Privacy Policy
Boom Bust Insider — Privacy Policy
Last updated: 23 September 2026
1. Who we are
Boom Bust Insider Ltd (“Boom Bust Insider”, “we”, “us” or “our”) is responsible for deciding how and why your personal information is used. For the processing described in this policy, we are the data controller, unless otherwise explained.
Legal entity: Boom Bust Insider Ltd
Company number: 13988455
Correspondence address: 21–23 Mossop Street, London SW3 2LY, United Kingdom
Website: https://boombustsecrets.com/
Email: [email protected]
This policy explains how we collect, use, share and protect personal information when you visit our website or landing pages, request content, subscribe to communications, contact us or purchase a product or service.
2. Personal information we collect
Depending on how you interact with us, we may collect:
Identity and contact information: your name, email address, telephone number and details submitted through our forms.
Communication information: enquiries, messages, preferences and correspondence.
Marketing information: your consent and opt-out records, subscription preferences and information about interactions with our emails, subject to consent where required.
Technical information: your IP address, browser, device, operating system, approximate location, referring website and cookie or similar identifiers.
Usage information: pages visited, links selected and interactions with our content and advertising.
Transaction information: purchase details, payment status and records of refunds. Stripe processes payment-card information, which we do not normally store.
Information you voluntarily provide: survey responses, event registrations and information submitted when requesting presentations, reports or other content.
Please do not submit sensitive or special-category personal information through our website unless we specifically request it and explain why it is needed.
Where information is necessary to fulfil an order or request, we will make this clear. If you do not provide it, we may be unable to provide the relevant service.
3. How we collect information
We collect information:
Directly from you when you complete a form, request content, subscribe, contact us or make a purchase.
Through our website, forms and customer-management platform, operated using GoHighLevel.
Through cookies, pixels and similar technologies, subject to consent where required.
From analytics and advertising providers, including Google and Meta, in accordance with your applicable choices.
From payment and other service providers, including Stripe.
4. Why we use your information
We use personal information only where we have an appropriate lawful basis under UK data protection law.
Responding to enquiries and delivering requested content
We use contact and communication information to answer enquiries and deliver presentations, reports or other content you request.
Depending on the request, our lawful basis is performing a contract, taking steps at your request before entering into a contract, or our legitimate interest in responding to enquiries and delivering requested information.
Providing products and services
We use identity, contact and transaction information to process purchases, provide services, maintain customer records and send essential service communications.
Our lawful bases are performing a contract and complying with legal obligations, including relevant accounting and tax requirements.
Sending marketing communications
Where required, we send promotional emails only with your active consent.
We may also use the UK “soft opt-in” where its conditions are met. This applies where we obtained your details during a sale or genuine negotiation for a sale, promote our own similar products or services, and offered a clear opportunity to opt out both when collecting your details and in every subsequent message.
Our lawful basis is consent or, where the soft opt-in applies, our legitimate interest in promoting our own similar products and services.
Merely visiting our website or accepting our Terms and Conditions does not constitute marketing consent. Requesting free content does not automatically mean that the soft opt-in applies.
You can unsubscribe at any time using the link in an email or by contacting [email protected].
Operating and securing our website
We use technical and usage information to operate the website, diagnose problems, maintain security and prevent misuse.
Our lawful basis is our legitimate interest in operating a secure and effective website. Where an activity involves optional analytics or other consent-dependent tracking, we obtain consent before carrying it out.
Analytics and advertising
With your consent, we may use analytics and advertising technologies to:
Measure website visits and interactions.
Understand campaign performance.
Improve our website and marketing.
Create or measure advertising audiences.
Display relevant advertisements.
These technologies may include Google Analytics, Google Ads and remarketing tools, the Meta Pixel, the Meta Conversions API, and tracking tools provided through GoHighLevel.
For the optional analytics and advertising activities described here, we rely on consent. We do not treat a refusal or withdrawal of consent as permission to continue the same activity under legitimate interests.
Server-side advertising tools, including the Meta Conversions API, are subject to applicable data protection requirements and your relevant consent choices.
Consent to website cookies does not automatically authorise separate uses, such as uploading your email address to an advertising platform to create an audience. Where we undertake such activities, we will provide appropriate information and obtain any consent required.
Processing payments
Stripe processes payments made through our website. We use transaction information to complete purchases, maintain financial records, issue refunds and prevent fraud.
Our lawful bases are performing a contract, complying with legal obligations and our legitimate interest in preventing fraud.
Stripe may act as an independent controller for some processing, as explained in its own privacy notice.
Legal and fraud-prevention purposes
We may use information to investigate misuse, establish or defend legal claims, and respond to lawful requests.
Our lawful bases are compliance with legal obligations and our legitimate interests in protecting our business, customers and legal rights.
5. Our legitimate interests
Where we rely on legitimate interests, we assess whether the processing is necessary and balance our interests against your rights and reasonable expectations.
These interests may include:
Operating and securing our website.
Responding to enquiries.
Managing customer relationships.
Promoting similar products or services where the soft opt-in applies.
Preventing fraud and misuse.
Establishing or defending legal rights.
You can object to processing based on legitimate interests. Your right to object to direct marketing is absolute.
6. Cookies and similar technologies
We use cookies, pixels and similar technologies. Some are necessary for the website to operate. Others support analytics, advertising and personalisation.
