Privacy Policy

BOOST PRIVACY POLICY

Updated On: February 13, 2024 

This Privacy Policy describes the privacy practices of Boost Technology, LLC (sometimes referred to in this Privacy Policy as “Boost”, “we”, or “us”), in connection with the www.bigten.org website and any online platforms and services provided by Boost that posts a link to this Privacy Policy (collectively, the “Website”), and any communications you make with us (together with the Website, the “Services”). 

Please read this Privacy Policy carefully. By visiting and using the Services, you are agreeing with and consenting to our collection, use, and handling of your personal information as described in this Privacy Policy. If you do not agree with the terms in this Privacy Policy, please do not use the Services and do not give us any personal information. In addition to our Privacy Policy, your use of the Services is governed by our Terms of Use, which govern in the event of any conflict with this Privacy Policy 

1. SCOPE 

This Privacy Policy applies to information we collect where we control the purposes and means of processing. It does not apply to information collected by third parties not on our behalf or information collected in the context of your employment with us. It also does not apply to information we collect on behalf of institutions and organizations which use our products and services, such as colleges and universities; those parties control the purposes and means of processing or information collected directly by them. For details on how they process your information, please review their privacy policies or contact them directly. 

You may have additional rights based on your jurisdiction. Please visit the relevant section below for details: 

• California (Section 12)

• Virginia • Nevada, Colorado, Connecticut and Utah (Section 14)

• Europe and the United Kingdom (Section 15) 

To contact us, please see our contact details set out in Section 11.

It is the policy of Boost to comply with any applicable laws in the United States and other jurisdictions which impose obligations on our collection and use of information. For purposes of this Privacy Policy, the term “personal information” is used broadly to include personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. If you are located in the European Economic Area (EEA), personal information includes all “Personal Data” as defined under EEA laws. 

2. INFORMATION BOOST COLLECTS 

This Section describes the information we collect and how we collect information about you. By information, we mean information relating to an identified or identifiable individual. The personal information we collect is required for Boost to provide products and/or services to you and improve internal operations. In some instances, if you do not provide personal information that we request, it may delay or prevent you from accessing our products and/or services. 

Information You Provide When Using the Services 

You may provide information directly to us or when you use or access the Services, whether manually through official digital portals or sites (e.g., sign-ups, waivers, registrations, bids, and enter-to-win contests as well as transactions) or passively or automatically from browsers and devices that are used to access the Services, as well as communications exchanged with or received by Boost personnel. We collect some of this information using cookies, web beacons, and other technologies, as explained further below.

The categories of information we collect from you may include: 

• Identifiers, such as name, email address, postal address, phone number, and other similar contact data. 

• Personal information, including contact information, name, signature, address, billing address, telephone number, physical characteristics or description, user credentials (such as username, password, password hints, and similar security information used to create an account and authenticate users of the Online Services) payment data (such as credit/debit card information, billing address, and other financial information), 

• Protected classifications and demographic data, which include, for example, age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status. 

• Commercial or transactional information, including records of products or services you have purchased, obtained, or considered. 

• Content, including content within any messages you send to us or comments or content you post. 

• Professional, employment, or education-related information, including your employment and work history, transcripts, writing samples, references, and other information necessary to consider you for a job at Boost.

Please do not provide any information that we do not request. 

Information from Your Browser or Device when You Use the Services 

When you use the Services, we and the third parties we work with automatically collect information from your browser or device. 

The categories of information we automatically collect include: 

• Device identifiers, including IP address. 

• Device information, including browser language, time, session age, user agent, etc. 

• Internet activity, including information about your browsing history and interactions, such as the features you use, pages you visit, content you view, purchases you make or consider, date and time of your visit, duration of your visit, and referring and exiting pages and URLs. 

• Non-precise location data, such as location derived from an IP address or data that indicates a city or postal code level. For clarity, Boost does not request access to or otherwise receive GPS signals from any devices when you access the Services. 

