Privacy Policy

Effective Date: March 01, 2023

2boom® (“2boom“, “we“, “us“, or “our“) operates the2boom.com website and related mobile applications (together, the “Service“). This Privacy Policy describes how we collect, use, process, and disclose your information when you visit or make a purchase from the Service.

We respect your privacy and are committed to protecting your Personal Data. We’ve adopted this Privacy Policy to explain how we collect, store, and use your information when you visit or make a purchase on our Service. By accessing or using the Service, you agree to this Privacy Policy.

Key Points

We collect information you provide directly to us, information automatically collected when you interact with our Service, and information from third-party sources.
We collect your Personal Data to provide and improve our Service to you. We may also use it for other purposes with your consent or as permitted by law.
You have rights over your Personal Data, such as accessing and deleting it, and we aim to enable you to exercise your rights.
We do not sell your Personal Data to third parties, but we may disclose it to service providers we work with or if required by law.
We aim for full transparency on how we gather, use, and share your Personal Data. If you have any questions, you can contact our Data Protection Officer.

What Information Do We Collect?

“Personal Data” refers to information that identifies you personally, either alone or in combination with other information. We collect different types of Personal Data about you to operate our business, provide the Service to you, comply with legal obligations, and pursue our legitimate interests.

The categories of Personal Data we may collect includes:

Account Data. To create an account, we require certain information such as your name, email address, phone number, login credentials, and payment information. This allows us to provide the Service to you, bill you for your purchases, and communicate with you about orders and deliveries.
Profile Data. If you create a user profile, we collect information you provide such as your name, profile picture, preferences, and any other information you add to your profile. This allows us to personalize and improve your experience with the Service.
Transaction Data. We collect data relating to your purchases made through the Service such as what you bought, when and where you bought it, the price you paid, payment method, and delivery details. This allows us to process your order and deliver your products.
Marketing Data. We may collect your preferences for receiving our marketing communications and details about your engagement with them, such as whether you opened an email or clicked on a link. This allows us to deliver more relevant communications and offers to you.
Usage Data. We automatically collect information about how you interact with the Service, such as pages you visit, the features you use, search queries, and browsing and purchase history. This helps us to provide you with a smooth user experience and improve the Service for all users.
Device Data. We may collect data from the device and software you use to access the Service, such as your IP address, device type, operating system version, browser type, language settings, and other unique device identifiers. This allows us to deliver and optimize the Service for your device.
Location Data. We may derive your approximate location from your IP address to personalize and improve the Service for your location.
Third-Party Data. We may receive Personal Data about you from various third parties and public sources, such as social media platforms and data brokers, to supplement information we collect.

How Do We Use Your Personal Data?

We collect and process your Personal Data mostly to provide, maintain, and improve the Service for you. We may also use it for other purposes that are clearly disclosed to you and to which you consent, or as permitted by law.

Generally, we use your Personal Data for:

Providing products and services you request or purchase;
Processing orders and delivering products to you;
Communicating with you about your account, orders, deliveries, and our products and services;
Understanding your interests, habits, and preferences to personalize your experience and tailor marketing offers;
Improving existing products and developing new products;
Processing payments, refunds, and managing billing and collections;
Detecting, preventing, and responding to fraud, intellectual property infringement, violations of our Terms of Service, violations of law or breaches of security;
Performing analysis to improve our business, product and service strategy and offerings;
Responding to your customer support inquiries and requests;
Sending service-related communications and notices, such as order confirmations and notices about your account or subscriptions;
Complying with legal obligations such as record keeping requirements.

Legal Bases for Processing Personal Data

We collect and use your Personal Data when:

It is necessary to provide our Service or perform a contract with you;
It is in our legitimate interest as a business (such as improving our products, analytics, preventing fraud);
You give us consent (which can be withdrawn at any time);
It is required or permitted by law.

How Do We Share Your Personal Data?

