Introduction
This policy addresses the data Goal Line Surveys Ltd. collects to provide our SaaS platform “boostCX” and Business Process Outsourcing services “VoyceCX” to our clients. Clients use boostCX to collect customer feedback through various mediums, including surveys, online reviews and other customer feedback channels. Clients use VoyceCX services offered through our contact center, online chat and other mediums to manage inbound and outbound communication with their customers.
“client” refers to an entity or business to which Goal Line Surveys Ltd. provides its services or SaaS platform.
“customer” refers to an individual who has had an interaction with a Goal Line Surveys Ltd. client and whose feedback is collected through boostCX or VoyceCX. Customer interactions can include purchasing goods or services, contacting customer support, or providing feedback on a social media site.
“respondent” refers to an individual who is prompted to provide feedback to one of Goal Line Surveys Ltd.’s clients through boostCX or VoyceCX services.
How We Collect Data
In providing services for our clients, Goal Line Surveys Ltd. collects data according to our clients’ instructions. Our clients specify what customers we should contact to provide feedback, when we should contact them (for example, after having a vehicle serviced at a dealership), how we should contact them (for example, email, phone or SMS), how often we should contact them and what questions are asked. Goal Line Surveys Ltd.’s clients also decide whether to use inbound or outbound data integrations.
The following are examples of the ways we collect customer data:
- Through survey responses on behalf of our clients. boostCX
- Through phone calls, emails, chats and/or other forms of communications on behalf of our clients
- From third parties, including third parties we have contractual relationships with, either direct or through client relationships. Publicly available sources such as social media sites or direct social media sources through existing client relationships.
Types of Information We Collect
Goal Line Surveys Ltd. enters into agreements with our clients that legally obligate Goal Line Surveys Ltd. to protect data we receive or are directed to collect and use it only to provide the products and services specified by the client. Goal Line Surveys Ltd. clients are responsible for complying with laws that may require notice, disclosure or consent related to the transfer of data to Goal Line Surveys Ltd. or its use in boostCX or VoyceCX services. For more information on the types of data collected by specific Goal Line Surveys Ltd. client, refer to the privacy notice or communications of the Goal Line Surveys Ltd. client. Our clients’ privacy notices are commonly located in the boostCX survey invitation (for web-based surveys) or on the client’s web site for VoyceCX contact center clients.
Goal Line Surveys Ltd.’s clients provide explicit instructions regarding the upload, collection, transfer, and access of personal data in boostCX or VoyceCX reporting portals. As such, Goal Line Surveys Ltd.’s clients determine the legal basis they have for data processing. Goal Line Surveys Ltd.’s clients can use legitimate interest or consent as a legal basis for processing personal data in boostCX, although others may apply. The information collected sometimes includes personal data, which is information relating to identified or identifiable natural persons. Some examples of the types of information we may collect include:
- Identity information, such as customer first and last name.
- Contact information, such as address, email address, social media alias and phone number.
- Demographic information, such as date of birth, gender, country, and other demographics.
- Credentials and Authentication Information, such as your username, password, password hints, and other information for authentication and account access.
- For chats, the timestamp and chat queue for the session, as well as customer first and last name, email and telephone number (if provided), and the subject and transcript of the chat conversation.
- Vehicle transaction information, such as your vehicle identification number (VIN), make and model of vehicle purchased or leased, and details of purchase or service transaction.
- Customer feedback, such as survey responses, customer complaints, reviews or feedback.
Information We Collect Automatically
We may automatically collect information about client and customers devices and how their device interacts with our Service, some of which may include personal data. Some examples of information we collect include:
- Device Connectivity and Configuration Data. We collect data about the type of device or browser customers and clients use to access our service, such as device’s operating software, device’s regional and language settings, IP address, MAC address, other device identifiers, device carrier, time zone, network status, browser identifier, location, internet service provider, operating system and other information that alone or in combination may be used to uniquely identify your device or computer.
- Location Data. We collect data about customers and client’s device’s location, which can be precise (e.g., latitude/longitude data) or imprecise (e.g., location derived from an IP address or data that indicates a city or postal code level).
- Cookies. Cookies are placed on a survey respondent’s computer when they visit web-based surveys or when client employees connect to our boostCX reporting platform. These cookies enable Goal Line Surveys Ltd. to remember a user’s preferences (such as language), ensure the security and integrity of client data, improve our products, and personalize a respondent’s survey experience. In addition, these cookies enable a Goal Line Surveys Ltd. client to identify a user across different browsers or devices that access a client’s web domain, record information about the browsing session on the domain, and to customize surveys presented to the user on that domain based on that information and additional rules. Goal Line Surveys Ltd. does not place cookies on a user’s computer for advertising purposes.
Information We Collect on Behalf of Our Clients
- Web surveys. In web-based surveys offered by boostCX, customers or employees receive a survey invitation and respond to the survey in a web interface. To send survey invitations Goal Line Surveys Ltd.’s clients can, for example, provide boostCX customer names, email addresses, and information about the customers’ interactions with their business.