The methods by which we collect such information include: 

• Cookies. A cookie is a file stored on your browser that may be used to identify a device by storing certain personal preferences and user data. Boost uses cookies for a variety of purposes, including to help make our website work, identify authorized users of the Boost Account Portal, track affiliate referrals, complete online purchases through Boost’s shopping carts, prevent fraud and assist with security, count visitors, and perform measurement and analytics. 

• Web Beacons. Web beacons are small graphic images or other web programming code (also known as “1x1 GIFs” or “clear GIFs”), which may be included in our web pages and/or email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons are often associated with cookies and used for similar purposes. Web beacons may also be used to count how many sent emails were opened or to count how many particular articles or links were viewed. 

• Embedded Scripts. Embedded scripts are programming codes designed to collect information about a device's interactions with a website, such as the links clicked on. The code is temporarily downloaded onto your device from a server, is active only while you are connected to the website containing the embedded script, and is deactivated or deleted thereafter. Embedded scripts are used for similar purposes as cookies and web beacons. 

• Server Logs. Your web browser automatically sends information to every website you visit, including ours. For example, our server logs may receive and record your device information and internet activity. Our server logs may also receive a user agent string, which is a series of characters automatically sent with your Internet requests that provide information necessary for smooth Internet communications, such as the operating system and browser you used. 

Other parties that support the Services by providing advertisements or other services, such as allowing you to share content or tracking aggregate website usage statistics, may also use these technologies to collect similar information when you use the Services (such as websites and emails) or other parties' services. Those parties may also use these technologies, along with activity information they collect, to recognize you across the devices you use, such as a mobile device and a laptop or other computer. Boost does not control these technologies and their use is governed by the privacy policies of parties using such technologies.

Your browser may be initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated and to block cookies altogether. Please consult the “Help” section of your browser for more information, including how to clear data from local storage and, depending on your browser, how to turn off other data collection by the browser. Please note that by blocking any or all cookies you may not have access to certain features, content, or personalization available through the Services. 

Information from Other Sources 

Boost also receives information, including the categories of information listed above, from other sources. The categories of other sources from which we receive information include: 

• Our business partners, such as ticketing services provided by authorized partners, food and beverage and retail platforms and other point of sale solutions, fan engagement platforms, contests, raffles, and fan feedback portals. 

• Publicly available sources such as open government databases or other data in the public domain. 

• From social media. For example, if you contact us through Twitter or LinkedIn. 

We will treat the information in accordance with the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data. 

Information We Infer 

We may infer new information from any of the information listed above to create a profile or summary, for example, an individual’s preferences and characteristics, such as your favorite teams and players, your home city, or your communications preferences. In addition to what you provide directly, we may infer your interests and preferences from other data we collect, such as the content and advertisements you interact with while using the Services. 

3. HOW BOOST USES INFORMATION 

We collect and use information for our legitimate interests and for business and commercial purposes in accordance with the practices described in this Privacy Policy. Our purposes for collecting and using information include: 

Providing Our Services 

We use the data we collect to operate our business, including providing, tailoring, and improving the Services. We engage in this activity in order to fulfill our obligations to users of our Services and to provide the experience and services reasonably expected by such users. Specifically: 

• To create and maintain accounts, and to process user registrations with the Services.

• To fulfill transactions that you request, including, without limitation, to enable you to participate in our programs (including sweepstakes, contests, and promotions).

• To deliver location-based services and comply with territorial restrictions. 

• To diagnose and fix problems with the Services and provide other customer support services. 

• To personalize and enhance the user experience on the Services and to better understand user preferences when using the Services. 

• To allow users to participate in interactive features when they choose to do so. 

• For analytical purposes to better understand our users and how they use the Services, which allows us to continually improve and expand the services we provide. For example, If you are a university student, we may collect the name of your university and class year if you are a fan, we may collect information about the teams you follow or school events in which you’ve expressed an interest. 

• To build predictive models, which allow us to tailor the Services based on the data we have about how our users use the Services, as well as to tailor our marketing and advertising efforts.

