Privacy Policy
Last Updated: September 21, 2024
1. Introduction to the Privacy Policy and What It Covers
Solutions in a Box, Inc. ("Solutions in a Box") knows that you care about how your corporate and personal information is used and shared - and we take your privacy seriously. This privacy policy ("Privacy Policy") covers Solution in a Box’s treatment of personally identifiable information ("Personal Information") and enterprise information ("Enterprise Information") (such as: CRM data, files, email/calendar information, and contacts) that you submit, or Solution in a Box otherwise gathers, when you access or use the Services. Together, Personal Information and Enterprise Information will be referred to as "Information".
This privacy policy applies to any of our sites, including the www.boostideal.com or www.fyigtm.com websites or their subdomains ("Sites"), any of our Solutions in a Box applications or services available via the Sites, or any part of the Solutions in a Box Platform as defined in the Solutions in a Box, Inc. Terms of Service and End User License Agreement (“Terms”), which we refer to collectively as the “Services.” By using the Services, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you consent that we will collect, use, and share your information as set forth below.
This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.
2. Sources of Personal Data
We collect Personal Data about you from:
- You:some text
- when you provide such information directly to us, and
- when Personal Data about you is automatically collected in connection with your use of our Services.
- Your organization (such as your employer or an agency you are affiliated with), when they provide us with Personal Data about you.
- Our subsidiaries and affiliates (together, “Affiliates”), when they provide us with Personal Data about you.
- Third parties, when they provide us with Personal Data about you (“Third Parties”). Third Parties that share your Personal Data with us include:some text
- Service providers: For example, Solutions in a Box links to other services, such as Gmail and HubSpot. Solutions in a Box does not access any information from these third-party services without your authorization, or by the authorization of your organization. You grant Solutions in a Box this authorization when you connect these services to Solutions in a Box, or when an authorized representative from your organization authorizes these connections on your behalf. To opt-out of connecting to these services, contact Solutions in a Box at support@boostideal.com.
- Social media: The Services may use social media features, such as the Facebook ‘like’ button (“Social Media Features”). These features may collect your IP address and which page you are visiting, and may set a cookie to enable the feature to function properly. You may be given the option by such Social Media Features to post information about your activities on Solutions in a Box’s site to a profile page of yours that is provided by a third-party Social Media network in order to share with others within your network. Social Media Features are either hosted by a third party or hosted directly on Solutions in a Box’s Services. Your interactions with these features are governed by the privacy policy of the company providing the relevant Social Media Features.
- Advertising partners: We receive information about you from some of our service providers who assist us with marketing or promotional services related to how you interact with our websites, applications, products, services, advertisements, or communications.
3. Categories of Personal Data We Collect
The following chart details the categories of Personal Data that we collect and have collected over the past twelve (12) months. Throughout this Privacy Policy, we will refer back to the categories of Personal Data listed in this chart (for example, “Category A. Personal identifiers”).
Category of Personal DataPersonal Data CollectedWhat is the source of this Personal Data?APersonal identifiersReal name, Internet Protocol address, Email address, Phone numberBCustomer records identified by state lawReal name, Internet Protocol address, Email address, Phone number, Metadata of emails and calendars associated with sales opportunities (Recipient, Date, Time, Subject, Attachment Name)CInternet or other similar network activity informationInteractions with a website, application, or advertisementDGeolocation dataCity, State, and Country for purposes of data aggregation
3.1 Information Collected Automatically
The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser and tell us how and when you visit and use our Services, to analyze trends, learn about our user base, and operate and improve our Services. Cookies and similar technologies may also be used by our online data partners or vendors to associate your use of the Service with other personal information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles. You may opt out of receiving this advertising by contacting support@boostideal.com and visiting https://warmly.ai/p/do-not-sell-share-my-data.
You can decide whether or not to accept certain Cookies when engaging with Solutions in a Box Services. To find out more about what cookies we use, your choices, and further information, please refer to our Cookie Policy.
