Privacy Policy
BentoBox Restaurant Privacy Policy
Last updated: April 20, 2021
This website is powered by BentoBox CMS, Inc. (“BentoBox”) platform, and this Restaurant Privacy Policy describes the privacy practices of BentoBox and the company whose branding is displayed on the website (“Site”) (the “Restaurant”). References in this Privacy Policy to “we,” “us,” or “our” mean BentoBox and the Restaurant, together. Please note that BentoBox processes consumer personal information only on behalf of the Restaurant, pursuant to an agreement between BentoBox and the Restaurant. This Privacy Policy does not apply to any websites, mobile applications, other online services that do not link to this policy, or your in-person or telephonic interactions with the Restaurant.
Information Collection
Information collected in connection with your use of the Site may include: Information you provide, such as:
Contact information, such as your first and last name, email address, street address, and phone number.
Transaction information, such as information about your payments and other details of meals, products, or services you have purchased from the Restaurant, and reservations you have made.
Payment details, such as payment card information, and billing details, which our third-party payment processor collects; we will not obtain access to individuals’ full payment card numbers when you make a purchase. We also let you save your payment information to make it easier for you to make purchases at restaurants that operate on our platform.
Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
Other information that you provide to us voluntarily, or which reflects our offline interactions with you.
Cookies and Other Information Collected by Automated Means. We, our service providers, and other third parties may automatically collect information about you, your computer or mobile device, and activity occurring on or through the Site. These parties may collect this type of information over time and across third-party websites and may use cookies, web beacons, and other technologies to collect this information. The information may include:
Information about your device’s hardware, such as model and screen resolution
Information about the software on your device, such as your browser type
Unique identifiers associated with your device, such as device identifier (e.g., Google Advertising ID or Apple ID for Advertising)
Information about the network to which you are connected and inferences we may draw from it, such as your IP address and general location information such as city, state, or geographic area
Information about your use of and actions on the Site, such as pages you viewed, how long you spent on a page, navigation paths between pages, information about your activity on a page, links you click, access times, and length of access; and the website that referred you to the Site, if applicable
Information about your interaction with our emails, such as whether you opened our email and how long you had it open
Please see the “Targeted online advertising” section for information about how to exercise choice regarding the use of browsing behavior for purposes of targeted advertising.
How We Use Personal Information
We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:
To operate the Site. We use your personal information to:
Provide, operate and improve the Site, including developing new products and services
Provide the services you request
Contact you about the status of your orders or reservations
Communicate with you about the Site, including by sending you announcements, updates, security alerts, and support and administrative messages
Personalize your experience with the Site and our communications
Provide support and maintenance for the Site, including by responding to your requests, questions, and feedback
To send you marketing and promotional communications. The Restaurant may send you marketing communications. Please see the “Your Choices” section below for information about your choices regarding marketing communications.
To display advertisements. We work with advertising partners to display the Restaurant’s advertisements online. These advertisements are delivered by our advertising partners and may be targeted based on your use of the Site or your activity elsewhere online. To learn more about your choices in connection with advertisements, please see the section below titled “Targeted online advertising.”
For compliance, fraud prevention, and safety. We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to (a) comply with applicable laws, lawful requests, and legal processes, such as responding to subpoenas or requests from government authorities; (b) protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); (c) enforce the terms and conditions that govern the Service; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
How We Share Personal Information
Service Providers
We may engage other companies and individuals to perform certain business-related functions on our behalf. Examples may include providing technical assistance, payment processing, billing, email management, customer service, marketing assistance, order fulfillment, delivery services, and reservation and online ordering systems. We authorize these parties to use personal information only as necessary to perform their functions.
Restaurants
If you establish an account for this checkout functionality, you may direct BentoBox to share your payment information with any restaurant that operates on our platform when making a purchase using the account.
Business Transfers
In connection with or during the negotiation of financing, merger, acquisition, dissolution, or similar corporate event, or the sale of all or some of BentoBox’s or the Restaurant’s assets, the information that BentoBox or the Restaurant, as applicable, have collected, including personal information, may be transferred as a business asset. If the company, business, or assets are acquired by another company, the acquiring company will possess the personal information that BentoBox or the Restaurant, as applicable, collected and will assume the rights and obligations regarding your personal information as described in this Privacy Policy.
Legal Requirements
We may disclose your information if required to do so by law, or in the good faith belief that such action or disclosure is necessary or appropriate to (i) operate the Site, (ii) comply with any legal obligation, report unlawful activity, cooperate with law enforcement or public authorities (including for the purpose of meeting national security or law enforcement requirements), (iii) protect against legal liability, (iv) protect and defend our rights, property, personnel, suppliers, sponsors, agents or licensors, (v) protect the personal safety of vendors, users of the Site or the public, or (vi) comply when compelled to disclose personal information to other third parties by government authorities or as required by law or regulation, including, but not limited to, in response to court orders and subpoenas.