Communications with You 

Boost maintains one or more contact lists (with email addresses and other contact identifiers) to allow Boost to communicate with individuals who do business with Boost or who have expressed an interest in the Services. We may contact you to confirm your purchases or respond to requests that you make, notify you of changes to your account or the Services, for security purposes, for marketing purposes, or to otherwise inform you of information related to our business or your account with us. 

Website Administration and Customization 

Boost uses information for a variety of website administration and customization purposes. For example, we use the information to process your registration requests, send you email updates and other communications, customize features, and deliver content to you. 

Communicating with You and Providing User Support

We use the data we collect to communicate with you, including responding to your requests or inquiries. Specifically: 

• To respond to your request if you contact us with a question or concern. 

• To provide information about your account, your use of the Services, or other transactions that you request. 

• To deliver personalized news, updates, and other types of communications, according to your subscriptions, alerts, and other preferences. 

Marketing, advertising, and eligibility

We use the data we collect for marketing or advertising purposes, on behalf of ourselves, as well as our partners, customers, and other parties involved with promotional placements and advertising on the Services. Specifically: 

• To send you promotional messages and deliver advertisements relevant to our Services, such as those about products, tickets, services, programs, or events that may be of interest to you. These may be offered by, or on behalf of, Boost, current or future customers, or by our partners, advertisers, and/or other third parties with whom we have a relationship. The promotional messages and advertisements that you see may be determined by data that we collect or receive about you, such as your demographic data, general location, usage data, interests, and preferences. 

• To conduct internal and market research, identify usage trends, and determine the effectiveness of marketing and advertising campaigns. 

• To verify and determine your eligibility for some of certain services or promotions. For example, this may include a specific offer or promotion made available by one of our university customers with whom you have an affiliation. 

Website Experience

We use the information we collect for the technical administration of the Services, including, for example, for user administration, troubleshooting, data analysis, monitoring, data analytics, testing, and research and development purposes, and to ensure that content from the Services is presented in an effective manner for you and for your computer.

Security, Compliance, and Enforcement 

We use the data we collect for security, legal, regulatory, compliance, and enforcement purposes. Specifically: 

• To protect the safety and security of our users and our Services.

• To detect and prevent abuse, fraud, or other unlawful or unauthorized activities. 

• To resolve disputes. 

• To comply with legal and regulatory obligations. 

• To enforce our agreements, including our policies and terms of service that govern your use of the Services. 

We may also use your data in any other manner as disclosed at the time of collection, or when we have otherwise obtained consent. Please also note that this Privacy Notice is not intended to place any limits on what we do with aggregated, pseudonymized, or anonymized data. We may also merge, co-mingle, or otherwise combine data about you, including personal information, in furtherance of the uses above. 

Promotional Communications 

We may use your personal information to send you updates (by email, text message, telephone, or post), including exclusive offers, or promotions. 

We have a legitimate interest in processing your personal information for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is required by applicable law, we will ask for this consent separately and clearly. 

We will always treat your personal information with the utmost respect and in compliance with this Privacy Policy. Please note that nothing in this Privacy Notice limits what we do with anonymized or deidentified information, or aggregate data that does not identify an individual consumer, in accordance with applicable law. 

You have the right to opt out of receiving promotional communications at any time by: 

• Contacting us at privacy@boostsport.ai 

• Using the “unsubscribe” link in emails or “STOP” number in texts; 

We may ask you to confirm or update your marketing preferences if you instruct us to provide further services or information in the future, or if there are changes in the law, regulation, or the structure of our business. 

Recruitment 

We use information to make decisions about recruiting and in anticipation of a contract of employment. 

Consent 

We also use information with your consent, including to allow you to participate in our surveys, and to fulfill any other purpose disclosed to you and with your consent or at your direction. 

Some of our lawful bases for processing your information stem from our customers on whose behalf we provide services. 

Boost uses information that does not identify you for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we use your information, please see Section 6 below. 

4. HOW BOOST DISCLOSES INFORMATION 

We disclose the information we collect in accordance with the practices described in this Privacy Policy. The categories of sources to whom we disclose information include: 

Service Providers 

We provide your information to our service providers and contractors for the purpose of delivering services to you as well as for purposes related to Services administration and operation, including conducting analytics and helping us with sales tax compliance. When disclosing information for the purpose of providing you with the services you request, we will disclose your information only as necessary for the service provider working on Boost's behalf to complete its work for us. 

