Welcome to the website (“Site”) of Bbot, LLC. (“Bbot,” “we,” “us,” or “our”). Bbot provides online menu and ordering websites, platforms, and services on behalf of our customers, which include hotels, bars, restaurants, and other merchants (each, a “Merchant”) (such services and websites are referred to collectively in this Merchant Privacy Policy (the “Privacy Policy”) as the “Service”). This Privacy Policy explains what Personal Information (defined below) we collect from visitors to the Site, prospective Merchant customers, and Merchants’ authorized users of the Service (collectively, “you” or “your”), as well as describes how we use and share that information, and your choices regarding your information.
This Privacy Policy is incorporated into and forms part of our Merchant Terms and Conditions (the “Merchant Terms”). Capitalized terms used herein but not defined have the meanings ascribed to them in the Merchant Terms. Personal Information collected from Merchants’ individual end users through the Service is governed by the End User Privacy Policy and the End User Terms and Conditions.
Before using the Site or the Service, or submitting any Personal Information to us, please review this Privacy Policy carefully and Contact Us if you have any questions. By using the Site or the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise use the Service.
We collect information that, alone or in combination with other information in our possession, could be used to identify you (“Personal Information”) as follows:
Personal Information You Provide: We collect the following categories of Personal Information from you when you visit the Site, use the Service as an authorized user on behalf of a Merchant, an interaction with our sales or customer support team, a response to one of surveys, or otherwise interact with us online:
Identification Information: Depending on your use of the Service, we may collect your name, email address, phone number, company name, and mailing/billing addresses. Additionally, if you are using the Service as a Merchant’s authorized user, we will collect the email and password you use to log into the Service.
Financial Information: Our payment processor(s) will collect the financial information necessary to process your payment for the Service as Merchant, such as your payment card number and authentication details. Please note, however, that we store only a tokenized version of such information and do not maintain payment card information on our servers. We may also collect your Tax Information Number or Social Security Number as a part of a one-time Form 1099 entry, but this information goes directly to our payment processor and is not stored on Bbot’s systems.
Commercial Information: We may retain a history of the products or services you browse and/or purchase as a part of the Service.
Communication Information: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback. Providing Communication Information is optional to you.
Social Media Information: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Information that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
Internet Activity Information: When you visit, use, and interact with the Site or the Service, we and our service providers may receive certain information about you, your computer or mobile device, your visit, use, or interactions. For example, we may monitor the number of people that visit the Site or the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Site or the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:
Log Data: Information that your browser automatically sends whenever you visit the Site or the Service. Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site or the Service.
Cookies: Please see the “Cookies” section below to learn more about how we use cookies.
Device Information: Includes such information as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state or geographic area.
Usage Information: We collect information about how you use the Site or the Service, such as the types of content that you view or engage with, what you click, when you perform those actions, what language preference you have, the features you use, the actions you take, and the time, frequency, and duration of your activities.
Location Information: We derive a rough estimate of your location from your IP address. Email Open/Click Data: We use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.
Personal Information Collected from Third Parties and Publicly Available Sources: We may collect Personal Information, including Identification Information and Commercial Information from third parties, including our Merchants about their authorized users, Integration Partners (as defined below), lead generation services, data providers, identity verification services, credit bureaus (if applicable), banks and other financial institutions, credit card companies. and/or publicly available sources, such as public Internet listings and social media channels.
Derived Information: We may infer your preferences for certain products or services based on the Personal Information we collect about you.
We use Personal Information for the following purposes:
For information about what we mean by legitimate interests and the rights of individuals in the European Union (EU), please see the “European Users” section below.
Aggregated Information: We may aggregate Personal Information and use the aggregated information to analyze the effectiveness of the Site or the Service, to improve and add features to the Site or the Service, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of the Site or the Service and share aggregated information like general user statistics with prospective business partners. We may collect aggregated information through the Site or the Service, through cookies, and through other means described in this Privacy Policy.
