Privacy Statement and Cookie Policy
BAS is committed to protecting the privacy of individuals who interact with our website and administration services. This statement describes our data collection, use, and protection practices.
Last Updated: June 2026Benefits Administration Services, Inc. ("BAS," "we," "us," or "our") is committed to protecting the privacy of individuals who interact with our website, administration portals, and related services. This Privacy Statement describes how we collect, use, disclose, and protect information obtained through our web properties and the services we provide.
This Privacy Statement applies to the BAS website located at basusa.com and any related subdomains or web properties operated by BAS. It does not apply to information collected by third-party websites or services that may be linked from our site.
1. Collection of Personal Information
BAS collects personal information that individuals voluntarily provide to us through the following interactions:
- Submitting a contact form, consultation inquiry, or service request
- Requesting information about BAS administration services
- Subscribing to BAS newsletters or compliance communications
- Scheduling a discovery call or consultation
- Interacting with BAS client portals or administration systems
- Communicating with BAS by phone, email, or written correspondence
Personal information we may collect includes:
- Name, job title, and organization name
- Business email address and phone number
- Mailing or business address
- Inquiry details, service interests, and submitted messages
- Organization type, company size, and buyer type
- Uploaded files or attachments submitted through contact forms
- Browser and device information collected through cookies and similar technologies
We collect this information only as necessary to respond to inquiries, provide services, and fulfill the purposes described in this statement. We do not collect sensitive personal information unless required to provide a specific service and with appropriate notice.
2. How We Use Information
BAS uses the personal information we collect for the following purposes:
- Responding to inquiries and routing requests to the appropriate BAS team
- Providing, maintaining, and improving our administration services
- Sending administrative and compliance-related communications
- Delivering newsletters, updates, and educational content to subscribers
- Analyzing website usage and improving user experience
- Complying with legal, regulatory, and contractual obligations
- Preventing fraud and maintaining the security of our systems
- Fulfilling any other purposes described at the time of collection
BAS does not sell personal information to third parties. We do not use personal information collected through our website to build third-party advertising profiles.
Marketing communications: If you have subscribed to BAS newsletters or communications, you may unsubscribe at any time by following the instructions included in each communication or by contacting us directly.
3. Disclosure of Information
BAS may share personal information in the following circumstances:
- Internal operations: With BAS team members and representatives responsible for reviewing and responding to your inquiry
- Service providers: With vendors and service providers who assist us in operating our website, sending communications, managing data, and delivering services — subject to appropriate confidentiality obligations
- Legal requirements: When required by law, regulation, court order, or other legal process
- Protection of rights: To protect the rights, property, or safety of BAS, our clients, employees, or others
- Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality agreements
BAS does not sell, rent, trade, or otherwise transfer personal information to third-party marketers or advertising networks.
4. Compliance With Laws
BAS administers employee benefit programs subject to federal and state regulations including ERISA, COBRA, the Affordable Care Act (ACA), HIPAA (where applicable to plan administration), and other applicable laws and regulations. Our privacy and data-handling practices are designed to support compliance with these requirements as they relate to our administration activities.
Specific regulatory compliance obligations may apply depending on the nature of your engagement with BAS and the administration services we provide to your organization. BAS maintains policies and procedures appropriate for a benefits administration organization operating at institutional scale.
Note for benefit plan participants: If you are an employee or plan participant seeking information about your personal benefit records or plan administration data, contact your employer or plan administrator directly. BAS operates as a third-party administrator and directs participant-level inquiries through plan sponsor channels.
5. Third-Party Links
Our website may contain links to third-party websites, services, and resources that are not operated or controlled by BAS. These links are provided for convenience and informational purposes only.
BAS is not responsible for the privacy practices, content, or security of third-party websites. We do not endorse or make any representations about third-party sites, and their inclusion on our website does not imply a partnership or affiliation.
We encourage you to review the privacy policies of any third-party website you visit before providing personal information.
6. Security
BAS maintains reasonable technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. Our infrastructure and operational practices reflect security standards appropriate for a benefits administration organization managing sensitive employer and program data.
Security measures we maintain include access controls, data transmission protections, and operational procedures designed to protect information under our administration.
No method of electronic transmission or storage is completely secure. While BAS uses commercially reasonable measures to protect personal information, we cannot guarantee the absolute security of data transmitted to or stored on our systems.
For security concerns or to report a potential vulnerability, contact BAS at contact@basusa.com.
7. Data Retention
BAS retains personal information for as long as necessary to fulfill the purposes described in this statement and to comply with applicable legal and regulatory requirements. Retention periods vary based on the type of information and the nature of the relationship or engagement.
Factors that influence retention periods include:
- Legal and regulatory retention requirements applicable to benefit administration
- The duration of an active client or service relationship
- Ongoing legal or compliance obligations
- Business operational requirements
When personal information is no longer needed for the purposes for which it was collected, BAS disposes of it in accordance with our data governance procedures.