Customers 

We may disclose your information to our customers in connection with us processing your information on their behalf and as a controller of information about you which they may use according to their privacy policies. For example, we may disclose your information to our customers to provide them with our products and services, respond to questions and comments, fulfill your requests, and otherwise comply with applicable law. 

Vendors and Other Parties 

We may disclose your information to vendors and other parties for purposes of providing you with marketing, for measuring and improving our Service, and for enabling other enhancements. Vendors may act as our service providers, or in certain contexts, independently decide how to process your information. 

Security and Compliance with the Law 

We reserve the right to disclose your information to appropriate third parties if we are required to do so by law or we believe that such action is necessary in order (a) to comply with a legal process such as a search warrant, subpoena, or court order; (b) to protect the company's rights and property; (c) to investigate reports of users sending material using a false email address or users sending harassing, threatening, or abusive messages; (d) to protect against misuse or unauthorized use of the Services; or (e) to respond to emergencies, such as when we believe someone's physical safety is at risk. Boost may be required to disclose information in a life-threatening emergency or in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. 

Transfer of Business 

Over time, Boost may buy or sell various assets. In the event that we sell some or all of our assets, or our company is acquired by another company, or during the negotiation of such sale or acquisition, our databases and any information we collect may be among the transferred or negotiated assets. 

Consent 

We may disclose your information for any other purpose disclosed to you and with your consent or at your direction, such as when you post on the Website. 

Without limiting the foregoing, in our sole discretion, Boost discloses information that does not identify you to third parties, including our customers, for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we disclose your information, please see Section 6 below. 

5. ANALYTICS AND ONLINE TRACKING 

Boost works with certain third parties (including Google and MixPanel analytics companies) to provide us with information regarding traffic on and use of the Services. Some of these parties collect information when you visit the Services or other online websites and services. These third parties set and access their own tracking technologies (including cookies, embedded scripts, and web beacons) and may otherwise collect or have access to your IP address or other device identifiers and device information. Google's data practices are set out in its privacy policy available at https://policies.google.com/privacy. For more information about Google Analytics, please review the site “How Google uses data when you use our partners' sites or apps,” located at www.google.com/policies/privacy/partners/. To opt out of Google Analytics specifically, please go to https://tools.google.com/dlpage/gaoptout. For information on Mixpanel’s privacy practices, see the MixPanel Privacy Policy at https://mixpanel.com/legal/privacypolicy/. You can opt-out of MixPanel’s automatic retention of data collected here: https://docs.mixpanel.com/docs/privacy/protecting-user-data#optout-users..

 6. YOUR RIGHTS AND CHOICES 

We provide a variety of ways for you to control the information we process about you, including the opt outs for Google and MixPanel as provided above. Please see below for details. 

Jurisdictional Rights 

Where applicable, you may have additional rights based on your jurisdiction. See your jurisdiction-specific terms for details. 

Account Settings 

If you are a registered member of the Services, you can make changes to your account information (including email settings) by logging into the Website and modifying your preferences. 

Opt-Out of Email Marketing Communications 

Certain email communications we send to you, such as newsletters and promotional announcements, contain a clearly worded “Opt-Out” or “Unsubscribe” link allowing you to withdraw your permission for future mailings. You may also opt-out of email marketing communications by contacting us at privacy@boostsport.ai with your request. Please note that we reserve the right to send you certain communications relating to your account or use of the Services (for example, administrative and service announcements) and these transactional account messages may be unaffected even if you opt-out from marketing communications. 

Blocking or Deleting Cookies 

You can manually delete cookies, which are normally located in your temporary Internet folder or cookie folder. You can also reset the preferences in your web browser to notify you when you have received a cookie or, alternatively, to refuse to accept cookies. Deleting or blocking cookies will prohibit your ability to make online purchases on the Services and to use and access portions of the Services that require logging in with a username and password, and may affect other functionality. When you manage cookies, pixels associated with such cookies may also be impacted. Please note that if you use multiple browsers, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations. 

