Business Operation Systems
BOS · thatsbos.com
Effective Date: September 10, 2026 · Last Updated: September 10, 2026
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use https://thatsbos.com (the "Site"). It is meant to work alongside our Terms of Service and our Cookies notice.
This Site is a short public letter about the firm. It is not a shop, an account system, an app store listing, or a mailing list. The categories below describe what this Site actually does.
The controller of your personal information is BOS Sales LLC, a Wisconsin limited liability company doing business as Business Operation Systems, with its principal place of business at 1906 Goldfinch Lane, Sauk City, WI 53583, United States ("BOS," "Company," "we," "us," or "our").
This Policy applies to https://thatsbos.com and any related websites, pages, or online services that link to this Policy (collectively, the "Services"). We do not currently offer a mobile application.
Privacy contact: contact@thatsbos.com.
A Data Protection Officer and an EU/UK representative have not been appointed and are not required at this time.
This Policy covers personal information we process as a business / controller for the Site. It does not cover:
Value-added partners in the European Union, Australia, and China are not given browsing data from this website. If that ever changed, we would say so here first.
If our Terms of Service conflict with this Policy on a privacy topic, this Policy controls for that topic.
"Personal information" (also called "personal data") means information that identifies, relates to, describes, or could reasonably be linked to you or your household. The categories we collect depend on how you use the Services. We do not run user accounts, take payment, or operate advertising on this Site.
We do not collect account usernames, passwords, profile photos, biographies, purchase history, payment-card numbers, government-ID images, or marketing-preference settings on this Site, because those features are not offered here.
The contact form does a short proof of work in your browser before it sends. That proof is a technical check against automated junk. It is not a profile of you, and we do not use it as an advertising identifier.
We do not receive personal information from advertising networks, data brokers, social-login providers, payment processors, or other users of the Site tagging or referring you. There is no public posting, tagging, or referral feature here.
We do not request sensitive personal information as a condition of using the Site. We may process limited sensitive data only if you choose to put it in a message or if the law treats a data element we already hold (for example, the contents of a message you sent us) as sensitive in your jurisdiction. Depending on the jurisdiction, "sensitive" may include government identifiers; financial-account numbers with access credentials; precise geolocation; racial or ethnic origin, religion, union membership, or philosophical beliefs; health or sexual-orientation information; genetic or biometric data used for unique identification; contents of mail, email, or text messages where we are not the intended recipient; and information about a known child.
We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law (for example, receiving the note you sent, security, or short-term transient use). We do not use sensitive information to infer characteristics about you for advertising.
Please do not submit special-category or highly sensitive information through the contact form or other unstructured fields unless we expressly ask for it for a stated purpose.
We use personal information for the following purposes:
We do not use personal information from this Site to deliver, measure, or improve advertising, including interest-based advertising.
We do not offer generative-AI features on the Site. We do not use contact notes, prompts, or other inputs from this Site to train foundation models operated by us or by third parties. We do not make solely automated decisions that produce legal or similarly significant effects about you.
If you are in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following:
We disclose personal information as follows:
We use vendors that process personal information on our instructions, and we require appropriate contractual protections where applicable (including, where applicable, data-processing agreements and standard contractual clauses).
The processors that actually touch this Site are:
We do not use payment processors, advertising or measurement platforms, analytics products, customer-support or CRM platforms, authentication providers, or error-monitoring products on this Site.
We do not place advertising pixels, we do not run a third-party analytics product on these pages, and we do not share identifiers or usage events with advertising or measurement partners.
This Site has no public comments, profiles, or other user-posted areas. A contact note is not published.
We may disclose personal information to actual or prospective counterparties and their advisors in connection with a merger, acquisition, investment, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality terms.
We may disclose information if we believe in good faith that disclosure is required by law or legal process, or is reasonably necessary to protect the rights, property, or safety of the Company, our users, or the public, including to enforce our Terms or investigate fraud or security incidents.
