Privacy Policy

1Data controller

FABA GROUP S.A.
Registered office: Edificio Ocean Business Plaza, Calle 47 Este y Avenida Aquilino de la Guardia, Panama City, Panama
Email: innovate@boostyourbiz.ai
Website: boostyourbiz.ai

2Definitions

• Personal data: any information that can identify you directly or indirectly (e.g. name, email address, phone number, IP address).
• Data controller: the party that determines the purposes and means of processing – in this case FABA GROUP S.A.
• Data processor: an external provider that processes data on our behalf and on our instructions (e.g. a hosting or email provider).
• Consent: a freely given, specific, informed and unambiguous indication of your wishes, which you can withdraw at any time.

3What data we process, why and on what legal basis

3.1. Requesting an AI voice agent demo call

If you request a demo on the website, you provide your name, email address, phone number and business sector; we also record the date and language of the request.

How it works: once you submit the form, our automation platform (Make) passes the data to the spreadsheet in which we log demo requests (Google Sheets). Our AI voice agent then calls the number you gave us and shows you how the system works. At the start of the call the agent tells you that you are speaking with artificial intelligence; if the call is recorded for quality purposes, we tell you in advance and you can object. After the demo, a colleague may contact you by email or phone about our proposal.

• Purpose: carrying out the demo call you requested and preparing a related proposal.
• Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: up to 1 year from the request, or until you withdraw your consent; if we enter into a contract, as set out in section 3.4.

3.2. Enquiries and quote requests

If you contact us by email, phone or form, we process your name, contact details and the content of your message.

• Purpose: answering your enquiry and preparing a proposal.
• Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR); for contact persons of our business partners, our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: up to 1 year from the last contact.

3.3. Newsletter

• Data: name, email address, subscription date and open statistics.
• Purpose: sending professional content and offers via Brevo.
• Legal basis: your consent (Art. 6(1)(a) GDPR).
• Retention: until you unsubscribe; every newsletter contains a one-click unsubscribe link.

3.4. Contracts and invoicing

• Data: identification and contact details of the client and its contact persons, billing details.
• Purpose: performing the contract, invoicing and accounting.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
• Retention: after the contract ends, for the periods required by applicable accounting and tax laws.

3.5. Operation and security of the website

When you visit the website, the hosting provider’s server records technical data: IP address, browser type, device data, time of visit and pages viewed.

• Purpose: running the website, troubleshooting, and preventing abuse and attacks.
• Legal basis: our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).
• Retention: as long as needed for security purposes, up to 12 months.

The website’s fonts are served from our own server, so no data is sent to Google or any other external provider for this purpose.

3.6. Cookies

We use cookies that are necessary for the website to work on the basis of our legitimate interest, and all other (statistics, marketing) cookies only with your consent. See the Cookie Policy for details.

3.7. Processing based on legitimate interest

Where we rely on our legitimate interest, we have first assessed that it does not override your rights. We will provide this assessment on request, and you can object to such processing at any time (see section 6).

4Who we share data with

We do not sell your personal data or share it with third parties for their marketing. Only the following processors may process it, on our behalf and under a written data processing agreement:

• Elementor Ltd. – web hosting (Elementor Hosting), in an EU data centre.
• Brevo (Sendinblue SAS, France) – newsletters and email delivery.
• Make – automation platform that passes on demo requests.
• Google Ireland Limited (Google Workspace / Google Sheets) – logging demo requests.
• AI voice agent platform – technical delivery of the demo call.
• Usercentrics A/S (Cookiebot, Denmark) – managing cookie consent.

Beyond this, we only disclose data where required by law (e.g. requests from courts or authorities).

5Transfers outside the European Union

The Company is registered in Panama, so the data you provide may also be accessed from Panama. When we process data of people in the EU, we apply the GDPR in full.

We store data primarily in the European Union (hosting in an EU data centre, French email provider). Where a processor handles data outside the EU, it does so only with the safeguards set out in Chapter V of the GDPR:

• an adequacy decision of the European Commission (e.g. Israel, or US providers certified under the EU–US Data Privacy Framework), or
• the Standard Contractual Clauses (SCCs) adopted by the European Commission and, where necessary, supplementary security measures.

You can request detailed information about these safeguards at innovate@boostyourbiz.ai.

6Your rights

You have the following rights:

• Access: find out what data we hold about you and obtain a copy.
• Rectification: have inaccurate data corrected.
• Erasure: have your data deleted where it is no longer needed or is processed unlawfully.
• Restriction: ask us to only store your data, without using it, for a certain period.
• Portability: receive your data in a machine-readable format or have it transferred to another provider.
• Objection: object to processing based on legitimate interest and to direct marketing.
• Withdrawal of consent: at any time and without giving reasons; this does not affect the lawfulness of processing before withdrawal.

We do not make decisions based solely on automated processing that produce legal effects concerning you: our AI voice agent holds conversations and records information, while business decisions are made by our team.

You can send your request to innovate@boostyourbiz.ai; we will reply within one month at the latest.

Complaints

If you believe our processing infringes your rights, please contact us first. You can also lodge a complaint with the authority of the Company’s registered office: the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI) in Panama. If you live in the European Union, the GDPR also entitles you to contact the supervisory authority in your country of residence, or to go to court.

7Data security

We transmit data over encrypted (SSL/TLS) connections, only authorised staff have access to our systems, and we require our processors to apply appropriate security measures. However, no transmission over the internet is ever completely risk-free.

8Children

Our services are not directed at people under 16, and we do not knowingly process their data. If you become aware that someone under 16 has provided us with data, please let us know and we will delete it without delay.

9Changes to this policy

We update this policy when the law or our services change. The current version is always available on this page, with the date shown at the top.

10Contact

For any data protection question, please contact us:
Email: innovate@boostyourbiz.ai
Postal address: FABA GROUP S.A., Edificio Ocean Business Plaza, Calle 47 Este y Avenida Aquilino de la Guardia, Panama City, Panama