Privacy Policy

This Privacy Policy should be read together with our Terms of Use. Your use of the website is also governed by those Terms. If the Terms of Use address a topic also addressed in this Privacy Policy, the Terms of Use control with respect to your use of the website.

This Privacy Policy applies to personal information collected through our website, including information submitted through contact forms, quote requests, business inquiries, and other website interactions. For purposes of this Privacy Policy:

• “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual. Depending on the applicable law, this may also be called “personal data” or “covered information.”
• “Sensitive personal information” or “sensitive data” means personal information requiring heightened protection under applicable law, including information described in Section 4.
• “We,” “us,” and “our” mean Taste of Home MSP Inc., also identified as T.O.H. MSP INC.
• “You” or “your” means the individual visiting or using our website or submitting information to us. If you provide information about another person, you represent that you have authority to do so.
• “Processing” means collecting, using, storing, analyzing, disclosing, deleting, or otherwise handling personal information.
• “Controller” means the person or entity that determines why and how personal information is processed. We may act as a controller for information collected through our website and as a processor or service provider when processing information on behalf of a government agency, prime contractor, or other customer.
• “Sale” means transferring or disclosing personal information to a third party for monetary or other valuable consideration, as defined by applicable law. Disclosures to service providers or processors acting on our behalf, disclosures directed by you, and other disclosures excluded by applicable law are not sales.

We use categories and naming conventions generally consistent with the Maryland Online Data Privacy Act (“MODPA”), Nevada Revised Statutes Chapter 603A (“NRS 603A”), and, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

A. Information You Provide

We may collect personal information that you voluntarily provide when you:

• Contact us;
• Request a quote or proposal;
• Submit a website form;
• Ask about our services;
• Communicate with us about a contract, purchase order, subcontract, or teaming opportunity;
• Apply for staffing or employment-related opportunities;
• Enter into a business relationship with us; or
• Provide information in connection with government contracting, procurement, logistics, staffing, food and nutrition, housing, emergency support, or other services.

This information may include:

• Name and job title;
• Business email address;
• Telephone number;
• Mailing or business address;
• Organization or agency name;
• Contracting, procurement, or project information;
• Information included in the content of a message or request;
• Information needed to prepare quotes, fulfill orders, invoice customers, and maintain business records; and
• Staffing or employment-related information when submitted for a staffing or employment purpose.

We collect this information to respond to inquiries, evaluate business opportunities, prepare and deliver quotes, perform contracts, provide requested services, communicate with customers and business partners, comply with legal and government-contracting requirements, and maintain appropriate business records.

B. Information Collected Automatically

When you visit our website, we and our hosting or technology providers may automatically collect standard technical information, such as:

• Internet Protocol address;
• Browser type and version;
• Device type and operating system;
• Pages viewed and links used;
• Date and time of access;
• Referring website or source; and
• General website usage and diagnostic information.

We use this information to operate, secure, maintain, troubleshoot, and improve the website; understand general website usage; detect misuse; and support internal business and security functions.

Our hosting platform may provide built-in analytics. Based on our current understanding, those analytics are used to understand use of our website and are not intended to track you across unrelated websites.

C. Information From Other Sources

We may receive personal information from:

• Publicly available sources;
• Government contracting portals and procurement systems, including SAM.gov;
• Government agencies or prime contractors in connection with a contract or procurement;
• References or business contacts you provide in a contracting, staffing, employment, or business context;
• Service providers that support our business operations; and
• Other individuals or organizations authorized to provide the information.

We use information from these sources for the purposes described in this Privacy Policy and for the related contracting, procurement, staffing, compliance, or business purpose for which it was provided.

We use personal information for the following purposes and legal bases:

A. Performance of a Contract

We may process personal information to:

• Respond to inquiries and requests;
• Prepare and deliver quotes, proposals, and statements of work;
• Fulfill and support orders;
• Perform contracts, subcontracts, teaming agreements, and purchase orders;
• Provide food and nutrition, procurement and logistics, housing and essential living, emergency support, or staffing services;
• Communicate with customers, agencies, contractors, suppliers, and personnel; and
• Administer billing, payment, and account-related functions.

