Data Controller Information
For the purposes of applicable data protection laws, the Data Controller responsible for your personal information is:
- Legal Entity Name
- SOCIAL LEVEL LTD
- Company Number
- 14114113
- Jurisdiction
- England and Wales, United Kingdom
- Registered Address
- Unit Da2 Sutherland House, Sutherland Road, London, England, E17 6BU
- Privacy Enquiries
- [email protected]
- Customer Support
- [email protected]
Information We Collect
We collect minimal personal data required to process digital orders, maintain infrastructure security, and communicate with customers.
A. Information You Provide Directly
- Contact Data: Email address provided during checkout or support form submission.
- Target Delivery Data: Public social media account handles (e.g., @username) or direct public post/video URLs.
- Support Communications: Messages, order references, and correspondence sent to our support desk.
B. Information Collected Automatically
- Device & Technical Data: IP address, browser type, operating system, network host, and time zone settings.
- Usage & Analytics Data: Page views, navigation click paths, referral sources, and session duration.
- Error Logs: Technical diagnostic data collected during system errors or failed requests.
C. Payment Data
- Transaction Metadata: Payment method type (Card, Cryptocurrency, Wallet), payment status, transaction ID, date, and order total.
- Financial Data Security: All sensitive payment details (credit card numbers, CVC codes, bank credentials) are processed directly by PCI-DSS compliant third-party payment gateways. TokBoosting never stores or views raw credit card numbers.
D. What We Never Collect (Zero Credential Policy)
- Social Media Credentials: We never request, store, or process account passwords, multi-factor authentication (2FA) codes, or private recovery keys.
- Private Profile Data: We do not access private messages, personal photo galleries, or non-public profile information.
Lawful Bases and Purposes for Processing
We process personal data based on the following legal grounds:
| Purpose of Processing | Data Categories | Lawful Basis |
|---|---|---|
| Order Fulfillment | Target URLs, email, payment status | Performance of a Contract |
| Customer Support | Email, support ticket logs, order ID | Performance of a Contract / Legitimate Interest |
| Fraud Prevention & Chargeback Defense | Transaction metadata, IP address | Legitimate Interest / Legal Obligation |
| Website Analytics & Optimization | Device metadata, session clicks, cookies | Consent / Legitimate Interest |
| Legal & Tax Compliance | Billing records, transaction history | Legal Obligation |
Third-Party Data Processors & Service Providers
To operate our platform efficiently, we share limited data with trusted third-party service providers acting as Data Processors:
- Payment Gateways: Encrypted processing of card payments, crypto transactions, and digital wallets.
- Customer Support Platforms: HelpDesk and LiveChat software providers handling ticket communications.
- Analytics Providers: Google Tag Manager, Google Analytics 4, and Microsoft Clarity for user behavior analysis and performance reporting.
- Advertising & Marketing Attribution: Google Ads / DoubleClick network tags for advertising conversion verification.
- Infrastructure & Security: Cloudflare (CDN and DDoS protection) and Sentry (error tracking and system stability logging).
All Data Processors are required by contract to maintain security standards and are prohibited from using your data for independent marketing purposes.
Cookies and Tracking Technologies
TokBoosting uses cookies, web beacons, and analytical tags to remember session preferences, analyze traffic patterns, and measure ad campaign conversion performance.
- Essential Cookies: Required for core site security, session maintenance, and shopping cart functionality.
- Analytics Cookies: Help us measure traffic sources, browser types, and user site movement (e.g., GA4, Microsoft Clarity).
- Marketing Cookies: Track conversion success from digital ad campaigns (e.g., Google Ads).
You can manage cookies at any time through your web browser settings or the relevant provider's opt-out tools. Detailed information — including our current cookie inventory and the status of our on-site consent banner rollout — is available in our Cookie Policy.
International Data Transfers
As an international promotional platform operated by SOCIAL LEVEL LTD in the United Kingdom, your data may be transferred to and processed on secure cloud infrastructure located outside your home country or jurisdiction. When transferring personal data internationally, we ensure appropriate safeguards are implemented, including Standard Contractual Clauses (SCCs) and encrypted transport protocols (SSL/TLS).
Data Retention & Deletion
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Order Records & Target URLs: Retained for 12 months following order completion to maintain refill guarantees and customer support history.
- Billing & Tax Metadata: Retained for up to 6 years to comply with UK statutory accounting and corporate tax regulations (Companies Act 2006 and HMRC record-keeping requirements).
- Support Ticket Correspondence: Retained for 24 months to resolve recurring service requests or chargeback inquiries.
- Analytics Logs: Anonymized or aggregated technical data is stored according to standard retention cycles (e.g., 14 months for GA4).
Once retention periods expire, data is permanently deleted or anonymized.
Your Data Protection Rights
Depending on your region of residence (including the European Economic Area, United Kingdom, and California), you may hold the following statutory rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal accounting retention duties.
- Right to Restrict or Object: Limit or object to specific processing activities (such as analytics tracking).
- Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Revoke consent for non-essential cookies or direct marketing at any time.
To exercise any of these rights, contact our Data Protection Officer at [email protected].
Children's Privacy
Our Services are intended strictly for users who are at least 18 years of age (or the legal age of majority in their jurisdiction). TokBoosting does not knowingly collect or solicit personal data from individuals under 18. If we learn that we have inadvertently collected personal data from a minor, we will delete that information immediately.
Security Measures
TokBoosting employs multi-layered administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, alteration, or disclosure:
- SSL/TLS Encryption: All site traffic, data submissions, and payment routes operate under 256-bit SSL encryption.
- Zero Credential Exposure: By refusing to handle social media passwords, we eliminate risks associated with credential exposure.
- Restricted Access: Employee access to customer support logs and order data is strictly limited on a need-to-know basis.
Policy Updates & Contact Information
We reserve the right to update this Privacy Policy to reflect operational, legal, or regulatory changes. Updated versions will be published directly on this page.
For questions, privacy inquiries, or data protection requests, please contact us:
- Privacy Email
- [email protected]
- Support Email
- [email protected]
- Postal Address
- SOCIAL LEVEL LTD, Unit Da2 Sutherland House, Sutherland Road, London, England, E17 6BU
