Privacy Policy
Effective as of October 1, 2025.
Please click to view the previous version of our Privacy Policy Effective as of December 29 2019.
California Notice at Collection: See “Your California privacy rights” section below for important information about your rights under California’s privacy law.
This Privacy Policy describes how BXP, Inc. and Boston Properties Limited Partnership and their affiliates and subsidiaries (collectively, “BXP”, “we”, “us”, or “our”) collect, use, and share your personal information in connection with the following (collectively, the “Services”):
- our websites, online services, and social media properties to which we post this Privacy Policy;
- our direct marketing communications;
- our recruiting activities;
- the real estate properties that we operate; and
- our events and in certain other offline activities where we have posted or linked to this Privacy Policy.
On occasion, we may inform you that our use of your personal information is subject to a different privacy policy or different terms, in which case the different privacy policy or terms will apply instead of this Privacy Policy.
How to reach us. If you have any questions or concerns about our Privacy Policy, please contact us at privacypolicy@bxp.com.
Table of contents
- Personal information we collect
- How we use your personal information
- How we share your personal information
- Your choices
- Other sites and services
- Security practices
- International data transfers
- Children
- Changes to this Privacy Policy
- Your California privacy rights
Personal information we collect
Information you provide to us. Depending on how you interact with the Services, the personal information you provide to us through the Services or otherwise may include:
- Contact data, such as your first and last name, email and mailing addresses, zip code, phone number, professional title and company name.
- Your content, such as text, images, audio, and video, along with the metadata associated with the files you choose to upload to or provide through the Services. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
- Demographic data, such as your city, state, country of residence, postal code, and age.
- Profile data, such as your photograph, interests, preferences or other information you include in an online account profile.
- Registration data, such as your Contact data and any other information that may be related to a service, an account, or an event you register for.
- Communications data, based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.
- Employment data, such as professional credentials and skills, educational and work history, personal website, authorization to work in the U.S., immigration status, criminal history, and other information that may be included on a resume or curriculum vitae as well as in a cover letter. This may also include diversity information that you voluntarily provide.
- Identification data, such as numbers or scans of your driver’s license or other government-issued identification.
- Transaction data, such as information about payments to and from you and other details of products or services you have purchased from us.
- Marketing data, such as your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.
- Other information that we may collect which is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Automatic collection. We, our service providers and our third-party partners may automatically log information about you, your computer or mobile device, and your activity over time on the Services and other online services, such as:
- Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, MAC addresses, general location information (such as city or state), and precise geolocation (if you permit our Services to access it from your device settings).
- Online activity data, such as the website you visited before browsing to our website, pages or screens you viewed on the Services, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
- Location data, such as when you enter certain retail centers using Wi-Fi technologies with a Wi-Fi enabled mobile device or when you authorize your mobile device to access your location while using the Services.
- Security data, such as information collected by keycard scanners or security cameras about your use of our offices or facilities.
Some of our automatic data collection is facilitated by the following technologies:
- Cookies, which are small data files placed on your computer when you visit a site. We may set cookies when you use the Services to track user trends and patterns, help you navigate between pages efficiently, remember your preferences and generally improve your browsing experience. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that our third-party business partners and service providers place.
- Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
- Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
- Communication interaction data, such as your interactions with our email, text or other communications (e.g., whether you open or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Data About Others. Users of the Services may have the opportunity to refer friends or other contacts to us and share their contact information with us. Please do not refer someone to us or share their contact information with us unless you have their permission to do so.
Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:
- Data providers, such as information services and data licensors.
- Public sources, such as such as government agencies, public records, social media platforms, and other publicly available sources.
- Business partners, such as joint marketing partners and event co-sponsors.
- Service providers that provide services on our behalf or help us operate the Service or our business.
- Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction. For example, we may receive your personal information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership.
How we use your personal information
We use your personal information for the following purposes:
Services Delivery and operations. We use your personal information to:
- provide, operate and improve the Services;
- establish and maintain your user profile on the Services;
- facilitate your invitations to friends or contacts who you invite to join the Services;
- enable security features of the Services, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in;
- facilitate social features of the Services, such as by identifying and suggesting connections with other users of the Services and providing chat or messaging functionality;
- communicate with you about the Services, including by sending you announcements, updates, security alerts, and support and administrative messages;
- provide support and maintenance for the Services;
- communicate with you about events or contests in which you participate; and
- to respond to your requests, questions and feedback
Service personalization, which may include using your personal information to:
- understand your needs and interests;
- personalize your experience with the Service and our Services-related communications; and
- remember your selections and preferences as you navigate webpages.
Service improvement and analytics. We may use your personal information to analyze your usage of the Services, improve the Services, improve the rest of our business, help us understand user activity on the Services, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services and promote our business.
Marketing. We and our third-party partners may send you BXP-related or other direct marketing communications as permitted by law. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
To manage our recruiting and process employment applications. We may use personal information, such as information submitted to us in a job application, to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, and monitoring recruitment statistics.
Data sharing in the context of corporate events. We may share certain personal information in the context of actual or prospective corporate events.
Cookies and similar technologies. In addition to the other uses included in this section, we may use the Cookies and similar technologies described above for the following purposes:
- Technical operation. To allow the technical operation of the Services, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service.
- Functionality. To enhance the performance and functionality of our services.
- Analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
Compliance and operations. We may use your personal information to:
- operate our business;
- comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
- protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
- audit our internal processes for compliance with legal and contractual requirements or our internal policies;
- enforce the terms and conditions that govern the Services; and
- prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
For other purposes. We may also use your personal information for other purposes described in this Privacy Policy or at the time we collect the information.
How we share your personal information