Marketing and Other Communications: We may use your Personal Information to contact you to provide information we believe may be of interest to you. For instance, if you elect to provide your email address, we may use that information to send you special offers. Where required by law, for example if you are in the EU, we will only send you such emails if you consent to us doing so at the time you provide us with your Personal Information. You may opt out of receiving emails by following the instructions contained in each promotional email we send you or by contacting us. If you provide your telephone number, you acknowledge and agree that we may contact you, including but not limited to for promotional, informational and other purposes, using SMS text messages, cellular or telephone calls, and push notifications (if applicable) even if you have opted in to the National Do Not Call List, any state equivalent Do Not Call List or the internal Do Not Call List of any company, and that such messages and calls may be sent using automatic dialing systems or artificial or prerecorded voice messages. You are not required to consent to receive SMS text messages or phone calls as a condition of using the Service. If you would like to opt out of text messages or calls, you may text “STOP” from the device receiving such communications to the source number. In addition, if at any time you do not wish to receive future marketing communications, you may contact us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding management of your account, other administrative matters, and to respond to your requests.
In certain circumstances, we may share the categories of Personal Information described above without further notice to you, unless required by the law, with the following categories of third parties:
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and web analytics services.
Integration Partners: Merchants may choose to integrate the Service with other services provided by third parties, such as those providing reservation, ordering, delivery, marketing, advertising, and customer management services, and each shall be listed on the Bbot API (as defined below) for Merchants to review (collectively, “Integration Partners”). If the Merchant has elected such an integration, we will share Personal Information with these Integration Partners, and any such shared Personal Information shall be subject to the privacy policies of the related Integration Partner.
Further, Bbot may choose to partner and integrate its Service with Integration Partners. This is in order to enable us to provide Merchant with such additional features, functionalities and/or enhancements from Integration Partners as may be requested from Merchant from time to time. Merchant hereby agrees and provides its consent to the transfer by Bbot of any Customer Data, include potential user Customer Data and other sales leads, to Integration Partners through the application programming interface (“Bbot API”) or any other secure data transfer mechanism approved by Bbot.
No Liability for Third-Party Integration Partner Data Transfers: Customer Data transferred to any approved Third-Party Partners through the Bbot API, or any other secure data transfer mechanism approved by Bbot, shall be subject to the data security systems and controls of such Third-Party Partner receiving Customer Data from Bbot. Merchant hereby acknowledges and accepts that Bbot has no control over such third party data security systems, and agrees that Bbot shall have no responsibility for any loss or damage to any transferred Customer Data hereunder. For the avoidance of doubt, Bbot shall not be liable for any claims, damages, losses and/or liabilities arising in connection with any breach of Customer Data caused by, or attributable to, any act or omission of such Third-Party Partner.
Further Limitations: As a technology and data enablement SaaS provider to connected devices, Bbot may not be the entity charging you for use of our Services. In such circumstances, the ultimate nature, scope and use of information that is collected from users of our Services is subject to the privacy policies of the company charging for use of our Services – not Bbot. If you have questions or concerns about data collected by a particular device or application, you should contact the applicable provider or refer to the privacy policy applicable to that application or device.
Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Service, or the public, or (v) protect against legal liability.
We keep Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a legitimate business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer. If you have elected to receive marketing communications from us, we retain information about your marketing preferences until you opt out of receiving these communications and in accordance with our policies. To determine the appropriate retention period for your Personal Information, we will consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we use your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Where provided for by law and subject to any applicable exceptions, California residents may have the right:
If you would like to exercise any or all of these rights, you may do so by emailing us at privacy@bbot.menu. After we receive your request, we may request additional information from you to verify your identity. Your authorized agent may submit requests in the same manner, although we may require the agent to present signed written permission to act on your behalf, and you may also be required to independently verify your identity with us and confirm that you have provided the agent permission to submit the request. Please contact us with questions or to request access to an alternative format of this Privacy Policy.
Third Party Marketing: California Civil Code Section § 1798.83 permits users of our Site or the Service that are California residents to request the categories of Personal Information we disclosed to third parties for their direct marketing purposes in the year preceding the request, the names and addresses of such third parties, and, in certain circumstances, examples of the products or services marketed by such third parties. These requests may be made once per year. To make such a request, please email us at privacy@bbot.menu.
