Privacy
1. Introduction
At Boost by Proprep (“Boost”, “we”, “us”, “our”), we care about your personal information, so we have prepared this Privacy Notice (“Notice”, “the Notice”, “this Notice”) to inform you of how we collect, use, store and share your information.
This Notice explains:
-
What information we collect about you.
-
How we use the information we collect about you.
-
When we may use your details to contact you.
-
Whether we will share your information with third parties.
-
How long we will keep your information.
-
How you can control your personal information.
At Boost we are committed to upholding the privacy rights of our users, customers,and partners.
This Notice is intended for, but not limited to:
-
Visitors to our website.
-
Users of our platform or services.
-
Customers and partner organizations.
-
Subscribers to our newsletters or marketing lists.
-
Natural persons contacting us through various forms or contact email addresses available on our website or within our platform.
This Notice applies only to the actions of us and users of our platform, services, or website. From time to time our platform, website or marketing materials may contain links to third-party sources, however, this Notice does not extend to any other service or website that can be accessed from ours, including but not limited to any links we may provide to external sources in marketing materials. We have no control over how your information is collected, stored or used by third parties and would strongly advise you to check the Privacy Notice of every website or service provider you visit before submitting any personal information to them.
​
By using or accessing our services or platform, services, or website, you agree to the terms of this Notice.
2. Information we collect and our purpose for processing
​
This Privacy Notice applies to our processing of personal data as a Controller (where we decide the purposes and means of the processing of your personal data). The purposes for which we act as Controller are set out in the table below.
​
Please note that for the most part of our business, we act as Processor (where our business customers, such as universities, decides the purposes and means of the data processing). Where we act as Processor, this Privacy Notice does not apply, and you must refer to the privacy notice of the relevant Controller, such as your university or employer.
​
The table below explains how we typically process personal data as controller:
​
Purpose
​
To operate, administer, and troubleshoot our platforms.
For customer relation management, including responding to customer requests and handling customer complaints and claims.
To manage relationships with suppliers and other business partners.
To market our Services, including sending out newsletters, event invitations.
To manage user accounts.
To improve and develop our Site and Services.
To manage our Site and enhancing the user experience.
To recruit employees.
For security purposes.
To administer our social media accounts.
​
​
Categories of Data
​
Client device IP address and session information.
Name, job title or function, employer, e-mail address, phone number, company address, billing information and any personal data included in the request or complaint/claim.
Name, job position, e-mail address and phone number.
Name, e-mail address and phone number.
Username, password, email address, university.
Name, e-mail address, phone number and information collected in connection with your use of our Site or Services, including which of our online resources you have used and when.
Technical information (such as IP address, login information, browser type etc.), information about your visits, length of visits to certain pages etc.), information from other online accounts to which you have given us permission to collect data from within your settings or the privacy policies of these other online services.
Name, residential address, e-mail address, phone number, date of birth, CV, application, profile photo, resume, qualifications, and interview notes.
Client device IP address, host and session information, and which of our online resources you have used.
Insight/statistics, communications (e.g. comments, likes, chats), profile information.
​
Data Subjects
​
Users of our Services.
Contacts at existing, previous, and potential customers.
Contacts at suppliers and other business partners.
Contacts at existing, previous, and potential customers.
Users of our Services.
Users of our Site and Services.
Visitors of our Site.
Individuals who apply for job with us.
Visitors of our social media accounts.
Source
​
From you and your device collected in log files.
From you. The information is collected through our web forms, e-mail, or other means of communication with Boost.
From you.
From you or other publicly available sources.
From you or as provided by your university.
From you or your device.
From you and your device, and third parties (such as advertising networks, analytics providers, and social media providers).
Information provided by applicants or recruitment agents.
From you and your device.
From you and your device.
​
Legal Basis
​
The legitimate interest in operating our Services.
​
The legitimate interest in providing customer service.
​
The legitimate interest in business administration.
​
Your consent, however, we may also rely on our legitimate interest in marketing our Services if we have an existing customer relationship with you or your business or contact information and interest in our Services is public.
You may at any time withdraw your consent and opt-out of any marketing email by contacting us.
​
The legitimate interest in administering our Services.
​
The legitimate interest in improving and developing our Site and Services and ensuring a better user experience.
​
The legitimate interest in operating our Site and enhancing the user experience and the consent to use cookies provided when accessing this site.
Please see our Cookie Policy for further details on the use of cookies on this website.
​
The legitimate interest in recruiting employees and assessing if you are qualified for the position.
​
The legitimate interest in keeping our Site and Services safe and secure.
​
The legitimate interest in communicating with customers and other business relations on social media platforms.
We may also collect or receive other types of data if required to fulfill the purposes listed above.
On a case-by-case basis, we may also use your personal data for certain purposes that are not incompatible with the purpose for which the data was originally collected or received, such as audits, analytics, reporting, innovation, dispute resolution and mergers and acquisitions.
3. Tracking tools and opt-out
We use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable us to recognize your web browser, tell us how and when you visit and use our website, analyze trends, and improve our services.
Cookies are small pieces of data - usually text files - placed on your computer, tablet, phone or similar device when you use that device to access our website. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s).
The cookies that we use on our website are categorized below:
​
Strictly necessary cookies
These cookies are essential in order to enable you to move around the website and use its features. They don't gather any information about you that could be used for marketing or remembering where you've been on the internet.
