Where applicable, a separate agreement may govern the delivery, access, and use of the Platform and/or Services between BST and a customer of BST (the “Customer”, and such agreement, the “Customer Agreement”). The Customer that entered into the Customer Agreement with BST may authorize Us to collect, process, and store your Personal Information and associated Customer data. If you have any questions about the information BST has been authorized by a Customer to process on your behalf, you may contact the Customer that has authorized such collection, processing and/or storage by BST.
Information We Collect and Receive About You and How We Use It
We generally collect and process the following types of Personal Information:
Information You or Your Employer, or a Customer, Provides Us:
Account-Related Personal Information. When using the Site, Platform, or Services, you, your employer that is a Customer, or a Customer for whom you may be working as a contractor, may choose to provide Us with certain Personal Information, such as your name, profile photograph, employment details (including certain performance-related information), email address, phone number, and other contact information. While provision of much of your Personal Information is mandatory for use of the Platform and Services, certain Personal Information collected for account-related purposes is elective and you or your employer may choose to provide or not at your discretion. Any account-related Personal Information you or the Customer with which you are associated provide is used to: (i) provide login information to the Platform as well as to carry out Platform processing functions and the Services BST has been contracted to provide by such Customer; (ii) communicate with you by responding to your requests, comments and questions; (iii) improve the Site; and (iv) perform various account functions provided by BST.
Contact Information. When you express an interest in obtaining additional information about the Site, Platform, or Services, BST may ask you to provide your personal contact information, such as your name, email address, and phone number. We use this information to communicate with you by responding to your requests, comments, and questions. The legal basis for processing this information is the legitimate interest in communicating with you and answering your questions.
Device Information. We use analytics software to allow Us to better understand how the Platform functionality performs on your phone or computer. Information such as how often you use the Platform, the events that occur within the Platform, aggregated usage, performance data, and how and from where the Platform was accessed may be recorded by such software. The information We store within the analytics software is not linked to any Personal Information you submit, or that may be submitted, within the Platform. We automatically collect your device information such as operating system version, type, hardware usage statistics, etc. when you access the Platform
Log Data. As is common, We collect certain information automatically when you visit the Site or access the Platform. Included within this information is Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the content viewed on Our Site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.
Single Sign-On. If applicable, You can log in to the Platform using sign-in services such as an Open ID provider. These services will authenticate your identity and provide you the option to share certain Personal Information with Us such as your name and email address to pre-populate Our sign-up form.
How, and With Whom, Your Information Is Shared:
Information Shared with Our Subprocessors. Certain tasks are performed for Us by individuals and entities that We employ and with whom we contract (collectively, “Subprocessors”). These Subprocessors may in some instances collect your data and Personal Information on Our behalf, subject in all cases to their contractual obligations with Us and in accordance with the privacy and security standards that we have established. Subprocessors include, but are not limited to, email service providers, data storage providers, and other services that support the Site, Platform and certain Services provided to you or the Customer through which your Personal Information is being used or processed by BST. In order to provide the Site, the Platform, or the Services to you, We may need to share Personal Information with Subprocessors. Except as We otherwise inform you, Our Subprocessors do not have any right to use Personal Information or other information We share with them beyond what is necessary to assist Us in the provision of Site, Platform and/or Services on your behalf, or on behalf of the Customer through which your Personal Information is being used or processed by BST. Written agreements between BST and each Subprocessor govern transfers of your Personal Information.
Information Shared with Our Service Providers. We may share your information with entities with which BST has contracted to provide certain services to Us (“Service Providers”) on your behalf, or on behalf of the Customer through which your Personal Information is being used or processed by BST. These Service Providers are authorized to use your Personal Information only as necessary to provide the contracted services to BST, and in furtherance of such services, and may not collect, sell, retain or use your Personal Information except in such context.
We require all Third Parties, Subprocessors, Service Providers and subcontractors to respect the security of your Personal Information and to treat it in accordance with applicable laws. We do not allow Subprocessors and subcontractors to use your Personal Information for their own purposes and only permit them to process your Personal Information for a specified purposes in accordance with Our instructions or the provision of services on BST’s behalf, and strictly as detailed herein.
