Privacy Policy

Updated: 17.07.2024

The policy relates to the Engage Boost platform and all user data collected and managed through the platform to deliver Engage Boost Services.  If you use Engage Boost Services (a “User”) this policy applies to you and you are bound by it.  If you disagree you must stop using Engage Boost Services.

1. Our commitment

CLEGREONTEX LIMITED trades as “Engage Boost”, and is located in London, England.  Engage Boost respects User’s rights regarding their privacy and information, taking great care with any personally identifying information.  As an England domiciled entity, the Engage Boost platform is subject to the laws of England and regulations of the E.U. The Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) apply to the safeguarding and processing of personal data that could be used to identify any individuals within the United Kingdom. Engage Boost is committed to complying with its legal obligations in this regard, not just to data subjects (Users) in the E.U. but to extend the same courtesy to all Engage Boost Users worldwide.

This policy is based on obligations created through General Data Protection Regulation in the E.U. and other equivalent legislation worldwide such as the California Consumer Privacy Act in the US. 

2. Collection, processing and storage of data

The Engage Boost platform may collect and process personal data relating to past and present users and learners in the course of business. Engage Boost collects data directly from the User input but also in automated ways such as through system logs, cookies, web beacons and integration with third-party service providers.  Processing of data includes: collecting; recording; storing; altering; disclosing; destroying; and blocking. This policy governs Engage Boost’s approach to data and does not apply to any third party organisations which may have integrated their systems to the Engage Boost platform. 

3. Personally Identifying Information (PII)

Personally Identifying Information (PII) may be required to uniquely identify a User (e.g. a personal email address) and other information may be required to complete purchases and receive certification if requested.

4. Course information

Engage Boost processes certain data relevant to the publication and playback of course content by publishers and learners. Certain data is collected to ensure Users, publishers and learner progress are uniquely identified and accurate records are maintained in order to deliver the Engage Boost learning service and to comply with relevant legal obligations.  This will include regular emails to keep Users informed of their progress and make various suggestions and recommendations. Patterns of usage behaviour and course content evaluation is also collected and stored as metadata to help Engage Boost and Publishers improve the services. 

5. Third party information processors and service providers

All User personal data is stored securely on third party cloud-based electronic storage and safeguarded. User purchases of physical goods require a home delivery address to process orders. Engage Boost uses payment processing and fulfilment partners who will receive sensitive PII to enable payment collection and when necessary, physical fulfilment. Highly sensitive data, such as credit card information and passwords are never received by Engage Boost . Recurring payment details are stored by a third-party payment provider that you choose and not by Engage Boost.

Engage Boost tests and operates a number of analytical tags, scripts and tracking pixels (also known as web beacons) from third party providers such as Google, Facebook, Bing, and Hotjar) to enable browser and mobile analytics that measure page views and sessions. This helps Engage Boost  understand User behaviours as the visit, navigate and leave the Engage Boost platform.  

Engage Boost provides free learning supported through advertising services managed by third parties. Engage Boost both buys online ads and sells online ads through third party providers (e.g. Google AdWords, Bing, Facebook Ads and Google AdSense). Cookies and tracking pixels are used by advertising service providers as independent third party data controllers to enable personalised advertising to the User based on intent, search history and demographics built up by advertising service providers over time. Engage Boost has no access to these third party cookies or tracking technology nor any control over how third party advertising service providers use the data they collect.

6. Technical data collection

As an internet based service, web server log files are also collected and monitored for usage and behaviour patterns over time. User device information and IP addresses are also collected to understand platform traffic flows how each User interacts with Engage Boost Services and to ensure the right balance of technical support, customer service resources and device expertise is available to Users.  

Engage Boost also stores and uses cookie information (a piece of text saved on each User’s device) to help track unique user sessions, to personalise Engage Boost Services for the User. Engage Boost stores Preference, Security, Functional and Session cookies to tailor the usage experience.

7. User consent and self-service control

By using Engage Boost Services and directly inputting your information on the platform, you the User are consenting to the collection and use of your data by Engage Boost. You may modify your email client, browser settings or use browser add-ons to control how cookies, beacons and other third-party services work.  Privacy settings are also provided on your mobile device operating system to give you more control over your data.  Reducing the level of data shared and advertising options may reduce the quality of, or disable, some or all Engage Boost services. 

To understand and control how the digital advertising industry uses your data please visit the Network Advertising Initiative’s Consumer Opt-Out link or the Digital Advertising Alliance’s Consumer Opt-Out link.  These help you to opt-out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for display advertising or customize Google display network ads, You can visit the Google Ads Settings page.  Opting out means that your personal data is not used to personalise ads.  Opting out does not mean you will not receive ads.  Engage Boost has no affiliation nor control over these industry initiatives and how you use these tools is your own responsibility. 

Engage Boost recognises the privacy interests of children. Parents and guardians need to take an active role in their children’s online activities and interests. Digital consent is generally not legally recognised for children under the age of 13, or under the age of 16 where such children reside in the European Economic Area. Parents and legal guardians should not allow their children defined as such to enrol and learn on the Engage Boost platform without full time supervision. Engage Boost reserves the right to delete any User data that we discover was created by a child unable to give digital consent. If a parent or guardian discovers that Engage Boost has unlawfully collected the personal information from a child please contact our data protection officers who will take all reasonable steps to delete such information promptly. 

