Back to Legal

Privacy Policy

Privacy Policy

Effective Date: April 5, 2025 · Last Updated: April 5, 2025

Boltloop (“we”, “our”, “us”) is operated by Elevateo Co., a fully remote company with no fixed registered jurisdiction operating globally. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit store.boltloop.co and purchase our products.

We are committed to compliance with applicable privacy laws globally, including but not limited to the General Data Protection Regulation (GDPR) for users in the European Economic Area, the UK GDPR for users in the United Kingdom, the California Consumer Privacy Act (CCPA) for users in California, the Australian Privacy Act 1988, and the New Zealand Privacy Act 2020.

1. Information We Collect

a) Information you provide directly

  • Name and email address (at purchase and/or email subscription)
  • Payment information (processed by our payment provider — we do not store card details)
  • Any information submitted through contact forms

b) Information collected automatically

  • IP address and approximate location (country/region level)
  • Browser type, device type, operating system
  • Pages visited, time on page, referral source
  • Cookies and similar tracking technologies (see Section 6)

c) Information from third parties

Payment processors (Stripe, Gumroad, or equivalent) provide transaction confirmation but not full card details.

2. How We Use Your Information

  • Process and fulfil your purchases
  • Send product files and access credentials
  • Send transactional emails
  • Send marketing emails if subscribed and consented
  • Improve website and products
  • Comply with legal obligations
  • Prevent fraud

We do not sell, rent, or trade personal information.

3. Legal Basis for Processing (GDPR)

  • Contract — Processing necessary to fulfil a purchase or provide a requested service.
  • Consent — Where you have given clear consent for us to process your personal data for a specific purpose (e.g. marketing emails).
  • Legitimate interests — Processing necessary for our legitimate interests, such as improving our products and preventing fraud, where those interests are not overridden by your rights.
  • Legal obligation — Processing necessary to comply with a legal obligation.

4. Data Retention

  • Purchase records: 7 years (for tax and legal compliance)
  • Email subscriber data: Until unsubscription + 30 days
  • Analytics data: 26 months
  • Support correspondence: 3 years

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — the right to request a copy of the personal data we hold about you
  • Correction — the right to request correction of inaccurate data
  • Erasure — the right to request deletion of your personal data
  • Object / Restrict — the right to object to or restrict certain types of processing
  • Portability — the right to receive your data in a portable format
  • Withdraw consent — the right to withdraw consent at any time where processing is based on consent
  • Lodge a complaint — the right to lodge a complaint with a supervisory authority

To exercise any of these rights, email us at tanzeel@elevateoco.com. We will respond within 30 days.

6. Cookies

  • Essential cookies — Required for the website to function (e.g. session management).
  • Analytics cookies — Help us understand how visitors use the site.
  • Marketing cookies — Used to deliver relevant ads and track campaign performance (with consent).

You can control cookies through your browser settings or our consent banner.

7. Third-Party Services

  • Payment processing: Stripe, Gumroad
  • Hosting: Vercel

Each third-party service operates under their own privacy policy. We encourage you to review them.

8. International Transfers

Your data may be processed in countries outside your own, including the United States and the European Union. Where data is transferred outside of the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

9. Children's Privacy

Our products and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via our website and, where possible, by email.

11. Contact

If you have any questions about this Privacy Policy, please contact us: