Privacy Policy

theBoardlist is a platform where business leaders nominate and discover individuals who are ready to serve on corporate boards of directors. As part of our community of board members, candidates, executives and investors, we are committed to being transparent with you about the data we collect about you and how it is used and shared.

This Privacy Policy describes how theBoardlist, operated by Choose Possibility, Inc. (“we”, “us”, “our” or “theBoardlist”), may collect, use, and share information, in connection with the operation of our main website (www.theboardlist.com) and all of our websites, mobile applications, and emails that link to this Privacy Policy (collectively, “Platform”).

Please read this Privacy Policy carefully. By using our Platform, you acknowledge you have read and understand the terms of this Privacy Policy and our separate Terms of Service. If you do not agree with our practices, do not use or access the Platform. Capitalized terms that are not defined in this Privacy Policy have the meaning ascribed to them in the Terms of Service.

This Privacy Policy only applies to the Platform, and not to websites, applications, operating systems, or other services or platforms of third parties (collectively, “Third Party Services”), even if such Third Party Services are linked to or accessible from the Platform. Each Third Party Service will have its own data collection and usage practices, and may use their own cookies, web beacons, and other technology to collect information from you. We are not responsible for the content or practices of any Third Party Services.

1.     Who controls your information?
Information provided to or gathered by us is controlled by:
Choose Possibility Inc. dba theBoardlist
Click here to contact us

2.    What types of information do we collect?
“Information,” as used in this Privacy Policy, means personal information that can be used to identify, locate, describe, or contact an individual. We collect the following types of Information:

Information You Provide. We collect information when you voluntarily provide it over the Platform, including as part of registering as a Candidate, Company or Recommender (as defined in the Terms of Service) (in each instance, a “Member”), or when a Member nominates you to theBoardlist (including any other websites operated by us) or sends you an invitation to join our Platform. For example, individual users may be asked to provide a user ID, password, first and last name, email address, address, phone number, professional skills, work history, and profile picture. Some of this information may constitute protected class information, such as your gender and age. Further, the Platform allow for non-public messages between users, which may be stored and processed by Company and will be accessible to recipients of the messages.

Content You Make Public. We collect information from you that you voluntarily post to the Platform for public display, such as your Content, which may include posts, comments, photos, and text. Once you make information public, neither you nor we can control how it may be copied, shared, or used by third parties, even if you and/or Company later delete such information, so carefully consider what information you choose to make public.

Protected Class Information. Due to the specific nature of the Platform, you may be asked if you want to provide information about your race, gender, age, marital or family status, ethnicity, nationality, citizenship, or immigration status. Protected Class Information is only collected if you choose to provide it, and is not required to create an Account or use the Platform.

Education and  Employment  Information. We may collect information about your educational background, employment, employment history, or salary.

Transaction and Payment Information. We collect information from you as needed to process payments to administer your participation in the Platform such as your payment card number, expiration date, card verification number, and billing address. In particular, we use third-party integration through (Stripe) to process payments. For more information about Stripe’s privacy practices, visit stripe.com/privacy

Device/Internet Connection Information. When you use the Platform, we automatically gather information made available by your web browser, internet service provider, and device, depending on your settings for each. For example, we may collect information about your hardware and software, namely, your device model, operating system version, device memory, advertising identifiers, unique application identifiers, apps installed, unique device identifiers, browser type, language, battery level, and time zone. We may also collect information related to any social media accounts that you link to the Platform and from any of our partners that integrate with the Platform through API. For more information, you should visit those Third Party Services’ respective privacy policies.

Internet Activity Information. When you interact with the Platform, we may collect information about your server logs, access dates and times, operating system, browser type, IP address, languages, clicks, views, engagements, search terms, or pages viewed, time spent on pages, browsing history, search history, and information regarding your interaction with a particular website, application, or advertisement, including the Platform.

Location Information. We may collect information about where you are located, both generally and at the time you access the Platform, such as your state/province, city, or country.

Other Information. From time to time, we may collect other information from you, such as when you make a claim for a prize pursuant to a contest or other promotion, when you request assistance through our customer service department, when you order an Assisted Search or when you voluntarily subscribe to promotions, reminders, or newsletters.

Inference Information. We may also create new information about you by drawing inferences from the information identified in the categories listed above, such as a profile reflecting your preferences or trends.

