Boston Retail Partners (“BRP” “we” “our” “us”) is committed to protecting the privacy of individuals who visit our website.  We are providing this privacy policy (“Privacy Policy”) to help you understand how we collect and use information, including personally identifiable information that you may provide to us or that we may obtain as a result of your use of this website, (the “Site”), use of our blog or through any of the services provided (personal information provided to download reports from our website), as well as your choices regarding use, access and correction of Personal Information. Personally identifiable information (“Personal Information”) is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. For the purposes of this Privacy Policy, “Information” refers to both Personal Information as well as other types of non-personal information we may collect.

For the avoidance of doubt, this Privacy Policy also applies to any access to the Site, Blog and/or Services via a mobile device.  All use of “Site”, “Blog”  and “Services” as used herein should be read to include any access via such mobile devices.

By using the Site and Blog (as clearly described on the Site or Blog) and the Services you consent to our collection and use of your Personal Information as described herein, and consistent with applicable data protection laws.

We reserve the right to modify this privacy policy at any time, so please review it frequently. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If we make changes to this privacy policy that materially change the way we use your previously-collected personal information, we will communicate with you either via e-mail or a prominent posting on the Website and in our Services.



Depending on how you use our Site, Blog and Services, we may collect, use, share and secure different types of Information, with your consent. The kinds of Personal Information we collect with your consent are detailed below.

When you take one of our surveys, we ask you to identify yourself (name, company, position, title and email). We never share this information, or any of your individual responses, with anyone (internally or externally). The information you provide is used to classify your responses for aggregation only.

When you download content from our website, we may ask for personal information. When you complete the form with your information, we disclose our privacy policy and by confirming our policy and submitting the form, you are agreeing to our privacy policy.

When you browse our Site and our Blog, we receive Information that helps us learn about your browser and operating system. There are ways to control your browser settings to indicate when we have set a cookie in your browser, and you have the ability to control our use of cookies and third-party analytics with respect to your use of Website and Services (please see the section on cookies below). Please note that disabling certain cookies may prevent the Website and Services from functioning properly. Your device may also have controls that determine the information collected. Browser and operating system information, if provided by you this helps us analyze trends in the aggregate and improve and administer our Site, Blog and Services. If you consent to our use of cookies and third-party analytics, this Information may include your IP address, your browser type, your internet service provider, the pages you viewed, your searches, your operating system and system configuration information, and date/time stamps associated with your usage. Due to Internet communication standards, when you visit the Site, Blog and Services, we automatically receive the URL of the website from which you came and the website to which you go when you leave our Site.

THE SITE. Any Information you choose to provide on our Site will be stored. For example, if you register on our Site via the “Contact Us” or other “Request” or “Download” forms, we will use the Information you provided on our Site (including name, company name, title, phone number and email address) to contact you regarding the Services. The Personal Information that you provide directly to us through the Services will be apparent from the context in which you provide the data.

THE BLOG. Any Information you choose to provide on our Blog will also be stored. For example, if you subscribe for updates we will use the Information you provided on our Blog (including email address) to send you emails and updates to the Blog, typically when a new post is added to the blog.  We may also use this Information to contact you regarding other BRP company or research updates. The Personal Information that you provide directly to us through the Blog will be apparent from the context in which you provide the data.


We use the Information we collect to help our Site, Blog and Services create a better experience for you. Collecting Information about how you use the Site, Blog and Services helps us provide you with better service, including understanding which features are the most interesting to you.

We also use the Information to the extent necessary to enforce our Site, Blog and Services terms of service and to prevent imminent harm to persons or property.  We will use your Information to send out important notices, if necessary.

We use the non-personal Information that we collect for such purposes as: counting and recognizing visitors to the Site and/or Blog; analyzing how visitors use the Site, Blog and Services and various features within each; improving the Site, Blog and Services; enhancing users’ experiences with the Site, Blog and Services; creating new products and Services or improving our existing Services; enabling additional website analytics and research concerning the Site, Blog and Services; and managing our business, and to comply with legal and/or regulatory requirements.

