Privacy Policy
This Privacy Policy explains how Boss Mode (“we”, “us”) handles personal information in connection with this website and the sale of Renovation Budget & Project Tracker.
1. Who we are
Controller / business trading as: Boss Mode
Business: Boss Mode (sole trader), Papua New Guinea
Location: Port Moresby, Papua New Guinea
Privacy contact: [email protected]
2. What we collect
- Contact data — name, email, phone and message content if you email or call us.
- Order data — processed primarily by Paddle as Merchant of Record. We may receive limited details needed for fulfilment and support (for example name, email, order ID and product purchased).
- Technical data — standard server or hosting logs if our host records them (for example IP address, browser type, pages requested).
- Cookies — this static marketing site does not set analytics cookies by default. When Paddle Checkout is connected, Paddle may set cookies required to process payment; see Paddle’s Privacy Policy. If we later add analytics, we will update this notice.
3. Why we process data
- Respond to enquiries — legitimate interests / steps prior to a contract.
- Fulfil digital downloads and provide support — performance of a contract.
- Comply with legal obligations.
- Secure our site and prevent abuse — legitimate interests.
4. Paddle as Merchant of Record
Purchases are processed by Paddle.com as Merchant of Record under Paddle’s Privacy Policy. We do not receive your full card number. Paddle handles payment data, tax invoicing and related buyer support.
5. Who we share data with
- Paddle (payments, invoicing, refunds, fraud prevention)
- Hosting provider (currently Cloudflare Pages / Cloudflare for the website and email routing)
- Email providers used to receive forwarded mail to [email protected]
- Professional advisers or authorities where required by law
We do not sell your personal information.
6. International transfers
We are based in Papua New Guinea and use service providers that may process data in other countries (including where Cloudflare and Paddle operate). Where UK/EEA data protection law requires safeguards for international transfers, we rely on the contractual and technical measures those providers offer (such as standard contractual clauses where applicable) together with our own reasonable precautions.
7. Retention
Contact emails: kept as needed to resolve your request, then deleted or archived as appropriate.
Order-related records we hold: kept as required for accounting and legal purposes.
Server logs: per host default retention.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing, and data portability, and to withdraw consent where processing is based on consent. UK/EEA residents may complain to a supervisory authority (for example the ICO in the UK). Email [email protected]. We aim to respond within one month where that timeframe applies under GDPR.
9. Security
We take reasonable measures to protect personal information (including using HTTPS on this site). No method of transmission or storage is completely secure.
10. Changes & contact
We may update this Policy by posting a new version on this page with a revised “Last updated” date. Questions: [email protected].