Privacy

Who is responsible for your data

Aidan Smart, trading as Boost Your Reviews. Address: 61 Fitton Avenue, Kingswinford, West Midlands, DY6 8RX. For anything about your data, email taptoboost@outlook.com. We are the data controller for the personal data this page describes.

What we collect and why

When you send the contact form. Your name and phone number, and if you give them, your email, business name and town, plus the pack size and setup option you picked and anything you write in the message box. We use these to answer your enquiry and quote you. Our lawful basis is that you have asked us to take steps towards a contract, and our legitimate interest in answering people who contact us.

When you message us on WhatsApp. Your phone number, your name if your profile shows it, and what you write. Same purpose and lawful basis as the form. WhatsApp is run by Meta under its own privacy policy.

When you order. Your name, delivery address, email, phone number, what you ordered and what you paid. We need these to fulfil the contract, post the cards and send you receipts and tracking. Card details go straight to the payment provider; we never see your full card number. We keep order records because tax law requires it.

If you ask us to programme cards. The Google review link for the business, which is public business information. We use it only to write and test the cards.

When you visit the site. Our host, Cloudflare, keeps standard server logs, including IP addresses, for security and to keep the site running. The pages load their fonts from Google and a style script from Tailwind Labs, so those two also see your IP address and browser details when a page loads; neither sets a cookie. We use Google Ads cookies, and only if you agree to them: see Cookies below.

The basket and checkout. The basket on the home, products and wholesale pages is Shopify's, so when it loads Shopify sets its own cookies, including the ones it uses to recognise a returning visitor, under Shopify's cookie policy at shopify.com/legal/cookies. Shopify's checkout sets the cookies it needs to take your payment and shows its own cookie choice. If you pay with Shop Pay, Shopify keeps the details you save under its own privacy policy, not ours.

What you have to give us. Nothing here is compulsory, but we cannot post cards without a name and address, cannot take payment without the details checkout asks for, and cannot answer an enquiry without a phone number or email.

Where it comes from. Almost always from you. If a colleague or a reseller gives us your details so we can deliver or programme cards for you, that is where we got them.

We do not send marketing. If that ever changes, we will ask first and you will be able to say no.

Cookies

We use the Google Ads tag, from Google Ireland Limited, to see which of our Google adverts bring people to this site. When it runs, it sets cookies on your device (such as _gcl_au, and _gcl_aw if you arrived from one of our adverts) and sends Google your IP address, browser details, the pages you visit here and the advert you arrived from. We use it to measure our adverts only: ad personalisation is switched off, so we do not use your visit to show you our adverts elsewhere. Google uses this data under its own privacy policy at policies.google.com/privacy.

It only runs if you press Accept on the cookie notice. Until then nothing is loaded from Google Ads, and if you press Reject it never runs. Our lawful basis for it is your consent.

We remember your choice in your browser's local storage, so we do not ask on every page. You can change your mind at any time with Cookie settings at the bottom of every page. If you switch it off, we delete the Google Ads cookies this site set. Those cookies last up to 90 days.

Who else sees it

Companies that do work for us, only as far as that work needs: Cloudflare (hosting and the form endpoint), Web3Forms (delivers form enquiries to our inbox), Microsoft (our email), Shopify (the store, basket and checkout), Shopify Payments, PayPal, Google and Klarna (payments, Klarna only if you choose to pay with it), Royal Mail (delivery, so your name, address and phone number), Google and Tailwind Labs (fonts and a style script, as above), Meta (WhatsApp) and, only if you accept cookies, Google (advertising measurement). HMRC or an accountant can see order records where the law requires. We do not sell or rent your data to anyone.

Some of these companies process data outside the UK. Shopify works from Ireland, Canada, Singapore and the United States; Cloudflare, Meta and Google from the United States; Web3Forms is run by Web3Creative in India with servers in the United States. Transfers to the EEA and to businesses in Canada are covered by the UK's adequacy regulations, and transfers to US companies certified under the UK extension to the Data Privacy Framework are covered too. Where a transfer is not covered by adequacy regulations, we rely on the standard data transfer clauses in the supplier's contract with us. Ask us if you want a copy of the safeguards.

How long we keep it

Enquiries and messages: deleted 12 months after we last heard from you. If you went on to order, they are kept with your order records instead. Order, payment and delivery records: six years after the end of the tax year they belong to, because tax law requires us to keep them. Programmed card links: until the order is complete. Web3Forms passes your enquiry to our inbox and clears its own server logs about every two months.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, and ask for it in a form you can take elsewhere. Email taptoboost@outlook.com and we will reply within a month. There is no charge.

Right to object. Where we rely on our legitimate interests, which is for answering enquiries and messages and for keeping the site secure, you can object at any time by emailing taptoboost@outlook.com, and we will stop unless we have compelling grounds to continue.

If you think we have handled your data badly, complain to us first at taptoboost@outlook.com: we acknowledge complaints within 30 days and answer them without undue delay. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We sell to businesses, so this site is not aimed at children, and we make no automated decisions about anyone.

Changes

If this notice changes, the date at the top changes with it. Anything that affects you materially, we will tell you about if we have a way to reach you.