Your Choices
Opt out of Marketing Communications
You may opt-out of marketing communications from the Restaurant by following such instructions as may be provided in the communication, or by otherwise contacting the Restaurant.
Cookies & Browser Web Storage
We may allow service providers and other third parties to use cookies and similar technologies to track your browsing activity over time and across the Site and third-party websites. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Site may not work properly. Similarly, your browser settings may allow you to clear your browser web storage.
Targeted Online Advertising
Some of the third parties that collect information about users’ activities on or through the Site may be members of organizations or programs that provide choices to individuals regarding the use of their browsing behavior or mobile application usage for purposes of targeted advertising. Users may opt out of receiving targeted advertising on websites through members of the Network Advertising Initiative by clicking here or the Digital Advertising Alliance by clicking here. Please note that we also may work with companies that offer their own opt-out mechanisms and may not participate in the opt-out mechanisms that we linked above. If you choose to opt-out of targeted advertisements, you will still see advertisements online but they may not be relevant to you. Even if you do choose to opt out, not all companies that serve online behavioral advertising are included in this list, so you may still receive some cookies and tailored advertisements from companies that are not listed.
Do Not Track
Some Internet browsers may be configured to send “Do Not Track” signals to visited websites. The Restaurant does not currently monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser “Do Not Track” settings and/or signals, in connection with the Site.
How We Protect Your Information
BentoBox maintains commercially reasonable measures designed to protect your personal information in connection with your use of the Site. However, no security system is impenetrable and we cannot guarantee the security of your personal information.
International Data Transfers
The Site and its servers are located in the US, and we may have service providers located in other countries. If you are located outside of the US, please be aware that any information provided to us, including personal information, will be transferred from your country of origin to the US or other locations outside of your country, where privacy laws may not be as protective as those in your country.
Important Notice for Individuals of the European Economic Area
BentoBox complies with the EU-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries (as well as Iceland, Liechtenstein, and Norway) transferred to the United States pursuant to Privacy Shield. BentoBox has certified that it adheres to the Privacy Shield Principles with respect to such data. If there is any conflict between the policies in this privacy policy and data subject rights under the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, BentoBox is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.
Pursuant to the EU-US Privacy Shield Framework, individuals have rights to access personal information and to limit use and disclosure of their personal information. You may request that we provide you with access to the personal information that we hold about you. You may also request to correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should contact us at privacy@getbento.com, with the subject line, “Privacy Shield.” If we receive a request to exercise rights under Privacy Shield from a user of the Site, we will direct that end-user to contact our client with the request. We will assist the client in fulfilling the request in accordance with their instructions.
We may require payment of a non-excessive fee to defray our expenses in this regard. Please allow us a reasonable time to respond to your inquiries and requests.
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose personal information to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas.
BentoBox’s accountability for personal data that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, BentoBox remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless BentoBox proves that it is not responsible for the event giving rise to the damage.
BentoBox commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. Individuals in the European Union with Privacy Shield inquiries or complaints should first contact BentoBox at privacy@getbento.com with the subject line, “Privacy Shield”. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim. Under certain conditions, more fully described on the Privacy Shield website at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
External Websites
The Site may contain links to other websites and online services operated by third parties, which are not associated with the Restaurant and which the Restaurant does not control. We are not responsible for the content or the privacy policies or practices of those websites or online services. We encourage you to read the privacy policy and legal terms of websites or online services that you visit or use.
Changes to This Privacy Policy
This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time. Any such changes will be posted on the Site. If we make material changes, we will notify you by posting an announcement on the Site or sending you an email.
How to Contact Us
If you have questions about this Privacy Policy, please contact the Restaurant using the contact information provided on the Site.
This section applies only if our privacy practices are governed by the California Consumer Privacy Act of 2018 (“CCPA”), and only with respect to the Site.
To the extent the CCPA applies, it requires us to provide to California residents an explanation of how we collect, use and share their personal information, and of the rights and choices we offer to California residents regarding its handling of personal information.
Personal Information That We Collect, Use, and Share
We do not sell personal information. As explained in this Privacy Policy, the Site uses cookies and other tracking tools to analyze website traffic and facilitate advertising. If you would like to opt-out of the Site’s (and third-party advertising partners’) use of cookies and other tracking technologies, please review the instructions provided in the Online Tracking Opt-out Guide. BentoBox may share the payment information you save in your account with Restaurants, at your direction.