3.     How and when do we collect information about you?
theBoardlist gathers information about you through the following sources and means:

When You Provide Information. theBoardlist collects information when users voluntarily enter or upload it while using the Platform, such as information you provide, Content, certain transaction and payment information, location information, and other information.

Information from your use of our Platform. We and our partners use various technologies to collect and store information when you use, access or interact with our Platform. This may include using cookies or similar technologies to identify your browser or device. In addition, we may collect information from or about the computers, phones, or other devices when you access our Platform such as the operating system, hardware version, device settings, device identifiers, language and time zone, mobile phone number, IP address, and server logs.

Information from Third Parties. We collect information from third parties or other sources, such as our corporate partners, individuals who recommend board candidates (each, a “Candidate”), social media and other publicly available information about you, including but not limited to, your photo, biographical information, and general geographic location (e.g., New York City).

Through Your Communications. theBoardlist may collect information from you outside of your use of the Platform, such as if you email us (or respond to a communication) or communicate with us over social media. Information collected outside your use of the Platform may be combined with information collected through your use of the Platform.

Through Cookies, Tracking Tools, and Automated Technologies. When you use any website, certain information can be automatically collected through technological means. When you access our Platform, your web browser automatically sends us device and internet connection information and certain internet activity. theBoardlist also uses Cookies (i.e., files that are placed on your computer or other device by websites you visit) and web beacon technology to gather device and internet connection information, internet activity information, identifiers, and location information. The primary purpose of a Cookie is to identify you as a unique user of the Platform. theBoardlist uses the following types of Cookies, some of which are placed by Third Party Services, to customize your internet experience, keep you logged into websites, remember your search terms, and advertise products or services to you:

Type of Cookie

Necessary
Purpose of Cookie
Necessary Cookies are essential to enable proper use of   the Platform and are used to identify you, prevent security risks, and to   allow you to perform account-related functions.

Preferences
Preferences Cookies are used to store preferences set by users, such as account and language preferences. Preferences Cookies improve your experience using the Platform.

Statistic/Analytics
Statistic/Analytics Cookies are used to help understand user   uses by collecting and reporting information anonymously.

You can change your Cookie settings in your Internet browser (e.g., Chrome, Edge, Firefox). However, if you disable Cookies, some of the features of the Platform may not function correctly. For more information, see www.allaboutcookies.org.

From Third Parties. We may collect the following types of information from Third Party Services: transaction and payment information (such as when your payment information is saved in your web browser), device/internet connection information, internet activity information, and location information.

4.     How do we use your information?
By collecting information, we can provide and improve our Platform, monitor ads and metrics, personalize your user experience, connect you to other users, including Companies and/or Candidates, research and develop new products and features, fix technology problems, send you updates and communicate with you, and protect our community. Specifically, we may use the information we’ve gathered from you or your device, including through Cookies and third parties, for the following purposes:Business Purposes. When theBoardlist uses your information for a “Business Purpose,” it means such use is reasonably necessary and proportionate to achieve an operational purpose of theBoardlist. The following are our Business Purposes:Business PurposeFor Security. theBoardlist uses the information we collect from you and other Members to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and prosecute those responsible for that activity.

Types of Information
Information Outlined in Section 2
To Provide the Platform. We use the information we collect from you to provide the Platform. including to process your orders and payments, create your Account, allow us to deliver suitable Candidates or Company positions, display offers and deals that may be of interest to you, and suggest other users or offers/deals.

Information Outlined in Section 2
To Improve the Platform. theBoardlist uses the information we collect from you and other users to improve the Platform. For example, we may consider analytics, demographics, and user feedback to determine demand for new features, connect you with the types of Companies and Candidates you’re looking for, and any other content in which you are most interested.

Information Outlined in Section 2
To Personalize Your User Experience. We use information, such as from Cookies, to authenticate your logins, determine whether you are logged in or not, allow you to set personal preferences when using the Platform, and make it so you don’t have to reenter the same information when you visit the Platform several times within a short timeframe.

Information Outlined in Section 2
To Communicate with You. We use your information to personalize communications, respond to your requests, and notify you of any updates to applicable terms or this Privacy Policy. For example, we may communicate with Members over email, text messages, and phone calls, as appropriate, as well as provide notifications through the Platform, such as to send order confirmations and transaction messages.

