BoostSpeed policies

Privacy & Cookies

What the store processes, why, and the choices available to you.

Draft updated . Version 2026-10-15.

On this page

About this store

BoostSpeed is currently an investor demonstration using Creativemark hosted checkout and a shared Stripe sandbox. No live charges are taken. Sample keys do not activate software, and sample README downloads are not software installers.

Information used by the store

The provisional operator below is the proposed data controller. The store processes checkout email, order references, products, amounts, currency, payment status and gateway references. Session data associates your browser with its cart, chosen currency and orders. IP addresses and request/security information may be processed by the web infrastructure and security controls.

Private delivery and administrative audit records record actions such as downloads and licence reveals. Licence-key stock is stored encrypted; this does not mean every order field or log is encrypted. The merchant app does not store payment-card numbers or security codes. Hosted checkout and Stripe handle payment details under the notices shown there.

Information comes from you, your browser, payment-status messages and store operations. Providing checkout email is needed for the checkout flow; without it an order cannot be submitted. Do not enter sensitive personal information or real card details into the investor demonstration.

Purposes and legal bases

For a paid order, necessary order handling, payment coordination, delivery and support rely on performing the contract or steps you request before it. Necessary statutory accounting and tax records rely on legal obligations. Proportionate security, fraud prevention, dispute handling and operating the demo rely on legitimate interests in protecting customers and the service, subject to balancing your rights. Demo participation is not a paid contract.

The store does not currently install GA4 browser tracking. An optional service-account reporting connection can read aggregate analytics reports from a configured property; it is not itself a browser tracker. Optional internal growth reviews use aggregate reports, not a customer-facing credit or eligibility score. The merchant app has no solely automated decision with legal or similarly significant effects; payment providers have separate controls.

Cookies and browser storage

The store uses a session cookie for requested cart, currency and private-order access, and a CSRF cookie to protect form submissions. They are not advertising or analytics cookies. Blocking them can prevent checkout or order access. Closing a browser may not clear cookies if it restores a previous session.

No optional browser analytics or advertising cookies are currently installed by this storefront. Hosted checkout may use its own essential payment and fraud-prevention technologies; review its notice separately. Non-essential tracking must not start without consent where the applicable rules require it.

Sharing, retention and international transfers

Necessary data goes to the Creativemark checkout service, Stripe and the hosting/infrastructure providers involved in running the store. Relevant records may be provided to a payment provider, card issuer, professional adviser or authority to resolve a dispute or meet a legal duty. This storefront has no advertising-data sale or cross-context advertising integration.

Retention is assessed by order/support needs, accounting duties, security investigations and legal-claim periods, including necessary backup handling. [Retention schedule and deletion arrangements to be confirmed]. [Hosting locations, recipients and international transfer safeguards to be confirmed]. These gaps remain unresolved in this draft; no particular transfer mechanism or automatic deletion schedule is represented as being in place.

UK and EU privacy rights

Depending on the applicable law and legal basis, you may request access, correction, deletion, restriction or portability. You have a right to object to processing based on legitimate interests, subject to applicable exceptions. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact the privacy contact below; proportionate identity checks may be needed. Legal retention duties can limit deletion.

You can complain to the UK Information Commissioner's Office (ICO) or, where EU law applies, the competent data-protection authority where you live or work. A complaint to us does not replace these rights.

Australia and the United States

Where Australian privacy law applies, you may request access or correction and raise a handling complaint with us, then the OAIC where appropriate. US rights vary by state and the law's applicability: they can include access, correction, deletion, portability, non-discrimination, opt-outs and appeals. Send a request to the privacy contact below. This draft does not assert that every state law applies to the operator or that unbuilt request tools exist.

Provisional operator & contact

The operator name is provisional and unverified. Missing details below are placeholders, not working contact channels or a verified company record.

Operator name
Creativemark (UK) Limited
Registered address
[Registered address to be confirmed]
Company registration number
[Company registration number to be confirmed]
Registration jurisdiction
[Registration jurisdiction to be confirmed]
Orders, cancellations and complaints
[Support contact to be confirmed]
Privacy requests
[Privacy contact to be confirmed]
Contact telephone
[Contact telephone to be confirmed]