Privacy Policy
Effective Date: 01/04/2025
Bootstrap Group Ltd (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our software-as-a-service platform (“Service”) and visit our website comus.io ("Website"). By using our Service and Website, you consent to the data practices described in this policy.
1. Information We Collect
We collect the following types of information:
Personal Information: When you sign up for our Service or contact us, we may collect personal information such as your name, email address, phone number, company name, job title, and billing information.
Usage Data: We automatically collect certain information when you interact with our Service and Website. This may include your IP address, browser type, operating system, pages visited, time spent on the site, and other technical details.
Cookies and Similar Technologies: Our Website uses cookies and similar technologies for standard traffic tracking and pay-per-click (PPC) advertising. See our separate Cookies Policy for more details.
2. Lawful Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases to process your personal data:
-
Performance of a Contract: To provide and manage our Service, including account management, billing, and customer support.
-
Legitimate Interests: To improve our Service, monitor website performance, conduct analytics, and protect against fraud or misuse.
-
Consent: To send marketing communications if you have opted in. You may withdraw consent at any time.
-
Legal Obligation: To comply with applicable laws, tax requirements, and regulatory obligations.
Each purpose of processing is linked to one or more of these legal bases as set out above.
3. How We Use Your Information
We use your information to:
-
Provide and maintain the Service (Performance of a Contract)
-
Communicate with you, including responding to enquiries and sending important service-related notices (Performance of a Contract/Legitimate Interests)
-
Send marketing communications where you have given consent (Consent)
-
Analyse and improve our Website and Service (Legitimate Interests)
-
Process payments and manage subscriptions (Performance of a Contract)
-
Comply with legal or regulatory obligations (Legal Obligation)
4. How We Share Your Information
We do not sell or rent your personal data. We may share your data with:
-
Service Providers and Partners – trusted third parties who help us operate our Service and Website, including:
-
Payment processors: e.g., Stripe
-
Hosting and infrastructure providers: e.g., Amazon Web Services (AWS)
-
Email and marketing platforms: e.g., Mailchimp (for opted-in communications only)
-
These providers are contractually required to protect your information and process it only in accordance with our instructions.
-
Legal and Regulatory Authorities – when required to comply with a legal obligation or lawful request (e.g., a court order or government authority).
5. Data Security
We implement appropriate technical and organisational measures, such as encryption, firewalls and secure server protocols, to safeguard your personal data. No data transmission or storage system can be guaranteed to be 100% secure.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including legal, accounting or reporting requirements. You can request deletion of your data at any time (see Section 8).
7. Your Rights
Under the UK GDPR, you have the right to:
-
Access, correct, or request deletion of your personal data
-
Restrict or object to processing in certain situations
-
Request data portability
-
Withdraw consent where processing is based on consent
To exercise these rights, please contact us at [[email protected]].
8. Marketing Communications
We only send marketing communications to users who have explicitly opted in to our approved mailing list. You may unsubscribe at any time by following the link in the email or contacting us directly.
9. International Data Transfers
Our servers are based in the UK, and we currently do not transfer your personal data outside the UK or European Economic Area (EEA). If this changes, we will ensure appropriate safeguards are in place.
10. Children and Young People’s Privacy
Our Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be notified via email or through a notice on our Website. The updated policy will be posted on this page with an updated effective date.
12. Contact Us
If you have any questions or wish to exercise your rights, please contact us at:
Bootstrap Group Ltd
Email: [[email protected]]
Address: Suite 1, The Oasthouse, 5 Mead Lane, Farnham, GU9 7DY