Do Not Track 

Your browser or extension may allow you to automatically transmit Do Not Track and other preference signals, and unless required by law, we do not respond to such signals. To the extent you have specific rights in your jurisdiction with respect to certain preference signals, please see your jurisdiction-specific terms for details. 

Customer-Related Requests 

We acknowledge that you may have rights under applicable law in connection with the information we process on behalf of our customers. If information about you has been processed by us on behalf of a customer and you wish to exercise any rights you have with such information, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your information. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request. 

7. INTERNATIONAL TRANSFER 

We are based in the U.S. and the information we collect is governed by U.S. law. If you are accessing the Services from outside of the U.S., please be aware that information collected through the Services may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Services or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, and storage of your information in the U.S. and other jurisdictions as set forth in this Privacy Policy. 

8. SECURITY AND RETENTION 

Boost implements reasonable administrative, physical, and technical security measures to help protect your data from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no physical or electronic security system is impenetrable. Boost cannot guarantee the security of the Service's servers or databases, nor can we guarantee that the information you supply will not be intercepted while being transmitted to us over the Internet. 

We retain each category of information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. 

9. POLICY REGARDING CHILDREN 

The Online Services are intended for a general audience and are not directed at children under the age of 13, and we do not knowingly collect personal data from children under the age of 13 or sell personal data of individuals under the age of 16. If you are a parent or guardian and believe we have collected information about your child in violation of this policy, please contact us at the address set forth in Section 11 below. 

10. CHANGES TO THIS PRIVACY POLICY 

We will occasionally update this Privacy Policy in response to changing business circumstances and legal developments. If there are material changes to this Privacy Policy or in how we use your information, we will prominently post such changes prior to implementing the change. We encourage you to periodically review this Privacy Policy to be informed of how we are collecting and using your information. 

11. CONTACT US 

If you have any questions about or trouble accessing this Privacy Policy, please contact us:

By email: privacy@boostsport.ai 

By mail: 

Privacy Representative 

Boost Technology LLC 

5440 Park Pl 

Rosemont, IL 60018 

12. CALIFORNIA 

CALIFORNIA CONSUMER PRIVACY ACT NOTICE. This California Consumer Privacy Act Notice Section provides information for California residents in connection with the California Consumer Privacy Act (“CCPA”). Under the CCPA, and for purposes of this Section, “personal information” generally means information that identifies, relates to or describes a particular California resident and includes the categories listed below. This section provides details about the categories of personal information of California residents that we have collected, disclosed, or “sold” or “shared” during the last 12 months, as well as rights California residents have under California law. 

Personal Information Collected, Disclosed, and/or Sold or Shared. In the preceding 12 months, Boost has collected, disclosed, and/or “sold” or “shared” (as such terms are defined under the CCPA) to one or more third parties in the below categories of personal information. Please note that we have not sold personal information for monetary consideration in the last 12 months; however, we disclose some categories of personal information in connection with certain types of advertisements, which could be considered “selling” or “sharing” under the CCPA. Depending on the California resident's interactions with Boost, we may not have collected, disclosed, or “sold” or “shared” each of these categories about each individual. Additionally, we do not knowingly “sell” or “share” personal information of minors under 16 years of age. 

Please note that the CCPA definitions of “sale” and “share” do not include, for example, the transfer of personal information as an asset that is part of a merger, bankruptcy, or other similar transaction involving all or any portion of our business. 

Sources of Personal Information. We collect this personal information directly from California residents themselves, as well as from social media platforms (e.g., if the individual has connected a social media account to an Online Service); joint marketing, co-branding, copromotional, or advertising partners, including advertising technology companies and advertisers; third party partners; Customers; and sources of demographic and other information. Depending on the individual's interactions with us, Boost may not have collected personal information from each of these categories of sources. 

Purposes. We may use this personal information and/or disclose it to third parties for the purposes set forth above in the Privacy Notice. 

