TRUST AND PRIVACY POLICY
Thank you for choosing Boxpilot. We appreciate your business and strive to surpass your service and results expectations over the course of a long and successful working relationship.
Preamble
Boxpilot is committed to protecting the privacy of its users. This Privacy Policy (“Privacy Policy”) is designed to help you understand what information we gather, how we use it, what we do to protect it, and to assist you in making informed decisions when using Boxpilot services (“Services”). Unless otherwise indicated below, this Privacy Policy applies to any website that references this Privacy Policy, any Boxpilot owned website or application, as well as any data that Boxpilot may collect across partnered and unaffiliated sites.
For the purposes of this Privacy Policy, the terms “Boxpilot”, “we,” “us,” and “our” refer to JM Growth Partners, LLC O/A Boxpilot and/or representatives or agents of JM Growth Partners, LLC. Further, “you” or “Client” refers to customers and prospects who have become customers, as well as prospects who have not yet become customers.
Acknowledgment
By agreeing to conduct business with Boxpilot and to use our Services, you acknowledge and are in agreement with the following terms as they relate to trust, privacy, disclosure, conditions, and other elements as outlined in this Privacy Policy. Periodically, our Privacy Policy is updated and available from your Boxpilot account manager or online at trust.boxpilot.com. By continuing to use our Services, you are also agreeing to any Privacy Policy revisions as may be updated by Boxpilot from time-to-time. A current version of this Privacy Policy is available at any time at https://boxpilotmarketing.com/trust/.
Protection and Security of Information
The success of Boxpilot relies on the protection of our Clients’ data and the trust that you instill in Boxpilot with your information. Your privacy is central to our overall strategy and is one of our highest priorities, ensuring your continued relationship with us. As a trusted Data Processor as defined under the European Union General Data Protection Regulation (“GDPR”) and applicable US state privacy laws, Boxpilot has taken significant measures to ensure the protection of our Clients’ data.
“Confidential Information” shall mean all non-public information which is disclosed by the Client to any employee or agent of Boxpilot concerning business activities of the Client and Client’s lists of names and phone numbers and any other Personal Data controlled by the Client. Boxpilot will never use our Clients’ lists outside of their intended and agreed upon use.
Boxpilot agrees to maintain all Confidential Information from the Client in the strictest of confidence, and agrees not to knowingly disseminate, disclose, sell, rent or give such Confidential Information to any third party or persons not employed or contracted by Boxpilot, unless required by court order.
Confidential Information will be accessed and processed as follows: Boxpilot will provide Secure File Transfer through an enterprise-grade secure file transfer protocol which uses SSAE 16 Type II certified data centers, and are HIPAA, HITECH, FINRA, and CFPB certified. Only minimal data that is essential for the completion of a project will then be securely transferred to our contact center database (First Name, Last Name, Company Name, Phone Number, Email and Title). Boxpilot uses an enterprise-grade contact center system whose data centers are compliant with HIPAA, TCPA/Ofcom, PCI DSS, SOC 1, SOC 2, FISMA, and EU-U.S. Data Privacy Framework (DPF) safeguards. All Confidential Information is encrypted in transit and at rest on all systems that we use to access or store your data. Upon completion of our program, we will provide any output back to you through our secure file transfer protocol, and remove Confidential Information from our active systems thirty days after project completion, unless otherwise specified by you.
Further regularly updated details on Boxpilot’s Technology Policy may be found here: https://reports.boxpilot.com/techpolicy.pdf
Security Incident and Data Breach Notification
In the event of a confirmed security incident or unauthorized access resulting in a breach of Client Confidential Information or Personal Data, Boxpilot will notify the affected Client without undue delay (and no later than 72 hours after becoming aware of the breach). Boxpilot will take prompt remedial action to mitigate the effects and provide reasonable assistance to the Client in fulfilling any applicable statutory breach notification requirements.
Sub-processors and Third-Party Service Providers
Boxpilot may engage vetted third-party service providers and sub-processors (such as cloud hosting providers, CRM infrastructure, and telecommunications routing partners) to support the delivery of our Services. All sub-processors are bound by data protection obligations at least as restrictive as those set forth in this Privacy Policy. A current list of third-party sub-processors is available upon request or via trust.boxpilot.com.
Exclusion
Boxpilot’s role, as it pertains to our Clients’ data, is one of Data Processor, and as such is not responsible for requirements for Data Collectors under GDPR or applicable U.S. privacy laws. We encourage all of our Clients to review Data Collector requirements on their end to ensure full compliance with GDPR and local regulations.
Client’s Personal and Non-Personal Information
We may collect both “Non-Personal Information” and “Personal Information” about our Clients. “Non-Personal Information” includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. “Personal Information” includes information that can be used to personally identify you, such as your name, address, telephone number and email address.
Personal information that has been provided voluntarily by Clients on Boxpilot website is collected by Boxpilot support, sales and marketing in order to understand and respond to the needs of the Clients. In responding to these needs, Boxpilot or its partners may contact the Client using the information provided in an effort to assist the Client.
In addition, we may also track information provided to us by your browser or by our mobile application when you view our online materials, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to our website, the time and date of access, and other information that does not personally identify you. We use this information for, among other things, maintaining the quality of our Services, to provide general statistics regarding use of our Services and for other business purposes. We track this information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to your browser from servers and are stored on your computer hard drive. Sending a cookie to your browser enables us to collect Non-Personal Information and keep a record of your preferences when utilizing our Services or visiting our web properties, both on an individual and aggregate basis, allowing Boxpilot to better cater your experience to your preferences. Boxpilot may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser. Persistent cookies can be removed by following your Internet browser help file directions. If you choose to disable cookies, some areas of our website may not work properly for you, and may hinder your overall experience.
Boxpilot primarily conducts its communication with Clients via telephone and email. All telephone conversations may be recorded for quality and training purposes in accordance with jurisdictional regulations.
Opt-out and Removal of Client Information
At any time, a Client may opt-out of any form of Boxpilot sales contact, Boxpilot marketing programs, contact from Boxpilot partners, or Google Analytics tracking, by contacting Boxpilot with such a request. In accordance with jurisdictional regulations, we will outright remove a Client from our records should the Client communicate such a desire to Boxpilot.
Conclusion
Thank you once again for choosing Boxpilot. We appreciate your business and strive to surpass your service and results expectations over the course of a long and successful working relationship. Please contact your account manager with any questions related to this document or any other aspects of conducting business with Boxpilot.