For a latest version of our Policy, click here.
Effective: July 7, 2021 - November 24, 2021
We collect information that, alone or in combination with other information in our possession, could be used to identify you (“Personal Information”) as follows:
Personal Information You Provide: We collect the following categories of Personal Information from you when you visit the Site, use the Service as an authorized user on behalf of a Merchant, or otherwise interact with us online:
Internet Activity Information: When you visit, use, and interact with the Site or the Service, we may receive certain information about your visit, use, or interactions. For example, we may monitor the number of people that visit the Site or the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Site or the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:
Derived Information: We may infer your preferences for certain products or services based on the Personal Information we collect about you.
We use Personal Information for the following purposes: To provide the Service, which includes granting you access to the administrative panel for the Merchant(s) for which you are authorized and providing related customer support. For European Users, processing of your Personal Information for these purposes is necessary to enter into, or perform, the Merchant Terms.
To manage our relationship with you, which includes sending administrative information to you relating to the Service and changes to our terms, conditions, and policies, and respond to your inquiries, comments, feedback, or questions. For European Users, processing of your Personal Information for these purposes is necessary for our legitimate interests in responding to your requests, and administering and operating our business.
To prevent fraud, criminal activity, or misuses of the Service, and to ensure the functionality and security of our IT systems, architecture, and networks, to comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties, and enforce our terms and policies. For European Users, processing of your Personal Information for these purposes is necessary for our legitimate interests in administering and operating our business and complying with laws and regulations or legal requests.
For information about what we mean by legitimate interests and the rights of individuals in the European Union (EU), please see the “European Users” section below.
Marketing and Other Communications: We may use your Personal Information to contact you to provide information we believe may be of interest to you. For instance, if you elect to provide your email address, we may use that information to send you special offers. Where required by law, for example if you are in the EU, we will only send you such emails if you consent to us doing so at the time you provide us with your Personal Information. You may opt out of receiving emails by following the instructions contained in each promotional email we send you or by contacting us. If you provide your telephone number, you acknowledge and agree that we may contact you, including but not limited to for promotional, informational and other purposes, using SMS text messages, cellular or telephone calls, and push notifications (if applicable) even if you have opted in to the National Do Not Call List, any state equivalent Do Not Call List or the internal Do Not Call List of any company, and that such messages and calls may be sent using automatic dialing systems or artificial or prerecorded voice messages. You are not required to consent to receive SMS text messages or phone calls as a condition of using the Service. If you would like to opt out of text messages or calls, you may text “STOP” from the device receiving such communications to the source number. In addition, if at any time you do not wish to receive future marketing communications, you may contact us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding management of your account, other administrative matters, and to respond to your requests.
In certain circumstances we may share the categories of Personal Information described above without further notice to you, unless required by the law, with the following categories of third parties:
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and web analytics services.
Integration Partners: Merchants may choose to integrate the Service with other services provided by third parties, such as those providing reservation, ordering, delivery, marketing, advertising, and customer management services (collectively, “Integration Partners”). If the Merchant has elected such an integration, we will share Personal Information with these Integration Partners.
Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Service, or the public, or (v) protect against legal liability.
Where provided for by law and subject to any applicable exceptions, California residents may have the right:
To know the categories of Personal Information that we have collected about you, the business purpose for collecting your Personal Information, and the categories of sources from which the Personal Information was collected; To access the specific pieces of Personal Information that we have collected about you; To know whether we have disclosed your Personal Information for business purposes, the categories of Personal Information so disclosed, and the categories of third parties to whom we have disclosed your Personal Information; To have us, under certain circumstances, delete your Personal Information; To opt out of the sale of your Personal Information – Bbot does not sell Personal Information; and To be free from discrimination related to the exercise of these rights.
Third Party Marketing: California Civil Code Section § 1798.83 permits users of our Site or the Service that are California residents to request the categories of Personal Information we disclosed to third parties for their direct marketing purposes in the year preceding the request, the names and addresses of such third parties, and, in certain circumstances, examples of the products or services marketed by such third parties. These requests may be made once per year. To make such a request, please email us at firstname.lastname@example.org.
The Site and the Service is not directed to children who are under the age of 16. We do not knowingly collect Personal Information from children under the age of 16. If you have reason to believe that a child under the age of 16 has provided Personal Information to us through the Site or the Service please contact us and we will endeavor to delete that information from our databases.
Scope: This section applies to individuals in the EU and the United Kingdom (UK) (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway).