Sensitive Personal Information. Under California law, we collect the types of sensitive personal information described in the table above. We do not collect or process “sensitive” personal information for purposes other than the “limited purposes” specified in the CCPA Regulations section 7027(m) (such as to provide the services, to protect against fraud, and for security purposes). Because we do not use this sensitive personal information other than for the limited purposes as defined by law, we have not included the right to limit use and disclosure of sensitive personal information in this section. 

Data Retention. We will retain personal information from or about you as reasonably necessary and proportionate to achieve the purpose(s) for which the Personal Information was collected or processed as outlined in this Section 12 unless a longer retention period is required or allowed by law.

California Rights. California residents have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to request the following free of charge:

How to Exercise Your Rights. California residents who would like to exercise any of the CCPA rights as described in this Privacy Notice may do so as follows: 

• Complete a request form available on our website at https://privacyportal.onetrust.com/webform/f2cca7c0-1a20-40ad-96bf-6cd699a1fc0b/f11c64d4-4b9d-4b02-b1dbd2145f166a53 

• Call us at +1 (708) 320-8060 or 

• Email us at privacy@boostsport.ai. 

Please note that a consumer may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period. 

If you choose to contact us directly via any of the above methods, you will need to provide us with: 

• Enough information to identify you (e.g., your full name); 

• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and 

• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf. 

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification. 

Requests by Authorized Agents. You may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. 

Shine the Light. California's “Shine the Light” law permits customers who are California residents to request certain details about how a business shares their personal information as defined by “Shine the Light” with third parties (and in some cases affiliates) for those third parties' or affiliates' own direct marketing purposes. California customers may request information about our compliance with this law by contacting us by email at privacy@boostsport.ai or by mail at the address set forth in Section 11 above. Any such inquiry must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email or mail address.

13. VIRGINIA 

VIRGINIA CONSUMER DATA PROTECTION ACT NOTICE. This section provides information for Virginia consumers in connection with the Virginia Consumer Data Protection Act (“VCDPA”). Under the VCDPA, and for purposes of this Section, “personal data” generally means information that identifies, relates to, or describes a particular Virginia consumer and includes the categories listed below. This section provides details about the categories of personal data of Virginia consumers that we have collected, disclosed, or processed for purposes of targeted advertising, as well as rights Virginia consumers have under Virginia law. 

Categories of Personal Data Collected or Disclosed, or Processed for Targeted Advertising. The categories of personal data that we collected or disclosed, or processed for purposes of targeted advertising are below, along with the categories of third parties to whom each category of personal data was disclosed. Please note that we process some categories of personal data in connection with targeted advertising. Additionally, depending on the Virginia consumer's interactions with us, we may not have collected, disclosed, or processed for purposes of targeted advertising, each of these categories about each individual.

Please note that the VCDPA definition of “sale” is the exchange of information for monetary consideration and does not include, for example, the transfer of personal data as an asset that is part of a merger, bankruptcy, or other similar transaction involving of all or any portion of our business. We do not “sell” personal data as defined under the VCDPA. 

Purposes. We may use personal data for the following purposes:

• to operate, manage, and maintain our business, including in connection with a sale, acquisition, reorganization, merger, transfer of all or a part of our business, or other corporate transaction (e.g., a bankruptcy or similar proceeding); 

• to provide our products and services, including subscriptions; 

• to accomplish our business purposes and objectives, including: 

o developing, improving, repairing, and maintaining our products and services;

o personalizing, advertising, and marketing our products and services (including   targeted advertising);

o conducting research, analytics, and data analysis; 

o maintaining our facilities and infrastructure; 

o quality and safety assurance measures; 

o conducting risk and security controls and monitoring; 

o detecting and preventing fraud; 

o performing identity verification; 

o performing accounting, audit, and other internal functions;

o complying with law, legal process, and internal policies;

o maintaining records; and 

o exercising and defending legal claims.

Depending on the Virginia consumer's interactions with us, we may not have used personal data collected about that resident for each of these purposes. 

