Privacy policy
Last updated
How Boomoid collects, uses and protects personal data, and the rights you have over it under the UK GDPR and the Data Protection Act 2018.
Contents 12 sections
Who is responsible for your data
Novus Digital Ventures Ltd, trading as Boomoid, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, is the controller of the personal data described here. Contact: [email protected].
What we collect
Only what an order and its support need:
- contact details — the email address you give at checkout or in a support message, and your name if you add it;
- order details — the services, sizes and tiers you buy, and the public profile, post, video or track links you give us for delivery;
- payment records — amount, currency, status and the provider's reference. Card details go straight to the payment provider; we never see or store them;
- support messages — what you write to us, and our replies;
- technical data — IP address, browser type and request logs, which our servers record to run and protect the site.
How we use it, and why we may
- to deliver your order, send updates and handle support — because it is needed to perform our contract with you;
- to prevent fraud, abuse and payment disputes, and to keep the site secure — our legitimate interests;
- to keep accounting and tax records — a legal obligation;
- to send occasional emails about prices and new services — only if you opt in, and you can unsubscribe at any time.
Who we share it with
We don't sell personal data. We share it only with providers who help us run Boomoid, under contracts that require them to protect it:
- payment providers, which process card and cryptocurrency payments;
- email delivery providers, which send order and support emails;
- hosting and infrastructure providers, which run the website and our servers;
- delivery suppliers, which receive the public link an order is for — never your email or payment details.
We may also disclose data where the law requires it, for example to comply with a court order.
International transfers
Some of our providers process data outside the UK. When they do, we rely on UK adequacy regulations or on safeguards such as the UK International Data Transfer Agreement or Addendum.
How long we keep it
- order and payment records: six years after the order, as UK tax law requires;
- support conversations: as long as needed to resolve the issue and any related request;
- marketing consent: until you unsubscribe;
- server logs: a short period for security, after which they are deleted.
Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased where we have no legal reason to keep it;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent to marketing emails at any time.
To use any of these rights, email [email protected]; we reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies and local storage
The site uses one essential session cookie that holds your cart, and your browser's storage to remember the cart, your checkout email and the tier you chose. There are no advertising or analytics cookies. Details are in our cookie policy.
Children
Boomoid is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has placed an order, contact us and we will delete their data.
Security
Pages are served over an encrypted connection (HTTPS), card details are handled by our payment provider rather than by us, and we limit access to order data to what running the service requires.
Changes to this policy
We update this page when the way we handle data changes; the date at the top shows the last update.
Contact
Privacy questions and requests: [email protected].