Privacy Notice

Effective Date: October 1, 2026

The New Mexico Primary Care Association (NMPCA) respects your privacy. This Privacy Notice explains how NMPCA collects, uses, shares, and protects personal information when you use the NMPCA Health Center Job Board (the “Platform”).

1. Who Operates the Platform

The NMPCA Health Center Job Board is operated by the New Mexico Primary Care Association (NMPCA) to connect job seekers with participating New Mexico health centers and other employers.

NMPCA provides the Platform as a workforce resource. NMPCA is not the employer for positions posted by participating organizations and does not make hiring decisions on behalf of employers.

Participating employers may have their own privacy policies and practices regarding information they receive through the Platform.

2. Information We Collect

Depending on how you use the Platform, we may collect the following types of information:

a. Account Information

When you create an account, we may collect information such as your name, email address, username, password, and other information needed to establish and manage your account.

b. Job Seeker Profile Information

If you create a job seeker profile, you may provide information such as your employment history, education, skills, certifications, professional interests, location, and other information you choose to include in your profile.

c. Resumes and Application Materials

If you upload a resume, cover letter, or other application materials, we collect and store those materials so they can be used for the purposes for which you submitted them through the Platform.

d. Employer Information

If you represent an employer or health center, we may collect information such as your name, job title, organization name, email address, contact information, and information you provide when creating or managing job postings.

e. Communications

We may collect information you provide when you contact NMPCA, submit questions or feedback, or otherwise communicate with us about the Platform.

f. Usage Information

We may automatically collect certain information about how you use the Platform, such as your IP address, browser type, device information, operating system, pages viewed, and other technical or usage information.

3. How We Use Your Information

We may use personal information to:

• Create and manage user accounts;
• Provide and operate the Platform;
• Allow employers to post and manage job opportunities;
• Allow job seekers to search for employment opportunities;
• Facilitate connections between job seekers and participating employers;
• Process and transmit job applications and application materials;
• Improve the Platform and user experience;
• Monitor Platform performance and security;
• Respond to questions, requests, and feedback;
• Send account-related or Platform-related communications;
• Conduct analytics and research related to workforce and Platform use; and
• Comply with applicable laws and legal obligations.

4. Job Seeker Profiles and Resumes

Job seekers may choose to create a profile on the Platform. Job seeker profiles may be searchable and viewable by participating employers.

Information that you choose to include in your job seeker profile may therefore be viewed by participating employers.

If you upload a resume or other information to your job seeker profile, that information may be accessible to participating employers through the Platform.

Please carefully consider what information you choose to include in your profile or resume. We recommend that you do not include information that you do not want potential employers to see.

Job Applications

When you apply for a position through the Platform, the information and documents you choose to submit—including your resume, cover letter, and other application materials—may be shared with the employer associated with that job posting.

Once application materials have been provided to an employer, the employer is responsible for its own use, storage, and handling of that information and may be subject to its own privacy policies and legal obligations.

5. How We Share Your Information

We may share personal information in the following circumstances:

a. With Participating Employers

We may share information with participating employers when:

• You make your job seeker profile available through the Platform;
• An employer views your searchable job seeker profile;
• You apply for a position; or
• You otherwise choose to interact with an employer through the Platform.

b. With Service Providers

We use third-party service providers to operate and maintain the Platform. These providers may process information on NMPCA's behalf for purposes such as:

• Job-board technology and software;
• Website hosting and technical infrastructure;
• Account authentication and security;
• Email and communications; and
• Other services necessary to operate the Platform.

These service providers are not authorized to use personal information collected through the Platform for their own independent purposes.

c. Legal and Safety Reasons

We may disclose information when reasonably necessary to comply with applicable law, regulation, legal process, or a valid legal request; protect the rights, safety, or property of NMPCA, Platform users, or others; or investigate or prevent fraud, security issues, or other unlawful activity.

d. With Your Direction

We may share information when you specifically request or authorize us to do so.

6. Sale of Personal Information and Targeted Advertising

NMPCA does not sell personal information to third parties for monetary consideration.

NMPCA does not use personal information collected through the Platform for targeted advertising.

JBoard, the technology provider for the Platform, does not use information collected through the Platform for its own independent purposes.

7. Cookies and Similar Technologies

The Platform uses cookies that support essential functions and security.

JBoard currently uses the following necessary cookies:

• XSRF-TOKEN: A security cookie used to help protect the Platform against Cross-Site Request Forgery (CSRF) attacks. This cookie expires after one day.
• jboard_tenant_session: A session cookie used to provide authentication and maintain a user's session. This cookie expires after one day.

These cookies are necessary for core Platform functionality and cannot be disabled through the Platform without affecting certain features.

The Platform may also use cookies associated with third-party services when those services are enabled. For example, JBoard documentation identifies Stripe as a service that may use cookies for payment processing. NMPCA is not currently using Stripe for the Platform because the Platform is not currently charging users for services.

8. Data Retention and Deletion

We retain personal information for as long as reasonably necessary to provide and maintain the Platform, facilitate job applications and employer connections, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, maintain appropriate business records, and support legitimate operational needs.

Job Seeker Account Deletion

When a job seeker deletes their Platform account, their resume and profile information are deleted from the Platform.

However, if the job seeker has already applied for a position and their application materials have been provided to an employer, those materials may remain with the employer. NMPCA does not control an employer's retention or deletion of information after it has been provided to that employer.

9. Your Privacy Choices and Rights

You may be able to:

• Access and update information in your Platform account;
• Update or modify your job seeker profile;
• Delete your Platform account;
• Request access to personal information NMPCA maintains about you;
• Request correction of inaccurate or incomplete information; and
• Ask questions about how your personal information is collected or used.

When you delete your Platform account, your job seeker profile and resume are deleted from the Platform, subject to information that has already been provided to an employer through an application.

To request access, correction, or deletion of personal information that you cannot manage through your account, contact NMPCA at nmpca@nmpca.org.

We may need to verify your identity before completing certain requests. In some circumstances, we may need to retain certain information to comply with legal obligations, resolve disputes, maintain security, or otherwise fulfill legitimate business or legal purposes.

10. Data Security

NMPCA takes reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.

However, no method of transmitting information over the internet or storing information electronically is completely secure. We cannot guarantee the absolute security of personal information.

11. Children and Minors

The Platform is intended for individuals seeking employment, internships, training opportunities, and other workforce opportunities.

We do not knowingly collect personal information from children under 13 through the Platform. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete the information.

Individuals under 18 should review the requirements of any employer, internship, or other opportunity before providing personal information through the Platform.

12. Third-Party Websites

The Platform may contain links to websites or services operated by third parties, including participating employers, educational institutions, government agencies, or other organizations.

NMPCA is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of those websites before providing personal information.

13. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, the Platform, or applicable legal or regulatory requirements.

When we make changes, we will update the Effective Date at the top of this Privacy Notice. We encourage you to review this Notice periodically for updates.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Notice or NMPCA's privacy practices, please contact:

New Mexico Primary Care Association

4206 Louisiana Blvd NE

Albuquerque, NM 87109

Email: nmpca@nmpca.org