We do not sell or rent your Personal Data to third parties. We may disclose your data in the following circumstances:

Service Providers

We disclose information to service providers we work with to provide the Service to you, such as:

Payment processors to authorize and complete payments;
Shipping and delivery partners to deliver products to you;
Technology providers to maintain our website and email communications;
Marketing partners to provide and optimize promotional communications and advertisements;
Analytics partners to analyze how our Service is accessed and used;
Security and compliance partners to detect, prevent and remediate security breaches or fraud.

We vet service providers carefully and bind them contractually to appropriate confidentiality and security obligations. We only permit them to process your Personal Data for specified purposes under our instructions.

Legal Disclosures

We may disclose your information if required or permitted by law. For example, to comply with:

Legal processes like subpoenas, warrants, or court orders;
Requests from government agencies and law enforcement bodies;
National security requirements;
Any legal reporting requirements.

Business Transfers

As we continue to develop our business, we may be involved in corporate restructurings, mergers, acquisitions, or asset sales. Your Personal Data and other information may be transferred as a business asset during such a transaction. We will aim to protect the confidentiality of any transferred Personal Data.

Aggregated or Anonymized Data

We may disclose or use aggregated or anonymized data for any purpose, as it does not directly identify you. For example, we may share aggregated statistics about users with prospective business partners. If we ever share your Personal Data in an aggregated, anonymized form, any reasonably possible method will be used to avoid exposing your identity.

With Your Consent

We will share your Personal Data with any other third parties with your consent. We will seek your specific consent before sharing sensitive information like financial account data.

Security of Your Personal Data

We are committed to protecting your Personal Data once we receive it. We implement technical, organizational, and physical security measures to help protect your Personal Data from unauthorized access and disclosure. However, no data storage system or transmission of data over the internet can be guaranteed to be 100% secure.

We minimize risks by:

Using reputable cloud hosting and data storage providers;
Encrypting data in transit and at rest where possible;
Restricting access to Personal Data only to employees and authorized service providers on a need-to-know basis;
Performing regular security reviews of our providers and practices;
Using security tools such as malware scanners and firewalls;
Maintaining plans to respond to data breaches rapidly.

While we strive to protect your Personal Data, we cannot guarantee the security of data transmitted to or stored on our Service. Any transmission remains at your own risk. Once we receive your data, we apply strict security standards to attempt to prevent unauthorized access.

Your Privacy Rights

You have the following rights over your Personal Data:

Access

You can request more information about the Personal Data we hold about you and request a copy of such data.

Rectification

If you believe the Personal Data we hold about you is inaccurate or incomplete, you can request that we correct or supplement it.

Erasure

You can request we erase some or all of your Personal Data from our systems. For example, if it is no longer necessary for the purposes for which it was collected.

Withdrawal of Consent

If we processed your Personal Data under your consent, you can withdraw consent at any time.

Data Portability

You can ask for a copy of certain Personal Data for you to retain and reuse for your own purposes or request that we transmit it to another service provider or third party where technically feasible.

Restriction of Processing

You can ask us to restrict further processing of your Personal Data, for example while your request for rectification or objection is being investigated.

Objection

You can object to how your Personal Data is being used. We will apply your preferences going forward. If you believe your Personal Data is being used in a way that is unlawful, you can object and request cessation of the improper usage.

To exercise these rights, please contact us. We will acknowledge and investigate your requests within 30 days, provide our reasons if we do not implement your request, and inform you of your right to file a complaint with the relevant data protection authorities.

Data Retention

We only retain your Personal Data as necessary for our business relationship with you and to comply with our legal obligations. If you close your account, we will retain certain data for analytical purposes and record keeping integrity.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and other tracking technologies on our Service to help provide and improve our Service and your user experience. For example, to enable our systems to recognize your browser and device and provide you with applicable Services.

You can disable cookies through your browser settings. However, if you do so, the Service may not function properly.

Advertising and Analytics Services

We may allow third party advertising, marketing or analytics services to collect your data by using cookies, JavaScript and web beacons. They track website behavior and may deliver targeted promotions based on a profile linked to your browser and device identifiers. We require these parties to have appropriate Privacy Policies in place.