4. How We Use Your Personal Data
We process Personal Data to operate, improve, understand, and personalize our Services. We use Personal Data for the following purposes:
- To operate and maintain the Services (e.g., fixing malfunctions, testing our security systems, etc.).
- To enhance, improve, and further develop the Services (e.g., creating new features, refining the user experience, increasing technical performance, etc.).
- We will use your contact information to provide you with notices related to your use of the Services.
- We will use your contact information (such as your email address) to provide you with training and emails with relevant product information. You can opt out of receiving these emails - but in such cases, you may not receive the full benefit of the Services. Opting-out can be done by clicking the "unsubscribe" link at the bottom of every email.
- To help personalize the Services experience for you (e.g., remembering your information so you will not have to enter it each time you use the Service).
- To comply with our legal or contractual obligations, resolve disputes, and enforce our Terms of Use.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- For the other purposes referenced in the "How We Share Your Personal Data" section below.
- To provide internal development and training to our staff to improve customer experience.
- And for any other business purpose stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act (the “CCPA”).
4.1 How We Share Your Personal Data
We disclose your Personal Data to the following categories of service providers and other parties:
- Service providers including:some text
- Hosting and other technology and communications providers:some text
- HubSpot
- Webflow
- Mailchimp
- Amazon Web Services
- Cloudflare
- Vercel
- Pulumi
- Warmly
- Payment processors:some text
- Stripe
- Ad networks:some text
- Google Display Network
- YouTube
- The Trade Desk
- HubSpot
- Microsoft Ads Network
- Meta
- Twitter (X)
- Security and fraud prevention companies:some text
- Zitadel
- Analytics and AI providers:some text
- Google Analytics
- SEM Rush
- AHrefs
- Hotjar
- HubSpot
- Open AI
- Salesforce
- Staff augmentation and contract personnel.
- Hosting and other technology and communications providers:some text
- Our Affiliates.
- Parties who acquire your Personal Data through an acquisition or other change of control:some text
- In some cases, we may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that are transferred. Moreover, if Solutions in a Box, or substantially all of its assets, were acquired, or in the unlikely event that Solutions in a Box goes out of business or enters bankruptcy, customer information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Solutions in a Box may continue to use your Information as set forth in this Privacy Policy.
- Other parties at your direction:some text
- Other users (where you post information publicly or as otherwise necessary to effect a transaction initiated or authorized by you through the Services).
- Third-party business partners who you access through the Services.
- Other parties authorized by you.
4.2 Sale of Personal Data
We do not sell your Personally Identifiable Information.
5. Data Security and Retention
Solutions in a Box takes robust information security measures to protect your Information and to limit the risk that it will be accessed without authorization, including the use of certain industry-standard technologies and practices. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. That said, no method of transmission over the Internet or method of storage can be 100% secure, and we cannot guarantee the security of such Information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. No security system is perfect, so your use of the Services is at your own risk.
If we learn of a security systems breach, we may attempt to notify you via email, phone, physical mail, or by a posting on your account page - so that you can take appropriate protective steps. Pursuant to our Terms of Service, you have consented to receive such notice by electronic means (provided that such consent is void where prohibited by applicable law). To receive a free written notice of a security breach, or if you have any questions about the security of the Services, please contact us at support@boostideal.com.
In addition to the security measures referenced above, your account is protected by a password for your privacy and security. You are responsible for preventing unauthorized access to your account and information, including by selecting and protecting your password appropriately, by limiting access to your password, computer or device, and browser, and by signing off after you have finished accessing your account.
6. Personal Data of Children
As noted in the Terms of Use, we do not knowingly collect or solicit Personal Data from children under 18; if you are a child under 18, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 18, we will delete that information as quickly as possible. If you believe that a child under 18 may have provided us Personal Data, please contact us at support@boostideal.com.