Information Outlined in Section 2
Scope and Legal Bases for Use
theBoardlist only processes your information to the extent that is necessary to accomplish the above-stated Business and Commercial Purposes, which serves as our legitimate interest. If you reside in a location governed by the GDPR, then the following are theBoardlist’s legal bases for the processing of your information: In so far as we have obtained consent for processing operations of information by the data subject, Art. 6(1) lit. a GDPR serves as the legal basis. For the processing of information necessary for the performance of a contract to which the data subject is a party, Art. 6(1) lit. b GDPR serves as legal basis. The same applies to such processing operations which are necessary for carrying out pre-contractual measures. In so far as the processing of information is required to comply with a legal obligation to which theBoardlist is subject, Art. 6(1) lit. c GDPR serves as legal basis. In the event that processing of information may be necessary to protect the vital interests of the data subject or of another natural person, Art. 6(1) lit. d GDPR serves as legal basis. If processing is necessary for the purposes of the legitimate interests pursued by theBoardlist or by a Third Party Services, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, processing operations are based on Art. 6 (1) lit. f GDPR.

5.     How do we share your information?
Companies and Candidates use our Platform to search for each other. Any information that is included in your Account profile, including your name, title, professional information, general location (e.g., New York City), photo, and biography can be seen by all Members of our Platform. If you have been nominated as a Candidate on a website operated by us, your Profile may also be published on the theBoardlist, or any other platform operated by us. In that case, you may opt-out of having your Profile published on these platforms.Your contact information will not be shared with any Member without your prior consent. If you are a Candidate and do not want to be discoverable on our Platform, you may either hide your Profile by logging into your account and clicking the “hide profile” link, or delete your Profile completely by sending a request to us.If you are a Recommender who has nominated a Candidate, other Members can see your Profile. If you prefer to not be associated with the nomination of a Candidate, you have the option of making your nominations and/or written endorsements of Candidates anonymous.In addition to the foregoing, theBoardlist may share your information with third parties as outlined below:Business Purposes. The following are the Business Purposes for which we may share your information:Third PartiesPlatform Providers. We use service providers, such as payment service providers and for data storage and hosting services, to provide the Platform and will share your information as necessary.

Purpose
For Security, to Provide and Improve the Platform, and to Personalize Your Experience

Types of Information
Information Outlined in Section 2

Affiliated Entities. Should we be subject to an acquisition, merger, sale, or other change of control or business entity status, we reserve the right to transfer or assign your information as part of that acquisition, merger, or sale. We may also transfer your information to any affiliated entities, who will treat information in accordance with this Privacy Policy.

To Provide and Improve the Platform
Information Outlined in Section 2
Government Officials and Private Parties Pursuant to Valid Legal Process. We may disclose your information in response to subpoenas, court orders, and other legal processes; and we may disclose information when we believe it is necessary to prevent illegal, fraudulent, or injurious actions that may cause harm to us or third parties.

To Comply with Legal Obligations, and to Prevent Illegal, Fraudulent, or Injurious Actions
Information Outlined in Section 2
Other Users. When you post or display Content through the Platform or publicly, it is available to other Members.

To Provide and Improve the Platform, and to Personalize Your Experience
Your Content, Content You Make Public

Other Consumers. We may share your public Content, such as a review, to advertise and market our Platform, including in our advertising or through our social media accounts.

To   Advertise to Others
Content You Make Public

6.     Do we sell your information to others?
We do not sell, rent, or otherwise share information that reasonably identifies you or your organization with unaffiliated entities for their independent use except as expressly described in this Privacy Policy or with your prior permission.

7.     How do we protect your information?
We use administrative, technical, and physical safeguards designed to comply with applicable legal requirements to safeguard the information that we collect. The Platform is controlled and operated by theBoardlist from, and all data is stored in, the United States.However, no information system can be 100% secure and therefore, we cannot guarantee the absolute security of your information. The safety and security of your information also depends on you. Never share your login credentials or password with anyone else and notify us as soon as possible if you believe your account security has been breached.

8.     How long do we keep your information?
We retain the information we collect no longer than is reasonably necessary to fulfill the purposes for which we collect the information and to comply with our legal obligations, unless a longer retention period is required or permitted by law or valid court order. We may also delete your information, Content, or Account should it violate our Terms or Service or any applicable terms or policies.