We may send you emails about our Site, Blog, Services, and other updates or promotions.

We may link non-personal Information gathered using cookies with Personal Information, but we will treat the combined information as Personal Information. We may use Information for internal research and data analysis to help with product development, and to help us create and improve our Services, and for our own advertising and marketing purposes (but only in anonymized or aggregated form).

Content Download Forms. Information submitted when you download a survey report or white paper on the BRP website that was sponsored by a vendor may, in some cases (based on sponsorship agreements), be shared with the report sponsors. The sponsorship of these reports enables BRP to offer this content for free on its website. By agreeing to our privacy policy, you are opting to have your information (name, company, title, email and phone number) shared with the report sponsors. BRP currently limits the number of sponsor companies that we share contact information with to two per report.



How long we keep Information depends on the type of Information.

  • If you are a customer, Information you input into the Service is stored as set forth in your agreement with us.
  • If you are a customer, Information we collect regarding your use of the Service is collected and stored as described in your agreement with us, but at least as long as you continue to use the Service.
  • We retain Personal Information where we have an ongoing legitimate business need to do so (for example, to provide you the Service, to respond to questions you may have, to enforce our agreements, and to resolve disputes). We will stop using the Personal Information when we no longer have a legitimate business need to do so. If you request that we remove your Personal Information at an earlier date in accordance with this Privacy Policy (see Consent and Data Correction) we will do so provided we do not have a separate legal obligation to keep it (for example, a lawsuit involving the data).
  • If you have consented to receiving marketing communications (emails, etc.) from us, we will retain your Personal Information for a reasonable period of time from the date you last provided consent, unless you request that we remove it (see Consent and Data Correction).
  • If we receive Information derived from cookies or other tracking technologies, we will retain that Information for a reasonable period of time from the date it was collected.

At the conclusion of our use of the data, we will either delete or anonymize your Information or, if that is not possible, then we will securely store your information and isolate it from any further use until deletion is possible.



Your Personal Information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

To protect your Personal Information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

Unfortunately, even with these measures, we cannot guarantee the security of Personal Information. By using our Site, Blog and Services, you acknowledge and agree that we make no such guarantee.



How do you get my consent?

You provide your consent to our using Information in accordance with this Privacy Policy.  If you are using the Website or Blog, you provide consent when you enter your information into various fields.  If you are using the Service, you consent when you execute an agreement with us, and by continuing to use the Service.

How do I modify Information or withdraw my consent if I am a customer of the Service?

You may modify, review, correct, or delete what Information is collected and who it is shared with by modifying your settings within the Services, other than your username. If you would like us to delete your account, please contact us using the contact information below.

How do I modify Information or withdraw my consent if I am a user of the Website or Blog?

If you no longer wish for BRP to continue to collect your Information, you may stop using the Site or Blog at any time.

You may unsubscribe from our email mailing list by using the “unsubscribe” feature located at the bottom of the email you received from us.

What if I have questions about consent or your use of my Information?

If you would like BRP to delete, update, or modify any of your Information, or if you have questions at any time regarding the continued collection, use, storage or disclosure of your Information, you may contact us at or mailing us at:

470 Atlantic Ave, Fourth Floor
Boston, MA 02110
ATTN: Privacy Compliance

Prior Consent

Where the processing of your Personal Information is based on your previously given consent, you have the right to withdraw your consent at any time. You may also have the right to object to the processing of your Personal Data on grounds relating to your particular situation.



We may be required to disclose your Information if: (a) we believe it is reasonably necessary to comply with legal process (such as a court order, subpoena, search warrant, etc.) or other legal requirements of any governmental authority, (b) it would potentially mitigate our liability in an actual or potential lawsuit, (c) it is otherwise necessary to protect our rights or property,  (d) it’s necessary to protect the legal rights or property of others, and/or (e) for the safety of our customers, users, employees or others.