7. Your Rights and Control Over Your Data
7.1 Editing Your Profile
Upon request, Solutions in a Box will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. If you wish to access, correct, or request deletion of your personal information, email support@boostideal.com and a member of the team will respond to you. Solutions in a Box has no direct relationship with the individuals whose personal data it processes within its Services. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to Solution in a Box’s Client (the data controller). If the Client requests Solutions in a Box to remove the data, we will respond to their request within 30 days. If as an individual, you wish to identify the specific Client who is acting as the data controller of your Information, please contact support@boostideal.com and we will provide their contact information subject to Solutions in a Box receiving approval of release of that information from the data controller.
7.2 Deleting Your Account
Deletion of your account is subject to the "Limitations on Deletion" section below. When you request us to delete your account for the Services, your data may be permanently deleted from our servers, and access to your account will be disabled. We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.
Solutions in a Box will retain personal data we process on behalf of our Clients for as long as needed to provide services to our Client. Solutions in a Box will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
7.3 Limitations on Deletion
In addition, copies of your information may remain viewable elsewhere to the extent it has been publicly published by you or otherwise shared by you with others (such as your User Submissions).
We may also indefinitely retain and use any aggregated data derived from or incorporating your Information after you update or delete it, but not in a manner that would identify you personally.
We may also retain Information collected by Third Party usage tracking services in aggregate form, for the purposes of maintaining historical information on usage of our services.
We may also retain your Information to the extent required to comply with (or we deem it reasonable in light of) any laws or regulations.
7.4 Choice
We may partner with a third party to display advertising on our website or to manage our advertising on other sites. Our third party partner may use cookies or similar technologies in order to provide you advertising based upon your browsing activities and interests. If you wish to opt-out of interest-based advertising, or if located in the European Union, email support@boostideal.com. Please note you may continue to receive generic ads.
You may sign-up to receive emails, newsletters, or other communications from us. If you would like to discontinue receiving this information, you may update your email preferences by using the "Unsubscribe" link found in emails we send to you or by emailing support@boostideal.com.
We collect information for our Clients, and if you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our Services, please contact the Client that you interact with directly.
7.5 State-Specific Privacy Rights
By using any of the Services, you understand and acknowledge that your Personal Information will be processed and stored in the United States, and may be processed or disclosed to our service providers and affiliates in other jurisdictions.
7.5.1 California Resident Rights
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us regarding disclosure of Personal Data to third parties for such third parties' direct marketing purposes. To submit such a request, please email support@boostideal.com.
If you are a California resident, you also have rights pursuant to the CCPA, as outlined in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you would like to exercise those rights, email support@boostideal.com. If you have any questions about this section, you can contact us at support@boostideal.com.
7.5.2 Access
You have the right to request certain information about our collection and use of your Personal Data for the past 12 months. We will provide you with the following information:
- The categories of Personal Data that we have collected about you.
- The categories of sources from which that Personal Data was collected.
- The business or commercial purpose for collecting or selling your Personal Data.
- The categories of third parties with whom we have shared your Personal Data.
- The specific pieces of Personal Data that we have collected about you.
If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient.
7.5.3 Deletion
You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
7.5.4 Exercising Your Rights
To exercise the rights described above, email support@boostideal.com. Ensure that you:
- Provide sufficient information to allow us to verify that you are the person about whom we have collected Personal Data (for example, providing us your enterprise email address used to register for the Services), and
- Describe your request in sufficient detail to allow us to understand, evaluate, and respond to it.
Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:
- Email us at: support@boostideal.com
7.5.5 We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA
We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.
7.5.6 Nevada Resident Rights
If you are a resident of Nevada, you have the right to opt out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at support@boostideal.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.
7.5.7 Other State Laws
Certain other states, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:
- Confirm whether we process their personal information.
- Access and delete certain personal information.
- Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah).
- Data portability.
- Opt-out of personal data processing for:some text
- Targeted advertising (excluding Iowa);
- Sales; or
- Profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
- Either limit (opt-out of) or require consent to process sensitive personal data.
