Privacy Policy

1. Introduction

BoBoHug ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the BoBoHug website at bobohug.com and the BoBoHug mobile application (the "Service").

This policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable European Union data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

BoBoHug
Email: support@bobohug.com

If you have any questions about this Privacy Policy or our data practices, you can contact us at the address above.

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Waitlist registration: email address;
• Contact form: name, email address, and message content.

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, and general location (country/region);
• Usage data: pages visited, time spent on pages, and referral source.

4. Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)): when you voluntarily submit your email to join our waitlist or send us a message via the contact form;
• Legitimate interest (Art. 6(1)(f)): for operating, securing, and improving our Service, and for fraud prevention;
• Legal obligation (Art. 6(1)(c)): where processing is necessary to comply with a legal obligation to which we are subject.

5. How We Use Your Data

We use your personal data to:

• Manage your waitlist registration and communicate product updates;
• Respond to your inquiries via the contact form;
• Operate, maintain, and improve our Service;
• Ensure the security and integrity of our Service;
• Comply with legal obligations.

6. Data Storage and Security

Your personal data is stored using Google Firebase, a cloud-based platform provided by Google LLC. Data may be processed in data centers within the European Economic Area (EEA) or in other jurisdictions where Google operates.

Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Waitlist data: until the product launches and you have been notified, or until you request deletion;
• Contact form data: for up to 12 months after your inquiry has been resolved, unless a longer retention period is required by law;
• Technical/usage data: for up to 26 months, in line with standard analytics retention periods.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): obtain confirmation of whether your data is being processed and request a copy;
• Right to rectification (Art. 16): request correction of inaccurate or incomplete personal data;
• Right to erasure (Art. 17): request deletion of your personal data ("right to be forgotten");
• Right to restriction (Art. 18): request restriction of processing under certain circumstances;
• Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format;
• Right to object (Art. 21): object to processing based on legitimate interests or direct marketing;
• Right to withdraw consent (Art. 7(3)): withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at support@bobohug.com. We will respond to your request within 30 days.

9. Third-Party Services

We use the following third-party services that may process your personal data:

• Google Firebase: for data storage and backend infrastructure. Google's privacy policy is available at policies.google.com/privacy;

We do not sell, rent, or trade your personal data to any third parties.

10. Cookies and Tracking

Our website may use strictly necessary cookies to ensure the basic functionality of the Service. These cookies do not require your consent under EU law as they are essential for the Service to operate.

We also use analytics services, such as Google Analytics, to understand how visitors interact with our Service. These analytics cookies are only set if you provide explicit consent via our cookie consent banner. You can withdraw your consent at any time by clearing your browser cookies.

11. Children's Privacy

Our Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Email: support@bobohug.com