Privacy Policy

1. Introduction

Trick Boost ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trick-boost.com and use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our website.

2. Information We Collect

2.1 Personal Data

We may collect personal information that you voluntarily provide to us when you:

• Register for an account on our website
• Subscribe to our newsletter
• Make a purchase
• Contact us through our contact form or email
• Participate in surveys or promotional activities
• Leave reviews or comments on our website

Personal information we may collect includes:

• Name and contact information (email address, postal address, phone number)
• Billing and shipping addresses
• Payment information (processed securely through our payment processors)
• Order history and preferences
• Communication preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address and location information
• Browser type and version
• Operating system
• Referral URLs
• Pages viewed and time spent on our website
• Date and time of visits
• Device information and unique device identifiers

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Service Provision

• Processing and fulfilling orders
• Managing customer accounts
• Providing customer support
• Communicating about orders, products, and services

3.2 Marketing and Communications

• Sending newsletters and promotional materials (with your consent)
• Notifying you about new products, services, and offers
• Conducting surveys and market research
• Personalizing your experience and content

3.3 Business Operations

• Analyzing website usage and improving our services
• Preventing fraud and ensuring security
• Complying with legal obligations
• Resolving disputes and enforcing agreements

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes (e.g., newsletter subscriptions)
• Contract: When processing is necessary for performing a contract with you (e.g., fulfilling orders)
• Legal obligation: When we need to comply with legal requirements
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these don't override your rights

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Order fulfillment and shipping
• Email marketing and communication services
• Website hosting and maintenance
• Analytics and marketing

5.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Legal processes or government requests
• Court orders or subpoenas
• Law enforcement investigations
• Protecting our rights, property, or safety

5.3 Business Transfers

In the event of a merger, acquisition, or sale of our business, customer information may be transferred as part of the transaction.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against:

• Unauthorized access, alteration, disclosure, or destruction
• Accidental loss or damage
• Unlawful processing

Our security measures include:

• SSL encryption for data transmission
• Secure payment processing systems
• Regular security assessments and updates
• Access controls and staff training
• Data backup and recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Account information: Until account deletion or 3 years of inactivity
• Order data: 7 years for tax and accounting purposes
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months (Google Analytics default)

8. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Access Rights

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")

8.2 Control Rights

• Right to restrict processing: Limit how we use your data
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Rights related to automated decision-making: Request human review of automated decisions

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: [email protected]
• Post: Data Protection Officer, Trick Boost, 42 Aromatherapy Lane, Covent Garden, London, WC2E 9RZ

We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. International Data Transfers

Your personal data is primarily processed within the United Kingdom. When we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Binding corporate rules
• Certification schemes and codes of conduct

10. Children's Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

11. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Sending email notifications for significant changes (if we have your email address)

Your continued use of our website after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Definitions

For the purposes of this Privacy Policy:

• "Personal data" means any information relating to an identified or identifiable natural person
• "Processing" means any operation performed on personal data, including collection, storage, use, and disclosure
• "Data controller" means Trick Boost, which determines the purposes and means of processing personal data
• "Data subject" means the individual to whom personal data relates