Boom
Privacy & Data Protection

Privacy Policy

This Privacy Policy explains how Boom Software Ltd collects, uses, stores, protects, and manages personal data in relation to our website and software development services.

1. Introduction

Boom Software Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy in accordance with UK GDPR.

2. What Data We Collect

We may collect and process:

  • Personal data, including name, email, and phone number
  • Client project data, where relevant to services
  • Technical data, including IP address, browser type, and usage data collected via analytics tools

3. How We Use Your Data

We use your data to:

  • Provide custom software and app development services
  • Communicate with clients and respond to enquiries
  • Improve our services and website, including through analytics
  • Meet legal and regulatory obligations

4. Legal Basis for Processing

We process personal data under:

  • Contractual necessity, to deliver services
  • Legitimate interests, for business operations and improvements
  • Consent, where required (for example, for non-essential cookies)
  • Legal obligations

5. Data Storage and Security

We use Google Firebase, a cloud platform provided by Google, to store and manage certain application and client data.

Data stored within Firebase:

  • Is encrypted in transit using HTTPS
  • Is encrypted at rest using industry-standard encryption

Enquiry and client data submitted via our website may also be stored in our self-hosted SuiteCRM system, hosted on infrastructure controlled by us in [insert hosting location — e.g. UK/EU]. Access is restricted to authorised staff, and appropriate technical and organisational security measures are applied.

We implement appropriate technical and organisational measures to protect your data from unauthorised access, alteration, or loss.

6. Data Sharing

We do not sell personal data. We may share data with:

  • Trusted third-party service providers, for example cloud hosting via Firebase
  • Analytics and tag management providers, for example Google Analytics and Google Tag Manager, to help us understand website usage
  • Legal or regulatory authorities if required

Our self-hosted SuiteCRM system is operated by us directly and is not shared with third parties.

7. International Transfers

Some data may be processed outside the UK via our service providers, including Google Firebase, Google Analytics, and Google Tag Manager, which may process data in the United States. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) are in place in line with UK GDPR requirements.

8. Data Retention

We retain personal data only as long as necessary for:

  • Delivering services
  • Legal, accounting, or reporting obligations

9. Your Rights

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner's Office (ICO)

10. Cookies

Our website uses cookies and similar technologies. We use Google Tag Manager to manage and deploy tracking tags on our site, including Google Analytics, which helps us understand how visitors use our site and improve it. Google Analytics may collect information such as your IP address, browser type, and browsing behaviour on our site.

Google Tag Manager itself does not collect personal data but controls which tags (such as Google Analytics) run on our website.

Non-essential cookies, including analytics cookies, are only set with your consent. You can manage your cookie preferences at any time via [our cookie consent tool / your browser settings], and you can find more detail on how Google uses this data at Google's own privacy policy.

11. Third-Party Services

Applications we develop, and our own website, may use third-party services such as Firebase, Google Analytics, and Google Tag Manager, which may process personal data on our behalf under their own privacy policies. Where we use self-hosted systems, such as SuiteCRM, for storing enquiry or client data, this data remains under our direct control and is not processed by an external third party.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

13. Contact Us

Boom Software Ltd

High Wycombe, Buckinghamshire, UK

Email: Hello@BoomSoftware.co.uk

Last updated: 2026