This Privacy Policy explains how Audiblaze Ltd collects, uses, and protects your personal data when you use boostgram.net. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
Audiblaze Ltd is the data controller for personal data collected via boostgram.net.
2. What Data We Collect
We may collect the following personal data when you make a purchase or contact us:
- Name — provided at checkout
- Email address — used to deliver your purchase and send order confirmations
- Payment information — handled directly and securely by Stripe; we do not store card numbers or payment details
- IP address and browser data — collected automatically for security and analytics purposes
We do not collect sensitive personal data (such as health information, political opinions, or biometric data).
3. How We Use Your Data
We use your personal data for the following purposes:
- To fulfil your order — sending your download link and order confirmation (legal basis: performance of a contract)
- To handle refunds and customer support — responding to queries and processing refunds (legal basis: performance of a contract)
- To comply with legal obligations — keeping records as required by HMRC and UK law (legal basis: legal obligation)
- To prevent fraud and abuse — monitoring for suspicious activity (legal basis: legitimate interests)
- To send marketing emails — only if you have explicitly opted in; you can unsubscribe at any time (legal basis: consent)
4. Third-Party Processors
We share your data with the following trusted third parties only where necessary:
- Stripe, Inc. — payment processing. Stripe processes your payment data as an independent data controller under their own privacy policy. See stripe.com/gb/privacy.
- Email delivery provider — used to send order confirmation and download emails.
We do not sell your personal data to third parties.
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and in any case for a minimum of 6 years to comply with HMRC record-keeping requirements. After this period, your data will be securely deleted.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data, subject to legal obligations.
- Right to restriction — you can ask us to restrict processing of your data.
- Right to data portability — you can request your data in a machine-readable format.
- Right to object — you can object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, email us at support@boostgram.net. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
Our website may use essential cookies to maintain basic site functionality. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and add a cookie consent mechanism.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All payment processing is handled by Stripe using industry-standard encryption.
9. International Transfers
Your data may be processed by Stripe on servers outside the UK. Any such transfers are subject to appropriate safeguards in accordance with UK GDPR requirements.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated "last updated" date.
11. Contact Us
For any privacy-related questions or to exercise your rights: