This policy explains what personal information BootApp collects, why we collect it, how long we keep it, and your rights. We've written it in plain English. If anything is unclear, email hello@bootapp.uk.
Who we are
BootApp (bootapp.uk) is run by BootApp.uk ("we", "us"). We are responsible for your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can contact us at hello@bootapp.uk.
What we collect
- Your account: your name, email address and password. Your password is stored only in scrambled (hashed) form, so we can't see it. We also record when you joined, when you last visited, and whether you've confirmed your email address.
- Sign in with Google: if you choose it, Google sends us your name, email address and a Google account ID. We never see your Google password.
- Two-factor login: if you turn it on, we store the secret key that links your account to your authenticator app.
- Messages: anything you send through our contact form (your name, email, subject and message) and our replies.
- Newsletter choice: whether you've asked for news and offers by email, when, and where you made that choice.
- Security records: a log of actions such as signing up, logging in (including failed attempts), changing account details, and admin actions, with the IP address and approximate country they came from.
- Protection against abuse: a scrambled (hashed) version of your IP address, used to limit repeated log-in, sign-up and contact attempts.
- Website statistics: we use Cloudflare Web Analytics to count visits and see which pages are popular and how fast they load. It doesn't use cookies and doesn't identify you.
We don't collect payment details, and we don't use your information for advertising.
Why we use it, and our legal reasons
| What we do | Legal reason |
|---|---|
| Create and run your account, log you in, and send emails your account needs (confirming your email address, resetting your password) | To provide the service you signed up for (contract) |
| Reply to messages you send us | Our legitimate interest in answering enquiries |
| Send news and offers by email | Your consent, which you can withdraw at any time |
| Keep security records and limit repeated attempts | Our legitimate interest in keeping the site and your account secure |
| Count visits with anonymous statistics | Our legitimate interest in improving the site |
| Keep records the law requires, or respond to lawful requests | Legal obligation |
Cookies
We only use cookies that the site needs to work:
session: keeps you logged in. It lasts 30 days, or until you log out.g_oauth: only while you sign in with Google. It lasts up to 10 minutes and protects the sign-in from being tampered with.
We don't use advertising or tracking cookies, which is why there's no cookie banner. After a password reset, your browser briefly remembers your email address so it can fill in the log-in form; it's removed as soon as it's used.
Who we share it with
We don't sell your information. We use a small number of trusted companies to run the site. They act on our instructions and may only use your information to provide their service to us:
- Cloudflare: hosts the website and its database (stored in Western Europe), provides the anonymous website statistics, and forwards email sent to hello@bootapp.uk. It also provides the QR-code tool shown when you set up two-factor login.
- Resend: sends our emails (account emails and newsletters) from servers in Ireland.
- Google: provides "Sign in with Google" if you choose to use it, and hosts the inbox where messages to hello@bootapp.uk are delivered.
We may also share information if the law requires it, or to protect the rights and safety of our members and the site.
International transfers: some of these companies are based in the United States. Where your information is handled outside the UK, it is protected by recognised safeguards, such as UK adequacy regulations, the UK–US "data bridge" or standard contract clauses approved for UK data.
How long we keep it
- Your account: for as long as you have an account. When you delete it (or ask us to), we delete your account and everything linked to it, such as your messages, logins, two-factor settings and newsletter subscription.
- Security records: 90 days, then deleted automatically. They're kept for those 90 days even if your account is deleted, so we can investigate any misuse.
- Abuse-prevention records: up to one hour.
- Login sessions: 30 days at most. Email links expire after 48 hours (email confirmation) or 1 hour (password reset).
- Messages: as long as we need them to deal with your enquiry. You can ask us to delete them at any time.
- Newsletter: until you unsubscribe. We then keep a note that you've unsubscribed, so we don't email you again.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct it
- ask us to delete it
- object to, or ask us to limit, how we use it
- ask for your information in a format you can take elsewhere
- withdraw your consent to newsletters at any time
You can change your details and newsletter choice, or delete your account, yourself on your account page, and every newsletter has an unsubscribe link. For anything else, email hello@bootapp.uk. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
How we protect it
All connections to the site are encrypted (HTTPS). Passwords and login sessions are stored only in scrambled (hashed) form. We limit repeated log-in attempts, offer two-factor login, keep a security log, and only administrators can see members' details.
Children
BootApp is not intended for children under 13, and we don't knowingly collect information from them. If you think a child has given us their details, please contact us and we'll delete them.
Changes to this policy
If we change this policy, we'll update this page and the date at the top. If the changes are significant, we'll also let members know by email.
Contact
Email hello@bootapp.uk.