What This Privacy Policy Covers
Protecting your privacy is really important to us. Accordingly, we are providing this Privacy Policy to explain our practices regarding the collection, use, and disclosure of information that we receive when you use our website(s) located at https://oakbarrelsoftware.com/ (the “Site(s)”), and our services available via the Sites. This Privacy Policy does not apply to any third-party websites, services or applications, even if they are accessible through our Services. We are the data processor of personal data and our customers are the data controllers. Throughout this document, the terms such as “BostonLogix”, "OakBarrel", “we”, “us”, and “our” refer to "BostonLogix Inc.,USA.", including its affiliates and subsidiaries.
Please read this Privacy Notice carefully. By visiting our website or using any of our services, you indicate your acceptance of our use of your personal data as set out in this Privacy Notice.
This Privacy Notice is published in compliance with the privacy laws:
- European Union General Data Protection Regulation (GDPR), 2018.
Information We Gather
Our primary goal in collecting information is to provide Services and improve them, to administer your use of the Services, and to enable you to enjoy and easily navigate our Services.
When do we collect information?
Information collected through our website: We collect personal data when you use our website/services, such as the contact us form, or the personal data provided directly to us.
Information collected from you as an employee: We collect your personal data when we onboard you as an employee, and to perform other activities as part of employment.
Information collected from a vendor or a client: We collect your personal data when we onboard you as a vendor/client and for performing activities as per our contract.
What information will we collect?
Information Provided by you
Information collected from our clients and vendors: name, email address, company/business details, phone number.
Information collected through our employees: salary slips, relieving letter, offer letter, address proof, passport copy, government ID, photographs, family and minor details, biometric data, and education details.
Information collected through our website:
Information Collected from the website contact us section: We collect name, email address, phone number, and the message that you share with us.
Information Sent by Your Device: We collect certain information that your device sends when you use our Services, like a device identifier, user settings, and the operating system of your device, as well as information about your use of our Services.
Log Data: Our servers automatically record certain information about how a person uses our Services (we refer to this information as “Log Data”), including both Account holders and non-Account holders (either, a “User”). Log Data may include information such as a User’s Internet Protocol (IP) address, browser type, operating system, the pages or features of our Services to which a User browsed and the time spent on those pages or features, the frequency with which of our Services are used by a User, search terms, the links on our Services that a User clicked on and other statistics. We use this information to administer the Services and we analyze (and may engage third parties to analyze) this information to improve and enhance the Services by expanding their features and functionality and tailoring them to our Users’ needs and preferences. We also use the IP Address to generate aggregate, non-identifying information about how our Services are used. Please note that during this, at no point in time do we collect and/or share PII collected with any third parties.
Information Collected through our Product: We collect certain information such as name, email address, phone number, online identifiers such as IP addresses, cookie identifiers.
Location Information: In some cases, we collect and store information about where you are located, such as by converting your IP address into a rough geolocation or through our Product.
Other Data: Apart from data that you provide us directly, we also may collect information about you from publicly available sources and third-party sources like professional network sites, Booking Management Systems, Hospital Management Software, etc.
Lawful Basis for Processing
We at BostonLogix process the personal data if we have a lawful basis. Our lawful basis is as follows:
Consent: We process your data only if you have given your consent freely for the same. Where you have consented to a particular processing, you have a right to withdraw the consent at any time. You may withdraw consent by contacting us with a request using the details set out in the "Contact Information" section below.
Contractual necessity: We process your personal data only when it is necessary for the performance of a contract. For example, if the processing is necessary in order to fulfil our commitments under the applicable terms of service.
Legal Obligation: We process your data only if the use of your information is necessary for compliance with a legal obligation.
Legitimate Interest: We process your data on the grounds of legitimate interest for example, to provide our services, and to monitor the performance of the products/services.
How will we use your information?
We use the information provided by you in the following ways:
- • To monitor and check the performance of the product;
- • To perform the contract, we have signed with our customers, suppliers or partners;
- • To expand our products and services;
- • To help protect your information and prevent unauthorised access to it;
- • To onboard you as a vendor or a client
Cookies
For the purposes of the Services, we use automated data collection tools such as Cookies to collect certain information. “Cookies” are small text files that are placed on your hard drive by a Web server when you access our Services. For more details you can read our Cookie Policy.