The exact scope of these rights may vary by state. To exercise any of these rights, please email support@boostideal.com. To appeal a decision regarding a consumer rights request, please email support@boostideal.com.
7.5.8 European Union Data Subject Rights
If you are located in the EU, United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”). For more information about Solution in a Box’s compliance with GDPR, please visit our page dedicated to GDPR.
8. Changes to this Privacy Policy
We’re constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on the www.boostideal.com or www.fyigtm.com websites, by sending you an email, and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.
If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, please do not hesitate to contact us at support@boostideal.com.
Privacy Policy
Cookies We Use
The following is a list of cookies we use and the categories they fall into:
Performance Cookies
These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information that these cookies collect is aggregated and therefore anonymous.
Cookie NameDomainPathTypeExpiration__hssrcboostideal.com/First-partySession__hsscboostideal.com/First-party30 minutes__hstcboostideal.com/First-party6 months
Functional Cookies
These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.
Cookie NameDomainPathTypeExpirationhubspotutkboostideal.com/First-party6 months
Targeting Cookies
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will then not work. These cookies do not store any personally identifiable information.
Cookie NameDomainPathTypeExpiration__cf_bm.hubspot.com/Third-party30 minuteswf-csrfboostideal.com/First-partySessionwf-csrf.sigboostideal.com/First-partySession
Social Media Features
Our websites may use social media features, such as the Facebook, Twitter, or LinkedIn button or multimedia content like “YouTube” and other sharing widgets (“Social Media Features”). Social Media Features may allow you to post information about your activities on our website to outside platforms and social networks. Social Media Features may also allow you to like or highlight information we have posted on our website or our branded social media pages. Social Media Features are either hosted by each respective platform or hosted directly on our website. To the extent the Social Media Features are hosted by the platforms themselves and you click through to these from our websites, the platform may receive information showing that you have visited our websites. If you are logged in to your social media account, it is possible that the respective social media network can link your visit to our websites with your social media profile.
Note that interactions you have with Social Media Features are governed by the privacy policies of the companies providing them, so it is important that you review their privacy and security policies.
How You Can Take Control and Manage Cookies
Opt Out from the Setting of Cookies on Your Individual Browser
Most web browsers allow you to control cookies from within the settings menu. We have provided information about how to control cookie settings for the most popular browsers below.
Find out how to manage cookies on popular browsers:
- Google Chrome
- Microsoft Edge
- Mozilla Firefox
- Microsoft Internet Explorer
- Opera
- Apple Safari
To find information relating to other browsers, visit the browser developer's website.
Do Not Track (DNT) Browser Setting
While some internet browsers offer a “do not track” or “DNT” option that lets you tell websites that you do not want to have your online activities tracked, these features are not yet created against any common standard adopted by industry groups, technology companies, or regulators. Therefore, we do not currently commit to responding to browsers’ DNT signals with respect to our websites. Solutions in a Box will monitor developments around DNT browser technology and the implementation of a standard.
3. Interest-Based Advertising (Or Online Behavioral Advertising)
Interest-based advertising is a way of serving advertisements on the websites you visit and making them more relevant to you and your interests. Shared interests are grouped together based upon previous web browsing activity and web users are then served advertising which matches their shared interests. In this way, advertising can be made as relevant and useful as possible. Relevant ads can also be delivered based upon website contents, including products you have recently been viewing (known as “retargeting”). If this analysis infers a particular interest, a cookie or similar technology is placed in your computer.
Opt Out of Interest-Based Advertising
Such cookies are categorized as non-essential cookies because they are used for advertising purposes and are not strictly necessary to operate our website. Therefore, you have the ability to control their use and your advertising experience online.
4. Google Analytics
Google customers (i.e., Solutions in a Box) use tags on web pages and on mobile apps to enable the use of Google measurement products that help us understand your needs and, optionally, personalize your experience and offer relevant advertising.