The Site and the Service is not directed to children who are under the age of 16. We do not knowingly collect Personal Information from children under the age of 16. If you have reason to believe that a child under the age of 16 has provided Personal Information to us through the Site or the Service please contact us and we will endeavor to delete that information from our databases.
Scope: This section applies to individuals in the EU and the United Kingdom (UK) (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway).
Data Controller: Bbot is the data controller for the processing of your Personal Information subject to this Privacy Policy. You can find Bbot’s contact information in the “Contact Us” section below.
Legal Bases for Processing: This Privacy Policy (the section “How We Use Personal Information”) describes the legal bases we rely on for the processing of your Personal Information. Please contact us if you have any questions about the specific legal basis we are relying on to process your Personal Information.
Your Rights: You have the following rights in relation to your Personal Information, under certain circumstances:
Right of access: If you ask us, we will confirm whether we are processing your Personal Information and, if so, provide you with a copy of that Personal Information along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
Right to rectification: If your Personal Information is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Information with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information so you can contact them directly.
Right to erasure: You may ask us to delete or remove your Personal Information, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information with so you can contact them directly.
Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Information in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Information with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Information so you can contact them directly.
Right to data portability: You have the right to obtain your Personal Information from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Information in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
Right to object: You may ask us at any time to stop processing your Personal Information, and we will do so: If we are relying on a legitimate interest to process your Personal Information -- unless we demonstrate compelling legitimate grounds for the processing or we need to process your data in order to establish, exercise, or defend legal claims; If we are processing your Personal Information for direct marketing. We may keep minimum information about you in a suppression list in order to ensure your choices are respected in the future and to comply with data protection laws (such processing is necessary for our and your legitimate interest in pursuing the purposes described above);
Right to withdraw consent: If we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.
Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Information, you can report it to the data protection authority that is authorized to hear those concerns (in the UK, the Information Commissioner’s Office (ICO), who can be contacted at https://ico.org.uk/concerns, and in other EU countries the data protection authority of the country in which you are located).
Please see the “Contact Us” section below for information on how to exercise your rights.
Data Transfers: Bbot is based in the United States. The United States may have data protection laws less stringent than or otherwise different from the laws in effect in the EU and the UK. Transfers of Personal Information to Bbot to the United States are necessary to perform the Merchant Terms. If you would like to receive more information on the safeguards we have implemented for the transfer of your Personal Information, please contact us.
The Service may contain links to other websites or services not operated or controlled by us, including social media services (“Third-Party Sites”). The information that you share with Third-Party Sites will be governed by the specific privacy policies and terms of service of the Third-Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third-Party Sites directly for information on their privacy practices and policies.
We use cookies and other tracking technologies to operate and administer the Service, gather usage data, and improve your experience. A “cookie” is a piece of information sent to your browser or device by a website you visit. Cookies can be stored on your computer or device for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it) and help recognize your computer when you open your browser and browse the Internet again (persistent cookies).
For more details on cookies please visit All About Cookies. For European Users, when you first visit the Site and the Service, you will be asked to consent to the use of cookies and similar technologies (other than Strictly Necessary Cookies as defined below) on the Site and the Service in accordance with this Privacy Policy, and if you accept we will store these cookies and similar technologies on your computer. Our lawful basis for setting cookies and similar technologies other than Strictly Necessary Cookies is your consent, which you can provide in the way described above.
We may also rely on another lawful basis for our subsequent processing of your Personal Information collected through cookies and similar technologies, such as our legitimate interest in conducting statistical analysis, as described in this Privacy Policy.Types of Cookies Used: The following chart sets out how we use different categories of cookies and similar technologies, as well as information on your options for managing the settings for the data collection by these technologies:
Used to provide users with the services and functionality offered through our Service, such as enabling ordering and payment, and to use some of its features, such as the ability to log-in and access secure areas and process payments. These are session cookies and are essential for using the Service.
