, and we honor the rights that apply to you.

Washington's My Health My Data Act gives Washington residents rights over consumer health data that is not already covered by HIPAA. Nearly all health information Bonvia holds is protected health information under HIPAA and is handled as described above. If you believe we hold consumer health data about you outside of HIPAA, contact us and we will respond.

This website is not directed to children under 13, and we do not knowingly collect personal information from children through it. When a minor is transported, arrangements are made by a parent, guardian, or an authorized facility, and that information is handled as protected health information.

Our website may link to sites we do not operate. We are not responsible for their content or their privacy practices, and this policy does not apply to them.

We may update this policy. When we do, we will post the revised version here and change the effective date at the top. If the change is material, we will provide additional notice.

Questions about this policy, or about information we hold, go to dispatch@bonvia.com or 1-877-BONVIA7. Mar-Tin Enterprises LLC, doing business as Bonvia, Washington.