Privacy Policy
Last Updated: August 21, 2026
BOOST HAVEN IO, LLC ("BHIO," "us," "we," or "our") provides Outbound Infrastructure ("OI") — an infrastructure, data-processing, and execution service that helps clients run their own B2B outbound programs. This Policy explains how we collect, use, disclose, retain, and otherwise process personal information.
BHIO does not operate a general-purpose contact database, database subscription, or standalone bulk-list product available to the public. Our services are structured around defined client engagements involving outbound infrastructure, prospect research and preparation, and outreach execution.
This Policy does not replace any client agreement, Data Processing Agreement ("DPA"), Statement of Work, or other contract terms. Where BHIO processes personal information on a client's documented instructions, that agreement governs the processing relationship.
BOOST HAVEN IO, LLC Sheridan, Wyoming, USA Website: boosthavenio.com Privacy contact: privacy@boosthavenio.com
Our role under applicable privacy law depends on the processing activity, applicable law, and the responsibilities allocated in the applicable agreement with a client. A single client engagement may involve more than one role. Section 6 describes this in more detail.
2.1 Website and Visitor Information
When you visit our website, we may collect: IP address, browser type and version, device type, operating system, referring pages, pages viewed, approximate location derived from technical information, website interaction data, cookie and similar technology data, and information you voluntarily submit through forms.
2.2 Client, Account, and Business Relationship Information
If you contact us, become a client, or interact with us in a business capacity, we may process: name, business email, business phone number, company name, job title, account information, billing and transaction information, communications with us, project and implementation information, service configuration information, support information, and contractual information.
Payment transactions are processed by third-party payment providers. We do not store full payment card numbers on our own systems.
2.3 Business Contact Information
As part of our OI service, we process professional and business-related information about individuals acting in a professional capacity, which may include: full name, professional email address, business phone number, job title, company name, company website, professional profile URL, industry, company size, company or professional location, firmographic information, and other professional or business-related information reasonably necessary for the relevant engagement.
Business Contact Information may constitute personal data or personal information under applicable law even though it relates to an individual's professional role. We treat it accordingly.
BHIO's ordinary B2B prospecting activities are not designed to seek out sensitive personal information. Where sensitive personal information is encountered and is not necessary for the relevant service, we will take reasonable steps to delete, suppress, segregate, or otherwise restrict its use, subject to applicable law and technical feasibility.
We obtain Business Contact Information from sources that may include: clients, individuals directly, publicly accessible business websites and directories, professional profiles, business databases, and third-party data enrichment or verification providers, where collection and use are permitted by applicable law.
BHIO generally sources and prepares Business Contact Information in connection with defined client engagements and objectives. We do not offer a general-purpose contact database, database subscription, or standalone bulk-list product.
Public and Third-Party Sources. The availability of Business Contact Information from a public or third-party source does not by itself determine the purposes for which BHIO or a client may use that information. BHIO considers the source, context, applicable law, contractual restrictions, and intended business purpose when determining whether and how information may be processed.
Where appropriate, BHIO maintains information about the source, verification status, or processing history of Business Contact Information to support data quality, compliance, suppression, and operational accountability.
Where applicable law requires notice when personal information is obtained from a source other than the individual, we will provide the required information within the applicable timeframe or through another legally permitted mechanism.
4.1 Providing Our Service
We use information to design and operate outbound infrastructure for clients, configure client accounts and systems, provide requested services, manage workflows and communications, and provide support. We may use business and professional information to organize, qualify, segment, or prioritize contacts according to client-defined criteria and our service methodology.
4.2 Business Contact Processing for Client Engagements
For a defined client engagement, we may identify relevant business contacts matching the client's stated criteria, organize and qualify contact information, enrich or verify it, segment or prioritize it, support outreach on the client's behalf, route business responses, and support delivery of qualified opportunities or meetings.
Information provided by a client, or information that is confidential to a client or derived from a client's non-public information, is not disclosed or reused for another client's engagement unless authorized by the applicable agreement or otherwise permitted by law.
BHIO may independently source, obtain, enrich, or verify Business Contact Information for different client engagements where it has an appropriate basis to do so — for example, the same individual may independently be identified as a relevant business contact for more than one client from a publicly accessible, lawfully obtained, or lawfully licensed source. BHIO does not use one client's confidential or non-public information as the source for another client's engagement.
4.3 Client Data Separation
BHIO does not disclose or use one client's confidential or client-originated information for another client's engagement, including to enrich, score, target, or optimize another client's prospects or campaigns.
