Last Updated April 27, 2018
Your privacy is important to Bamboo Rose. Therefore, Bamboo Rose is committed to respecting your privacy and the confidentiality of your personal data.
BAMBOO ROSE LLC (“Bamboo Rose”), is a limited liability company organized and existing under the laws of the State of Delaware with its corporate offices at 17 Rogers Street, Gloucester, MA 01930, USA. Bamboo Rose provides an end-to-end multi-enterprise platform that combines a digital B2B Marketplace, intelligent Product Lifecycle Management (PLM), Sourcing, Purchase Order, Global Trade Management (GTM), and Sales Order.
This Policy details our commitment to protecting the privacy of individuals who visit our Websites (“Website Visitors”), who register to use the products, services, applications and platform which we market for subscription (available at www.bamboorose.com) (the “Service(s)”). For the purpose of this Policy, the term, “Web sites,” shall refer collectively to www.bamboorose.com as well as the other websites that Bamboo Rose operates and that link to this Policy.
Personal information means information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, and online identifier or to one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity. The use of information collected through our Service shall be limited to the purpose of providing the Service for which the Subscriber has engaged.
With the exception of Account Information (as defined below) and other information we collect in connection with your registration or authentication into our Services (as defined below), this Policy does not apply to our security and privacy practices in connection with your access to and use of the Services. These security and privacy practices, including how we protect, collect, and use electronic data, text, messages, communications or other materials submitted to and stored within the Services by You (“Service Data”), are detailed in and governed by our Master Subscription Agreement, or such other applicable agreement between you and Bamboo Rose relating to your access to and use of such Services (collectively referred to as the “Service Agreement”).
Subscribers to our Services are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements or other obligations, relating to the collection of personal information in connection with the use of our Services by individuals (also referred to as “data subjects”) with whom our Subscribers interact. If you are an individual who interacts with a Subscriber using our Services, then you will be directed to contact our Subscriber for assistance with any requests or questions relating to your personal information.
We collect information under the direction of our Subscribers and have no direct relationship with individuals whose personal information we process in connection with our Subscriber’s use of our Services. If you are an individual who interacts with a Subscriber using our Services (such as a customer of one of our Subscribers) and would either like to amend your contact information or no longer wish to be contacted by one of our Subscribers that use our Services, please contact the Subscriber that you interact with directly.
We may transfer personal information to companies that help us provide our Services. Transfers to subsequent third parties for these purposes are governed by the Service Agreements with our Subscribers.
Information that you provide us
Account and Registration Information
When you register for an account to access or utilize one or more of our Services (an “Account”), we may ask for and collect personal information about you such as your name, address, email address, job title, and responsibility, as well as certain related information like your company name and website name. We may also ask for and collect personal information such as an email address and a name or alias from any individual that you authorize to log into and utilize our Services in connection with Your Account.
If sign up for a paid subscription to our Services, we may ask for your credit card information. A third-party intermediary is used to manage credit card processing. This intermediary is not permitted to store, retain, or use your billing information for any purpose except for credit card processing on our behalf.
We refer to any information described above as “Account Information” for the purposes of this Policy. By voluntarily providing us with Account Information, you represent that you are the owner of such personal data or otherwise have the requisite consent to provide it to us.
We may ask for and collect personal information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including, participation in surveys, requesting customer support, or otherwise communicating with us.
We may ask for and collect personal information such as your name, address, phone number and email address when you register for or attend a sponsored event or other events at which any member of the Bamboo Rose participates.
When you download and use our Services, we automatically collect information on the type of device and operating system version you use.
Information we collect from you on our web sites:
As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, and system configuration information. Occasionally, we connect personal information to information gathered in our log files as necessary to improve our Websites and Services. In such a case, we would treat the combined information in accordance with this Policy.
We collect analytics information when you use the Websites to help us improve your website experience. We may also share anonymous data about your actions on our Websites with third-party service providers of analytics services.