We may share Information with our contracted service providers so that these service providers can provide services on our behalf. These service providers are authorized to use Information only as necessary to provide the requested services to us.  We do not sell any Information to third parties.

We partner with certain third parties (including, without limitation: Google and Pardot) to collect the non-personal Information and to engage in analysis, auditing, research, and reporting. These third parties may use web logs or web beacons, and they may set and access cookies on your computer or other device. Even if you do not click on these plug-ins, they may collect information about you, such as your IP address and the pages that you view, and may set and access cookies. If you prefer to prevent third parties from setting and accessing cookies on your computer, you may set your browser to block cookies. Please note that this may cause some features and functionality within the Site, Blog and Services to perform incorrectly, or not to perform at all.

Please note that the activities performed by these third parties are governed by the privacy policy of the company providing them (and not this policy), so we advise you to please read their privacy statements.

You may request information about service providers at any time. If you would like us to stop providing your Personal Information to any service provider, please contact us at



In particular, the Site, Blog and Services uses Google Analytics to help collect and analyze certain information for the purposes discussed above. Google Analytics may set and/or access a cookie and/or web beacon. You may opt out of the use of cookies by Google Analytics here. Google’s privacy policy is located here and information about how Google uses partner information is located here: Google Analytics is governed by Google’s privacy policy (and not this policy), so we advise you to please read the privacy statements linked above.



Our Site, Blog and Services may contain links to third party websites. When you click on these links, they may direct you away from our Site, Blog or Services. You acknowledge that once you click on these links, you are moving on to the website of a third party. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements. This Privacy Policy only governs information collected on the Site, the Blog, and from the Services, or that may be provided to us by a third party pursuant to this privacy policy.



The Site links to third-party websites that incorporate comment and social media features, including, without limitation: LinkedIn, Twitter, Google+ and YouTube.

The Blog links to third-party websites that incorporate comment and social media features, including, without limitation: LinkedIn, Twitter, Google+, Facebook and YouTube.  The Blog also contains a Facebook “like” button and a Facebook “share” button, A LinkedIn “share” button, and a Twitter “tweet” and “follow” button.

These features may collect Information including your IP address, which pages you visit on our Site or Blog, and may set a cookie to enable the feature to function properly. If you choose to use these features, you may disclose your Information not just to those third-party websites and services, but also to their users and the public more generally.  Because these third-party websites and services are not operated by BRP, BRP is not responsible for the content or practices of those websites or services.  The collection, use, and disclosure of your personal and non-personal information will be subject to the privacy policies of the third party websites or services, and not this Privacy Policy.  We advise you to please read the third party privacy policies.



We use cookies to collect website navigational information so that our Site, Blog, and Services can remember you and provide you with the information you’re most likely to need. Site navigational information includes standard information from your web browser (such as browser type and browser language), your IP address, and the actions you take on our Site (such as pages viewed and links clicked). Please note that some cookies last only for your current browser session, while others persist for longer periods of time. For instance, when you return to our Site, cookies identify you and prompt the site to provide your username (not your password), so you can sign in more quickly. We also use information gained through cookies to compile statistical information about use of our Site, such as the time users spend at the site and the pages they visit most often. Those statistics do not include Personal Information. You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Each browser is a little different, so look at your browser’s “Help” menu to learn the correct way to modify your cookies. Please note that if you turn cookies off, some features will be disabled that make your site experience more efficient, and some of our Services and features may not function properly.  If you would like more information about what cookies we use and how they are used, please contact us at:   To manage the use of targeting or advertising cookies on our Site or Blog, consult your individual browser settings for cookies.



(In the United States only)

We may work with third party advertising partners to display advertising on our Site and Blog, as well as on third party sites and blogs.  Our third party advertising partners use cookies and web beacons to collect information and provide you with targeted advertising based on your interests or behavior.

You may opt out of seeing interest-based ads from us or our third party advertising partners on your desktop browser and/or mobile web browser by visiting the DAA at or by visiting the Network Advertising Initiative (“NAI”) at

Also, certain versions of your device’s operating system permit you to opt out of interest based advertising. Please visit your device settings to limit such tracking.