B. Compliance With Legal or Government-Contracting Obligations

We may process and disclose personal information to:

• Comply with federal, state, and local laws;
• Meet government-contracting, procurement, audit, inspection, security, and reporting requirements;
• Comply with contract clauses, flow-down provisions, and records-retention obligations;
• Respond to subpoenas, court orders, warrants, or other legal process;
• Cooperate with government agencies, inspectors general, regulators, and law enforcement;
• Protect against fraud, unauthorized activity, and security threats; and
• Establish, exercise, or defend legal claims.

C. Legitimate Business Interests

We may process personal information for legitimate business purposes, including to:

• Operate, maintain, secure, and improve the website;
• Manage business relationships;
• Conduct internal administration;
• Evaluate proposals, teaming opportunities, and potential transactions;
• Maintain business, tax, accounting, insurance, and financial records;
• Monitor service quality and website performance;
• Protect our rights, property, personnel, customers, and business partners; and
• Conduct other activities reasonably necessary to operate our business.

D. Consent

Where applicable law requires consent, we will request consent before processing personal information for the applicable purpose. You may withdraw consent by contacting us, although withdrawal will not affect processing already completed or processing that is permitted or required by law.

We do not use personal information for automated decision-making that produces legal effects or similarly significant effects about an individual without providing any notice required by applicable law and any legally required opportunity to exercise rights.

Sensitive personal information or sensitive data may include:

• Racial or ethnic origin;
• Religious or philosophical beliefs;
• Health or medical information;
• Information revealing sexual orientation or sex life;
• Citizenship or immigration status;
• Genetic data;
• Biometric information used to identify an individual;
• Precise geolocation information;
• Information concerning a child or minor;
• Government identification numbers;
• Financial account information;
• Passwords or security credentials;
• Contents of communications in circumstances protected by applicable law; and
• Other categories treated as sensitive under applicable law.

We collect or process sensitive personal information only where strictly necessary for a lawful and disclosed purpose, such as:

• Staffing, employment, or personnel administration;
• Performing or administering a government contract;
• Complying with a legal, security, licensing, safety, or reporting obligation;
• Providing a service specifically requested by you or a contracting customer; or
• Protecting health, safety, security, or legal rights.

We do not sell sensitive personal information. We do not use sensitive personal information for purposes unrelated to the lawful purpose for which it was collected. Please do not submit sensitive personal information through general website forms unless we specifically request it through an appropriate secure process. If sensitive information is necessary for a staffing, employment, contracting, or compliance purpose, we will identify the appropriate method for providing it.

We do not sell your personal information. We do not sell sensitive personal information.

We may disclose personal information to the following categories of recipients:

• Service providers who operate this website, host our email, process forms, or provide analytics, and who are permitted to use the information only to provide those services to us;
• Government agencies and prime contractors, where disclosure is required by a contract we are performing or by law;
• Professional advisors — our accountant, attorney, insurer, or lender — where reasonably necessary;
• A successor in the event of a sale, merger, or transfer of the business;
• Law enforcement, regulators, and courts, where required by law or legal process.

We may also disclose information when directed by you, when necessary to protect rights or safety, or when otherwise permitted by applicable law.

Our service providers may process personal information only for authorized business purposes and must be subject to contractual confidentiality and data-protection obligations appropriate to the services they provide. Any successor that receives personal information in connection with a business transaction will remain bound by the applicable commitments in this Privacy Policy or provide notice of any legally permitted change.

We perform federal, state, and local government contracts and may operate as a prime contractor, subcontractor, or teaming partner. As a result, we may be required to disclose personal information to:

• A contracting agency;
• A prime contractor or subcontractor;
• An auditor;
• An inspector general;
• A licensing or oversight authority;
• A government security or compliance official; or
• Another party authorized or required by an applicable contract or law.

These disclosures are made to perform or comply with a legal, contractual, procurement, audit, security, or government-contracting obligation. They are not sales of personal information. An applicable government contract, subcontract, teaming agreement, purchase order, or flow-down provision may impose additional privacy, confidentiality, security, access, retention, or disclosure requirements. Where applicable, those contractual requirements control over any inconsistent provision of this Privacy Policy.

Our website may use session and preference cookies to support basic website functions, remember preferences, maintain security, and improve the user experience. If we introduce authenticated website features, strictly necessary cookies may also support a user session or sign-in function.