International Data Transfers

We are based in the United States and your Personal Data may be stored and processed in any country where we have facilities or service providers. By using our Service, you acknowledge that your information may be transferred to countries outside of your home country, including the United States, which may have data protection laws that differ from your country. EU-US and Swiss-US Privacy Shield: As appropriate, we comply with frameworks like EU-US and Swiss-US Privacy Shield that provide legally binding safeguards regarding overseas transfers of your Personal Data.

Children’s Privacy

Our Service does not address or cater to anyone under the age of 13. We do not knowingly collect Personal Data from children under 13 without parental consent. If you believe we may have collected information from your child without consent, please contact us and we will delete it.

Changes to this Privacy Policy

We may amend or update this Privacy Policy from time to time. We will post any changes on our website along with a revised effective date. Please check back periodically for updates. If we intend to apply material changes that reduce your rights, we will provide you with advance notice and seek your consent where possible.

How to Contact Us

Please feel free to contact us if you have any questions about this Privacy Policy or how we handle your Personal Data.

Our Data Protection Officer can be contacted at:

By Email: [email protected]
By Phone: 1-800-222-2000
By Mail: 2boom Inc. Attn: Privacy Officer. 100 Main Street, Anytown USA 12345

You can also lodge a complaint about our data practices with your local data protection authority. We are committed to working with you to obtain a fair resolution of any complaint or concern.

Additional Disclosures for California Residents

California Privacy Rights. Under the California Consumer Privacy Act (“CCPA”), California residents have specific rights regarding their personal information. You have the right to request that we disclose what categories of personal information we collect and how we use it. You also have the right to request what specific pieces of personal information we have collected about you in the previous 12 months, access such data, delete it, and request that we not sell it. Categories of personal information we collect and our purposes of use are explained above. To submit any requests under the CCPA, please contact us. Do Not Track. Our Service does not alter its data collection and use practices when receiving Do Not Track (“DNT”) signals from your browser.

Additional Disclosures for Nevada Residents

If you are a Nevada resident, you have the right to opt-out of the sale of certain personal information to third parties. We do not sell your personal information as defined in the Nevada law. However, if you still wish to opt-out, you may submit a request to [email protected].

Additional Disclosures for the European Economic Area (EEA)

If you reside in the EEA, you have certain rights and protections under the law regarding the processing of your personal data, including:

Right to Access

You have the right to request access to the personal data we hold about you and receive a copy of such data.

Right to Rectification

If you believe your personal data is inaccurate or incomplete, you can request that we correct or supplement it.

Right to Erasure

You can request that we erase your personal data, subject to certain restrictions. For example, we may retain portions of your personal data as permitted or required by law.

Right to Restriction of Processing

You can ask us to restrict further processing of your personal data, while your request for rectification or objection is being investigated.

Right to Data Portability

You can ask for a copy of certain of your personal data for your own use or to provide to another service provider.

Right to Object

You can object to how your personal data is being used and request we cease a particular processing activity.

To make a request to exercise these rights, please contact our Data Protection Officer. We will consider and respond to any request in accordance with applicable law.

You also have the right to lodge a complaint with your local data protection authority at any time.

Additional Disclosures for the UK

Legal Basis for Processing

Our legal basis for collecting and using your Personal Data will depend on the types of data and the context in which we collect it. Our legal bases include where:

Processing is necessary to perform a contract with you;
You have consented to the processing;
Processing is necessary for our legitimate interests or those of a third party; and
Processing is necessary to comply with our legal obligations.

If you have questions about the legal basis which apply to a particular processing activity by us, please contact our Data Protection Officer.

Your Data Protection Rights

If you are located in the United Kingdom, you have the following data protection rights:

The right to access information we hold about you and to receive a copy of it.
The right to require us to change incorrect or incomplete data.
The right to require us to delete or stop processing your data, for example if the data is no longer necessary for the purposes of processing.
The right to object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing.
The right to ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether your interests override our legitimate grounds for processing data.
The right to port your data to another organization.
The right to object to automated decision-making and profiling.
The right to withdraw consent at any time where we are relying on consent to process your personal data.
The right to lodge a complaint with the Information Commissioners Office.

If you have any questions about how we handle your Personal Data or wish to exercise any of these rights, please contact our Data Protection Officer.