Google Analytics collects first-party cookies, data related to the device/browser, IP address, and on-site/app activities to measure and report statistics about user interactions on the websites and/or apps that use Google Analytics. When we use Google Analytics Advertising Features, Google advertising cookies are collected and used to enable features like remarketing on the Google Display Network.
Google prohibits customers from sending personal data, and Solutions in a Box adheres to this. However, the use of cookies falls into the scope of privacy laws, so you have the option to prevent the use of cookies for our analysis or advertising purposes.
To opt out of being tracked by Google Analytics across all websites, download the Google Analytics Opt-out Browser Add-on.
GDPR
1. Introduction to the GDPR
General Data Protection Regulation (GDPR) is a European Union regulation that establishes a new framework for handling and protecting the personal data of EU-based residents. It is the most comprehensive EU data privacy law in decades and has been in effect since May 25, 2018.
Besides strengthening and standardizing user data privacy across the EU nations, it will require new or additional obligations on all organizations that handle EU citizens’ personal data, regardless of where the organizations themselves are located.
GDPR is intended to offer protections for you or any identifiable natural person (the “Data Subject”) regarding your information (your “Personal Data”). You, as a Data Subject, have broad rights, whether you are identified directly or indirectly through interaction context in which your information was captured.
2. Your Rights Under GDPR
2.1 Consent
Under GDPR, you opt-in to have an organization (the “Data Controller”) process your Personal Data. Data Controllers must obtain your consent before they can process your data.
2.2 Special Categories of Data
Unless specifically authorized, GDPR prohibits the processing of certain special categories of data such as race, ethnicity, political and religious beliefs, sexual orientation, genetic and biometric data. Solutions in a Box does not acquire or process any data belonging to these categories.
2.3 Right of Access
If you consented to a Data Controller processing your Personal Data, you may then request the following:
- A copy of the personal data undergoing processing.
- Purpose of processing.
- In particular, if automated decision-making or profiling takes place, and if so, the logic involved, significance, and likely consequences of such processing.
- Categories of data processed (e.g., name, address, online browsing behavior).
- Any third-party recipients of this personal data, both backward or forward-looking, especially recipients in third-party countries (i.e., countries outside of the EU).
- Any third-party sources of the Data Subject’s personal data (i.e., not collected from the Data Subject directly, for instance by purchasing said data from another source that previously collected the data directly).
- How long such Personal Data would be stored, or if that’s not determinable, how the length of this period would be determined.
- Data rectification.
- Data erasure.
- Restriction of data processing.
- Objection to data processing.
2.4 Right to Rectification
You, as a Data Subject, have the right to have any errors or inaccuracies of Personal Data corrected. Your Data Controller shall implement such requests without undue delay.
2.5 Right of Erasure
You have the right to have your Personal Data erased or forgotten. Your Data Controller shall remove your personal data and confirm deletion via a notification to you. Data Controllers are also required to maintain these transactions.
2.6 Right to Data Portability
You have the right to have your Personal Data exported and provided to you in complete form.
2.7 Breach Notification
In the event of a data breach and your Personal Data is compromised, your Data Controllers are required to notify you at least within 72 hours.
3. Solutions in a Box’s Commitment to Protecting Your Personal Data
Solutions in a Box is committed to partnering with its customers and users to ensure that Solutions in a Box is fully compliant with the requirements of GDPR. Solutions in a Box recognizes your rights under GDPR and will ensure that these rights are honored, and your Personal Data is protected.
We’ll continue to monitor the guidance around GDPR compliance from privacy-related regulatory bodies, and will adjust our plans accordingly if it changes. We’ll provide you with regular updates along the way so that you’re always current.
3.1 Our Security Infrastructure and Certifications
Protecting our customer's information and their user's privacy is extremely important to us. As a cloud-based company entrusted with some of our customer's most valuable data, we’ve set high standards for security.