You may configure your browser to refuse or delete cookies. Some website functions may not work as intended if cookies are disabled.

We may use hosting-platform analytics or similar tools to understand aggregate website usage, diagnose technical problems, and improve the website. We do not permit third parties to collect information about your online activities over time and across different websites when you use our website.

We do not currently:

• Engage in targeted advertising;
• Sell personal information;
• Share personal information for cross-context behavioral advertising;
• Use advertising pixels for targeted advertising; or
• Conduct profiling in furtherance of decisions that produce legal or similarly significant effects.

Because we do not engage in those activities, the opt-out rights relating to targeted advertising, sale, sharing, and qualifying profiling are not currently triggered by our practices. We nevertheless describe those rights in Section 8 and will honor applicable requests.

We do not currently respond to “Do Not Track” browser signals because no common technical standard for those signals has been adopted. If applicable law or our practices change, we will update this Privacy Policy.

Subject to applicable law and its exceptions, we will honor the following rights for Maryland and Nevada residents and, as a matter of practice, will accept requests from individuals regardless of location.

A. Access and Confirmation

You may request confirmation of whether we process your personal information and request access to the personal information we maintain about you. You may also request information about:

• The categories of personal information processed;
• The purposes for processing;
• The categories of sources from which personal information is collected;
• The categories of recipients to whom personal information is disclosed; and
• The personal information provided by you in a portable format, where required by applicable law.

B. Correction

You may request correction of inaccuracies in personal information we maintain about you.

C. Deletion

You may request deletion of personal information we maintain about you, subject to exceptions under applicable law, including where information is needed to:

• Complete a transaction or perform a contract;
• Provide a requested service;
• Detect or prevent security incidents, fraud, or illegal activity;
• Comply with a legal, government-contracting, audit, or records-retention obligation;
• Exercise or defend legal rights; or
• Perform another legally permitted function.

D. Data Portability

You may request a copy of personal information that you provided to us in a portable format that is reasonably usable and allows the information to be transferred to another entity, where required by applicable law.

E. Opt-Out Rights

You may request to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions producing legal or similarly significant effects. We do not currently engage in those activities, and we do not sell personal information.

F. Sensitive Data

We do not sell sensitive personal information. A controller may not sell sensitive data, and we will not sell sensitive personal information collected through our website or in connection with our operations.

G. Appeal Rights

If we decline to act on a privacy request, we will provide a written explanation and instructions for submitting an appeal. We will respond to an appeal within 60 days after receiving it. We will maintain a written record of appeals and their outcomes. If we deny an appeal, you may contact:

• The Maryland Attorney General, for Maryland matters; or
• The Nevada Attorney General, for Nevada matters.

H. Non-Discrimination

We will not discriminate against you for exercising a privacy right. Unless permitted by law, we will not deny goods or services, charge different prices, provide a different level or quality of service, or otherwise penalize you because you submitted a privacy request.

You may submit a privacy request by:

• Email: privacy@tohmsp.com
• Mail: Taste of Home MSP Inc., 455 E Pebble Road, Unit 230301, Las Vegas, Nevada 89123

Please identify the type of request you are making and provide enough information for us to understand and process it.

We may need to verify your identity before completing a request. Verification may include confirming information already associated with you, requesting additional information, or asking you to respond from an email address associated with your relationship with us. We will request only information reasonably necessary for verification and will use it for verification and request processing.

An authorized agent may submit a request on your behalf. We may require proof that you authorized the agent to act for you, verification of your identity, and additional information necessary to confirm the agent’s authority.

Response Time

We will respond to a privacy request within 45 days after receiving it. If a request is complex, numerous, or requires additional time, we may extend the response period by an additional 45 days. We will notify you of the extension and the reason for it before the end of the initial 45-day period.

If we decline to act, we will provide the reason for the decision and information about your right to appeal. We will respond to an appeal within 60 days after receiving it.

We generally will not charge a fee for responding to a privacy request. If applicable law permits a fee for excessive, repetitive, or manifestly unfounded requests, we will explain the basis for the fee before proceeding.

This section applies to Nevada residents and is intended to supplement the rights and procedures described above. We do not sell covered information as defined in NRS 603A.