Subject to applicable law or regulation, in certain cases, We will retain your Personal Information and the Personal Information We process on your behalf, or on behalf of the Customer through which we have obtained your Personal Information for as long as your or such Customer’s account is active or as needed to provide you or such Customer’s access to the Platform or to perform certain Services in accordance with BST data retention policies, and as necessary to comply with Our legal obligations, resolve disputes, and enforce Our agreements. In certain cases, and as detailed further herein, you may request removal of your Personal Information by contacting firstname.lastname@example.org. In order to determine whether or not we are required to retain your Personal Information, your right to removal of your Personal Information is subject to applicable law or regulation, and may be further subject to BST’s obligation on behalf of the Customer that authorized the collection of your Personal Information to provide access to the Platform or to provide certain Services.
The security of your Personal Information and Our Customers’ information is important to Us. We put in place appropriate technical and organizational measures to ensure your Personal Information is kept secure and protected from unauthorized access, use, disclosure, alteration or destruction, in accordance with applicable laws and regulations. When you enter sensitive information (such as login credentials), We encrypt the transmission of that information using Transport Layer Security (TLS). We follow generally accepted standards to protect the Personal Information submitted to Us, both during transmission and once We receive it. When We share your Personal Information with Subprocessors, Service Providers, subcontractors or other Third Parties, We base our selection on said partners having adequate safeguards in place as detailed herein and that meet Our data protection standards. We ensure their compliance with such standards and incorporate contractual provisions ensuring compliance with: (i) such standards; and (ii) applicable data privacy laws and regulations.
You can contact Us at email@example.com if you have any questions about security on the Site, the Platform, or Services.
Cross Border Transfers of Personal Information
The Site, Platform and Services are hosted in and managed from the United States. We may transfer the Personal Information We collect about you to another country, which may not be deemed to have the same data protection laws as the country in which you initially provided the information.
If you are located outside the United States, you understand (and, as permitted under applicable law, consent to) having any Personal Information processed in the United States. When we transfer your Personal Information, we will protect that information as described in this Privacy Notice.
California Data Privacy
California residents have certain privacy rights as specified under California law, including the California Consumer Privacy Act of 2018 (“CCPA”). If you are a resident of California, you have the right to know what Personal Information has been collected about you, and to access that information. You have the right to request deletion of your Personal Information, though exceptions under the CCPA may allow Us to retain and use certain personal information notwithstanding your deletion request.
We do not sell your Personal Information when you use the Platform or the Service and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. We do not offer financial incentives associated with the collection, use, or disclosure of your Personal Information.
We will not discriminate against you for exercising any of your CCPA rights. To this end, unless permitted by the CCPA, We will not:
Deny you access to the Platform or Services;
Charge you a different price or rate for the Platform or Services, including the granting of discounts or other incentives;
Provide a different or downgraded Platform or Service;
Suggest that you may receive a different price or rate for the Platform or Services or a different or downgraded Platform or Service.
To exercise your rights under the CCPA please submit a verifiable consumer request to BST by either calling BST at 1-631-805-3657 by or emailing us at firstname.lastname@example.org. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information. You may only make a verifiable consumer request for access to your data twice within a twelve (12) month period. Your verifiable consumer request must:
Be made by a natural person;
Provide sufficient information to allow BST to reasonably verify your identity and that you are the person about whom We collected Personal Information, or you are an authorized representative;
Describe your request with sufficient detail that allows BST to properly understand, evaluate, and respond to your request.
In certain cases, We collect and process your Personal Information as a contractual obligation to a Customer. We may be required to provide notice to that Customer of your request, and to follow that Customer’s instructions as they relate to carrying out your request, in order to respond to a verified request. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm that the Personal Information relates to you. You don’t have to create an account to make a verifiable consumer request, but if you have one, we may ask you to verify your request by logging into your account. We will only use Personal Information provided by a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Contacting BST If You Have Questions or Concerns
Effective Date: August 21, 2021.