Performance cookies
These cookies collect information about how you use a website, for instance, which pages you go to most often, and if you get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous; it is only used to improve the performance of the website, providing a better user experience.
​
Functionality cookies
These cookies allow the website to remember choices you make and provide enhanced, more personal features. They may also be used to provide services you have asked for, such as watching a video or sharing information on social networks. The information these cookies collect may be anonymized and they cannot track your browsing activity on other websites.
​
Third party cookies
We sometimes embed content from social media and other third-party websites. These may include YouTube, Facebook, Twitter, Google+ and LinkedIn. Pages with this embedded content may present cookies from these websites. These third-party cookies may track your use of our website. We do not control the dissemination of these cookies and will not block cookies from those websites. You should check the relevant third-party website and their Cookie policy for more information.
Please note that because of our use of Cookies, we do not support “Do Not Track” requests sent from an internet browser at this time.
​
We may also use Google Analytics and other service providers to collect information regarding visitor behavior and visitor demographics on our website. For more information about Google Analytics, please visit: www.google.com/policies/privacy/partners
​
You can opt out of Google’s collection and processing of data generated by your use of our website by going to: http://tools.google.com/dlpage/gaoptout
​
4. Sharing your information with third parties
​
We may share your personal information with any member of our group of companies; this includes any of our subsidiaries, our ultimate holding company and its subsidiaries.
​
We may disclose your personal information listed in section 2 of this Notice to suppliers or contractors who are appointed by us to assist in the provision of products and services to you, as well as to other third parties if:
​
(a) the third party has been appointed to perform certain functions on our behalf, for example, to provide technical services in relation to our website; to provide technical or other services in relation to the processing of customer payments; to provide technical or other services in relation to the processing of your personal information for mailing, where the third party needs access to your personal information to be able to properly perform the function;
​
(b) we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation;
​
(c) we become involved in any merger, acquisition or other transaction involving the sale of our business or assets. In this case, user information (including the personal information collected from you through your use of our website) may be included in the assets which are transferred to the new owner.
​
We have made disclosures for the above purposes in the last twelve months.
​
We use only carefully selected contractors to help us deliver our services to you and they are only allowed to use your personal information to deliver the services you have purchased, registered for or subscribed to. We do not allow them to use your personal information for their own purposes. We require all third parties to respect the security of your personal information and to treat it in accordance with the law.
​
We do not share or sell your personal information to third-party organizations and have not done so in the last twelve months.
​
5. How long we retain your information
​
We will only keep your personal information for as long as necessary to fulfill the purposes for which we collected it. In most circumstances, we will keep your information for the lifetime of your account with us. We also retain website usage information for analysis purposes. Usage information is generally retained for a shorter period, except when this information is used to strengthen the security or to improve the functionality of our website, or we are legally obligated to retain this information for longer time periods.
​
Some of the criteria that we use to determine when to delete your data are:
-
We store username and password for as long as you have an active user account.
-
We store data based on your consent (such as for sending out newsletters and promotions) until you withdraw your consent (unsubscribe).
-
We store data received in relation to a recruitment process up to 6 months after the recruitment process is completed (but longer if you are hired). We may request the applicant's consent to store the personal data for a longer period.
​
6. How we store and secure your information
​
We will take all reasonably practicable steps to ensure the security of your information. We will endeavor to protect your personal information from unauthorized disclosure or access. Please remember that no method of storage or transmission over the internet is completely secure. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.
​
All of your personal information is stored in secure servers or cloud storage, and we always limit access to employees, contractors and other third parties who have a legitimate interest.
​
Where we have given you (or where you have chosen) a password which enables you to access our website, you are responsible for keeping this password confidential. You will be responsible for controlling access to your account and for any activity under your account and password. You must not share your account or password with anyone.
​
From time to time we may transfer data to countries, territories, or one or more specific sectors in that country that fall outside the scope of EU and UK GDPR, in all cases these transfers are to locations that the European Commission has determined ensures an adequate level of protection for personal data.
​
We operate our platform and services in various regions and therefore are required to meet varying regulations. Section 7, 8, and 9 below cover Canada and the United States.
​
7. Personal data of children
​
We follow the requirements of COPPA (Children’s Online Privacy Protection Act). We do not knowingly collect or solicit personal data from anyone under 13 years of age, and our website, products and services are all directed at individuals who are at least 13 years old or older.
​
If we discover that we have collected personal data from a child under 13 years of age, we will delete that information at the earliest opportunity. If you believe that a child under 13 years of age may have provided personal data to us, please contact us at boost@proprep.com
8. California Consumer Privacy Protection Act (CCPA) compliance
​
At Boost, our business activities fall outside of the scope of the California Consumer Privacy Act. We continually monitor this, and should our activities change so that they do fall within the scope of the Act, our practices and this Notice will be changed accordingly.
9. Nevada Resident Rights (SB-220)
​
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal data to third parties who intend to license or sell that personal data. You can exercise this right by contacting us at info@boost.proprep.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal data as sales are defined in the Nevada Revised Statutes, Chapter 603A.
​
10. Changes to this Notice
We are constantly trying to improve our services, so we may need to change this Privacy Notice from time to time, but we will alert you to any such changes by placing the most up-to-date version of the Notice on our website. By using our website or services after any changes to the Privacy Notice have been made, you agree to all of the changes. Use of information we collect is subject to the Privacy Notice in effect at the time such information is collected.
​
​
​