How we use information that we collect
We may use the information we collect about you (including personal information, to the extent applicable) for a variety of purposes, including to:
- provide, operate, maintain, improve, and promote the Services;
- enable you to access and use the Services;
- process and complete transactions, and send you related information, including purchase confirmations and invoices;
- send transactional messages, including responses to your comments, questions, and requests, provide customer service and support, and send you technical notices, updates, security alerts, and support and administrative messages;
- monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes;
- investigate and prevent fraudulent transactions, unauthorized access to the Services, and other illegal activities;
- personalize the Websites and Services, including by providing features or advertisements that match your interests and preferences;
- send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners; and
- for other purposes for which we obtain your consent.
You can opt-out of receiving marketing communications from us by contacting us at firstname.lastname@example.org or following the unsubscribe instructions included in our marketing communications.
Legal Basis for Processing (EEA only)
If you are an individual from the European Economic Area (EEA), our legal basis for collecting and using the personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where:
- we have your consent to do so;
- where we need the personal information to perform a contract with you (e.g. to deliver the Bamboo Rose Services you have requested); or
- where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms).
In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.
Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal.
Our Websites may contain links to other websites and the information practices and the content of such other websites are governed by the privacy statements of such other websites. We encourage you to review the privacy statements of any such other websites to understand their information practices.
How Long We Retain Your Personal Information
For personal information that we process on behalf of our Subscribers, we will retain such personal information in accordance with the terms of our agreement with them, subject to applicable law.
International Transfer of Information Collected
Your Privacy Rights
Upon request, we will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. To request this information please contact us at email@example.com. Subscribers to our Services may update or change their Account Information by editing their profile or organization record or by contacting firstname.lastname@example.org for more detailed instructions. To make a request to have personal information maintained by us returned to you or removed, please email email@example.com. Requests to access, change, or remove your information will be handled within thirty (30) days.
An individual who seeks access to, or who seeks to correct or, amend inaccuracies in, or delete personal information stored or processed by us on behalf of a Subscriber should direct his/her query to the Subscriber (the data controller). Upon receipt of a request from one of our Subscribers for us to remove the data, we will respond to their request within thirty (30) days. We will retain personal information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. If you have any questions about the security of your personal information, you can contact us at firstname.lastname@example.org.
If you are a Subscriber or otherwise provide us with personal information in connection with your use of our Websites or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services, comply with our legal obligations, resolve disputes and enforce our agreements.
Additional Rights for EEA and Certain Other Territories
If you are from certain territories (such as the EEA), you may have the right to exercise additional rights available to you under applicable laws, including, but not limited to:
- Right of erasure: In certain circumstances, you may have a broader right to erasure of personal information that we hold about you – for example if it is no longer necessary in relation to the purposes for which it was originally collected. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations.
- Right to object to processing: You may have the right to request that Bamboo Rose stop processing your personal information and/or to stop sending you marketing communications.
- Right to restrict processing: You may have the right to request that we restrict processing of your personal information in certain circumstances (for example, where you believe that the personal information we hold about you is inaccurate or unlawfully held).
- Right to data portability: In certain circumstances, you may have the right to be provided with your personal information in a structured, machine-readable and commonly used format and to request that we transfer the personal information to another data controller without hindrance.
If you would like to exercise such rights, please contact us at the contact details below. We will consider your request in accordance with applicable laws. To protect your privacy and security, we may take steps to verify your identity before complying with the request.
You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. A list of contact details for the EU data protection authorities is available [here].
We may assign or transfer this Policy, as well as your account and related information and data, including any personal information, to any person or entity that acquires all or substantially all of our business, stock or assets, or with whom we merge.
If you have questions regarding this Policy or about the Bamboo Rose’s practices, please contact us by email at email@example.com, or at:
Bamboo Rose LLC
Attn: Privacy Officer
17 Rogers St.
Gloucester, MA 01930, USA