{"id":9392,"date":"2025-06-16T21:12:24","date_gmt":"2025-06-16T21:12:24","guid":{"rendered":"https:\/\/www.ixl-center.com\/?page_id=9392"},"modified":"2025-06-16T21:14:23","modified_gmt":"2025-06-16T21:14:23","slug":"quickgrowth-privacy-policy","status":"publish","type":"page","link":"https:\/\/www.ixl-center.com\/index.php\/quickgrowth-privacy-policy\/","title":{"rendered":"quickGrowth Privacy Policy"},"content":{"rendered":"

GLOBAL PRIVACY POLICY AND PERSONAL DATA PROCESSING<\/b><\/span><\/h2>\n

QuickGrowth\u00a0<\/b><\/span><\/h2>\n

Version 1.1 Effective from June 12, 2025<\/i><\/b><\/span><\/h2>\n
    \n
  • \u00a0IDENTIFICATION OF THE CONTROLLER<\/b><\/span><\/li>\n<\/ul>\n
      \n
    • Controller \/ Operator: IXL Center, Inc.<\/span><\/li>\n
    • Registered Address: 82 Bates Road, Arlington, MA 02474, USA<\/span><\/li>\n<\/ul>\n

      \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Representatives and Contacts:<\/b><\/span><\/p>\n

        \n
      • quickgrowth@ixl-center.net (support)<\/span><\/li>\n
      • quickgrowth@ixl-center.net (legal)<\/span><\/li>\n<\/ul>\n
          \n
        • TERRITORIAL SCOPE AND REGULATORY FRAMEWORK<\/b><\/span><\/li>\n<\/ul>\n

          QuickGrowth complies with the GDPR, UK GDPR, CPRA, LGPD, PIPEDA, APPI, POPIA, PIPL and any other local laws that impose stricter requirements.<\/span><\/p>\n

           <\/p>\n\n\n\n\n\n\n\n\n\n\n\n
          Regulation<\/b><\/span><\/td>\nRegi\u00f3n\/Pa\u00eds<\/b><\/span><\/td>\nKey Compliance Measures<\/b><\/span><\/td>\n<\/tr>\n
          GDPR<\/b>
          \n<\/b> General Data Protection Regulation (Reg. 2016\/679)<\/b><\/span><\/td>\n          		European Union \/ EEA<\/span><\/td>\n\n
            \n
          • EU representative (IXL Center Europe BV)<\/span><\/li>\n
          • Appointed DPO & data\u2011subject portal (30 days)<\/span><\/li>\n
          • RoPA & annual DPIA<\/span><\/li>\n
          • 2021 SCCs + TIAs<\/span><\/li>\n
          • Breach notification \u2264 72 h<\/span><\/li>\n
          • AES\u2011256 at rest \/ TLS 1.3 in transit<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          UK\u00a0<\/b><\/span><\/p>\n

          GDPR + Data Protection Act 2018<\/b><\/span><\/td>\n

          		United Kingdom<\/span><\/td>\n\n
            \n
          • Representative UK (IXL Center UK Ltd.)<\/span><\/li>\n
          • IDTA\/UK-SCC para transferencias<\/span><\/li>\n
          • Registro ICO y pago anual fee<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          CPRA<\/b><\/span><\/p>\n

          California Privacy Rights Act<\/b><\/span><\/td>\n

          		California, USA<\/span><\/td>\n\n
            \n
          • \u201cNotice at Collection\u201d during onboarding<\/span><\/li>\n
          • \u201cDo Not Sell\/Share My Personal Information\u201d button<\/span><\/li>\n
          • Service\u2011Provider contracts \u00a71798.140<\/span><\/li>\n
          • Annual cybersecurity risk assessments<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          LGPD<\/b>
          \n<\/b>Lei Geral de Prote\u00e7\u00e3o de Dados<\/b><\/span><\/td>\n          		Brazil<\/span><\/td>\n\n
            \n
          • Legal basis mapping (art. 7)<\/span><\/li>\n
          • ANPD model clauses for sub\u2011processors<\/span><\/li>\n
          • Data\u2011subject service channel (30 days, PT\u2011BR)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          PIPEDA<\/b><\/span><\/p>\n

          Personal Information Protection and Electronic Documents Act<\/b><\/span><\/td>\n

          		Canada<\/span><\/td>\n\n
            \n
          • Bilingual privacy policy (EN\/FR)<\/span><\/li>\n
          • Record of cross\u2011border transfers<\/span><\/li>\n
          • Confidentiality agreements with Canadian vendors<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          APPI<\/b><\/b><\/span><\/p>\n

           <\/p>\n

          Act on the Protection of Personal Information<\/b><\/span><\/td>\n

          		Jap\u00f3n<\/span><\/td>\n\n
            \n
          • Article 28 clauses for \u201cthird\u2011party provision overseas\u201d<\/span><\/li>\n
          • \u201cJoint use\u201d notice (ky\u014dd\u014d riy\u014d) where applicable<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          POPIA<\/b><\/span><\/p>\n