3.2 International Data Transfers: Contractual Terms
To comply with E.U. data protection laws around international data transfer mechanisms, Solutions in a Box utilizes the European Union Model Clauses, also known as Standard Contractual Clauses, to meet adequacy and security requirements for our customers who operate in the EU.
4. Role of Solutions in a Box as a Data Controller
Your personal data may enter Solutions in a Box’s processing scope in multiple ways. Based on how your personal data is consented to, who has control over the data and has responsibility for protecting and administering your rights, Solutions in a Box is either a Data Controller or a Data Processor. This section describes Solutions in a Box’s role as a Data Controller and explains how you can interact with Solutions in a Box in that role.
When you interact with Solutions in a Box via its marketing and sales development outreach programs as a website visitor, webinar participant, or asset downloads, Solutions in a Box is the primary Data Controller from GDPR perspective. In these cases, Solutions in a Box is responsible for obtaining your consent and providing means for exercising your data rights.
4.1 Personal Data
Personal Data you submit during registration, such as your name, email, phone number, and your address.Any other Personal Data that Solutions in a Box obtains via sources to which you have already provided consent. Solutions in a Box may use data from these sources for data identification and enrichment. As an example, if you provided only email and company name to Solutions in a Box, Solutions in a Box may use another service to identify your business contact phone, or your title, so long as such information was submitted by you to the third-party service.
4.2 Consent
When you interact with web forms and similar registration pages at Solutions in a Box’s website, partners that we collaborate with, or other owned domains and DBAs, you consent to receive communications that are directly related to the products or services offered through those completed forms, unless additional verification is legally required. Any communications outside of the related requests made will require explicit consent prior to you submitting your Personal Data.
When Sales Development Representatives contact you and you provide information to us, and you consent to us for using the information we obtained from you.
When your colleague from your organization volunteers your personal data to us via email, or other information channels. We will follow up to obtain consent using the email provided to us, or we will indicate in our email communication that we do not yet have consent but you provide us consent to continue our use of your personal data.
Solutions in a Box also ensures that any additional data it procures from third-party services is obtained by that third-party after obtaining your consent.
If you had previously provided consent to Solutions in a Box to collect your personal data, you may choose to withdraw that consent at a later point. Please send an email request to support@boostideal.com or any of our affiliate brand support emails and we will implement the request, and provide a confirmation of your consent withdrawal via a reply email to your email address. The acknowledgement email will also provide you with consequences of withdrawing your consent.
4.3 Privacy Preferences
During the course of your registration process, we may offer certain preferences that control the privacy of your data. Additionally, some registration processes may offer submission of certain data as optional items. You may choose not to provide optional data, but if you do provide them, Solutions in a Box will track your submissions. Additionally, Solutions in a Box will honor your choices and will ensure that these preferences and optional data are part of the data that you have access to via GDPR framework-based requests.
4.4 Onward Transfers
Solutions in a Box does not sell your Personally Identifiable Information to any other third-party organization. Solutions in a Box also does not transfer the rights to your personal data to any other party nor does it use the data for purposes other than the original intent. Any transfer to a third party is solely intended for the processing of data and Solutions in a Box has secured agreements with downstream Data Processors to protect Personal Data and enforce GDPR data rights for you.
4.5 Data Subject Access Rights
4.5.1 Data Access
As part of GDPR, you have the right to request all Personal Data about you to be made available to you. We will provide:
- Whether any data was transferred to any other third party.
4.5.2 Data Erasure, Accuracy, and Portability
- You may submit a request to delete all data about you. Solutions in a Box will comply with this request, but will use your email to send a confirmation notice that we performed the requested action.
- Update Personal Data: You may submit a request to update Personal Data that we have about you. Solutions in a Box will perform this, and will use your email to send a confirmation notice that we performed the requested action. If an email itself was requested to be changed, Solutions in a Box will send a confirmation to both the old and new email.
- Request an export of all your data for data portability: You may also submit a request to request an export of all your data for data portability. Solutions in a Box will provide this information via a CSV or JSON file. Such a report will include meta-data such as when particular data was added, any updates to the data, etc. - i.e., an audit trail of the data.
