1. Who Is Responsible (Controller)
Boosting.Pro Georgia LLC, is the controller of personal data processed via boosting.pro. We comply with the Law of Georgia on Personal Data Protection and, for users in the EU/EEA and UK, with the GDPR / UK GDPR where applicable. Privacy contact: [email protected].
2. Scope
This Policy covers the Site, orders, customer support channels, marketing communications, and applications from prospective contractors (“boosters”). It does not cover third-party sites we link to, or the games themselves.
You can browse the Site without registering or providing any personal data. In that case we process only the technical data described in the Cookie Policy, and non-essential tools run only according to your consent choices.
3. What We Collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | name/nickname, email, messenger handle (Discord/Telegram) | you |
| Order data | services purchased, game, character/server/region, order history, communications about the order | you / generated |
| Game Account Data (Piloted Services only) | login credentials for the specific game account, one-time codes you forward | you, after order assignment |
| Payment metadata | order amount/currency, payment status, crypto transaction ID, processor reference. We never receive or store card numbers; crypto payments are processed by external processors | payment processors |
| Technical | IP address, device/browser data, pages visited, referrers, cookie identifiers | automatic (see Cookie Policy) |
| Support & reviews | chat/email content, review text and rating | you |
| Booster applicants & contractors | application form data (games, experience, region, achievements proof), payout details, performance records | you |
| Verification data (exceptional cases only) | a photo/scan of a government ID, requested solely to verify account ownership in fraud investigations, account-recovery requests or payment disputes — never as a routine checkout step | you, on our request |
We do not knowingly collect data of persons under 18 and do not target them; the Services are 18+. If you believe a minor has provided us personal data, a parent or guardian can contact [email protected] and we will delete it.
4. Why We Process It (Purposes and Legal Bases)
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders, support | Contract (Art. 6(1)(b)) |
| Piloted access to your game account | Contract; explicit instruction within the order |
| Payments, fraud prevention, dispute resolution | Contract; legitimate interests; legal obligation |
| Service emails about your order | Contract |
| Marketing newsletter | Consent (opt-in; withdraw anytime via unsubscribe link) |
| Analytics, site improvement | Consent (cookies) / legitimate interests for aggregated, privacy-preserving analytics |
| Security, abuse prevention, logs | Legitimate interests |
| Accounting and tax records | Legal obligation |
| Contractor engagement and payouts | Contract; legal obligation |
| Automated scanning of order/support communications for spam, phishing, fraud and prohibited content | Legitimate interests |
| Identity verification in fraud, account-recovery or dispute cases (section 3) | Legitimate interests; legal obligation where applicable |
Where we rely on legitimate interests, we perform a balancing assessment (legitimate interests assessment): we verify that the purpose is genuine, that the processing is necessary for it, and that it does not override your rights and freedoms, applying safeguards such as data minimization and access restrictions. A summary of an assessment for a specific processing activity is available on request.
5. Game Account Data — Special Safeguards
Credentials for Piloted Services are: collected only after a contractor is assigned, via a designated secure channel (never at checkout); stored encrypted with access restricted to the assigned contractor and authorized operations staff; never used for anything beyond the ordered Service; deleted within [30] days of order completion (earlier on request, unless needed for an open dispute). We recommend changing your password after the Service. Forwarded one-time codes are not retained.
6. Who We Share Data With (Processors and Recipients)
We share personal data only as needed to run the Service, under data processing agreements where applicable:
- Hosting & infrastructure
- Payment processing
- Email delivery
- Contractors: the assigned booster receives the minimum order data needed (character, server, goals; credentials only for Piloted Services) under confidentiality obligations.
- Authorities: where required by law or to establish, exercise or defend legal claims.
Analytics, advertising and communication tools
These tools load only after your consent where required (see Cookie Policy) and can be switched off via “Cookie settings” at any time:
- [Google Analytics 4 (Google LLC) — web analytics; uses cookies to help us understand how visitors use the Site (pages, sessions, approximate region). Data is transmitted to Google; IP addresses are processed in truncated form. Details: Google’s privacy policy and the Google Analytics opt-out browser add-on.
- [Meta Pixel] (Meta Platforms) — measures the effectiveness of our ads by matching Site events to ad interactions via cookies. If enabled, this constitutes “sharing” for targeted advertising under some US state laws and an opt-out link will be provided; details and ad controls: Meta’s privacy policy.
- [Google Ads conversion tracking ] (Google LLC) — conversion measurement and remarketing, operated under Google Consent Mode v2 according to your choices.
- [OneSignal] (OneSignal, Inc.) — browser push notifications, only if you separately allow them in your browser; you can revoke the permission in browser settings at any time.
We do not sell personal data and do not share it for cross-context behavioral advertising [adjust if ad pixels are used — then disclose and honor opt-outs].
Current sub-processor list available on request at [email protected].
7. Retention
| Data | Period |
|---|---|
| Game Account Data (credentials) | [30] days after completion |
| Verification data (ID copies, section 3) | [30] days after the verification purpose is fulfilled |
| Order and transaction records | [6] years per Country tax/accounting requirements |
| Support correspondence | [24] months after last contact |
| Marketing consents / unsubscribes | until withdrawal + suppression-list record |
| Technical logs | [12] months |
| Contractor records | duration of engagement + [statutory period] |
8. Your Rights (EEA/UK and where similar laws apply)
Access; rectification; erasure; restriction; portability; objection (including to direct marketing — absolute); withdrawal of consent without affecting prior processing. Write to [email protected]; we respond within one month (extendable per law). You may lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge); EEA/UK users may also complain to their local supervisory authority.
9. US State Privacy Rights (California and similar states)
Residents of California and certain other states have rights to know/access, delete, correct, and to opt out of “sale”/”sharing” of personal information. We do not sell personal information [and do not “share” it for cross-context behavioral advertising — verify against pixel usage]. We honor opt-out preference signals (e.g., Global Privacy Control) where required. Categories collected are listed in section 3; we do not use or disclose sensitive personal information beyond permitted purposes. To exercise rights: [email protected]. We will not discriminate against you for exercising rights.
10. Cookies
See the separate Cookie Policy. Where required, non-essential cookies load only after consent via the cookie banner, which also lets you change choices later.
11. Security
TLS encryption in transit; encryption of credentials at rest; access controls and least-privilege; server hardening, firewalls and fail2ban; backups; logging of access to sensitive data; contractor NDAs. No method is 100% secure; we will notify you and authorities of personal data breaches where legally required.
Your part: your Site account is protected by your password — do not share it, avoid saving login data on shared devices, sign out after sessions on computers you do not control, and use a unique password (and 2FA where the game offers it) for your game accounts. We cannot guarantee the security of data you choose to share with third parties outside the Site.
12. Marketing Communications
We send marketing emails only with your consent (or to existing customers for similar services where law allows, always with a working unsubscribe). Subscribers from our pre-2023 list will be asked to re-confirm consent before receiving marketing.
13. Changes
We will post updates here with a new version date and, for material changes, notify via the Site [or email].
14. Contact
Boosting.Pro Georgia LLC, – [email protected]