We do not activate non-essential analytics or advertising technologies until you give consent. Continuing to browse does not constitute consent.
Our cookie banner provides options to:
Accept all
Reject non-essential
Manage preferences
Rejecting non-essential technologies is as straightforward as accepting them. You can change or withdraw your choices through the Cookie Settings link on our website.
Our Cookie Policy explains the technologies used, their providers, purposes and durations.
Where email tracking requires consent, we obtain it before activating that tracking.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Who we share information with
Where necessary for the purposes described in this policy, we may share information with:
GoHighLevel: website hosting, forms, customer relationship management, automation and email delivery.
Google: analytics, advertising and remarketing.
Meta Platforms: Facebook and Instagram advertising, campaign measurement and audience services.
Stripe: payment processing, payment security and fraud prevention.
Professional advisers: including accountants, lawyers and insurers.
Public authorities: regulators, courts and law-enforcement bodies where disclosure is legally required.
Business transaction participants: prospective purchasers, investors or successors, and their advisers, where necessary for a financing, merger, reorganisation or sale, subject to appropriate confidentiality and data protection safeguards.
Providers acting as our processors may use information only under our instructions and must provide appropriate protections.
Google, Meta and Stripe may act as independent controllers for certain activities. Where joint-controller arrangements apply, the relevant allocation of responsibilities will be made available as required by law. You can contact us for further information about arrangements relevant to your information.
We do not sell personal information. We do share information with the advertising and service providers described above where the applicable legal conditions are met.
8. International transfers
Our providers, including GoHighLevel, Google, Meta and Stripe, may process personal information outside the United Kingdom.
Where required, we use recognised safeguards for international transfers. Depending on the recipient and destination, these may include:
Applicable UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to the EU Standard Contractual Clauses.
Another legally recognised transfer mechanism.
Where necessary, we assess the transfer and implement additional technical or organisational safeguards.
To request information about a particular transfer or a copy of the relevant safeguards, contact [email protected]. Copies may be redacted to protect confidential information.
9. How long we retain information
We retain personal information only for as long as reasonably necessary for its purpose, including applicable legal, accounting and reporting requirements.
Our normal retention periods are:
Enquiries and lead information: up to 24 months after the last meaningful interaction.
Marketing information: until you unsubscribe, withdraw consent or remain inactive for 24 months, subject to the separate retention of consent and suppression records.
Consent records: while we rely on consent and for a further period where necessary to demonstrate compliance or address legal claims.
Suppression records: minimal information retained for as long as necessary to respect your opt-out and avoid adding you back to marketing lists.
Customer and transaction records: normally six years after the end of the relevant financial year or customer relationship, depending on the record and applicable requirements.
Google Analytics information: up to 14 months, according to our configured retention settings.
Security and technical logs: normally up to 12 months.
We may retain relevant records for longer where necessary to comply with law or deal with a complaint, investigation or legal claim.
We may anonymise information so that it no longer identifies you. Such anonymised information may be retained for statistical or analytical purposes.
10. Your rights
Depending on the circumstances, you may have the right to:
Be informed about how your information is used.
Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your information.
Restrict processing.
Object to processing based on legitimate interests.
Object at any time to direct marketing, including related profiling.
Withdraw consent where processing relies on consent.
Receive certain information in a portable format.
Exercise applicable rights concerning solely automated decisions.
Complain to a data protection regulator.
Some rights are subject to conditions and legal exemptions.
To exercise your rights, email [email protected]. We may request information reasonably necessary to verify your identity.
We normally respond within one month. Where the law permits an extension, we will explain the reason and expected response time. Requests are normally handled free of charge.
Withdrawing consent does not affect the lawfulness of earlier processing. It does not prevent us from retaining information where a separate legal obligation or other valid basis requires it.
11. Complaints
If you have concerns about how we use your information, you can contact us at:
Email: [email protected]
Address: Boom Bust Insider Ltd, 21–23 Mossop Street, London SW3 2LY, United Kingdom
You may also complain directly to the Information Commissioner’s Office. You do not have to contact us first.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: https://ico.org.uk/
Telephone: 0303 123 1113
12. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
No online transmission or storage system is completely secure. Please take reasonable care when sending information online and protecting any account credentials.
This does not reduce our legal obligations to protect your information.
13. External websites
Our website may link to websites operated by other organisations. Their collection and use of information is governed by their own privacy notices.
Please review those notices before providing information to them.
14. Children
Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18.
If you believe a child has provided personal information to us, contact [email protected] so we can investigate and, where appropriate, delete it.
15. Automated decision-making and advertising audiences
We do not currently make decisions about you that produce legal or similarly significant effects using solely automated processing.
Subject to the information and consent requirements described above, advertising platforms may use information about interactions with our website or advertisements to create, measure or select audiences. This can involve profiling to predict interests and select relevant advertisements.
This activity does not result in a decision by us that produces legal or similarly significant effects for you. You can manage relevant website tracking through Cookie Settings and use the advertising controls provided by the relevant platform.
16. Changes to this policy
We may update this policy to reflect changes in our activities, providers or legal obligations. The current version will appear on this page with a revised update date.
Where a change materially affects how we use information, we will provide appropriate notice and obtain fresh consent where required.
17. Contact us
Boom Bust Insider Ltd
Company number: 13988455
21–23 Mossop Street
London SW3 2LY
United Kingdom
Email: [email protected]
Website: https://boombustsecrets.com/