ARTICLE 1: INTRODUCTION & OVERVIEW
ARTICLE 2: SCOPE & APPLICABILITY
ARTICLE 3: DATA COLLECTION PRACTICES
At Bostontasting.com, we collect various types of information, ranging from personal data that can be directly linked to an individual to non-personal statistical data.
3.1. Personal Data We Collect
- Contact Information: This includes your name, address, phone number, and email address, which are primarily used for reservation and booking purposes.
- Payment Details: To facilitate transactions, we may collect data like credit card numbers and billing addresses, though these are processed through secure third-party payment gateways.
- Preferences & Feedback: This refers to your dietary requirements, favorite dishes, feedback on events, and other personal preferences to enhance your Bostontasting experience.
3.2. Non-Personal Data We Collect
- Browser and Device Data: This includes information about the device and browser you use to access our site, such as the device type, operating system, and browser type.
- Usage Data: This pertains to statistical data regarding which pages you visit, how long you stay, and what actions you take on our site.
3.3. Sensitive Data Considerations
Sensitive personal data, as defined by the GDPR and CCPA, includes details about an individual’s race, ethnic origin, politics, religion, trade union membership, genetics, biometrics, health, sex life, or sexual orientation. At Bostontasting.com, we do not intentionally collect such sensitive data. However, if you provide unsolicited sensitive information within your feedback or in any other manner, it will be subject to this policy.
We urge users not to disclose any sensitive personal information unless it’s essential for the purpose of their communication with us. If you wish to provide us with such data, explicit consent will be required.
ARTICLE 4: PURPOSE & USE OF COLLECTED INFORMATION
The data we collect serves multiple purposes, all aimed at enhancing your experience and ensuring the smooth functioning of our services:
- Service Provision: To make reservations, process payments, and ensure you get the most out of Bostontasting.com.
- Personalization: Using your preferences and feedback to curate and recommend events or dishes that align with your tastes.
- Communication: Sending you updates, newsletters, marketing campaigns, and other communications you opt into.
- Site Improvement: Using aggregated and anonymized data to analyze site performance, user behavior, and to improve the overall user experience.
- Safety & Security: To verify accounts, monitor suspicious activities, and ensure the overall security of our platform.
- Legal & Compliance: In situations where we need to comply with legal obligations or in the unlikely event of disputes.
ARTICLE 5: DATA SHARING & THIRD-PARTY INVOLVEMENTS
At Bostontasting.com, while our primary goal is to connect food enthusiasts with the flavors of Boston, we recognize the need for collaboration and partnerships to enhance our offerings. However, this requires sharing some of the data we collect.
5.1. Partners & Service Providers
- Restaurant Partners: To facilitate reservations and honor specific requests, it’s sometimes necessary to share your contact details and preferences with our partner restaurants.
- Payment Processors: While we do not store payment data, third-party payment processors handle your payment transactions, ensuring a secure and seamless process.
- Marketing and Analytics Partners: Third-party vendors assist us in understanding our site’s usage, market our services, and offer promotional deals that may interest you.
- Customer Service Platforms: To provide timely support, some personal data might be shared with customer support platforms.
5.2. Legal Obligations & Mergers
Occasionally, we might have to disclose your information due to legal obligations:
- Law Enforcement: If required by law, for example, through a subpoena or similar legal processes.
ARTICLE 6: USER RIGHTS & DATA ACCESS
Under the GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act), users have certain rights concerning their personal data. At Bostontasting.com, we’ve made it a priority to honor these rights.
6.1. Right to Access (GDPR & CCPA)
You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
6.2. Right to Rectify
Should the data we possess be incorrect or incomplete, you have the right to make us correct it.
6.3. Right to Erasure (“Right to Be Forgotten”)
In certain situations, you can request the deletion of your personal data where there’s no good reason for us to continue processing it.
6.4. Right to Restrict Processing
You have rights to ask us to suspend the processing of your personal data in specific scenarios, such as when you want us to establish its accuracy or the reason for processing it.
6.5. Right to Data Portability
In certain instances, you can request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
6.6. Right to Opt-out (CCPA Specific)
Under the CCPA, users have the right to opt out of the sale of their personal data, if applicable. At Bostontasting.com, we do not sell your personal data.
ARTICLE 7: DATA STORAGE & SECURITY MEASURES
Bostontasting.com understands the value of your personal data. Therefore, we’ve implemented stringent security measures:
We use SSL (Secure Socket Layer) encryption to protect data in transit.
- Secure Servers:
Data at rest is stored in secure servers with restricted access and regular monitoring.
- Regular Audits:
Periodic security audits help identify and rectify vulnerabilities.
- Employee Training:
Our staff undergoes regular training to ensure they’re updated on the best practices concerning data privacy.
ARTICLE 8: CROSS-BORDER DATA TRANSFERS & INTERNATIONAL USERS
Given the global nature of our audience, data might be processed outside the country where you reside. By using our services, you acknowledge that your data may be transferred to and processed in countries outside of your own, with different privacy regulations. Rest assured, wherever your data travels, it is always under the protective umbrella of Bostontasting.com’s security standards and in compliance with legal requirements.
ARTICLE 9: CHILDREN’S PRIVACY & AGE CONSIDERATIONS
Children’s Online Privacy Protection:
At Bostontasting.com, the safety of younger visitors is of paramount importance. We strictly adhere to the requirements of the Children’s Online Privacy Protection Act (COPPA) and other relevant laws. Our website, products, and services are all directed to people who are at least 13 years old or older.
- Age Restrictions:
We do not knowingly collect any information from anyone under 13 years of age. If we become aware that we have inadvertently received personal information from a visitor under the age of 13 on the site, we will delete the information from our records.