8. User Rights
Depending on applicable law, individuals may have certain rights with respect to personal information that BAS holds about them. These may include:
- Access: The right to request information about personal data BAS holds about you
- Correction: The right to request correction of inaccurate or incomplete personal information
- Deletion: The right to request deletion of personal information, subject to legal retention requirements and other lawful bases for continued processing
- Opt-out of marketing: The right to unsubscribe from marketing or newsletter communications at any time
To exercise any of these rights, submit a request to BAS using the contact information provided in the Contact section of this statement or through the BAS Contact page. BAS will respond to requests in a reasonable timeframe consistent with applicable legal requirements.
Verification of identity may be required before we can fulfill certain requests. BAS will not discriminate against individuals for exercising their privacy rights.
9. California Rights
California residents may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and related regulations.
Right to Know
California residents may request disclosure of the categories and specific pieces of personal information BAS has collected about them, the categories of sources from which the information was collected, the business or commercial purposes for collection, and the categories of third parties with whom the information was shared.
Right to Delete
California residents may request deletion of personal information BAS has collected, subject to applicable legal exceptions, including information required for compliance with legal obligations or to complete an active administration engagement.
Right to Opt Out of Sale
BAS does not sell personal information as defined under California law. California residents do not need to submit a separate opt-out request for the sale of personal information.
How to Submit a California Privacy Request
To submit a California privacy request, contact BAS at contact@basusa.com or through the BAS Contact page. Include "California Privacy Request" in the subject line or message. BAS will respond within the timeframe required under applicable California law.
10. Cookies and Tracking Technologies
BAS uses cookies and similar tracking technologies on our website to support site functionality, understand how visitors use our site, and improve the user experience. This section describes the types of cookies we use and how they are applied.
What Are Cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They allow websites to recognize your device and remember certain information across sessions. Cookies may be session-based (deleted when you close your browser) or persistent (remaining until they expire or are deleted).
Types of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Required for core website functionality including navigation, form submissions, and security. These cookies cannot be disabled without affecting site operation. | Session | |
| Performance | Collect anonymous data about how visitors use our website, including pages visited and time spent. Help BAS identify and improve performance issues. | Up to 2 years | |
| Functional | Remember preferences and settings to provide a more consistent experience across visits, such as previously selected options. | Up to 1 year | |
| Analytics | Help BAS understand aggregate traffic patterns, referral sources, and visitor behavior to improve website content and structure. Data is aggregated and does not identify individual visitors. | Up to 2 years |
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to:
- View cookies currently stored by your browser
- Delete cookies individually or all at once
- Block all cookies or cookies from specific websites
- Set preferences for how browsers handle cookies going forward
Please note that disabling or deleting certain cookies may affect the functionality of the BAS website. Strictly necessary cookies cannot be disabled without impacting core site operation.
Third-Party Analytics
BAS may use third-party analytics services to understand website usage. These services may set their own cookies subject to their respective privacy policies. BAS does not grant third-party analytics providers access to personally identifiable information beyond what is required for aggregate analysis.
11. Disclaimer
The information provided on the BAS website is for general informational purposes about our company and services. While we make reasonable efforts to ensure the accuracy and completeness of the information presented, BAS makes no representations or warranties of any kind — express or implied — regarding the completeness, accuracy, reliability, suitability, or availability of the information, products, or services described on this site.
BAS shall not be liable for any losses, claims, damages, or expenses arising from decisions made based on information found on this website. Nothing on this website constitutes legal, compliance, financial, or professional advice. Individuals and organizations should consult qualified professionals regarding their specific circumstances.
Nothing on this website creates an attorney-client relationship or professional advisory relationship between BAS and any visitor or organization. BAS provides benefits administration services — not legal or compliance advice.
12. Policy Changes and Contact
BAS may update this Privacy Statement from time to time to reflect changes in our practices, services, legal requirements, or regulatory guidance. When we make material changes, we will post the updated statement on this page and revise the "Last Updated" date at the top of this document.
Continued use of the BAS website following any changes to this statement constitutes your acknowledgment of the revised terms.
Contact BAS Regarding Privacy
For questions, concerns, or requests related to this Privacy Statement or BAS data practices, please contact us:
- Email: compliance@basusa.com
- Phone: +1 (800) 945-5513
- Mail: Benefit Allocation Systems, LLC, c/o General Counsel, PO Box 62407, King of Prussia, PA 19406
- Online: Contact BAS
BAS will acknowledge and respond to privacy inquiries in a reasonable timeframe consistent with applicable legal requirements.
Questions About BAS Privacy or Data Practices?
Contact BAS regarding privacy practices, cookie usage, security concerns, or personal data requests.
-
Submit a privacy request to BAS by emailing contact@basusa.com or using the BAS Contact page. Include your full name, contact information, and a description of your request (access, correction, or deletion). BAS will verify your identity and respond in a timeframe consistent with applicable legal requirements. Requests from benefit plan participants should be directed through your plan sponsor or employer.