A Nevada resident may submit a verified request directing us not to sell covered information about that individual. Requests may be submitted to:

• privacy@tohmsp.com
• Taste of Home MSP Inc., 455 E Pebble Road, Unit 230301, Las Vegas, Nevada 89123

A verified request must provide sufficient information for us to reasonably authenticate the identity of the requesting individual. We will respond to a verified Nevada opt-out request within 60 days. We may extend that period by up to 30 additional days when necessary and will notify the requester of the extension.

Nevada residents may also request to review or correct covered information we maintain about them. We will honor those requests under the procedures and response periods described in Section 9.

A Nevada resident may designate an authorized representative to submit a verified request on the resident’s behalf. We may require proof of the representative’s authority and verification of the resident’s identity.

This section applies to Maryland residents and is intended to provide notice at or before the point of collection as contemplated by MODPA.

We may process the following categories of personal information:

• Identifiers and contact information;
• Professional or employment-related information;
• Commercial, contracting, procurement, and transaction information;
• Internet or other electronic network activity information;
• Device and website usage information;
• Communications and information submitted through forms;
• Inferences reasonably drawn from website or business interactions; and
• Sensitive data when strictly necessary for staffing, employment, government contracting, compliance, security, or another lawful purpose.

We collect this information from you, your organization, public sources, government contracting portals, government agencies, prime contractors, references, service providers, and other authorized sources.

We process this information to respond to inquiries, prepare quotes, perform contracts, provide services, administer staffing and employment functions, comply with government-contracting and legal obligations, secure and improve the website, maintain records, and protect our business and users.

We may disclose personal information to service providers, government agencies, prime contractors, professional advisors, successors, law enforcement, regulators, courts, and other recipients described in Section 5.

Maryland residents may exercise the rights described in Section 8, including the rights to:

• Confirm whether we process personal information and access it;
• Correct inaccuracies;
• Delete personal information, subject to legal exceptions;
• Obtain a portable copy of personal information provided to us;
• Opt out of targeted advertising, sale, and qualifying profiling;
• Appeal a refusal to act on a request; and
• Avoid discrimination for exercising privacy rights.

We do not sell personal information or sensitive personal information, engage in targeted advertising, or conduct profiling in furtherance of decisions that produce legal or similarly significant effects.

If we determine that the CCPA as amended by the CPRA applies to our business or to a particular processing activity, California residents may have additional rights, including rights to know, access, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, and receive equal treatment for exercising privacy rights.

California residents may direct privacy questions or requests to privacy@tohmsp.com. We will provide any notices and request procedures required by applicable California law.

We retain personal information only for the period needed to fulfill the purposes described in this Privacy Policy, satisfy legal and contractual obligations, resolve disputes, enforce agreements, maintain business records, and protect our rights.

Retention periods may be extended when information is subject to a legal hold, investigation, audit, claim, dispute, government request, contract requirement, or other legal obligation.

When the applicable retention period ends, we delete, destroy, or de-identify personal information, unless continued retention is permitted or required by law or contract.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, disclosure, alteration, or destruction. Safeguards may include:

• Access controls and authentication;
• Role-based access restrictions;
• Need-to-know access;
• Administrative policies and procedures;
• Security monitoring and incident-response practices;
• Appropriate vendor and service-provider controls;
• Physical safeguards for business systems and records; and
• Secure handling and disposal practices.

We limit access to personal information to personnel, contractors, and service providers who need it for authorized business purposes. We require service providers handling personal information on our behalf to maintain confidentiality and apply appropriate safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security incident affects personal information, we will investigate and notify affected individuals, government authorities, regulators, and other parties as required by applicable Maryland, Nevada, federal, or other law. Notices will be provided in the manner and within the timeframes required by applicable law.

Our website is intended for users in the United States and is directed primarily to business and government users. The website is not directed to children or minors generally, and it is not intended for individuals under 18 years of age, consistent with the age requirement in our Terms of Use. We do not knowingly collect personal information from children through the website.

If you believe a child has submitted personal information to us, please contact privacy@tohmsp.com so that we can evaluate and address the matter.

If we make a material change to this Privacy Policy, we will post the updated policy on this page with a new effective date. Where a change materially affects information you have already provided, we will make reasonable efforts to notify you directly when required or appropriate.

Your continued use of the website after an updated Privacy Policy is posted is subject to the updated policy, except where applicable law requires additional notice or consent.