PRIVACY POLICY

Last updated July 17, 2026

1. Who We Are

B-FACT d.o.o., registered number 081438343, Petrova 118, 10000 Zagreb, Croatia ("B-FACT", "we", "us" or "our") operates boostingfactory.com and is the controller of the personal data described in this Privacy Policy.

Privacy requests may be sent to [email protected].

2. Scope

This Policy applies to visitors, registered users, customers and people who contact our support team. Our paid services are intended only for persons aged 18 or older.

3. Personal Data We Collect

  • Account and contact data: email address, username, country and account settings.
  • Order and game data: the service purchased, game and platform identifiers, rank or progress information, order instructions and delivery records.
  • Account-access data: login credentials voluntarily provided where access is necessary to deliver a selected service.
  • Payment data: payment amount, currency, transaction identifier, payment status, billing country and limited payment or fraud metadata received from payment providers. We do not normally receive full payment-card details.
  • Communications: support chats, emails, order messages, complaints, cancellation requests and refund requests.
  • Technical and risk data: IP address, browser and device information, login and website activity, cookie identifiers, security events, fraud indicators and chargeback evidence.
  • Verification data: limited identity information or documents where reasonably necessary to investigate suspected fraud, unauthorized payments, account ownership concerns or a legal requirement.

We obtain this data directly from you, automatically from your device and use of the Website, and where relevant from payment, security or service-delivery providers.

4. How and Why We Use Personal Data

  • To create accounts, process orders, provide services, communicate with you, and handle cancellations and refunds - because this is necessary to perform our contract with you.
  • To process payments and maintain tax, accounting and transaction records - to perform our contract and comply with legal obligations.
  • To prevent fraud, secure the Website, investigate misuse, manage chargebacks and establish or defend legal claims - for our legitimate interests in protecting customers, the Company and our payment systems.
  • To send optional marketing and use non-essential analytics or advertising cookies - with consent or where otherwise permitted by applicable law.

We do not use personal data for unrelated purposes. Where information is required to create an account, process a payment or fulfil an order, we may be unable to provide the requested service if it is not supplied.

5. Who Receives Personal Data

We disclose personal data only where reasonably necessary to:

  • payment processors, banks and fraud-prevention providers;
  • approved independent service providers assigned to fulfil an order;
  • hosting, content-delivery, security, customer-support, email and other operational providers;
  • analytics or advertising providers where permitted by your cookie choices;
  • professional legal, accounting and tax advisers;
  • courts, regulators, law-enforcement bodies or other authorities where required by law; and
  • a genuine purchaser or successor in connection with a merger, acquisition or sale of the business.

An assigned service provider receives only the information reasonably needed to fulfil the relevant order. Account credentials, where required, are disclosed only to the assigned provider and authorized Company personnel.

We do not sell personal data.

6. International Transfers

Some recipients may process personal data outside the European Economic Area. Where required, we rely on an applicable adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer safeguard.

7. Retention

We keep personal data only for as long as necessary for the purpose for which it was collected:

  • account data is retained while the account remains active and afterwards only where needed for disputes, security or legal obligations;
  • order, support, fraud and chargeback records are retained for the relevant payment-dispute and legal-claim periods;
  • payment, invoice and accounting records are retained for the period required by applicable law;
  • identity-verification documents are deleted when the verification or investigation is complete, unless continued retention is reasonably required by law or for a legal claim;
  • marketing data is retained until consent is withdrawn or you opt out; and
  • cookie durations are shown in the cookie declaration.

When data is no longer required, we delete or anonymize it.

8. Security and Account Credentials

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration or disclosure. No online system is completely secure.

Customers should use unique credentials, provide account access only where required for the selected service, and change the relevant password after completion. Do not send unnecessary personal information through order messages.

9. Cookies

We use cookies and similar technologies necessary to operate and secure the Website. Non-essential analytics and advertising technologies are used only according to the choices available through our cookie-consent tool. You may change or withdraw those choices at any time through the cookie settings available on the Website.

10. Your Rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or portability of your personal data. You may object to processing based on legitimate interests and may withdraw consent at any time where processing is based on consent. You may always object to direct marketing.

To exercise a right, email [email protected]. We may request information reasonably necessary to verify your identity. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

We do not make decisions that produce legal or similarly significant effects solely by automated means.

11. Users Under 18

The Website and paid services are not intended for persons under 18. We do not knowingly permit persons under 18 to create accounts or purchase services. If we learn that an underage person has provided personal data, we will take reasonable steps to close the account and delete the data, subject to any legal retention requirement.

12. Changes and Contact

We may update this Policy when our processing practices or legal obligations change. The current version and its effective date will be posted on this page. Material changes may also be communicated through the Website or by email where appropriate.

Questions or privacy requests: [email protected].