Stripe, Inc. and Plaid, Inc. (payment processing)
Because these cookies are strictly necessary to deliver the Service, you cannot refuse them.
Used to recognize and count the number of visitors to the Service and to gather statistics regarding the use of the Service (including number of page views, number of visitors, and time spent on each page). This helps us improve the way our Service works and your experience on it, for example by making sure users can find what they need easily.
The analytics tools used on the Service include:
Google Analytics: a web analytics service provided by Google Inc. (“Google”). The information collected by Google (including your internet protocol (IP) address) will be transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf for the purpose of evaluating your use of the Service, compiling reports on the Service activity and providing further services to us relating to the Service usage. Learn more about Google Analytics’ privacy practices here, and for information on the expiration of these cookies read here.
Facebook Analytics: Learn more about these technologies and their duration here: Privacy Policy.
FullStory: Learn more about these technologies here: Privacy Policy.
You can prevent your data from being collected by Google Analytics on the Service by downloading and installing the Google Analytics Opt-out Browser Add-on for your current web browser here.
We use cookies and pixels from third parties that enable such parties to serve ads to you based on your visit to the Service and also allow us to analyze the performance of our ads.
HubSpot: We use a marketing automation and analytics tool provided by HubSpot, Inc. This tool is used to help us analyze how you interact with the Services and enables us to personalize user experience, including through marketing communications.
The HubSpot cookies/pixels collect Personal Information submitted by you via web forms, including name, e-mail address, company name, address, phone number, and other information about yourself or your business. Personal Data may also include information about your computer (such as operating system), geographical location (as indicated by publicly available IP address records), browser type, referral source, length of visit, and pages viewed. Learn more about HubSpot’s practices and cookie duration here.
You can prevent your data from being collected by HubSpot by turning off cookies in your browser (please see the “Your Choices Regarding Cookies” section below for more information).
Your Choices Regarding Cookies: On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below for guidance on how to modify your web browser’s settings on the most popular browsers:
Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Service and you may not be able to benefit from the full functionality of the Service.
Advertising networks may use cookies to collect Personal Information. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org and follow the opt-out instructions there. If you are located in the European Union, visit the European Interactive Digital Advertising Alliance’s Your Online Choices opt-out tool here.
If you access the Site or the Service on your mobile device, you may not be able to control tracking technologies through the settings.
Online Tracking and Do Not Track Signals: We and our third party service providers may use cookies, pixels, or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site or the Service. The Site and the Service currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Policy to describe how we do so.
You use the Site and the Service at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you send to us via the Site, the Service or e-mail. Please keep this in mind when disclosing any Personal Information to us via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Site or the Service, or on third party websites.
In certain circumstances providing Personal Information is optional. However, if you choose not to provide Personal Information that is needed to use some features of the Site or the Service, you may be unable to use those features. You can also contact us if you need to update or correct your Personal Information, or would like to delete your account. Please note that we will need to verify that you have the authority to delete the account and certain activity generated prior to deletion may remain stored by us and may be shared with third parties as detailed in this Privacy Policy.
The Site, the Service and our business may change from time to time. As a result we reserve the right and may change this Privacy Policy at any time. If we make material changes to this Privacy Policy in order to comply with the applicable law or due to changing business practices, we will post an updated version on this page, unless another type of notice is required by the applicable law. Older versions of this Privacy Policy can be found under “Last Updated.”
If you have any questions about this Privacy Policy or wish to exercise your rights, please feel free to contact us at privacy@bbot.menu. If you are an individual in the EU or the UK, you can also contact DataRep, which has been appointed as Bbot’s representative in the EU and as Bbot’s representative in the UK on matters related to the processing of personal data activities that take place, respectively, in the EU and the UK. To make such an inquiry, please contact DataRep as described below.
PLEASE NOTE: When mailing inquiries, please mark your letters for “DataRep” and not “Bbot, LLC.” or your inquiry may not reach DataRep. Please refer clearly to Bbot, LLC. in your correspondence. On receiving your correspondence, Bbot may request evidence of your identity to ensure that your personal data and the information connected with it is not provided to anyone other than you.