8. Retention of data

Engage Boost is under a legal obligation to keep certain data for a specified period of time. Such Other Information is used by Engage Boost for other relevant business purposes for as long as necessary.

9. Security and disclosure of data

The organisation will take all reasonable steps to ensure that appropriate security measures are in place to protect the confidentiality of electronically stored data. The platform is large and public and subject to regular attack by hackers.  The platform has been hardened extensively over time however no online system is perfect or immune from breach. Engage Boost has appropriate security measures in place to protect against unauthorised access.  Safeguards are applied to the processing and retention of data. These include:

Limitations on access to prevent unauthorised consultation, alteration, disclosure or erasure of personal data.

• Strict time limits for erasure of personal data in line with our retention policy.
• Logging mechanisms to permit verification of whether and by whom personal data has been consulted, altered, disclosed or erased.
• Pseudonymisation, anonymisation and encryption. 
• The platform databases are not accessible directly by employees or software developers other than authorised DevOps administrators. Multi factor authentication is required for all authorised DevOps administrators to ensure access to sensitive data is restricted to the maximum possible. 
• Security measures will be reviewed from time to time, having regard to the technology available, the cost and the risk of unauthorised access. 

Customer Support employees will have access to a certain amount of personal data relating to users and other third parties. Employees must not disclose User’s personal data, except where necessary in the course of their employment or in accordance with law. They must not remove or destroy personal data except for lawful reasons and with the permission of the organisation. Any breach of the data protection principles is a serious matter and may lead to disciplinary action up to and including dismissal. All Engage Boost employees must adhere to the following data protection principles:

• Process data fairly, lawfully and transparently.
• Keep data only for specified, explicit and legitimate purposes.
• Process data only in ways which are compatible with the purposes for which it was given.
• Ensure data is accurate and up-to-date.
• Ensure data is adequate, relevant and limited to what is necessary for the purpose for which it was given.
• Keep data safely and securely.
• Retain personal data for no longer than is necessary for the purpose for which it is processed and in line with the company’s data retention policy.

Were a data breach to occur and if such a breach puts individuals’ personal rights and freedoms at risk and Engage Boost is unable to contain those risks, all affected individuals will be notified expeditiously.  Furthermore Engage Boost’s data protection officers will inform the Data Protection Commissioner in England so that they are aware and can monitor the response. 

10. Data Protection Officers

The directors of the company are ultimately responsible for your data, and have nominated a named Data Protection Officer for Engage Boost (“DPO”). The DPO is are responsible for assisting the organisation in monitoring and maintaining compliance with data protection legislation. 

11. Access requests

Users across the world may have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to Information, as well as to seek to update, delete or correct this Information.  Please contact Engage Boost Customer Services if you wish to get a complete copy of all your electronic data held about you as a User.

There is no charge to use Engage Boost’s User self-service tools.  However the company reserves the right to charge a fee to process any further Subject Access Request. The organisation will, in most circumstances, provide this data within one month. In some cases, due to the complexity of the request or the number of requests being handled by the organisation, the organisation may require a further two months to provide this data. 

Users are only entitled to access data about themselves and will not be provided with data relating to other users or third parties.  However some user data may have been disclosed publicly on Engage Boost forums for example.  It may be possible to block out User data relating to a third party or conceal the User’s identity, and where this is possible the organisation will endeavour to do so.  

12. Right to object

Users may have the right to object to data processing that is causing them distress and/or to make corrections to personal data which is inaccurate. Where such objection is justified, the organisation will cease processing the data unless it has a legitimate interest that prevents this. Engage Boost will make every effort to alleviate the distress caused to the individual. An objection should be made in writing to the Data Protection Officer, outlining the data in question and the harm being caused.

13. International transmission of data

Based in the England, Engage Boost operates on a global basis and it may be necessary in the course of business to collect or transfer User personal data across state boundaries, to share data with other group companies in countries outside the European Economic Area, and to share information with third party service providers. When data transfer is necessary, Engage Boost will take steps to ensure that the data has an equal level of protection as it would in England or as expected within other leading international jurisdictions. Furthermore Engage Boost will only transmit data to companies that agree to guarantee the same level of protection. For more information, please contact Engage Boost’s Data Protection Officers.

14. Policy review and modification

Engage Boost has completed a Data Protection Impact Assessment and put the necessary policy and procedures in place to minimise risks to users data privacy and maximise data protection. This policy will be reviewed from time to time to take into account changes in the law and the experience of the policy in practice. Updates will be posted to the website when available. Material updates will be circulated to each User via the registered User email. Continued usage of the Engage Boost Service is deemed to be User acceptance of this policy as permitted by applicable law.

15. 3D-Secure and SCA
Please note that our website employs 3D-Secure as a part of Strong Customer Authentication (SCA) requirements. This security protocol provides an extra layer of protection for online transactions by requiring two forms of identification from the user, ensuring your transactions are secure.

16. Cookies and Tracking Technologies

We use cookies and other tracking technologies to collect information about your browsing activities over time and across different websites following your use of our website.

Changes to this Policy

We will notify you of any changes by posting the new Policy on Engage Boost with a new effective date. If we make a material change to this Policy, we will take reasonable steps to notify you in advance of the planned change.