Last updated: 2 May 2026

This Privacy Policy explains how S4AMZ OÜ (trading as BoostAStore) collects, uses, and protects personal data of visitors and clients of boostastore.com. It is provided in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and the Estonian Personal Data Protection Act.

1. Data Controller

S4AMZ OÜ
Ahtri tn 12, 15551 Tallinn, Estonia
Estonian Business Register code: 17054684
VAT: EE102832192
Email: m@s4amz.com

2. Personal data we process

  • Contact information you submit (name, email, company, message) via contact forms, audit requests, and email signups
  • Technical data automatically collected when you browse the site (IP address, browser type, device type, referring URL, pages visited)
  • Marketing engagement data (email opens, link clicks, form interactions) when you subscribe to our communications
  • Cookies and tracking identifiers as described in our Cookie Policy

3. Purposes and legal bases for processing

  • Responding to enquiries and delivering services — legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  • Marketing communications and newsletters — legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time
  • Site analytics and performance measurement — legal basis: consent for non-essential cookies, legitimate interest for aggregated server logs (Art. 6(1)(f) GDPR)
  • Legal compliance (accounting, tax, fraud prevention) — legal basis: legal obligation (Art. 6(1)(c) GDPR)

4. Recipients and processors

We share personal data only with processors who provide services on our behalf and under data processing agreements. Current processors include:

  • HubSpot, Inc. (USA) — CRM and lead-capture forms (Leadin)
  • The Rocket Science Group LLC d/b/a Mailchimp (USA) — email marketing
  • Google LLC (USA) — Analytics, Tag Manager
  • Cloudflare, Inc. (USA) — CDN and DDoS protection
  • WebForge VPS / Telepoint (Bulgaria) — hosting

5. International transfers

Where processors are based outside the European Economic Area (EEA), transfers are protected by the European Commission’s Standard Contractual Clauses (SCCs) and/or adequacy decisions where applicable.

6. Retention

  • Contact-form submissions: up to 24 months from last interaction
  • Newsletter subscriber data: until you unsubscribe, plus a short suppression-list retention
  • Server logs: up to 14 days
  • Accounting and tax records: 7 years (statutory minimum under Estonian law)

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Request rectification of inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent for any consent-based processing at any time
  • Lodge a complaint with your local supervisory authority — for Estonian residents this is Andmekaitse Inspektsioon (aki.ee)

To exercise any of these rights, contact us at m@s4amz.com. We respond within 30 days.

8. Cookies

We use cookies and similar technologies. See our Cookie Policy for details and to manage your preferences.

9. Security

We apply appropriate technical and organisational measures (TLS encryption, access controls, processor due diligence) to protect personal data. No system is perfectly secure; if we become aware of a personal-data breach affecting your rights and freedoms, we will notify you and the supervisory authority as required by Articles 33-34 GDPR.

10. Changes

We may update this Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via the website or email where appropriate.

11. Contact

Questions about this Privacy Policy or our data practices: m@s4amz.com