Effective Date: December 1, 2021 — Last Revised: December 1, 2021.
This policy applies to Boster Group, Ltd. and its affiliated companies (collectively “Boster Group”). We are the data controller for your personal data and will ensure it is used and stored in accordance with the Data Protection Act (2018) and the Privacy and Electronic Communication Regulations (2003).
Boster Group is a company limited by guarantee (5097003) registered in England and Wales.
Boster Group understands that your privacy is important to you and is committed to safeguarding the confidentiality and privacy of personal information entrusted to it.
Scope of this policy
This policy applies to personal information which is collected and/or used by Boster Group in its capacity as a controller as that term (or another term with equivalent meaning) is defined in the EU General Data Protection Regulation (GDPR) and other similar laws.
Boster Group collects some personal information from visitors to this website, and recruitment applicants. Boster Group uses personal information to deliver its newsletter to website visitors. For its own purposes, it also uses personal information to analyse and improve how it delivers its services, to contact representatives of its clients or prospective clients and to market to them, and to administer recruitment.
The primary point of contact at Boster Group for questions regarding your personal information is email@example.com.
When do we collect personal information?
We collect information about you if:
What types of personal information are collected and what do we use it for?
The following is a summary of the types of personal information we collect, and the purposes for which that information is used.
Boster Group collects your name, address, e-mail address, telephone number and any other personally-identifiable information which you voluntarily provide as “comments” when you submit an inquiry through the “Contact Us” tool. Boster Group also collects other background information about you in connection with career-related inquiries that you submit through its website.
First Party Cookies
Our first party cookies are set by the Boster Group website and are required to perform basic functionality. There is no way to prevent these cookies being set other than to not use our site.
Anonymous Visitor and Third Party Statistics Cookies
Boster Group also uses Mailchimp, a marketing automation platform and email marketing service, to manage our mailing and distribution lists for our newsletters. The information generated by a Mailchimp cookie will be transmitted to and stored by Mailchimp on servers in the United States. Mailchimp will use this information to enable Boster Group to contact you with our thought leadership, case study and insights-based content, as well as relevant Boster Group news. Mailchimp may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Mailchimp’s behalf. By signing up for our newsletter, you consent to the processing of data about you by Mailchimp in the manner and for the purposes set out above.
Boster Group’s Former, Current and Prospective Clients
If you submit an enquiry to Boster Group about our Services (either over the website, or by emailing, telephoning or meeting with one of our colleagues), then we will process information such as your name, job title and contact information in order to respond to your enquiry.
If you associate with an Boster Group colleague at, for example, an industry event, then Boster Group may collect basic personal information, such as contact details, which you voluntarily provide (for example, by filling in a form or handing over a business card) in order to facilitate your participation in the event, and for the management of our relationship with you as an actual or prospective client.
If you or the organisation you are associated with becomes an Boster Group client, then we may process your personal information in order to:
Taking account of applicable marketing laws, we also process personal information about our clients (former, current and prospective) in order to:
Performing Services for Our Clients
Many of our Services involve the processing of personal information. In the majority of cases, personal information is provided to us in strict confidence, subject to restrictive undertakings on its use / disclosure.
Depending on your settings or the privacy policies for social media services like LinkedIn, Instagram or Twitter, you may give us permission to access information from those accounts or services, such as your behaviour on these services and across our site. The majority of this behaviour is anonymised.
If you apply for a position with Boster Group, we will need to collect personal information in order to consider your application, and during any interview and assessment phase.
If we hire you as a vendor, supplier or contractor, we will need to collect personal information in order to complete transactions and, where applicable, complete appropriate screening activities.
Finally, if you contact us for any other reason, we will collect basic contact details, as well as any other personal information relevant to the reason for your enquiry, in order to resolve that enquiry.
What is our legal basis for collecting personal information?
The GDPR, requires us to establish a ‘lawful basis’ for our processing of your personal information. In the majority of cases, processing will be justified on the basis that:
In limited circumstances, we will use your consent as the basis for processing your personal information, for example, where we are required by applicable law to obtain your prior consent in order to send you marketing communications.