- Parental Controls:
We encourage parents and guardians to spend time online with their children and to participate in the interactive activities offered on the sites their children visit. Parents should consider using parental control tools available from online services and software manufacturers that can help provide a child-friendly online environment.
- What Are Cookies?
Cookies are tiny data packets stored on your device to improve website navigation, understand user preferences, and offer a tailored browsing experience.
From remembering your language preferences to understanding which webpage you find most useful, cookies play a vital role in making our site user-friendly.
- Other Technologies:
Apart from cookies, we use tracking pixels, tags, and other technologies to analyze trends, administer the website, and understand user behavior.
Should any significant changes occur, we will notify our users through an email or a prominent notice on our website. This ensures that you’re always aware of the information we collect, how it’s used, and under what circumstances, if any, it’s disclosed.
- Periodic Review:
Even without updates, it’s a good practice to periodically review privacy policies. This ensures you stay informed about the latest practices and policies at Bostontasting.com.
- Effective Date:
ARTICLE 12: CONSENT & USER AGREEMENTS
- Explicit Consent:
Whenever we need explicit consent for data collection and processing (like for certain types of marketing), we’ll ensure we obtain it in a clear and unmistakable manner.
- Withdrawal of Consent:
Remember, consents provided can be withdrawn at any point. However, this doesn’t affect any processing that’s already taken place.
- User Responsibilities:
While we strive for transparency, users also bear some responsibility. Ensuring that your data is accurate, staying informed by reviewing policies, and making informed decisions about consent are a few such responsibilities.
ARTICLE 13: CONSENT & USER AGREEMENTS
- Explicit Consent:
In specific scenarios, we may seek explicit consent from you, especially when collecting sensitive data or when a new purpose of data processing arises that wasn’t defined previously. You will always have the right to decline or withdraw such consent without any detrimental consequences. However, some services may be limited or inaccessible without providing such consent.
- Review & Stay Updated:
ARTICLE 14: EXERCISING YOUR RIGHTS: STEPS & PROCEDURES
We value and respect your rights related to data privacy and protection. Exercising these rights is made as straightforward and transparent as possible:
- Submitting a Request:
If you wish to exercise any of your rights, initiate by sending an email to our Data Protection Officer or through our online portal. Clearly state your specific request for faster processing.
To protect your data, upon receiving your request, we may ask for verification details to ensure the requester is the rightful owner of the data.
Post-verification, we aim to respond to and fulfill your request within one month. For complex requests, this might extend to three months, but we’ll inform you if that’s the case.
- No Charges:
Typically, processing your requests come at no charge. However, for repetitive or manifestly unfounded claims, we might charge a minimal fee.
ARTICLE 15: DISPUTE RESOLUTION & RECOURSES
If direct resolution attempts don’t yield satisfactory results, you might have the option to select a third-party mediator. This ensures both parties reach a fair agreement.
In scenarios where disputes can’t be resolved through the aforementioned channels, users retain the right to seek legal channels as defined under GDPR, CCPA, or any relevant jurisdiction.
ARTICLE 16: THIRD-PARTY LINKS & EXTERNAL WEBSITES
Navigation Beyond Bostontasting.com:
Our platform might offer links to third-party websites, plugins, and applications for added convenience. Clicking on these links may allow third parties to collect or share your personal data. Note that we neither control nor are responsible for these external entities.
- Your Responsibility:
Always be aware when you leave our site and read the privacy policies of every website you visit. Our policy solely pertains to information collected by Bostontasting.com.
- No Endorsement:
Linking does not imply our endorsement, and we exercise no control over third-party practices. Exercise caution and familiarize yourself with their privacy standards.
ARTICLE 17: GDPR-SPECIFIC PROVISIONS & CLAUSES
The General Data Protection Regulation (GDPR) is a significant piece of data protection legislation that emanates from the European Union. As Bostontasting.com serves EU residents, we’re committed to fulfilling our obligations.
Legal Basis for Processing:
We only process personal data if there’s a valid legal basis, including:
- Contractual obligations
- Legitimate interests
- Legal compliance
Data Protection Impact Assessments (DPIA):
For new projects or significant changes to our platform, we might conduct a DPIA to ensure data protection risks are identified and addressed.
Should there be any data breach that poses a risk to our users, Bostontasting.com commits to notifying the relevant EU supervisory authority within 72 hours, unless the breach is unlikely to result in a risk to the rights and freedoms of the users.
ARTICLE 18: CCPA-SPECIFIC PROVISIONS & DISCLOSURES
The California Consumer Privacy Act (CCPA) offers specific rights to California residents. Bostontasting.com acknowledges these rights and has integrated provisions to cater to California-based users.
Right to Know and Access:
California residents have the right to request that Bostontasting.com disclose specific pieces of personal information it has collected about them.
California residents have the right to receive equal service and pricing from Bostontasting.com, even if they exercise their privacy rights under the CCPA.
Sale of Personal Information:
Bostontasting.com does not sell personal information. California residents have the right to direct any business that sells personal information to stop selling that information.
ARTICLE 19: LIMITATION OF LIABILITY & WARRANTY
While Bostontasting.com takes utmost care in protecting your data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee its absolute security.
Limitation of Liability:
In no event shall Bostontasting.com, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential or punitive damages, including without limitation, loss of profits, data, use, or other intangible losses, resulting from:
- Your access to or use of or inability to access or use the platform;
- Any unauthorized access to or use of our servers and/or any personal data stored therein;
- Any errors or omissions in any content or for any loss or damage incurred as a result of the use of any content posted, emailed, transmitted, or otherwise made available through the platform;
- Any other event related to the platform.
ARTICLE 20: EFFECTIVE DATE
Last Updated on September 4, 2023