The categories of cookies used are
- • Necessary cookies: These cookies are needed to run our website, keep it secure, and comply with regulations that apply to us.
- • Preference cookies: Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Although most browsers automatically accept Cookies, you can change your browser options to stop automatically accepting Cookies or to prompt you before accepting Cookies.
Please note, however, that if you don’t accept Cookies, you may not be able to access all portions or features of the Services.
Our Policy Towards Children
Our Services are not directed to children under 16 and we do not knowingly collect PII from children under 16. If we learn that we have collected the PII of a child under 16 we will take steps to delete such information from our files as soon as possible.
Who would we disclose your information to?
Information Shared with Our Service Providers
We may engage third-party service providers to work with us to administer and provide the Services. These third-party service providers have access to your PII only for the purpose of performing services on our behalf.
Information Shared with Third Parties. We may share aggregated information and non-identifying information with third parties for industry research and analysis, demographic profiling, and other similar purposes.
Information Disclosed in Connection with Business Transactions
Information that we collect from our users, including PII, is considered to be a business asset. As a result, if we go out of business or enter bankruptcy or if we are acquired as a result of a transaction such as a merger, acquisition, or asset sale, your PII may be disclosed or transferred to the third-party acquirer in connection with the transaction. Any such disclosure shall be in accordance with any and all legal requirements applicable.
Information Disclosed for Our Protection and the Protection of Others
We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to the government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, and legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider the illegal, unethical or legally actionable activity.
Information We Disclose with Your Consent or at Your Request
We will share your PII with third-party sites or platforms if you have expressly requested that we do so.
The Security of Your Information
We take reasonable measures to protect the information that we collect from or about you (including your PII) from unauthorized access, use, or disclosure by encrypting all data while stored and in transit via our Services, including User information, messages, and any Content attached to the messages.
All personal data provided by you will be stored in a secure environment, protected from unauthorized access, modification, or disclosure.
Links to Other Sites
Our Services may contain links to other websites and services. Any information that you provide on or to a third-party website or service is provided directly to the owner of the website or service and is subject to that party’s privacy policy. Our Privacy Policy does not apply to such websites or services and we’re not responsible for the content, privacy, or security practices and policies of those websites or services. To protect your information, we recommend that you carefully review the privacy policies of other websites and services that you access.
International Transfer
Your PII may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. These international transfers of your personal information are made pursuant to the appropriate safeguards (such as the standard data protection clauses adopted by the European Commission).
By using our services and providing your personal data, you consent to the transfer of your personal data to these locations.
Data Retention
We will retain your personal information for as long as is needed to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We take reasonable steps to delete or permanently de-identify your Personal Data that is no longer needed.
Your Rights
Data Subjects have certain rights in respect of their personal data. The rights given with respect to your personal data include:
- • The Right of Access: You have the right to access personal data and supplementary information. You can ask us for a copy of your personal information.
- • The Right to Rectification: You can ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate.
- • The Right to Erasure: You can ask us to erase or delete all or some of your personal information (e.g., if it is no longer necessary to provide Services to you) without undue delay.
- • The Right to Restriction of Processing: You can ask us to stop using all or some of your personal information (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if you think your personal information is inaccurate or unlawfully held).
- • The Right to Data Portability: You have the right to data portability which provides the right to receive your personal data in a structured, commonly used and machine-readable format, and have the right to transmit the same to another controller.
- • The Right to Object: You have the right to object to the processing of personal data.
- • Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you (data subject).
- • The right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority if you are dissatisfied with the way we handle or process your personal data.
Whenever you use our services, we aim to provide you with easy means to access, modify, delete, object to, or restrict the use of your personal information
We strive to give you ways to access, update/modify your data quickly, or delete it unless we have to keep that information for legal purposes. These rights can be exercised by contacting us using the details set out in the "Contact Information" section below.
Changes to Privacy Policy
Any information that we collect is subject to the privacy policy in effect at the time that the Information is collected. We may, however, modify and revise this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we’ll notify you of those changes by posting them on the Services or by sending you an email or other notification at our sole discretion, and we’ll indicate when those changes will become effective.
Contact Information
If you have any questions, concerns, or requests regarding our Privacy Policy, or if you want to exercise your rights under the relevant laws, please feel free to contact us at privacy.officer@bostonlogix.com