Privacy Policy

Who we are

Boston Identity LLC, of Boston, MA, United States, operates this website. For any question about this policy, or to exercise any right described in it, email info@bostonidentity.com.

What we collect

We collect the personal information you give us in one place only: the contact form. When you submit it, we receive the name, email address, company and message you provide, the topic you select, and the time of submission. We also store a one-way hash of your IP address — not the address itself — purely to rate-limit automated abuse of the form.

If you reached this site from a link carrying campaign tags (the utm_ parameters in a web address), or from another website, the form also sends us those tags and the name of that website — never the page you were on — so we know how you found us.

We use Google Analytics to count visits and see which pages are read. It receives the address of each page you view and of the page that linked to it, as any web analytics does, and, when you send the contact form, the topic you chose and how you found us. We run it in a mode that does not set cookies, so nothing it receives links one of your visits to the next, and Google Analytics does not log or store IP addresses. The campaign tags described above are held in your browser's session storage until you close the tab. We do not use advertising cookies, we do not build profiles of visitors, and we do not combine your information with data from other sources.

Why we use it

To reply to your enquiry and, if it leads somewhere, to carry on that conversation. That is the only purpose. We do not sell personal information, we do not share it with advertisers, and we will not add you to a mailing list because you contacted us.

Who processes it on our behalf

This site is hosted by Google (Firebase Hosting), and contact form submissions are stored and delivered using Google Cloud services and a transactional email provider (Resend). Visit counts are processed by Google Analytics. These providers process the information only to deliver the service to us, under their own contractual obligations. Data is processed in the United States.

How long we keep it

Contact form submissions are deleted automatically 24 months after they are received. Rate-limiting records are deleted after 48 hours. Google Analytics keeps event-level data for at most 14 months. If a conversation becomes a client relationship, records relating to that engagement are retained under the terms of that agreement rather than this policy.

Server logs

Our hosting provider records standard technical information about requests to the site, including IP address, user agent and the page requested. These logs exist for security and reliability, are retained on the provider’s standard schedule, and are not used to identify individuals.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@bostonidentity.com and we will respond within 30 days. If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing, to request portability of your information, and to complain to your local data protection authority. If you are a California resident, you have the rights described in the CCPA, including the right to know and the right to delete; we do not sell personal information, so there is nothing to opt out of.

Children

This site is aimed at businesses and professionals. We do not knowingly collect information from anyone under 16.

Changes

If we change how this site handles personal information, we will update this page and the date at the top of it.