          Protection of Personal Information Act<\/b><\/span><\/td>\n

          		South Africa<\/span><\/td>\n\n
            \n
          • Information Officer registration<\/span><\/li>\n
          • Section 57 impact assessments where required<\/span><\/li>\n
          • Breach notification under Section 22<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
          PIPL<\/b>
          \n<\/b>Personal Information Protection Law<\/b><\/span><\/td>\n          		Mainland China<\/span><\/td>\n\n
            \n
          • Optional Beijing hosting for CN customers<\/span><\/li>\n
          • CAC model contract + security assessment for transfers<\/span><\/li>\n
          • Internal PIPL compliance office<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

             <\/p>\n

              \n
            • PRINCIPLES<\/b><\/span><\/li>\n<\/ul>\n

              Lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity\/confidentiality and proactive accountability..<\/span><\/p>\n

                \n
              • \u00a0DATA WE COLLECT<\/b>\u00a0<\/span><\/span><\/li>\n<\/ul>\n
                  \n
                1. \n
                    \n
                  1. Identification: name, e\u2011mail, country.<\/span><\/li>\n
                  2. Professional: job title, industry sector.<\/span><\/li>\n
                  3. Usage: visited modules, session duration.<\/span><\/li>\n
                  4. Device: IP address, browser.<\/span><\/li>\n
                  5. Billing: card token (Stripe).<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                    QuickGrowth does not collect special categories of personal data.<\/span><\/p>\n

                      \n
                    • PURPOSES AND LEGAL BASES<\/b><\/span><\/li>\n<\/ul>\n
                        \n
                      1. \n
                          \n
                        1. Create and manage the account.<\/span><\/li>\n
                        2. Generate dashboards and reports.<\/span><\/li>\n
                        3. Internal analytics.<\/span><\/li>\n
                        4. Marketing communications.<\/span><\/li>\n
                        5. Legal compliance and anti-fraud.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                          The table below links each processing purpose with its corresponding legal basis (GDPR art. 6) and the activities involved.<\/span><\/p>\n

                           <\/p>\n\n\n\n\n\n\n\n\n
                          Legal Basis\u00a0<\/b><\/span><\/p>\n

                          (GDPR art. 6)<\/b><\/span><\/td>\n

                          		Purpose<\/b><\/span><\/td>\nActivities Included<\/b><\/span><\/td>\n<\/tr>\n
                          6 (1)(b)<\/b><\/span><\/p>\n

                          Contract performance<\/span><\/td>\n

                          		Create and manage the account<\/span><\/td>\n\n
                            \n
                          • Initial registration<\/span><\/li>\n
                          • Authentication & MFA<\/span><\/li>\n
                          • Credential management<\/span><\/li>\n
                          • Account support<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
                          6 (1)(b)<\/b><\/span><\/p>\n

                          Contract performance<\/span><\/td>\n

                          		Generate dashboards and personalised reports<\/span><\/td>\n\n
                            \n
                          • Processing of responses<\/span><\/li>\n
                          • Metric calculation<\/span><\/li>\n
                          • Dashboard visualisation<\/span><\/li>\n
                          • Export of reports (PDF, CSV, JSON)<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
                          6 (1)(f)<\/b><\/span><\/p>\n

                          Legitimate interest (balance test)<\/span><\/td>\n

                          		Internal analytics and product improvement<\/span><\/td>\n\n
                            \n
                          • Aggregate usage measurement<\/span><\/li>\n
                          • A\/B testing<\/span><\/li>\n
                          • Bottleneck identification<\/span><\/li>\n
                          • Development of new features<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
                          6 (1)(a)<\/b><\/span><\/p>\n

                          Explicit consent<\/span><\/td>\n

                          		Marketing communications<\/span><\/td>\n\n
                            \n
                          • Newsletter delivery<\/span><\/li>\n
                          • Promotions & launches<\/span><\/li>\n
                          • Event invitations<\/span><\/li>\n
                          • Satisfaction surveys<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
                          6 (1)(c)<\/b><\/span><\/p>\n

                          Legal obligation (and 6 (1)(f) anti\u2011fraud)<\/span><\/td>\n

                          		Legal compliance, audit and anti\u2011fraud<\/span><\/td>\n\n
                            \n
                          • KYC \/ KYB checks (where applicable)<\/span><\/li>\n
                          • Fraud prevention and detection<\/span><\/li>\n
                          • Accounting \/ tax retention<\/span><\/li>\n
                          • Reports to competent authorities<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                             <\/p>\n