We may disclose information when you ask us to. This Site does not currently offer third-party logins or social sharing features.
We may create and disclose aggregated or de-identified information that cannot reasonably be used to identify you. We commit not to attempt to re-identify de-identified data except to test our de-identification, as permitted by law.
We do not sell personal information for money. We do not sell or share personal information as those terms are defined under applicable U.S. state privacy laws, and we do not use personal information for targeted advertising.
We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
Phoenix, the software that serves these pages, sets a session cookie so that a visit can be recognized as one visit, and a CSRF cookie so that a request that claims to come from this Site — including the contact form — can be checked. Both are first-party cookies on thatsBOS.com. They are strictly necessary for the pages to work as written. The detail is on the Cookies page.
We do not set cookies to remember marketing preferences, to understand traffic through an analytics product, or to measure or deliver advertising. We do not drop advertising cookies, social-network cookies, or mobile SDKs.
Because we do not set non-essential cookies, we do not run a cookie banner or preference center that bargains for more than this. You can still block or clear cookies in the browser you are using. If you block the session and CSRF cookies, parts of the Site may stop behaving. That is expected.
We honor Global Privacy Control (GPC) and similar legally recognized opt-out preference signals as an opt-out of sale/share and targeted advertising for that browser, where required by law. Because we do not sell, share, or use personal information for targeted advertising, a GPC signal does not change additional processing on this Site. A GPC signal does not by itself stop ordinary correspondence about a note you sent; write us if you want a note deleted.
Some browsers send a "Do Not Track" (DNT) signal. There is no consistent industry standard for DNT. We treat legally recognized opt-out signals such as GPC as described above. We do not currently respond to DNT independently of those legally recognized signals.
We keep personal information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law (for example, tax, accounting, dispute resolution, or security).
When retention ends, we delete, aggregate, or de-identify the information. Residual copies may remain in backups for a limited period until those backups rotate.
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (TLS), access controls, least-privilege practices, and the contact form's proof of work. This Site does not store user passwords. No method of transmission or storage is 100% secure.
If we become aware of a data breach that requires notice under applicable law, we will notify you and/or regulators in the manner and time required.
Your rights depend on where you live and, in some cases, on whether we meet a law's applicability thresholds. We will not discriminate against you for exercising privacy rights (for example, by denying goods or services or charging a different price) unless a difference is reasonably related to the value of the data and permitted by law.
Subject to legal exceptions and verification, you may have the right to:
Submit a request by:
We do not offer account settings, because this Site has no accounts. We do not publish a "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link, because we do not sell or share personal information and we do not run targeted advertising.
Tell us which right you want to exercise and enough information to locate your data (for example, the name and email on a contact note). We will verify your identity using information we already have where possible (for example, email verification). For higher-risk requests we may ask for additional documentation. We will not fulfill a request if we cannot verify you, except where the law requires us to honor an authenticated opt-out signal such as GPC without further verification.
You may use an authorized agent where the law allows it. We may require proof of authorization (signed permission or a valid power of attorney) and may still need to verify your identity directly, unless the agent has a valid power of attorney.
We will acknowledge and respond within the time required by applicable law (often 45 days in U.S. state laws, extendable once; generally one month under GDPR, extendable by two months for complex requests). If we deny your request, we will explain why. Where an appeal right exists, you may appeal by replying to our decision email or writing to contact@thatsbos.com with the subject "Privacy Appeal." If you remain unsatisfied, you may contact your state attorney general or supervisory authority.
We do not operate a marketing email, SMS, or push-notification program on this Site. Transactional replies about a note you sent may continue until the correspondence is finished or you ask us to stop. If you somehow receive a marketing message from us, use the unsubscribe link in that message or write contact@thatsbos.com.
This subsection supplements the rest of this Policy for California residents.
In the preceding 12 months we have collected the categories listed in Section 3, from the sources listed in Section 3, for the purposes in Section 4, and have disclosed them to the recipient categories in Section 6. We do not sell or share personal information as defined by California law. We do not use or disclose sensitive personal information for purposes that require a right to limit.