Your Rights: You have the following rights in relation to your Personal Information, under certain circumstances:
Right of access: If you ask us, we will confirm whether we are processing your Personal Information and, if so, provide you with a copy of that Personal Information along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
Right to rectification: If your Personal Information is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Information with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information so you can contact them directly.
Right to erasure: You may ask us to delete or remove your Personal Information, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information with so you can contact them directly.
Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Information in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Information with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information so you can contact them directly.
Right to data portability: You have the right to obtain your Personal Information from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Information in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
Right to object: You may ask us at any time to stop processing your Personal Information, and we will do so: If we are relying on a legitimate interest to process your Personal Information -- unless we demonstrate compelling legitimate grounds for the processing or we need to process your data in order to establish, exercise, or defend legal claims; If we are processing your Personal Information for direct marketing. We may keep minimum information about you in a suppression list in order to ensure your choices are respected in the future and to comply with data protection laws (such processing is necessary for our and your legitimate interest in pursuing the purposes described above);
Right to withdraw consent: If we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.
Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Information, you can report it to the data protection authority that is authorized to hear those concerns (in the UK, the Information Commissioner’s Office (ICO), who can be contacted at https://ico.org.uk/concerns, and in other EU countries the data protection authority of the country in which you are located).
Please see the “Contact Us” section below for information on how to exercise your rights.
Data Transfers: Bbot is based in the United States. The United States may have data protection laws less stringent than or otherwise different from the laws in effect in the EU and the UK. Transfers of Personal Information to Bbot to the United States are necessary to perform the Merchant Terms. If you would like to receive more information on the safeguards we have implemented for the transfer of your Personal Information, please contact us.
Types of Cookies Used: The following chart sets out how we use different categories of cookies and similar technologies, as well as information on your options for managing the settings for the data collection by these technologies:
Used to provide you with services available through the Site or the Service and to use some of its features, such as the ability to log-in and access secure areas and process payments. These are session cookies and are essential for using the Service.
WHO SERVES THE COOKIE/ TECHNOLOGY:
Stripe, Inc. and Plaid, Inc. (payment processing)
Because these cookies are strictly necessary to deliver the Site or the Service, you cannot refuse them.
Used to recognize and count the number of Site visitors or Service users and to gather statistics regarding how visitors move around the Site or the Service (including number of page views, number of visitors, and time spent on each page). This helps us improve the way the Site and the Service works and your experience on it, for example by making sure users can find what they need easily.
WHO SERVES THE COOKIE/ TECHNOLOGY:
You can prevent your data from being collected by Google Analytics on our Site or the Service by downloading and installing the Google Analytics Opt-out Browser Add-on for your current web browser here.
WHO SERVES THE COOKIE/ TECHNOLOGY:
HubSpot: We use a marketing automation and analytics tool provided by HubSpot, Inc. This tool is used to help us analyze how you interact with the Services and enables us to personalize user experience, including through marketing communications. The HubSpot cookies/pixels collect Personal Information submitted by you via web forms, including name, e-mail address, company name, address, phone number, and other information about yourself or your business. Personal Data may also include information about your computer (such as operating system), geographical location (as indicated by publicly available IP address records), browser type, referral source, length of visit, and pages viewed. Learn more about HubSpot’s practices and cookie duration here.
You can prevent your data from being collected by HubSpot by turning off cookies in your browser (please see the “Your Choices Regarding Cookies” section below for more information).
If you access the Site or the Service on your mobile device, you may not be able to control tracking technologies through the settings.
You use the Site and the Service at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you send to us via the Site, the Service or e-mail. Please keep this in mind when disclosing any Personal Information to us via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Site or the Service, or on third party websites.
Send an email to DataRep at email@example.com quoting “Bbot, Inc.” in the subject line; or Contact DataRep through its online webform at www.datarep.com/data-request; or For individuals in the EU, mail your inquiry to DataRep as Bbot’s representative in the EU at the most convenient address listed below under DataRep Mailing Addresses in the EU. For individuals in the UK, mail your inquiry to DataRep as Bbot’s representative in the UK at the address listed below under DataRep Mailing Address in the UK.
PLEASE NOTE: When mailing inquiries, please mark your letters for “DataRep” and not “Bbot, Inc.” or your inquiry may not reach DataRep. Please refer clearly to Bbot, Inc. in your correspondence. On receiving your correspondence, Bbot may request evidence of your identity to ensure that your personal data and the information connected with it is not provided to anyone other than you.