Information we collect
We collect only the information we need to provide Boston Tiffin service, respond to you, keep accounts secure, and operate the website.
- Contact and account information, such as your name, email address, phone number, and login details.
- Delivery and order information, such as delivery address, plan, menu selections, delivery notes, referrals, credits, and subscription status.
- Food-related preferences you choose to provide, including dietary preferences or allergy notes needed to prepare and deliver your order.
- Messages you send us through contact, waitlist, account, or support forms.
- Payment and subscription records from our payment processor. We do not store full credit card numbers on Boston Tiffin systems.
- Site, security, and device information such as IP address, browser data, cookies or session identifiers, anti-abuse checks, and error logs.
How we use information
- Create and manage your account, orders, subscriptions, menu selections, referrals, and credits.
- Prepare, deliver, and support your meals.
- Send transactional messages about login codes, orders, deliveries, subscription status, credits, and service updates.
- Respond to questions, contact requests, and support issues.
- Protect the website, prevent fraud or abuse, debug errors, and maintain reliable service.
- Improve Boston Tiffin operations, menus, delivery coverage, and customer experience.
How we share information
We do not sell, rent, or trade customer personal information, and we do not give customer lists to outside parties for their independent use.
We may disclose limited information to advertising and analytics providers to measure campaigns, understand site activity, reach existing customers, retarget website visitors, build similar audiences, suppress ads to current customers, and improve Boston Tiffin marketing. This may include categories such as identifiers, internet or network activity, commercial information, and audience information. Examples include hashed email address or phone number, IP address, cookies or similar identifiers, device information, ad click identifiers, pages viewed, referral URLs, timestamps, checkout events, subscription or purchase events, and website visitor, customer, suppression, or similar-audience segments.
We do not intentionally disclose delivery notes, allergy notes, dietary notes, support messages, full payment card details, authentication credentials, or exact meal selections to advertising providers for ad targeting.
We keep disclosure narrow and only use service providers when needed to run Boston Tiffin. Those providers may process information for hosting, payments, email delivery, anti-abuse checks, customer support, error monitoring, and related operations, and they are expected to use the information only for the service they provide to us.
- We may disclose information if required by law, legal process, or a valid government request.
- We may disclose information when necessary to protect customers, Boston Tiffin, the public, or the security and integrity of the service.
- We may disclose information with your consent or at your direction.
- If Boston Tiffin is involved in a merger, acquisition, financing, or sale of assets, customer information may transfer as part of that transaction, subject to this policy or a replacement policy disclosed to you.
Payments
Payments are handled by payment processors. Boston Tiffin receives payment status and related order or subscription details needed to fulfill the service, but we do not store full payment card numbers.
Cookies and security tools
We use cookies and similar session tools for account login, site security, checkout, basic website operation, analytics, campaign measurement, and advertising. We may also use pixels, conversion APIs, ad platform tags, and anti-abuse services such as CAPTCHA or Turnstile. You can limit cookies through your browser settings and ad platform controls, but some account, checkout, and security features may stop working.
Retention
We keep personal information only as long as reasonably needed for the purposes described in this policy, including account management, delivery records, payment and tax records, fraud prevention, support, legal obligations, and business operations. When we no longer need information, we delete it, de-identify it, or retain it only as required by law or legitimate business needs.
Your choices
- You can update account and delivery details through your account or by contacting us.
- You can unsubscribe from non-transactional email using the unsubscribe link when one is provided.
- You can ask us to access, correct, or delete personal information, subject to legal, payment, security, and operational retention needs.
- You can ask us not to use your contact information for customer-list advertising audiences, subject to reasonable verification and operational limits.
- You can block cookies in your browser, but some account, checkout, and security features may stop working.
Children
Boston Tiffin is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Security
We use reasonable administrative, technical, and operational safeguards to protect personal information. No online service can guarantee perfect security, so please contact us if you believe your account or information may be at risk.
Changes
We may update this policy as Boston Tiffin changes. The updated date will show when the policy was last revised. If changes are material, we will provide additional notice when appropriate.
Contact
Questions or requests about this policy can be sent through the Boston Tiffin contact page at /contact.