GDPR Privacy Policy
Last updated: September 28, 2024
This Privacy Policy describes how Bonusfront ("we", "us", or "our") collects, uses, and protects personal data in accordance with the General Data Protection Regulation (GDPR). By using bonusfront.life, you acknowledge the practices described in this policy.
1. Data Controller
Bonusfront is the data controller responsible for your personal data. If you have questions or concerns regarding this policy or the handling of your data, you may contact us at:
Email: support@bonusfront.life
Website: bonusfront.life
2. Personal Data We Collect
We collect personal data only when necessary and only to the extent required to provide our services. The categories of personal data we may collect include:
2.1 Data You Provide Directly
- Name and email address when you register or contact us
- Payment and billing information when you make a purchase
- Communications you send to us via email or contact forms
- Profile information and preferences you set within your account
2.2 Data Collected Automatically
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent, and navigation paths
- Referring URLs and search terms used to find our site
- Device identifiers and session data
2.3 Data From Third Parties
- Authentication data if you sign in using a third-party service
- Payment verification data from payment processors
3. Legal Basis for Processing
We process your personal data only where a lawful basis exists under the GDPR. The legal bases we rely on are:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and service delivery | Performance of a contract (Article 6(1)(b)) |
| Processing payments | Performance of a contract (Article 6(1)(b)) |
| Sending service-related communications | Performance of a contract (Article 6(1)(b)) |
| Sending marketing communications | Consent (Article 6(1)(a)) |
| Analytics and service improvement | Legitimate interests (Article 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Article 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Article 6(1)(c)) |
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- To create and manage your account
- To provide, maintain, and improve our services
- To process transactions and send related notices
- To respond to your enquiries and provide customer support
- To send you updates, newsletters, and promotional content where you have consented
- To monitor usage patterns and analyse service performance
- To detect, investigate, and prevent fraudulent or unauthorised activity
- To comply with applicable legal obligations
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our services. Cookies are small text files stored on your device when you visit our website.
5.1 Types of Cookies We Use
- Essential cookies: Required for the website to function correctly. These cannot be disabled.
- Functional cookies: Remember your preferences and settings to improve your experience.
- Analytics cookies: Help us understand how visitors interact with our site so we can improve it.
- Marketing cookies: Used to deliver relevant content and measure the effectiveness of campaigns.
You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie preference centre. Disabling certain cookies may affect the functionality of our services.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with third parties only in the following circumstances:
6.1 Service Providers
We engage trusted third-party service providers who process data on our behalf under strict data processing agreements. These include hosting providers, payment processors, email delivery services, and analytics platforms.
6.2 Legal Requirements
We may disclose your data if required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority, or we transfer only to countries deemed to provide an adequate level of protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it.
Typical retention periods include:
- Account data: Retained for the duration of your account and up to 3 years after closure
- Transaction records: Retained for up to 7 years for financial compliance purposes
- Support correspondence: Retained for up to 2 years after the enquiry is resolved
- Analytics data: Retained in aggregated, anonymised form indefinitely
9. Your Rights Under the GDPR
If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary or where you withdraw consent.
- Right to restriction: You may request that we limit processing of your data in certain circumstances.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.
To exercise any of these rights, please contact us at support@bonusfront.life. We will respond within 30 days. We may need to verify your identity before processing your request.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include encryption in transit and at rest, access controls, regular security assessments, and staff training.
No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay where required by law.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. If you believe we have collected data from a minor, please contact us at support@bonusfront.life.
12. Third-Party Links
Our website may contain links to third-party websites. This policy applies only to bonusfront.life. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies before providing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on our website.
Your continued use of our services after any changes take effect constitutes your acknowledgement of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
Bonusfront
Email: support@bonusfront.life
Website: bonusfront.life