Please note that at this time we do not honor web browser Do Not Track (“DNT”) signals or other similar mechanisms.

Please also note that when you opt out of interest-based ads, you will still see generic ads, but they will no longer be based on your interests or behavior.



This Site, Blog and the Services are not directed at children. If a person under 13 submits information through any part of this Site, the Blog and/or the Services, and we learn the person submitting the information is under 13, we will attempt to delete this information as soon as possible.  If you are aware of a user under the age of 13, please contact us at:



Although many of our sites can be viewed internationally, many of our computer systems are currently based in the United States. Therefore, please note that all personal information may be processed by us in the U.S.

For more details regarding how we collect, use, and disclose personal information from European Economic Area (EEA) visitors and the additional rights are available to EEA visitors in respect of this personal information, BRP adheres to the following principles:

Notice: BRP will inform Users about the purposes for which it collects and uses PII, the types of non-agent third parties to which BRP discloses PII, and the choices and means, if any, BRP offers for limiting use and disclosure of PII.

Choice: BRP will offer Users the opportunity to choose (opt-out) whether their PII is (a) to be disclosed to a third party who is not an agent, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized. For sensitive PII, BRP will give Users the opportunity to affirmatively and explicitly (opt-in) consent to such disclosure or use.

Access: Upon request, BRP will provide Users with the PII that it holds about them and will take reasonable steps to provide individuals with a means to correct, amend or delete PII that is inaccurate or incomplete.

Dispute Resolution: For complaints that cannot be resolved between BRP and the User, such disputes will be governed by the current provisions of BRP’s Terms and Conditions, or the terms of your written agreement with BRP, if applicable. 

Information about how and when we process your Personal Information

  • We process your Personal Information with your consent when you register on our Website; and when you agree to receive online direct marketing from us (via email by signing up on our Website or through the Service).
  • We process your Personal Information as required by applicable law. Applicable law may require us to process your information: for tax purposes, to prevent/detect fraud, and in disclosures to law enforcement and other regulatory or government agencies as required by law.
  • We also process your Personal Information when it is in our legitimate interest to do so, and the legitimate interest is not overridden by your data protection rights. Here are some examples of our legitimate business interests:
    • Developing and maintaining relationships with our customers and partners;
    • Understanding how our customers use our Services and the Website;
    • Improving our Services
    • Understanding and responding to customer feedback;
    • Researching and analyzing the Services our customers want; and
    • Securing our business and services.


If you have any questions regarding the legitimate interests you can contact us at

When we ask you to supply us with Personal Information you will see whether the information we are asking for: (i) must be supplied so that we can provide Services to you under the terms of any agreement you enter into with us, or because it is required by law; or (ii) is optional, and the consequences of not providing the information (for example, if you do not provide your email address, you will not be added to our email list).

Where applicable law requires us to ensure that an international data transfer is governed by a data transfer mechanism, we use one or more of the following mechanisms: EU Standard Contractual Clauses with a data recipient outside the EEA (as permitted by GDPR), or we will ask your consent.



You have the right to:

  • Ask us for a copy of your Personal Information (see section titled use of the service by our customers)
  • Correct Personal Information, erase Personal Information or to transfer it to other organizations (when technically feasible) at your request (see section titled use of the service by our customers).
  • Object to some processing and, where we have asked for your consent to process your personal information, to withdraw this consent.
  • Object to some processing where we have a legitimate interest in processing (as explained in the Special Notice to EU Customers and Visitors section)
  • To restrict processing in certain circumstances (for example, where we can demonstrate that we have a legal requirement to process your Personal Information, it is possible that we may continue to do so).

We may ask you to verify your identity and to provide other details to help us to respond to your request.



If you would like to: access, correct, amend or delete any Personal Information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at or by mail at:

470 Atlantic Ave, Fourth Floor
Boston, MA 02110
ATTN: Privacy Compliance