Here is a summary of how we currently collect, use and share personal information, and how we have collected used and shared the information in the preceding 12 months.
Personal information we collect | CCPA categories (Definitions are available here) | Sources of personal information | Purposes for which we may collect and use personal information | Data Sharing |
|---|---|---|---|---|
Contact information | Identifiers | You | Service delivery | Shared with service providers |
Transaction information | Commercial information | Automatic collection | Marketing | Shared with restaurants at your direction |
Payment details | Financial Information | Compliance & Operations | Collected directly by advertising partners | |
Your correspondence or feedback | Unique Identifiers | Service delivery | Shared with and collected directly by service providers | |
Other information that you provide to us voluntarily | Commercial Information | Marketing | ||
Cookies and other information collected by automated means | Internet or Network Information | Compliance & Operations | ||
Inferences drawn from device data and online activity data | Inferences |
Please note that we may also disclose personal information to comply with law, and for compliance, fraud prevention, and safety purposes; in the event of business transfers; and to our professional advisors, as further described above in the “How We Share Personal Information” section.
California Residents’ Privacy Rights
The CCPA grants California residents the following rights:
Information. You can request information about how the Restaurant has collected, used and shared your personal information during the past 12 months.
Access. You can request a copy of the personal information that the Restaurant maintain about you.
Deletion. You can ask the Restaurant to delete the personal information that the Restaurant has collected or maintain about you.
Please note that the CCPA limits these rights by, for example, prohibiting the Restaurant from providing certain sensitive information in response to an access request and limiting the circumstances in which the Restaurant must comply with a deletion request. If the Restaurant denies your request, it will communicate its decision to you.
You are entitled to exercise the rights described above free from discrimination.
How to make a request. To request access to or deletion of personal information, contact the Restaurant via the contact information provided on the Site.
Identity verification. The CCPA requires the Restaurant to verify the identity of the individual submitting the request before providing a substantive response to the request.
Authorized agents. California residents can empower an “authorized agent” to submit requests on their behalf. The Restaurant will require the authorized agent to have a written authorization confirming that authority.
BentoBox Order Updates: SMS Terms & Conditions
Please read these SMS Terms & Conditions (the “SMS Terms”) carefully. By enrolling or otherwise agreeing to receive text messages from or on behalf of BentoBox CMS, Inc. (“BentoBox”), you agree to these SMS Terms, as well as BentoBox’s Privacy Policy, which are incorporated herein by reference and can be viewed at the link, or at getbento.com.
Program Description
BentoBox and its service providers may use an automatic telephone dialing system or other technology to deliver text messages to you to provide you with updates concerning orders placed using BentoBox (“BentoBox Order Updates”).
How to Opt Out and Get Help
To stop receiving text messages from BentoBox, you agree to reply “STOP” to the text message. After texting STOP, you may receive an additional communication confirming that your request has been received and processed. If you need further assistance related to the SMS Terms, text HELP to the number sending the message, or contact BentoBox customer service at support@getbento.com or (877) 353-2447. If you need assistance related to any orders, please contact the restaurant directly using the contact information provided on the restaurant’s website.
Message Frequency
The number of text messages that you receive will be recurring and vary depending on your interactions with us.
Supported Carriers
Your mobile carrier is not liable for delayed or undelivered messages.
Access or Delivery to Mobile Network is Not Guaranteed
It is your responsibility to determine if your mobile carrier supports text messaging and if your mobile device is capable of receiving text messages. Your receipt of the BentoBox Order Updates is subject to the terms and conditions of your agreement(s) with your mobile carrier. Delivery of information and content to a mobile device may fail due to a variety of circumstances or conditions. You understand and acknowledge that network services, including but not limited to mobile network services, are outside of BentoBox’s control, and BentoBox is not responsible or liable for issues arising from such network services (e.g., delayed or undelivered messages or the security of any messages).
Cost
Message and data rates may apply to each text message sent or received in connection with the BentoBox Order Updates, as provided in your mobile telephone service rate plan (please contact your mobile telephone carrier for pricing plans), in addition to any applicable roaming charges. BentoBox does not impose a separate fee for sending the BentoBox Order Updates.
Eligibility
To receive the BentoBox Order Updates, you must be a resident of the United States.By enrolling or otherwise agreeing to receive text messages from or on behalf of BentoBox, you represent and warrant that you are the current subscriber or authorized user of the phone number you have provided. You agree that you will not enroll or otherwise agree to receive messages from or on behalf of BentoBox using the mobile phone of any other person or entity without authorization.
Changes to the SMS Terms
These SMS Terms may be updated by BentoBox at any time without prior notice. By enrolling or otherwise agreeing to receive text messages from or on behalf of BentoBox, you agree to any changes.