9.     Do we transfer your information to a different country?
We may transfer information to countries outside of your country of residence, which may have data protection laws and regulations that differ from those in your country. If you use the Platform from a location outside of the United States, your connection will be through and to servers located in the United States, and all information you provide will be processed and maintained in web servers and internal systems located within the United States. By using the Platform, you authorize and consent to the transfer of information to the United States and its storage and use as specified above when you provide such information to us.

10.    What are your rights when it comes to accessing, correcting, or deleting your information, and how can you exercise them?
Under certain privacy legislation, such as the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR) or analogous laws, which may apply to you, you may request to correct, amend, access, or delete information. These requests can be made by logging into your Account or by emailing us. We will not discriminate against you for making a privacy request or asserting your privacy rights. To protect your privacy and security, we may take reasonable steps to help verify your identity before granting your request. We may also take steps to verify any authorized agent making a request on your behalf.

If such privacy legislation applies to you:

Access and Correction: You have the right to access and correct information.

Disclosure: You have the right to request that we disclose the following to you: the categories of information we have collected about you; the categories of sources from which the information is collected; the business or commercial purpose for collecting the information; the categories of third parties with whom we share the information; and the specific pieces of information that we have collected about you.

Deletion: You have the right to request deletion of your information, subject to applicable laws. Please note that if you share information with other users or post it publicly, we will not be able to delete such third-party access to your information.

Restriction of Processing: You have the right to restriction of processing of information, so that respective data will be marked and only be processed for certain purposes.

Data Portability: You have the right to receive the information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit that data to another entity without hindrance from us.

Objections: You have the right to object, on grounds relating to your particular situation, regarding the processing of your information. If your information is processed for direct marketing purposes, you have the right to object to the processing of information for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Withdraw Consent: If you have declared your consent for any information processing activities, and you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

Complaints: You may lodge a complaint with a competent supervisory authority.

California Shine the Light: Under California’s “Shine the Light” law, California residents who provide information to the Platform may request certain information regarding our disclosure of information to third parties for their direct marketing purposes.

11.    Privacy Practices of Third Parties
Our Platform may include content or links to content, products or services provided by third parties. This Privacy Policy only addresses the use and disclosure of information by theBoardlist through your interaction with the Platform. Third Party Services that may be accessible through links from our Platform have their own privacy policies and information collection, use, and disclosure practices. Third-party sellers, advertisers, and partners also have their own privacy practices. We encourage you to familiarize yourself with the privacy statements provided by these third parties prior to providing them with information or taking advantage of a third-party offer or promotion.

12.    How do we protect the privacy of children?
theBoardlist does not knowingly collect any personal information about children under the age of 13. If we obtain actual knowledge that we have collected information about a child under the age of 13, that information will be immediately deleted from our database. Because we do not collect such information, we have no such information to use or to disclose to third parties. We have designed this policy in order to comply with the Children’s Online Privacy Protection Act (COPPA).

13.    How can you opt-out from marketing communications?
By providing your contact information through the Platform or communications initiated by you, you consent to receive communications from us, including by email, text message, phone call, and via the Platform, as applicable, including information concerning your account and advertising messages. Providing consent to promotional communications is not a condition of purchasing any goods or services. You can unsubscribe to advertising communications at any time by following the unsubscribe instructions in each communication or contacting us. Please note that, even if you unsubscribe from advertising content, we will still send you any necessary, non-promotional messages about your purchases, account, or updates to our Privacy Policy and Terms of Service.

14.    Do we respond to Do Not Track (DNT) Signals?
DNT is a feature offered by some browsers which, when enabled, sends a signal to websites to request that your browsing is not tracked. We honor DNT signals and DNT, plant cookies, or use advertising when a DNT browser mechanism is in place.

15.    How will you know when we change the Privacy Policy?
Each time you use the Platform, the then-current version of this Privacy Policy will apply, and we reserve the right to modify this Privacy Policy at any time by posting such modified version via the Platform. You should periodically review this Privacy Policy. Unless we receive your express consent, any revised Privacy Policy will only apply to information collected after the effective date of such revised Privacy Policy and not to information collected under any earlier version.

16.    How can you contact us regarding this Privacy Policy?
If there are any questions regarding this Privacy Policy, you may contact us using the information below.
theBoardlist
Click here to contact us

Last Updated: February 5, 2021