BHIO may process client data as reasonably necessary to provide, secure, maintain, troubleshoot, monitor, and improve the contracted service, including internal quality assurance, operational analysis, security, compliance, and system performance analysis, provided that such processing does not disclose, repurpose, or use one client's confidential information for another client.
BHIO does not use identifiable client-originated campaign data or client-confidential information as a general model-training or commercial data asset unless expressly authorized under the applicable agreement and permitted by applicable law.
BHIO may use aggregated, statistical, or appropriately de-identified information for operational and service improvement purposes where such information does not identify a client or individual and does not reveal another client's confidential information.
4.4 Operating and Improving Our Business
We use information to administer our business, manage client relationships, process payments, maintain security, monitor performance, detect abuse or fraud, troubleshoot issues, and improve our services.
4.5 Communications
We use contact information to respond to inquiries, communicate about services and projects, provide account notices, and — where permitted by applicable law — send business or marketing communications. You may opt out of marketing communications at any time via the unsubscribe link or by contacting us. Opting out of marketing does not stop communications necessary for an existing contract, security, or transactional relationship.
4.6 Legal, Security, and Compliance
We process information as reasonably necessary to comply with law, respond to lawful requests, establish or defend legal claims, enforce agreements, investigate fraud or abuse, and maintain system security.
Where applicable law requires a lawful basis:
Contract — processing necessary to enter into or perform a contract with you, or, where applicable, processing performed on a client's documented instructions under our agreement with that client.
Legitimate interests — processing necessary for our legitimate interests or a third party's, provided those interests are not overridden by your rights. For B2B communications and business development, we consider the nature of the processing, its impact on the individual, the context in which the information was obtained, the individual's reasonable expectations, and the availability of an objection or opt-out mechanism before relying on this basis.
Consent — where applicable law requires it, we obtain consent before relying on it.
Legal obligation — where processing is necessary to comply with a legal duty.
Reliance on legitimate interests for B2B outreach does not by itself satisfy separate consent requirements that may apply under electronic-communications or marketing law in a given jurisdiction or channel; where such requirements apply, we and our clients address them through the applicable consent or opt-out mechanism for that channel.
Our role depends on the processing activity, applicable law, and the responsibilities allocated in the applicable agreement — not a single label applied to the whole engagement.
For some activities, BHIO independently determines certain means of processing — such as source-selection methodology, enrichment or verification methods, or data-quality procedures — while a client may determine the engagement's business objective, target criteria, exclusions, or other aspects of the processing. Depending on applicable law and the circumstances of the activity, this may result in BHIO acting as a controller or similar independent role for that activity.
For other activities, BHIO acts strictly on a client's documented instructions — for example, sending an approved sequence, applying a client's suppression list, or routing responses as directed. For those activities, BHIO acts as a processor, service provider, or similar role, and the applicable DPA governs the parties' respective responsibilities.
A single engagement typically involves both types of processing. We do not characterize every BHIO activity as controller-only or processor-only; the actual decision-making for a given activity determines the applicable role.
7.1 Clients
Where necessary to deliver a contracted service, we may make available Business Contact Information, business responses, campaign information, or other service outputs to the applicable client. Such information is provided as part of the contracted service and subject to the applicable agreement and applicable law. It is not offered by BHIO as a standalone database subscription or bulk-list product.
7.2 Service Providers
We use third-party providers for cloud hosting, data storage, CRM, data enrichment and verification, email delivery, analytics, monitoring, support, payment processing, and security. Depending on the service and applicable law, these providers may process information on our behalf as processors or service providers, or may process certain information independently under their own privacy terms.
7.3 Legal and Regulatory Disclosures
We may disclose information to comply with law, respond to valid legal process or government requests, protect our rights or property, investigate fraud or abuse, or protect system or individual security.
7.4 Business Transfers
If BHIO is involved in a merger, acquisition, financing, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.
7.5 At Your Direction
We may disclose information where you direct us to or where you provide consent, as applicable.
We retain personal information only as long as reasonably necessary for the purposes described in this Policy. BHIO applies internal retention criteria to determine when information should be deleted, suppressed, anonymized, or otherwise disposed of, subject to applicable legal, security, operational, and contractual requirements. Retention varies by category:
Category
Retention approach
Client/account and billing data
Duration of the client relationship, plus the period required by applicable tax, accounting, or legal obligations
Business Contact Information used in a client engagement
Retained during the engagement and thereafter only where reasonably necessary for a documented retention purpose, such as suppression, legal compliance, dispute resolution, security, or service administration, subject to applicable law and contractual requirements.
