Boostly

Privacy Policy

Effective Date: January 1, 2024 | Last Updated: December 15, 2024

Summary: We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use Boostly's services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, company name, job title
  • Payment Information: Billing address, payment method details (processed securely by Stripe)
  • Communications: Messages you send us, support requests, feedback
  • Profile Data: Preferences, settings, and customizations

1.2 Information We Collect Automatically

  • Usage Data: Features used, time spent, actions taken within our platform
  • Device Information: IP address, browser type, operating system, device identifiers
  • Analytics Data: Page views, click patterns, conversion events
  • Cookies: Session data, preferences, authentication tokens

2. How We Use Your Information

2.1 Service Provision

  • Provide, maintain, and improve our conversion optimization platform
  • Process transactions and manage your account
  • Deliver customer support and respond to inquiries
  • Send service-related notifications and updates

2.2 Business Operations

  • Analyze usage patterns to improve our services
  • Conduct research and development
  • Prevent fraud and ensure platform security
  • Comply with legal obligations and enforce our terms

2.3 Marketing (With Consent)

  • Send newsletters and product updates
  • Provide personalized content and recommendations
  • Conduct surveys and gather feedback

3. Legal Basis for Processing (GDPR)

Contract Performance

Processing necessary to provide our services

Legitimate Interest

Analytics, security, and service improvement

Consent

Marketing communications and non-essential cookies

Legal Obligation

Compliance with applicable laws

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with trusted third parties who help us operate our business:

  • Payment Processing: Stripe (PCI DSS compliant)
  • Analytics: Google Analytics, Mixpanel (anonymized data)
  • Infrastructure: AWS, Cloudflare (SOC 2 certified)
  • Communication: Intercom, SendGrid (for support and emails)

4.2 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Security

Encryption

TLS 1.3 in transit, AES-256 at rest

Access Controls

Role-based access with MFA

Monitoring

24/7 security monitoring

Compliance

SOC 2 Type II certified

Regular Audits

Third-party security assessments

6. Data Retention

  • Account Data: Retained while your account is active
  • Usage Data: Aggregated data retained for 2 years for analytics
  • Support Data: Retained for 3 years for quality assurance
  • Marketing Data: Retained until you unsubscribe

7. Your Rights and Choices

7.1 GDPR Rights (EU Residents)

Access

Request a copy of your personal data

Rectification

Correct inaccurate or incomplete data

Erasure

Request deletion ("right to be forgotten")

Portability

Receive data in machine-readable format

Restriction

Limit how we process your data

Objection

Object to processing based on legitimate interest

7.2 How to Exercise Your Rights

Contact us at privacy@boostly.com or use the data controls in your account settings. We'll respond within 30 days.

8. Cookies and Tracking

8.1 Types of Cookies

  • Essential: Required for basic functionality (cannot be disabled)
  • Analytics: Help us understand how you use our service
  • Marketing: Used for personalized advertising (requires consent)
  • Preferences: Remember your settings and choices

8.2 Managing Cookies

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect functionality.

9. International Data Transfers

We may transfer data outside the EU/UK using appropriate safeguards:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this policy periodically. We'll notify you of material changes via email or prominent notice on our website. Continued use of our services constitutes acceptance of the updated policy.

12. Contact Information

Data Protection Officer

Email: privacy@boostly.com
Address: Boostly Ltd, 123 Tech Street, London, UK EC2A 4NE
Phone: +44 20 1234 5678

EU Representative

For EU-related inquiries: eu-privacy@boostly.com

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority.