# Privacy Notice

Last updated: 2 September 2026

## 1. Who we are

Boom Bust Insider Ltd (“Boom Bust Insider”, “we”, “us” or “our”) is responsible for deciding how and why your personal information is used. Under UK data-protection law, we are the data controller.

Legal entity: Boom Bust Insider Ltd

Company number: 13988455

Correspondence address: 21–23 Mossop Street, London SW3 2LY, United Kingdom

Website: [boombustsecrets.com](https://boombustsecrets.com/)

Email: [email protected]

This notice explains what personal information we collect, why we use it, who we share it with, how long we retain it and the rights available to you.

## 2. Information we collect

Depending on how you interact with us, we may collect:

- Identity and contact information, including your name, email address, telephone number and information submitted through our forms.

- Communication information, including enquiries, messages, preferences and correspondence with us.

- Marketing information, including whether you have agreed to receive marketing and how you interact with our emails.

- Technical information, including your IP address, browser, device, operating system, approximate location, referring website and identifiers stored through cookies or similar technologies.

- Usage information, including pages visited, links selected, time spent on the website and interactions with our content and advertising.

- Transaction information, including records of purchases and payments. Payment-card information is processed by Stripe and is not normally stored by us.

- Information you provide voluntarily, including information submitted through surveys, event registrations or requests for content.

Please do not provide sensitive or special-category personal information through our website unless we specifically request it and explain why it is needed.

## 3. How we collect information

We collect personal information:

- directly from you when you complete a form, request a presentation, subscribe, contact us or purchase a product or service;

- automatically through cookies, pixels and similar technologies, subject to your consent where required;

- through our website, forms and customer-management platform operated using GoHighLevel;

- from advertising and analytics providers, including Meta and Google; and

- from payment and other service providers, including Stripe.

## 4. How and why we use your information

We process personal information only when we have a lawful basis to do so.

### Responding to enquiries and delivering requested content

We use your contact and communication information to respond to enquiries and deliver presentations, reports or other content you request.

Our lawful basis is taking steps at your request before entering into a contract, performing a contract, or our legitimate interest in responding to enquiries and operating our services.

### Providing products and services

We use identity, contact and transaction information to process purchases, provide services, maintain customer records and communicate with you about a transaction.

Our lawful basis is performing a contract with you and complying with our legal obligations.

### Sending marketing communications

Where required, we send promotional emails only when you have actively consented.

In limited circumstances, we may contact existing customers about our similar products or services where the UK “soft opt-in” applies. This applies only where we collected the contact details during a sale or genuine negotiation for a sale and provided a clear opportunity to opt out both when the details were collected and in every subsequent message.

Our lawful basis is consent or, where legally permitted, our legitimate interests in promoting similar products and services to existing customers.

You can unsubscribe at any time by using the link in an email or contacting **[email protected]*. Withdrawing consent does not affect processing carried out before withdrawal.

### Operating and improving our website

We use technical and usage information to maintain security, diagnose technical problems, understand website performance and improve our content and services.

Our lawful basis is our legitimate interest in operating a secure and effective website. Where this processing involves non-essential cookies or similar technologies, we rely on your consent.

### Analytics and advertising

With your consent, we may use analytics and advertising technologies to:

- measure website visits and interactions;

- understand campaign performance;

- improve our website and marketing;

- create or measure advertising audiences; and

- display relevant advertisements.

These technologies may include:

- Google Analytics;

- Google Ads and Google remarketing technologies;

- the Meta Pixel and/or Meta Conversions API; and

- tracking and reporting tools provided through GoHighLevel.

Our lawful basis for accessing or storing information on your device through non-essential cookies and similar technologies is consent. Where information obtained through those technologies constitutes personal information, our lawful basis for subsequent processing is consent or, where appropriate, our legitimate interests.

You can change or withdraw your choices through the Cookie Settings link on our website.

### Processing payments

Stripe processes payments made through our website. We use the resulting transaction information to complete purchases, maintain financial records, issue refunds and prevent fraud.

Our lawful basis is performing a contract with you, complying with legal obligations and our legitimate interests in preventing fraud.

Stripe processes payment information under its own privacy notice and may act as an independent data controller for some processing.

### Legal, security and fraud-prevention purposes

We may use personal information to protect our website, enforce our terms, prevent or investigate fraud, establish or defend legal claims and comply with lawful requests.

Our lawful basis is compliance with legal obligations and our legitimate interests in protecting our business, customers and legal rights.

## 5. Our legitimate interests

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations.

Our legitimate interests may include:

- operating and securing our website;

- responding to enquiries;

- managing customer relationships;

- improving our content and services;

- measuring the effectiveness of our services;

- preventing fraud and misuse; and

- establishing or defending legal rights.

You may object to processing based on legitimate interests as explained below.

## 6. Cookies and similar technologies

We use cookies, pixels and similar technologies. Some are necessary for the website to operate. Others support analytics, advertising and personalisation.

We do not activate non-essential analytics or advertising technologies until you provide consent through our cookie banner. Rejecting non-essential cookies must be as straightforward as accepting them.

Our cookie banner provides options to:

- Accept all

- Reject non-essential

- Manage preferences

Continuing to browse the website does not constitute consent.

Our separate Cookie Policy identifies the cookies and similar technologies we use, their providers, purposes and durations. You can withdraw consent at any time through the Cookie Settings link.

Withdrawing consent does not affect processing carried out before withdrawal.

## 7. Who we share information with

Where necessary, we may share personal information with:

- GoHighLevel, which provides our website hosting, forms, customer-relationship-management system, automation and email-delivery services;

- Google, which provides analytics, advertising and remarketing services;

- Meta Platforms, which provides Facebook and Instagram advertising, campaign measurement and audience services;

- Stripe, which processes payments and supports payment security and fraud prevention;

- professional advisers, including accountants, lawyers, insurers and consultants;

- regulators, courts, law-enforcement bodies and public authorities where disclosure is legally required; and

- a prospective purchaser, investor or successor in connection with a merger, financing, reorganisation or sale of all or part of our business.

Our principal service providers are:

- Website hosting: GoHighLevel

- Forms and CRM: GoHighLevel

- Email delivery and marketing automation: GoHighLevel

- Analytics: Google Analytics

- Advertising: Google Ads and Meta

- Payment processing: Stripe

Providers acting solely on our behalf may process personal information only under our instructions and must implement appropriate protections.

Google, Meta and Stripe may act as independent or joint controllers for certain activities. Their privacy notices explain how they use personal information for their own purposes.

We do not sell personal information.

## 8. International transfers

Some of our providers, including GoHighLevel, Google, Meta and Stripe, may process personal information outside the United Kingdom.

Where information is transferred to a country not covered by UK adequacy regulations, we require an appropriate legal safeguard where applicable. These safeguards may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another legally recognised transfer mechanism.

We also consider whether additional technical and organisational safeguards are necessary.

You may request more information about the safeguards used for a particular transfer by contacting **[email protected]*.

## 9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting and reporting requirements.

Unless a longer period is legally required or otherwise justified:

- enquiries and lead information are retained for up to 24 months after the last meaningful interaction;

- marketing information is retained until you unsubscribe, withdraw consent or remain inactive for 24 months;

- records demonstrating marketing consent are retained for as long as we rely on that consent and for an appropriate period afterwards to demonstrate compliance;

- minimal suppression information is retained after you unsubscribe so we can ensure that we do not contact you again;

- customer and transaction records are normally retained for six years after the end of the relevant financial year or customer relationship;

- Google Analytics information is retained for up to 14 months, subject to our configured Google Analytics settings; and

- security and technical logs are normally retained for up to 12 months, unless they are needed for an investigation or legal claim.

We may anonymise information so it can no longer identify you. Anonymised information may be retained for statistical and analytical purposes.

## 10. Your rights

Depending on the circumstances, you may have the right to:

- receive information about how we use your personal information;

- request access to the personal information we hold about you;

- ask us to correct inaccurate or incomplete information;

- ask us to delete your information;

- ask us to restrict how we use your information;

- object to processing based on legitimate interests;

- object at any time to direct marketing;

- withdraw consent at any time;

- receive certain information in a portable format; and

- complain to a data-protection regulator.

These rights are not absolute, and legal exemptions may apply.

To exercise a right, contact **[email protected]*. We may request information reasonably necessary to verify your identity. We normally respond within one month.

## 11. Complaints

Please contact us first if you have concerns about how we use your information:

Email: [email protected]

Address: Boom Bust Insider Ltd, 21–23 Mossop Street, London SW3 2LY, United Kingdom

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

United Kingdom

Website: [ico.org.uk](https://ico.org.uk/)

Telephone: 0303 123 1113

## 12. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

No online transmission or storage system is completely secure. You are responsible for taking reasonable care when transmitting information online and protecting any account credentials.

## 13. External links

Our website may contain links to websites operated by other organisations. We are not responsible for their content or privacy practices. You should review the privacy notice of each external website you visit.

## 14. Children

Our website and services are not directed at children under 18. We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact **[email protected]* so we can investigate and, where appropriate, delete it.

## 15. Automated decision-making

We do not currently make decisions that produce legal or similarly significant effects using solely automated processing.

We may use advertising platforms to create, measure or select advertising audiences. This activity does not result in a decision by us that produces legal or similarly significant effects for an individual.

## 16. Changes to this notice

We may update this notice to reflect changes in our activities, providers or legal obligations. The current version will be published on this page with a revised “Last updated” date.

If a change materially affects how we use personal information, we will provide an appropriate notice and seek fresh consent where required.

## 17. Contact us

Questions about this notice or our use of personal information should be sent to:

Boom Bust Insider Ltd

Company number: 13988455

21–23 Mossop Street

London SW3 2LY

United Kingdom

Email: [email protected]