- Contact Centre. For contact center interactions, our agents identify themselves as representatives of our client. Agents request any relevant contact information from the customer in order to assist with customer follow up or resolutions. Customer contact information such as name, email and phone number and information about the customers’ interactions with their business are collected and entered within the VoyceCX client portal for customer follow up.
- Social Media Monitoring. For social media monitoring, Goal Line Surveys Ltd. utilizes third party API’s to collect social media reviews and comments posted by client customers related to a transaction or service performed by our client. The information is aggregated and shared with our clients to provide information about the customers’ interactions with their business.
- Social Media Engagement. For social media engagement, our engagement agents respond to social media posts, identify themselves as representatives of our client and offer to assist customers with any concerns they might have. Agents request any relevant contact information from the customer in order to assist with customer follow up or resolutions. Customer contact information such as name, email and phone number and information about the customers’ interactions with their business are collected for customer follow up.
- Reporting Applications. Goal Line Surveys Ltd. provides clients web-based and mobile applications that are used by employees of Goal Line Surveys Ltd.’s clients to review and analyze customer feedback. To provide their employees access to these applications, clients can send Goal Line Surveys Ltd. employee names, identifiers (e.g., an employee ID), job title or function, and the business location they are associated with. When an employee accesses a Goal Line Surveys Ltd. reporting application, Goal Line Surveys Ltd. collects the employee’s user name, IP address of the device used to access the reporting application, geographic area associated with the IP address, type of web browser and mobile device, time and date that the reporting application was accessed, and areas of the reporting application that were visited. Employees can also leave notes on feedback records.
Information We Do Not Collect
Goal Line Surveys Ltd. does not collect sensitive data, such as credit card numbers or government identification numbers
How Do We Use the Personal Data
Goal Line Surveys Ltd. uses personal data gathered in boostCX and through VoyceCX services to provide clients with the services for which the client has engaged Goal Line Surveys Ltd.. Those services may include:
- Contacting a client’s customers to collect feedback related to a purchase or service experience
- Collecting customer feedback and analyzing the data gathered to improve the client’s business.
- Provide services requested by the customer as it relates to customer service.
- Create data to clients for additional analysis.
- Clients use customer feedback to improve the customers’ experiences with their business, prioritize and make operational changes to their business.
Data Access Controls
Employees of Goal Line Surveys Ltd. can access customer personal data provided by a client to perform work associated with services provided. Only those employees of Goal Line Surveys Ltd. who require access to data in order to perform required services or address customer issues will have access to data.
All personal data stored in boostCX is provided using systems, procedures and controls approved by Goal Line Surveys Ltd.’s security team. Access is provided only as long and as needed to perform the necessary work.
Goal Line Surveys Ltd.’s clients can provide their employees access to boostCX and VoyceCX reporting services so that they can view and analyze gathered feedback.
Goal Line Surveys Ltd. does not send or share any personal data directly with any third party. Where Goal Line Surveys Ltd. utilizes third-party services for Cloud storage, third-party support, or security or compliance audits, Goal Line Surveys Ltd. evaluates each vendor based on the Goal Line Surveys Ltd.’s vendor risk management program and enforces appropriate security and data agreements with them.
Goal Line Surveys Ltd. maintains a comprehensive security program with appropriate organizational and technical security practices measures to protect data stored within boostCX and VoyceCX reporting platforms. Goal Line Surveys Ltd. adheres to OWASP and SANs25 application security controls and performs third party annual penetration testing and attestation of IS0 27001-2022 certification (available upon request).
Goal Line Surveys Ltd. maintains strict data retention and destruction policies with individual data retention rules defined by each client. All client and associated customer data is delated at the termination of the client’s subscription, unless earlier deleted or modified per the client’s request.
Goal Line Surveys Ltd. offers its clients opt-out mechanisms to include in communications to individuals. Respondents who exercise an opt-out will be added to Goal Line Surveys Ltd.’s opt-out list for the relevant client as required by applicable law. For each client, Goal Line Surveys Ltd. does not send survey invitations to any e-mail address on the applicable opt-out list. Goal Line Surveys Ltd. provides its opt-out lists to clients and their agents on a timely basis so that they may, where appropriate, update their records. If you are a respondent who wishes to withdraw your consent from all data processing by a particular Goal Line Surveys Ltd. client, please contact the client directly.
Collection of Personal Data of Minors
Our service is not intended for children. We do not knowingly collect information from children as defined by the Children’s Online Privacy Protection Act or other applicable law. If we learn that we have inadvertently collected information from a child, we will delete that information as quickly as possible.
Changes to This Privacy Policy
Goal Line Surveys Ltd. may revise this policy from time to time. If we make substantial changes, we will post those amendments to our website www.boostcx.com so that you are aware of the changes.
Contact Information
For more information on Goal Line Surveys Ltd.’s Privacy Policy contact us:
By email: privacy@boostcx.com
By mail:
Privacy Officer
Goal Line Surveys Ltd.
3027 Harvester Road, Suite 300
Burlington, ON L7N 3G7 Canada