Virginia Rights. If you are a Virginia consumer, you have the following rights:

• Right to Access and Portability. You have the right to request that we disclose to you the personal data we collected from you, including in a portable form. To make a request for your personal data, please visit https://privacyportal.onetrust.com/webform/f2cca7c0-1a20-40ad-96bf-6cd699a1fc0b/f11c64d4-4b9d-4b02-b1db-d2145f166a53 or call us at +1 (708) 320-8060. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request. 

You can use an authorized agent to submit a request for your personal data. When submitting a request online, your authorized agent should include your name, your email address, and whether or not you have an account/profile with us. In addition to verifying your identity, as described above, we also will need to verify your authorized agent's ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies. 

• Right to Request Deletion. You have the right to request that we delete personal data we collected from you or about you. 

To make a request for deletion, please visit https://privacyportal.onetrust.com/webform/f2cca7c0-1a20-40ad-96bf-6cd699a1fc0b/f11c64d4-4b9d-4b02-b1db-d2145f166a53 or call us at +1 (708) 320-8060. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. Please note that you also will be asked to separately confirm that you would like to proceed with your deletion request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for deletion. When submitting a request online, your authorized agent should include your name, your email address, and whether or not you have an account/profile with us. In addition to verifying your identity, as described above, we also will need to verify your authorized agent's ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies. 

• Right to Request Correction. You have the right to request that we correct inaccurate personal data we collected about you. 

To make a request for correction of inaccurate personal data, please visit https://privacyportal.onetrust.com/webform/f2cca7c0-1a20-40ad-96bf-6cd699a1fc0b/ f11c64d4-4b9d-4b02-b1db-d2145f166a53 or call us at +1 (708) 320-8060 or send us a request at Boost Technology LLC, 5440 Park Pl, Rosemont, IL 60018. 

You will need to provide your name, email address, and the personal data you would like to be corrected, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request. 

You can use an authorized agent to submit a request for correction of inaccurate personal data. When submitting a request online, your authorized agent should include your name, your email address, and whether or not you have an account/profile with us. In addition to verifying your identity, as described above, we also will need to verify your authorized agent's ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons. 

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies. 

• Right to Opt-Out of Targeted Advertising. We process and share some categories of personal data in connection with targeted advertising. You can learn more about your “opt-out” rights under Virginia law by visiting our Services at bigten.org/about/legal/ privacy-policy/ 

• Right to Appeal. If you receive a denial of a personal data rights request and would like to request an appeal, please notify us through our privacy rights portal following the instructions provided with the denial of your request. 

Right to be Free from Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the VCDPA.

14. NEVADA, COLORADO, CONNECTICUT AND UTAH 

Nevada law requires certain businesses to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of personal information for monetary consideration by the business to a third party for the third party to license or sell the personal information to other third parties. If you are a Nevada consumer from whom Boost has collected personal information and you wish to submit a request relating to our compliance with Nevada law, please contact us at privacy@boostsport.ai. You may also submit a request to opt-out by clicking Do Not Sell My Personal Information. 

The following additional rights and disclosures apply only to residents of Colorado, Connecticut and Utah. Terms have the meaning ascribed to them in the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”) and the Utah Consumer Privacy Act (“UCPA”), as applicable. 

Data Subject Rights 

You have the following rights under applicable law in your region: 

• To confirm whether or not we are processing your personal data 

• To access your personal data 

• To correct inaccuracies in your personal data 

• To delete your personal data 

• To obtain a copy of your personal data that you previously provided to us in a portable and readily usable format 

To exercise any of the above rights, please submit a request to the contact information indicated in Section 11 above. We will respond to your request within 45 days. If you have an account with us, we may require you to use the account to submit the request. We may require specific information from you to help us confirm your identity and process your request. 

Some of the services we license to our customers could be used by our customers or others in furtherance of decisions that produce legal or similarly significant effects concerning you. If personal data about you has been processed by us as a processor on behalf of a customer and you wish to exercise any rights you have with such personal data, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal data. We will refer your request to that customer, and will support them to the extent required by applicable law in responding to your request. For requests relating to our customers' processing of personal data in furtherance of decisions that produce legal or similarly significant effects concerning you, please inquire with our customers directly. 

