Privacy Policy

1. Who we are

This Privacy Policy describes how BoozExchange and its affiliates ("we", "us", or "our") collect, use, store, and share personal information when you use our website, applications, and related services (together, the "Platform"). This includes interactions where you browse the Platform, create an account, purchase merchandise, use digital features, or connect third-party tools (such as social or publishing integrations operated under our brand). Our Terms of Service apply alongside this Policy.

2. Information we may collect

Depending on how you use the Platform, we may process:

• Account and profile data: name, email address, username, password or authentication credentials, preferences, and similar details you provide when registering or updating your profile.
• Transaction and support data: order details, shipping or billing address, payment-related references (payments are often processed by third-party processors; we typically do not store full payment card numbers), and messages you send to support.
• Usage and technical data: IP address, device and browser type, approximate location derived from IP, pages viewed, referring URLs, timestamps, and cookies or similar technologies (see section 7).
• Content you submit: text, images, or other materials you upload or send through the Platform (for example, profile content or communications), subject to our Terms and moderation practices.
• Third-party connected accounts: when you choose to connect services such as social networks or publishing tools (for example, to authorise posting to a channel you control), we may receive identifiers, tokens, or profile information that the third party shares with us as part of that connection, strictly as needed to provide the integration you request. Those services also process data under their own privacy policies.

3. How and why we use information

We use personal information to:

• Provide, operate, and improve the Platform and its features;
• Create and manage accounts, authenticate users, and secure our services;
• Process orders, payments (via processors), fulfilment, and related communications;
• Operate integrations you enable (for example, OAuth-based connections to social platforms for scheduling or publishing content you choose to post to accounts you control), in line with that platform's authorisation and our agreements with you;
• Respond to enquiries, enforce our Terms, and protect rights, safety, and security;
• Comply with legal obligations and defend legal claims where permitted;
• Send service-related notices and, where the law allows and you have not opted out, marketing about products or features you may find relevant.

Where UK or EU data protection law applies, we rely on appropriate legal bases such as performance of a contract, legitimate interests (for example, securing our services and understanding aggregate usage), consent where required (for example, certain cookies or marketing), and legal obligation.

4. Sharing and recipients

We may share personal information with:

• Service providers who assist us with hosting, analytics, email, security, payments, customer support, and similar functions, bound by contractual confidentiality and processing terms;
• Social and publishing platforms when you explicitly connect your account; those platforms process data under their own policies and authorisation screens;
• Professional advisers, law enforcement, or regulators when we believe disclosure is required by law or necessary to protect rights and safety;
• A successor entity in connection with a merger, acquisition, or asset sale, subject to applicable law and notice requirements.

We do not sell your personal information in the conventional sense of selling lists to data brokers. We may use aggregated or de-identified data that does not identify you for analytics or reporting.

5. International transfers

We and our providers may process data in the United Kingdom, the European Economic Area, the United States, and other countries. Where we transfer personal data from the UK or EEA to countries not deemed adequate, we use appropriate safeguards (such as standard contractual clauses) where required by applicable law.

6. Retention

We retain personal information for as long as needed to fulfil the purposes in this Policy, including legal, accounting, or reporting requirements, dispute resolution, and enforcement of agreements. Retention periods vary by data type; connected-platform tokens may be refreshed or removed when you disconnect an integration or close your account, subject to back-up and technical limitations.

7. Cookies and similar technologies

We use cookies and similar technologies to operate the Platform, remember preferences, measure performance, and improve user experience. Where required, we will obtain consent before non-essential cookies are set. You can control cookies through your browser settings; blocking some cookies may affect functionality.

8. Security

We implement technical and organisational measures designed to protect personal information against unauthorised access, loss, or alteration. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, or object to certain processing of your personal information, and to data portability or to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. We may need to verify your identity before responding.

10. Children

The Platform is not directed at children below the age of digital consent in their jurisdiction, and we do not knowingly collect personal information from them. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

11. Alcohol and regulated content

Where the Platform relates to alcohol, regulated products, or age-restricted promotions, we may use information to support lawful operation and compliance (for example, age gating or jurisdiction checks) where those features are offered. You are responsible for compliant use of any connected social accounts, including promotional rules on third-party platforms.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Where required by law, we will notify you of material changes through the Platform or other appropriate means.

13. Contact

For privacy-related questions or requests, contact us through the support or contact options provided on the Platform (for example, the contact or support channel linked from the site footer). You may also use official email addresses published on boozexchange.com or the live site when available.