Privacy Policy

At Boom Boom Shot, accessible from www.boomboomshot.com, we are committed to protecting your privacy and ensuring transparency in our data practices. This privacy policy explains what data we process, how we process it, and the specific purposes for which we process it.

Data processing purposes and types

1. Account management and authentication

We process the following data to create and manage your account, verify your identity, and provide access to our services:

  • Name and email address
    • Purpose: User identification and communication
    • Processing: Stored securely and used for account authentication
  • Password
    • Purpose: Account security
    • Processing: Encrypted storage for authentication
  • Social media profile information (when you register using Facebook or Google)
    • Purpose: Simplified account creation and authentication
    • Processing: We collect public profile data as authorized by your social media account settings
    • Specific data collected: Public profile information, email
    • How we use it: To create and link your account, enable social features
  • Profile pictures or avatars
    • Purpose: User identification and personalization
    • Processing: Stored and displayed within the platform

2. Sweepstakes and event management

We process the following data to operate our sweepstakes and event services:

  • Event participation records
    • Purpose: Track event attendance and participation
    • Processing: Stored and analyzed to manage event access
  • Sweepstakes entries
    • Purpose: Enable participation in sweepstakes
    • Processing: Recorded and used for winner selection
  • Winner information
    • Purpose: Prize distribution and notification
    • Processing: Used to contact winners and verify eligibility
  • QR code scan data
    • Purpose: Event check-in and participation tracking
    • Processing: Scanned and recorded for event access
  • Event preferences and settings
    • Purpose: Customize user experience
    • Processing: Stored and applied to personalize events
  • Participation timestamps
    • Purpose: Event management and security
    • Processing: Recorded for audit and verification purposes

3. Platform operation and improvement

We process the following technical data to operate and improve our service:

  • IP address and device information
    • Purpose: Service operation and security
    • Processing: Logged and analyzed for system security
  • Browser data and operating system
    • Purpose: Platform compatibility and optimization
    • Processing: Analyzed to improve user experience
  • Usage patterns
    • Purpose: Service improvement
    • Processing: Analyzed to enhance platform functionality
  • Access times and dates
    • Purpose: Security and performance monitoring
    • Processing: Logged and analyzed for system optimization
  • Pages visited and time spent
    • Purpose: User experience optimization
    • Processing: Analyzed for service improvement
  • Feature usage statistics
    • Purpose: Platform enhancement
    • Processing: Analyzed to improve functionality

4. Communication and customer support

We process communication data for the following purposes:

  • Customer service interactions
    • Purpose: Provide support and resolve issues
    • Processing: Recorded and used to handle inquiries
  • Email communications
    • Purpose: Service updates and support
    • Processing: Stored and used for communication
  • Marketing preferences
    • Purpose: Personalized communications
    • Processing: Used to manage communication preferences
  • Support tickets
    • Purpose: Issue resolution
    • Processing: Tracked and managed for customer support
  • Feedback and reviews
    • Purpose: Service improvement
    • Processing: Analyzed to enhance platform quality

5. Payment processing

We process payment data for the following purposes:

  • Transaction records
    • Purpose: Process payments and maintain financial records
    • Processing: Stored securely for accounting and legal compliance
  • Payment method details
    • Purpose: Enable secure payments
    • Processing: Processed securely through Stripe
    • Note: Card details are not stored on our servers
  • Billing address
    • Purpose: Payment verification and compliance
    • Processing: Stored for transaction records
  • Purchase history
    • Purpose: Account management and support
    • Processing: Recorded for user reference and support

How we process your data

Each type of data is processed according to these principles:

  1. Collection: Data is collected directly from you or generated through your use of our services
  2. Storage: Data is stored securely with encryption at rest
  3. Usage: Data is used only for the specified purposes listed above
  4. Sharing: Data is shared only with authorized service providers as necessary for service operation
  5. Retention: Data is kept only for as long as necessary for the specified purposes

Data protection and security

We implement robust security measures to protect your information:

  • SSL/TLS encryption for all data transmission
  • Secure data storage with encryption at rest
  • Regular security audits and updates
  • Access controls and authentication measures
  • Regular backup procedures
  • Incident response protocols
  • Employee data handling training
  • Third-party security assessments

Cookie usage

We use cookies and similar technologies for specific purposes:

  • Session management
    • Purpose: Maintain your login status
    • Processing: Temporary storage of session data
  • Preference storage
    • Purpose: Remember your settings
    • Processing: Stored locally on your device
  • Analytics
    • Purpose: Understand site usage
    • Processing: Collected and analyzed for improvements
  • Performance optimization
    • Purpose: Improve site speed and functionality
    • Processing: Technical performance monitoring
  • Marketing effectiveness
    • Purpose: Measure campaign success
    • Processing: Track marketing interaction data

You can control cookie settings through your browser preferences.

Third-party data processing

We use the following service providers to process specific types of data:

Payment processing

  • Provider: Stripe
  • Data processed: Payment information
  • Purpose: Secure payment processing
  • Processing activities: Transaction processing and recording

Cloud hosting

  • Providers: AWS, OVHcloud
  • Data processed: All platform data
  • Purpose: Service operation and storage
  • Processing activities: Data storage and application hosting

Analytics

  • Providers: Hotjar, Amplitude
  • Data processed: Usage data
  • Purpose: Service improvement
  • Processing activities: Usage analysis and pattern detection

Email services

  • Provider: Mailjet
  • Data processed: Email addresses and communication content
  • Purpose: Communication delivery
  • Processing activities: Email sending and tracking

Your privacy rights

You have the following rights regarding your personal data:

  • Access your personal data
  • Correct inaccurate information
    • Purpose: Maintain data accuracy
    • Process: Update via account settings or contact support
  • Request data deletion
  • Withdraw consent
    • Purpose: Control data processing
    • Process: Update preferences or contact support
  • Object to processing
  • Export your data

Data retention

We retain your data for specific periods based on purpose:

  • Active accounts
    • Duration: Account lifetime
    • Purpose: Service provision
  • Inactive accounts
    • Duration: 24 months after last activity
    • Purpose: Account recovery
  • Transaction records
    • Duration: 7 years
    • Purpose: Legal compliance
  • Marketing data
    • Duration: Until consent withdrawal
    • Purpose: Communication
  • Support interactions
    • Duration: 36 months
    • Purpose: Service improvement

Children’s privacy

Our service is not intended for users under 13 years old. We do not knowingly collect or process data from children under 13. If we discover we have collected such data, we will delete it immediately.

International data transfers

For international data transfers, we ensure:

  • Adequate data protection measures
  • Compliance with transfer regulations
  • Implementation of standard contractual clauses
  • Regular privacy impact assessments

Changes to this policy

We may update this policy periodically. Changes will be posted on this page with an updated revision date. Significant changes will be notified via email.

Contact information

For privacy-related queries:

Last updated: 22 December 2024