To submit a request pursuant to any of the above, please email support@boostideal.com to complete the request form and a member of the Privacy Team will respond to you.
4.5.3 Data Breach Notification
We will notify you if your Personal Data was compromised via a breach using all methods of contact information we have about you, within 72 hours. This includes any breach that was caused by a Data Processor that Solutions in a Box has authorized to process your data.
4.5.4 Filing a Complaint
Solutions in a Box has put in place best-in-the-industry processes for providing you the rights to your personal data, per GDPR guidelines. In the event that you are not satisfied with our resolution of your requests, you have the right to file a complaint. Please email support@boostideal.com to file a complaint. You also have a right to file a similar complaint with a supervisory authority for the jurisdiction you are in and seek appropriate remediation.
5. Role of Solutions in a Box as a Data Processor
Your personal data may enter Solutions in a Box’s processing scope in multiple ways. Based on how your personal data is consented to, who has control over the data, and who has responsibility for protecting and administering your rights, Solutions in a Box is either a Data Controller or a Data Processor. This section describes Solutions in a Box’s role as a Data Processor and explains how you can interact with Solutions in a Box in that role.
If we are processing your Personal Data on behalf of your employer or organization, you may send an email to support@boostideal.com and Solutions in a Box will forward the request to your employer. Any final action on the request will need to be approved by the employer (the Data Controller). Solutions in a Box will assist the Data Controller in expeditiously completing the request.
5.1 Consent
When Solutions in a Box processes and displays your personal data, that data was acquired from your employer or organization that you interact with. If it is personal data that you submitted to your employer, you provided consent to your employer to that data for their business purpose. If it is personal data that Solutions in a Box’s customer obtained in the process of conducting business with you or your employer, they rely on your consent to use the data for a business purpose. For example, if you are a purchaser of a product from Solutions in a Box’s customer, your relationship to our customer would be that of a vendor, and in furthering that relationship, our customer would have acquired your personal data.
To withdraw an earlier consent that you provided, contact your employer or the organization to which you provided the original Personal Data. Solutions in a Box will not be able to alter your consent, as we are the Data Processor.
5.2 Data Access
To request your Personal Data, please email support@boostideal.com. For data processed by Solutions in a Box, we will forward your request to your employer (the Data Controller), who will then initiate a request to provide that information. Since Solutions in a Box’s role is only that of a Data Processor, Solutions in a Box will not be able to provide your Personal Data directly.
5.3 Data Breach Notification
In the event of a data breach, Solutions in a Box, as a Data Processor, is required to notify your employer/organization that there was a data breach. Your organization will then notify you regarding the breach, its impact, and potential remedies. Solutions in a Box will not notify you directly.
5.4 Data Erasure, Accuracy, and Portability
To request an export, erasure, or update of Personal Data held by Solutions in a Box, please send your request to support@boostideal.com. We will forward your request to your employer/organization, who will then initiate a request to Solutions in a Box to complete the request. Since Solutions in a Box’s role is only that of a Data Processor, Solutions in a Box will not be able to perform these actions directly.
5.5 Filing a Complaint
For filing a complaint related to personal data processed by Solutions in a Box, use the complaint portal/form of your employer or organization (the Data Controller). Solutions in a Box will assist the Data Controller in resolving the complaint, but will not take any action until and unless such action is authorized by the Data Controller.
6. List of Sub-Processors
Solutions in a Box, as a Data Processor, has engaged the services of the following sub-processors. Some or all of your personal data may be transferred to them. All such transfers are governed by Master Service Agreements and GDPR agreements (via Data Processing Addendum) that establish the scope of processing as well as the legal basis for such processing. Solutions in a Box requires its sub-processors to perform the specified processing only for the purposes of delivering the services that are part of the agreement.
- Stripe.com
- HubSpot.com
- Webflow.com
- Intuit.com