Website: https://www.boombaaroo.com
About our privacy policy
Boombaaroo is very concerned about your privacy. We only process data that we need to (improve) our services and treat all information we collect about you and your use of our services with care. Your data will not be shared with third parties for commercial purposes. This privacy policy applies to the use of the website
Boombaaroo website and the services accessed from it. This privacy policy describes what information about you we collect, what this information is used for and with whom, and under what conditions this information may be shared with third parties. We also explain how we store your data, how we protect your data from misuse and what rights you have in relation to the personal data you provide to us. If you have any questions about our privacy policy, you can contact our privacy contact person, whose contact details can be found at the end of our.
Privacy policy
Below you can read about how we process your data, where we store it, what security techniques we use and to whom data is visible.
About our data processing
Below you can read about how we process your data, where we store it, what security techniques we use and to whom.
data is visible.
Online store software
We use web hosting and email services from Shopify, Google G Suite and Klaviyo.For our web hosting we use a web hosting company. Personal data collected when you use our website and services is shared with our web host, who needs access to this information to provide (technical) support. They will not use this data for other purposes. According to the contract we have with them, our web host is obliged to take the necessary precautionary and security measures for your personal data.
Our online store is developed with Shopify software, and we host our online store on a dedicated server. We have taken the necessary precautions and security measures regarding your personal data, such as SSL encryption and a strong password policy.
Email and mailing lists
For our regular email, we use the email services of our web host. This party has taken appropriate technical and organisational measures to prevent misuse, loss or alteration of your data. Our hosting company does not have access to our mailbox and we treat our email traffic confidentially.
Purpose of the data processing
General purpose of data processing
We use your data exclusively to provide our services to you. This means that the purpose of the processing of this data is directly linked to the task that you offer us. We do not use this data for (targeted) marketing. If you share information with us and we use this information - not because of a request - to contact you later, we will first ask for your explicit consent. Your data will not be shared with third parties for purposes other than to fulfil accounting and administrative obligations. These third parties are all bound to confidentiality by the contract we have concluded with them, an oath or a legal obligation. Automatically collected data Information collected automatically by our website is processed only to provide services to you and/or to further improve our services. This information (e.g. your IP address (anonymised), browser and operating system) is not personal information. Co-operation in tax and criminal investigations In some cases, we may be legally obliged to share your data to assist in a tax or criminal investigation. In such cases, we are obliged to fulfil the requirements and provide assistance, but we will oppose this on the basis of legal possibilities.
Retention periods
We keep your data for as long as you are a customer of ours. This means that we keep and store your customer profile until you notify us that you no longer wish to use our services. Such a notification also counts as a request to be forgotten. We are obliged to keep invoices containing your (personal) data due to relevant administrative obligations, and this information is stored securely as long as the deadline for these obligations has not expired. Employees no longer have access to your customer profile and any documents produced as a result of your assignment or task.
Your rights
Under current law, as a data subject, you have certain rights in relation to personal data processed by us or on our behalf. Below is an explanation of these rights and how you as a data subject can invoke these rights. In order to prevent misuse, we will in principle only send invoices and copies of your data to the e-mail addresses you have communicated to us. If you wish to receive this information at another e-mail address or, for example, by post, we will ask you to identify yourself accordingly. We will keep records of completed requests; in the case of a request to be forgotten, we will keep records of anonymised data. You will receive all invoices and data copies in files structured in a machine-readable format based on the data classifications we use in our system.
Right of access
You have the right to access at any time the data we process that relates to you or can be traced back to your person. You can request such access from our privacy contact person. You will receive a response to your request within 30 days. If your request is granted, we will send you via the email address known to us a copy of all the data with a complementary list of the processors processing these data, indicating the categories under which we store these data.
Right to rectification
You have the right to obtain, at any time, the rectification of any data processed by us which relates to or can be traced back to your person. You can request this rectification from our privacy contact person. You will receive a response to your request within 30 days. If your request is approved, we will send you a confirmation that the information has been corrected by email to our known address.
Right to restriction of processing
You have the right to restrict at any time the data we process that relates to or can be traced back to your person. You can request such a restriction from our contact person in charge of privacy. You will receive a response to your request within 30 days. If your request is approved, we will send you a confirmation via the email address known to us that the processing of your data will be restricted until you choose to lift this restriction.
Right to portability
You have the right to obtain, at any time, the processing of your personal data by a third party of your choice. You can send such a request to our contact person responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send you, via the email address known to us, your (personal) invoices or copies of data that we or third parties have processed on our behalf. It is very likely that in such a case we will no longer be able to offer you our services, as we can no longer guarantee the previous data security.
Right to object and other rights
You have the right to object to the processing of your personal data at any time. In the event of such an objection, we will immediately stop all processing of your data while the objection is being investigated and processed. In the event of a justified objection, we will return all invoices and/or copies of the personal data that we or third parties have processed on our behalf up to that point, and cease processing thereafter. You also have the right not to be subject to automated decision-making or profiling. We process your data in such a way that this right does not apply. If you believe that this right applies, please contact our Privacy Officer.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, this page always shows the latest version of our privacy policy. If a new privacy policy affects how we use newly collected information about you, we will notify you by email.
Boombaaroo
Email: service@boombaaroo.com