Right to Opt-Out of Processing for Targeted Advertising or Sales 

You also have the right to opt out of the processing of personal data for purposes of targeted advertising, or the sale of personal data. You can exercise these rights (i) by visiting by clicking Do Not Sell My Personal Information or (ii) by turning on a recognized opt-out preference signal, such as GPC in your browser or extension. If Boost detects a GPC signal in your browser or extension Boost will treat that as a request to opt-out of any personal data collected from your browser, but Boost will not opt your IP address out of our services unless you submit the webform located at Do Not Sell My Personal Information. 

Authorized Agent 

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. 

Appeal 

If we refuse to take action on a request, you may appeal our decision within a reasonable period time by contacting us at privacy@boostsport.ai and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint as follows: 

• For Colorado residents, to the Colorado AG at https://coag.gov/file-complaint/ 

• For Connecticut residents, to the Connecticut AG at https://www.dir.ct.gov/ag/complaint/ 

15. EUROPE AND THE UNITED KINGDOM 

While Boost does not provide products or services to customers in the EU or the UK, to the extent you are located in those areas and access the Website and provide personal information to Boost, the following may apply to you. 

Roles 

EU and UK data protection laws make a distinction between organizations that process personal data for their own purposes (known as “controllers”) and organizations that process personal data on behalf of other organizations (known as “processors”). 

Boost, located at the address set forth in Section 11 above, generally operates as a controller of information collected through the Services but it may also act as a processor on behalf of its customers that use our products and services. The Boost customer, when acting as the controller, determines the purposes and means of the processing of personal data. Specifically, where the Boost customer is the controller, the Boost customer decides what personal data to share with Boost. Please visit the applicable customer's privacy policy for information about their privacy practices. 

Boost also operates as a controller with respect to certain of its services. For example, Boost operates as a controller in connection with personal data collected from visitors through the Website. Also, when Boost combines personal data from different customers, like many kinds of analytics services, it may do this both as a processor at its customers' instruction and as a controller itself for the purpose of providing services to all of its customers. For example, Boost may process and aggregate or otherwise de-identify some of the personal data that a customer shares with Boost in order to make that personal data part of another database for one or more other services provided to Boost customers. 

Data Subject Rights 

If you are a data subject in the European Union or UK, you have the right to access, rectify, or erase any personal data we have collected about you through the Services. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you through the Services. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us. 

To exercise any of these rights, contact us using the information at Section 11 above and specify which right you intend to exercise. We will respond to your request within 30 days. We may require additional information from you to allow us to confirm your identity. Please note that we store information as necessary to fulfill the purposes for which it was collected, and may continue to retain and use the information even after a data subject request for purposes of our legitimate interests, including as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. 

If your information has been processed by us on behalf of one of our customers and you wish to exercise any rights you have with such information, please inquire with our customer directly. If you wish to make your request directly to Boost, please provide the name of the Boost customer on whose behalf Boost processes your information. We will refer your request to that customer, and will support them to the extent required by applicable law in responding to your request. 

If you have any issues with our compliance, you have the right to lodge a complaint with a European supervisory authority where you work, normally live, or where you believe any alleged infringement of data protection laws occurred. 

Lawful Basis 

Boost processes personal data consistent with the lawful basis available under law. 

In some instances, Boost’s lawful basis for processing personal data is consent. For example, individuals in the EU and UK can provide opt-in consent to our marketing emails. In other instances, Boost’s lawful basis for processing personal data is to comply with a legal obligation, such as if we were to receive a subpoena or court order requiring the disclosure of personal data. 

In most instances, Boost’s lawful basis for processing personal data is for our or our customers’ legitimate interests. Boost’s legitimate interests include the following: 

• To detect and prevent fraud.

• To create and manage accounts, confirm purchases, communicate, market and provide information related to our business relationships. 

• To establish, exercise and defend legal rights.

• Website administration and customization.

Last updated: 6/10/2023