Suppression and opt-out records
As long as necessary to honor the request and prevent unwanted future contact, even after other associated data is deleted
Website analytics/usage data
A shorter period, unless needed for security or service improvement
Records subject to legal hold or dispute
Until the hold or dispute is resolved
We periodically review retained information and delete, anonymize, or suppress information no longer reasonably required.
We maintain suppression or opt-out records as reasonably necessary to honor applicable requests and prevent communications that the request prohibits. Depending on the nature and scope of the request, applicable law, and the relevant processing context, suppression may apply to a particular communication, campaign, client engagement, or a broader category of processing.
We do not use suppression mechanisms to bypass a valid opt-out or objection. Where an individual's opt-out or do-not-contact request applies more broadly than a single client engagement, we honor that request within the applicable scope, even where doing so requires the request to be recognized across more than one engagement.
To submit an opt-out request, use the unsubscribe link in the relevant communication or contact privacy@boosthavenio.com.
Depending on your location, you may have the right to: access your personal information, request correction, request deletion, request restriction of processing, object to certain processing (including direct marketing), withdraw consent where processing relies on consent, request data portability, and lodge a complaint with a competent authority.
Authorized agents: where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf; we may require documentation verifying the agent's authority.
Verification: we may take reasonable steps to verify your identity before completing a request, proportionate to the sensitivity of the request.
Client-directed processing: where we process information on a client's instructions as a processor or service provider, we may direct your request to the relevant client, who is responsible for responding.
To exercise these rights, contact privacy@boosthavenio.com.
California Privacy. California privacy laws may provide certain rights to California residents depending on the nature of the processing and whether those laws apply to BHIO. Where applicable, BHIO will provide the rights and disclosures required by California law, including applicable rights to know, access, delete, correct, and opt out of certain sales or sharing of personal information.
Whether a particular BHIO activity is subject to California privacy or data-broker requirements depends on the nature of the activity, the information involved, how it is obtained and disclosed, and applicable law. BHIO does not operate a general-purpose contact database or standalone database subscription product. BHIO assesses its activities and will comply with applicable registration, notice, opt-out, deletion, and other requirements that apply.
If you are located in the EEA or UK, you may have rights to access, correct, or erase your personal data, restrict or object to processing, receive your data in a portable format, withdraw consent, and lodge a complaint with a supervisory authority.
Where we rely on legitimate interests for B2B outreach, you may object to that processing at any time.
Where BHIO processes personal information on a client's instructions as a processor, requests may need to be directed to the relevant client.
Whether an EU or UK representative is required depends on the extent and nature of our processing involving individuals in those regions, assessed under Article 27 GDPR / UK GDPR and applicable exceptions.
We and our service providers may process personal information in countries other than where it was collected, including the United States. Where applicable law requires a transfer mechanism, we use an appropriate safeguard, which may include an adequacy decision, Standard Contractual Clauses, or another legally recognized mechanism, depending on the jurisdiction and recipient.
Our website uses cookies and similar technologies for essential functionality, security, analytics, performance measurement, and remembering preferences. Where applicable law requires consent for certain cookies, we provide an appropriate consent mechanism. You can manage cookies through your browser settings; disabling some may affect site functionality.
We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse, including access controls, authentication, encryption where appropriate, monitoring, vendor controls, and incident response processes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We validate, enrich, verify, deduplicate, and suppress business contact data as part of our operational process to improve relevance and reduce unwanted processing. Verification does not guarantee data will remain accurate indefinitely. Inclusion of a business contact in a client-specific dataset does not represent that individual or company as a customer or suitable opportunity for any purpose beyond the relevant engagement.
Our website or communications may link to third-party sites we do not control. We are not responsible for their privacy practices, and we encourage you to review their policies before providing personal information.
Our services are intended for businesses and professional users and are not directed to children. We do not knowingly collect personal information from children in connection with our B2B activities. If you believe a child has provided us personal information, contact us and we will take steps to remove it.
We may update this Policy to reflect changes in our services, processing activities, technology, or applicable law. We will update the "Last Updated" date when we do, and where required by law, provide additional notice or obtain consent for material changes.
BOOST HAVEN IO, LLC Privacy: privacy@boosthavenio.com Website: boosthavenio.com Business Address: Sheridan, Wyoming, USA