Privacy Policy

1. General provisions

This Privacy Policy sets out how the personal data of users of the Boom VPN service (the "Service") is collected, used, stored and protected.

The controller of personal data is OPENTECH LTD, registration number HE 488287, registered address: Galilaiou 68, 3011 Limassol, Cyprus. Contact for questions about the processing of personal data: help@wpnsupport.com.

Personal data is processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the data protection law of the Republic of Cyprus.

By using the website https://boomvpn.online and the Boom VPN mobile applications, the User gives full and unconditional consent to this Policy. If the User does not agree with its terms, they should stop using the Service.

2. Sources and scope of information

Information about the User may be personal (relating to an identified or identifiable person) or anonymised (not linked to a specific person). Boom VPN processes the minimum amount of personal data necessary.

2.1. Personal data:

• the email address used to sign in, or the identifier provided by Sign in with Apple;
• the interface language;
• the account creation date;
• the subscription status.

2.2. Technical data:

• device type;
• application version;
• IP address;
• connection region (without precise location).

2.3. Boom VPN does not process or store:

• browsing history;
• DNS queries;
• the contents of internet traffic.

3. Purposes and legal bases for processing

3.1. Personal data is processed in order to:

• provide access to the Service and manage the subscription;
• provide technical support;
• ensure the stable operation and security of the Service.

3.2. Processing is carried out on the following legal bases (Article 6 GDPR):

• the User's consent — Article 6(1)(a);
• performance of the contract with the User (these Terms of Service) — Article 6(1)(b);
• compliance with the controller's legal obligations — Article 6(1)(c);
• the controller's legitimate interest in ensuring the security and operability of the Service — Article 6(1)(f).

4. Security and retention of data

4.1. The controller applies technical and organisational measures to protect personal data in accordance with Article 32 GDPR.

4.2. Personal data is retained for as long as the User uses the Service and is deleted at the User's request, unless applicable law requires otherwise.

5. Disclosure of data to third parties

Data may be disclosed to:

• payment providers;
• hosting providers;
• analytics services (in anonymised form).

Data is transferred outside the European Economic Area only where appropriate safeguards are in place as required by Chapter V GDPR (an adequacy decision, or standard contractual clauses).

Where the User signs in using Sign in with Apple, the relevant data is processed in accordance with Apple's own policy.

6. User rights

The User has the right to:

• obtain access to their personal data — Article 15 GDPR;
• request the correction of inaccurate data — Article 16 GDPR;
• request the erasure of data — Article 17 GDPR;
• request the restriction of processing — Article 18 GDPR;
• receive their data in a machine-readable format (data portability) — Article 20 GDPR;
• object to processing — Article 21 GDPR;
• withdraw previously given consent — Article 7 GDPR.

Requests are sent to help@wpnsupport.com. A response is provided within 30 calendar days of receipt of the request.

The User also has the right to lodge a complaint with the supervisory authority for data protection — the Office of the Commissioner for Personal Data Protection (Republic of Cyprus).

7. Final provisions

The terms of this Policy may be amended by the Administration unilaterally. The current version is published at https://boomvpn.online.