California residents have the rights described in Section 11, including the right to know, delete, correct, opt out of sale/share, limit sensitive personal information (if applicable), and not be discriminated against for exercising rights.
Shine the Light: California Civil Code § 1798.83 allows certain customers to request information about personal information disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing in the manner covered by that statute. Requests may be sent to contact@thatsbos.com.
We do not offer a loyalty program, discount, or other financial incentive in exchange for personal information.
Residents of states with comprehensive privacy laws (including, as of the Last Updated date, states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Iowa, Indiana, Tennessee, Minnesota, Maryland, and others as they come into effect) may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects, and to appeal a denied request.
We accept requests through the methods in Section 11.2 and honor GPC where required. Some state laws apply only if we meet revenue or data-volume thresholds. If a law does not apply to us, we may still choose to handle your request as a courtesy.
Nevada residents may opt out of the "sale" of certain covered information under Nevada law by emailing contact@thatsbos.com with the subject "Nevada Do Not Sell." We do not currently sell covered information as defined by Nevada SB 220.
Our legal bases are described in Section 5. You may exercise GDPR/UK GDPR rights as described in Section 11. You may lodge a complaint with your local supervisory authority or the authority of our EU/UK establishment or representative, if any. We have not appointed an EU or UK representative at this time.
International transfers: We process information in the United States. FormSubmit and Google may process information in other countries. If we transfer personal data from the EEA, UK, or Switzerland to a country that has not been recognized as providing adequate protection, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where required, the UK International Data Transfer Addendum, plus supplementary measures as needed. You may request information about these safeguards at contact@thatsbos.com.
We process personal information in accordance with applicable Canadian law, including PIPEDA and provincial statutes where they apply. You may request access and correction and may withdraw consent subject to legal or contractual restrictions. Contact contact@thatsbos.com. You may complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
If Australian privacy law applies, we will handle personal information in accordance with the Australian Privacy Principles. You may request access and correction and complain to us first; if unresolved, you may contact the Office of the Australian Information Commissioner. For other countries, we apply this Policy and any mandatory local rights.
The Services are not directed to children under 13 (or under 16 in certain jurisdictions where that higher age applies), and we do not knowingly collect personal information from children under 13. If you believe we have collected personal information from a child under 13, contact contact@thatsbos.com. We will delete the information as required by the Children's Online Privacy Protection Act (COPPA) and similar laws.
We do not offer a child-directed service. If we ever did, we would provide a separate notice and obtain verifiable parental consent before collecting personal information from a child, except where COPPA provides a narrow exception.
Users between 13 and the age of majority may use the Services only as permitted by our Terms of Service and with parental consent where required.
We are based in the United States and process information in the United States and in other countries where our vendors operate (including FormSubmit and Google). Those countries may have privacy laws that differ from the laws of your home country. Where required, we use contractual and technical safeguards for cross-border transfers as described in Section 12.4.
The Services may include links to third-party websites. The typefaces are loaded from Google Fonts, and a contact note may pass through FormSubmit or another mail service. If you interact with those parties, they may collect information about you under their own policies. We are not responsible for their practices. Review their privacy policies before using those features. This Site does not currently include social-network plugins, embedded video, maps, or payment widgets.
We may update this Policy from time to time. The "Last Updated" date will change when we do. If we make material changes, we will provide additional notice as required by law, such as a prominent post on the Site. Your continued use of the Services after the effective date of the updated Policy constitutes acceptance of the changes, to the extent permitted by law. If you do not agree, stop using the Services.
BOS Sales LLC
1906 Goldfinch Lane
Sauk City, WI 53583 USA
Phone: +1 608 200 2718
Privacy requests and
questions: contact@thatsbos.com
Legal notices: contact@thatsbos.com
Support:
contact@thatsbos.com
Postal privacy requests: Attn: Privacy, at the address above.
Connection lost
Reconnecting
Something broke
Reconnecting