Privacy Policy

Last updated: June 2026

1. Who we are

This Privacy Policy explains how Boost Zone ("we", "our", "us") collects, uses and protects your personal data when you use our website boost-zone.com and our services. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.

Data controller: Boost Zone is a trading name of Mando Systems Ltd, a company registered in England & Wales under company number 17168657, with its registered office at 10 Pilgrims Walk, Worthing, BN13 1RJ, United Kingdom. You can contact us about your personal data using the details in section 11 below.

2. The data we collect

We collect and process the following categories of personal data:

  • Account data — your username, email address, and a securely hashed password (we never store your password in plain text).
  • Profile links you provide — the public profile or page URLs you ask us to grow. We never ask for or store your social media passwords.
  • Connected social accounts — if you choose to connect a social account (such as TikTok, Instagram, Facebook, YouTube or Telegram) using that platform's own official, secure login, we receive an access token and the limited information you authorise — for example your public profile details and your own posts and their engagement (likes, comments, views). We use this only to publish content you approve and to show you your own growth analytics. We never see or store your social passwords. Access tokens are stored encrypted, and you can disconnect any account at any time, which revokes our access and deletes the stored token.
  • Payment data — subscription payments are processed securely by PayPal. We do not see or store your full card details; we retain a record of your transactions (amount, date, plan, and a PayPal reference).
  • Support data — messages, your name, email and (if you provide it) phone number when you contact us via live chat or open a support ticket.
  • Technical & usage data — IP address, browser/device information, the country we infer from your IP, and pages you visit, collected via cookies and our server logs.

3. How and why we use your data

We use your personal data to:

  • Create and manage your account, and provide the growth services you subscribe to — lawful basis: performance of our contract with you.
  • Take payment and manage your subscription — contract / legal obligation.
  • Respond to your support requests and tickets — contract / legitimate interests.
  • Keep our service secure, prevent fraud and abuse, and meet our legal obligations — legitimate interests / legal obligation.
  • Send you service-related emails (e.g. email verification, receipts, important notices) — contract. We only send marketing emails with your consent, and you can unsubscribe at any time.
  • Understand and improve our website, including measuring advertising performance — consent, where required, via our cookie banner.

4. Cookies

We use a small number of cookies. Essential cookies keep you logged in and protect forms against fraud — these are required for the site to work. With your consent we also use analytics cookies (e.g. Google Analytics) to understand how visitors use the site and to measure our advertising. You can accept or decline non-essential cookies using the banner shown on your first visit, and you can change your browser settings to block cookies at any time.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted providers who help us run our service, and only as needed:

  • PayPal — to process subscription payments.
  • Our email provider — to deliver transactional emails.
  • Google Analytics — for website analytics (with your consent).
  • Our AI assistant provider (OpenAI) — to power the on-site chat helper. Please avoid sending sensitive personal information through the chat.
  • Service suppliers who help deliver the growth you order — we pass only the public profile links you provide, never your passwords or payment details.

Some of these providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or Standard Contractual Clauses).

6. How long we keep your data

We keep your account data for as long as your account is active, and for a reasonable period afterwards to comply with legal, tax and accounting obligations (typically up to 6 years for transaction records). Support messages and logs are kept only as long as needed for the purpose they were collected. You can ask us to delete your account at any time (see your rights below).

7. Your rights

Under UK data protection law you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data ("right to erasure").
  • Object to or restrict certain processing.
  • Request a copy of your data in a portable format.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, secure session handling and access controls. No method of transmission over the internet is 100% secure, but we work hard to protect your information and review our security regularly.

9. Children

Our services are intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "last updated" date, and where the changes are significant we will take reasonable steps to let you know.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please open a support ticket from your account, message us on Telegram, or email us at support@boost-zone.com. We aim to respond to all data requests within 30 days.