Before collecting and/or using any special categories of data (as that term is defined in the GDPR), or criminal record data, we will establish a lawful exemption which will allow us to use that information. This exemption will typically be:
Disclosure of Personal Information to Third Parties
Boster Group may also disclose your personal information for the purposes of:
Boster Group has reasonable technical safeguards, security policies and procedures in place to protect personal information from unauthorized loss, misuse, alteration, or destruction. Measures we take include placing confidentiality requirements on our staff members and limiting access to your personal information on a “need to know” basis.
Despite Boster Group’s best efforts, however, security cannot be absolutely guaranteed against all threats.
Retention of your personal information
Boster Group retains your personal information for the period of time required for the purposes for which it was collected, any compatible purposes which we subsequently establish, or any new purposes to which you subsequently consent, or to comply with legal, regulatory and Boster Group policy requirements. This period of time will usually be the period of your, or the relevant client’s, relationship or contract with Boster Group plus a period reflecting the length of time for which legal claims may be made following the termination of such relationship or contract. Some information (such as call recordings, tax records and certain information required to demonstrate regulatory compliance) may need to be kept for longer. Personal information will be kept for a shorter or longer period of time if so required by law or a Boster Group policy, if the information becomes subject to a legal hold (for example, following a communication from our regulator) or if we have identified through a data protection impact assessment that a different retention period is appropriate.
Your Rights in Jurisdictions Covered by the GDPR and Similar Laws
If your personal information is processed by an Boster Group entity in the EEA or another jurisdiction that has adopted the GDPR, then, subject to certain exemptions, and dependent on how and why we use it, you have certain rights in relation to your personal information. The rights described below may vary depending on the specific laws that apply to you.
We may ask you for additional information to confirm your identity before disclosing any personal information to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
You can exercise your rights by contacting us. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.
We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Right to Access
You have the right to access personal information which Boster Group holds about you, together with certain information about how and why your personal information is processed.
Right to Rectification
You have a right to request us to correct your personal information where it is inaccurate or out of date.
Right to be Forgotten (Right to Erasure)
You have the right under certain circumstances to have your personal information erased. Your information can only be erased if it is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the information.
Right to Restrict Processing
You have the right to restrict the processing of your personal information, but only where:
Right to Data Portability
You have the right to data portability, which requires us to provide personal information to you or another controller in a commonly used, machine readable format, but only where the processing of that information is based on (i) consent; or (ii) the performance of a contract to which you are a party.
Right to Object to Processing
You have the right to object to the processing of your personal information at any time, but only where that processing is based on our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
If you reside in the European Economic Area (EEA) or the UK and would like to exercise your right to access, review, correct or discuss how your personal information is processed by Boster Group please contact us at firstname.lastname@example.org.
If you reside outside of the EEA you can also make a request to update or remove information about you by contacting email@example.com. Boster Group will make all reasonable and practical efforts to comply with your request, so long as it is consistent with applicable law and professional standards.
In addition, under applicable local law you may have the legal right to lodge a complaint with the relevant supervisory authority or local data protection authority.
Boster Group may send you information related to its services, products and events that we believe are of interest to you. This information may be sent by post or via email. If at any point you no longer prefer to receive marketing communications from Boster Group you can (i) unsubscribe from Boster Group communications sent by email using a link provided in marketing emails sent from Boster Group; or (ii) contact us to exercise your right to prevent all forms of marketing (both post and email).
Boster Group’s websites are not intentionally designed for or directed at children under the age of 13. It is Boster Group’s policy never to knowingly collect or maintain information about anyone under the age of 13, except as part of an engagement to provide professional services.
Changes to this Policy
If you have questions or concerns regarding this policy or Boster Group’s personal data processing policies, please contact Boster Group at: firstname.lastname@example.org.
If you reside in the EEA or UK and have questions or concerns regarding this policy or processing of your personal information by Boster Group please contact us at email@example.com.