Privacy policy

Who we are

BootSoc Media LLC (“BootSoc”, “we”, “us”) runs B2B demand generation, content syndication, account-based marketing, intent data and related programs for business clients, and publishes the technology site IntentBuy. Our registered address is 5830 East 2nd Street, Ste 7000 #29910, Casper, WY 82609, USA.

For personal information we collect for our own purposes, we are the “business” (US state laws) or “controller” (UK and EU GDPR). When we process personal information on a client's instructions, we act as their “service provider” or “processor”, and the client's privacy notice also applies.

Our Privacy Officer is responsible for how we handle personal information, including under Canada's PIPEDA and Quebec's Law 25. Contact them at privacy@bootsoc.com.

Who this policy covers

• Visitors to bootsoc.com and people who contact us or subscribe to our newsletter
• Business professionals whose work contact details we maintain for B2B marketing
• People who engage with a BootSoc program, for example by downloading content or registering for an event
• Representatives of our clients, prospects, suppliers and partners
• Job applicants (see the applicant section below)

Information we collect

We do not intentionally collect sensitive personal information such as government ID numbers, financial account details, health data, precise geolocation, or information about racial or ethnic origin, religion, sexual orientation or union membership.

Where it comes from

• Directly from you, when you fill in a form, register for content or events, email us, talk to our team or apply for a job.
• Automatically, through cookies and similar technologies on our sites and emails, subject to your choices. See our cookie policy.
• Our publication, IntentBuy, when readers register or subscribe and agree to be contacted about related offers.
• Public and professional sources, such as company websites, press releases, professional networking profiles and business directories, from which we compile and re-verify work contact details.
• Clients and partners, for example target account lists or suppression lists a client provides for a program.

How we use it, and our lawful bases

Where we rely on legitimate interests, we have assessed that our interests are not overridden by yours. You can ask us for details and you can object at any time. You always have an absolute right to object to direct marketing.

How we share it

• Clients, when you have asked to receive their content or agreed to be contacted by them.
• Service providers who host, store, analyse or send communications for us under contract. See our subprocessor list.
• Advertising and analytics partners, such as Google and LinkedIn, only where your cookie choices allow.
• Authorities and advisers, where required by law or to protect rights, safety and security.
• A successor business, if we are involved in a merger, acquisition or sale of assets.

“Sale” and “sharing” under US state laws

In the past 12 months we may have disclosed identifiers, professional information, internet activity and inferences to clients and advertising partners in ways that some US state laws treat as a “sale”, “sharing” for cross-context behavioral advertising, or “targeted advertising”. You can opt out at any time through Your privacy choices, by submitting a privacy request, or by turning on Global Privacy Control in your browser. We do not knowingly sell or share the personal information of anyone under 16.

How long we keep it

International transfers

We are based in the United States and our main service providers store data in the US. When we transfer personal information from the UK, EU or Canada, we use appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, the UK-US Data Bridge or EU-US Data Privacy Framework where a recipient is certified, and contractual protections required by PIPEDA and Quebec's Law 25. You can request a copy of the relevant safeguards.

How we protect it

Our information security program is certified to ISO/IEC 27001 and independently audited under SOC 2 Type II. Controls include encryption in transit and at rest, role-based access controls, multi-factor authentication, logging and vendor due diligence. No system is perfectly secure, so we also maintain an incident response process and will notify you and regulators of a breach where the law requires.

Your rights in the United States

Depending on your state, including California, Colorado, Connecticut, Virginia, Texas, Oregon, New Jersey and other states with comprehensive privacy laws, you may have the right to:

• Know and access the personal information we hold about you, and receive a portable copy
• Correct inaccurate personal information
• Delete personal information
• Opt out of the sale or sharing of personal information, targeted advertising and profiling with significant effects
• Limit the use of sensitive personal information (we do not use it)
• Appeal our decision on your request
• Not be discriminated against for exercising these rights

Make a request through our privacy request form or by emailing privacy@bootsoc.com. We verify requests by matching information you provide against our records and respond within 45 days, which we may extend once where the law allows. An authorized agent may submit a request with your signed permission. If we decline your request, you can appeal by replying to our decision or choosing “Appeal” on the form; if you are unhappy with the outcome you may contact your state Attorney General.

California residents may also request information about disclosures for direct marketing under California Civil Code §1798.83. Where our activities qualify us as a data broker under California, Texas, Oregon or Vermont law, we register as required, and Californians can also submit deletion requests through the state's Delete Request and Opt-out Platform.

Your rights in the UK and EU

Under the UK GDPR, the Data Protection Act 2018 and the EU GDPR, you can ask us to:

• Give you access to and a copy of your personal data
• Correct or complete it
• Erase it, or restrict how we use it
• Transfer it to you or another organisation
• Stop using it, including for direct marketing (an absolute right)
• Withdraw consent at any time, without affecting earlier processing

We respond within one month, extendable by two months for complex requests. If you have a concern, please contact us first so we can resolve it through our complaints process. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

Your rights in Canada

Under PIPEDA and provincial laws, you can access and correct your personal information and withdraw consent, subject to legal and contractual limits. Quebec residents also have rights to data portability, to be informed about and challenge decisions made exclusively by automated processing, and to ask us to stop disseminating or de-index personal information. We respond within 30 days. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Profiling and automated decisions

We score research intent at the account (company) level and use engagement to decide which content is relevant to a person's role. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Cookies and Global Privacy Control

We use cookies and similar technologies as described in our cookie policy. In the UK, EU and Quebec, non-essential cookies load only with your consent. Elsewhere you can opt out at any time. We treat a Global Privacy Control signal as a valid request to opt out of sale, sharing and targeted advertising for that browser.

Job applicants

We use the information in your application to assess your suitability, communicate with you and, if you join us, set up your employment. We keep applications for 12 months after the role closes, then delete them. You have the same rights described above for your region.

Children

Our services are for business professionals. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We review this policy at least once a year. If we make material changes, we will update the date at the top and, where appropriate, notify you by email or on our website before the change takes effect.