                              \n
                            • \u00a0RETENTION<\/b><\/span><\/li>\n<\/ul>\n
                                \n
                              • Account data: while the account remains active plus an additional 12 months.<\/span><\/li>\n
                              • Billing records: 7 years (statutory tax requirements).<\/span><\/li>\n
                              • Security logs: 12 months.<\/span><\/li>\n<\/ul>\n
                                  \n
                                • \u00a0INTERNATIONAL TRANSFERS<\/b><\/span><\/li>\n<\/ul>\n

                                  QuickGrowth relies on the 2021 Standard Contractual Clauses for EU\u2013US transfers, the UK International Data Transfer Agreement (IDTA), and ANPD model clauses under the LGPD. Primary hosting for EU clients is located in AWS Frankfurt. Data are encrypted with AES\u2011256 at rest and TLS 1.3 in transit.<\/span><\/p>\n

                                    \n
                                  • DATA SUBJECT RIGHTS<\/b>\u00a0<\/span><\/span><\/li>\n<\/ul>\n

                                    Access, rectification, erasure, restriction, portability, objection, and the right to opt\u2011out of data \u201csale\u201d. Requests should be sent to dpo@quickgrowth.app. We respond within 30 days.<\/span><\/p>\n

                                      \n
                                    • \u00a0SUB\u2011PROCESSORS<\/b><\/span><\/li>\n<\/ul>\n

                                      Current sub\u2011processors include AWS, Auth0, Stripe, and Intercom. The full, up\u2011to\u2011date list is available at quickgrowth.app\/subprocessors. QuickGrowth will provide 30 days\u2019 prior notice before adding new sub\u2011processors.<\/span><\/p>\n

                                        \n
                                      • SECURITY MEASURES<\/b><\/span><\/li>\n<\/ul>\n

                                        ISO 27001 certification, SOC 2 Type II reports, end\u2011to\u2011end encryption, role\u2011based access control (RBAC), multi\u2011factor authentication, and semi\u2011annual penetration testing.<\/span><\/p>\n

                                          \n
                                        • MINORS<\/b><\/span><\/li>\n<\/ul>\n

                                          The Service is not directed to individuals under 18 years of age without verifiable parental consent.<\/span><\/p>\n

                                            \n
                                          • \u00a0COOKIES<\/b><\/span><\/li>\n<\/ul>\n

                                            Essential cookie (`qg_session`) and anonymised analytics cookie (`_ga`). Consent is managed through an IAB TCF v2.2 compliant Consent Management Platform (CMP).<\/span><\/p>\n

                                              \n
                                            • AUTOMATED DECISION\u2011MAKING<\/b><\/span><\/li>\n<\/ul>\n

                                              QuickGrowth does not take decisions with significant legal effects on users without human involvement.<\/span><\/p>\n

                                                \n
                                              • SECURITY BREACHES<\/b><\/span><\/li>\n<\/ul>\n

                                                QuickGrowth notifies supervisory authorities and affected data subjects within 72 hours in accordance with GDPR Articles 33 and 34 and CPRA \u00a71798.150.<\/span><\/p>\n

                                                  \n
                                                • CHANGES TO THE POLICY<\/b><\/span><\/li>\n<\/ul>\n

                                                  Substantial changes to this Policy will be announced at least 15 days in advance via e\u2011mail and an in\u2011app banner.<\/span><\/p>\n

                                                    \n
                                                  • SUPERVISORY AUTHORITIES<\/b><\/span><\/li>\n<\/ul>\n

                                                    EU \u2013 local Data Protection Authority; United Kingdom \u2013 ICO; California \u2013 CPPA; Brazil \u2013 ANPD; Canada \u2013 OPC; Japan \u2013 PPC; Australia \u2013 OAIC.<\/span><\/p>\n

                                                     <\/p>\n

                                                    End of the Privacy Policy.<\/span><\/p>\n

                                                     <\/p>\n","protected":false},"excerpt":{"rendered":"

                                                    GLOBAL PRIVACY POLICY AND PERSONAL DATA PROCESSING QuickGrowth\u00a0 Version 1.1 Effective from June 12, 2025 \u00a0IDENTIFICATION OF THE CONTROLLER Controller \/ Operator: IXL Center, Inc. Registered Address: 82 Bates Road, Arlington, MA 02474, USA \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Representatives and Contacts: quickgrowth@ixl-center.net (support) quickgrowth@ixl-center.net (legal) TERRITORIAL SCOPE AND REGULATORY FRAMEWORK QuickGrowth complies with the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-9392","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/pages\/9392","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/comments?post=9392"}],"version-history":[{"count":3,"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/pages\/9392\/revisions"}],"predecessor-version":[{"id":9395,"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/pages\/9392\/revisions\/9395"}],"wp:attachment":[{"href":"https:\/\/www.ixl-center.com\/index.php\/wp-json\/wp\/v2\/media?parent=9392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}