PRIVACY POLICY

Boomirang Pty Ltd ("Boomirang", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Boomirang platform at boomirang.com.

This policy is compliant with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, it also addresses obligations under the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area.

1. Information We Collect

Information you provide to us

• Account information: name, email address, and password when you create an account.
• Profile information: any optional profile details you choose to add.
• Communications: messages you send to us via email or contact forms.
• Content submissions: if you are a Creator, the content, metadata, and descriptions you upload to the Platform.

Information we collect automatically

• Watch history and progress: what you watch and how far through each title you have watched.
• Watchlist data: titles you have added to your Watchlist.
• Device and technical information: IP address, browser type, operating system, device identifiers, and referring URLs.
• Usage data: pages visited, features used, time and duration of visits, and interactions with content.
• Cookie data: see our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Boomirang streaming service.
• Personalise your experience, including content recommendations and resume-watching functionality.
• Create and manage your account.
• Send you service-related notifications (account confirmations, password resets).
• Send you optional marketing communications about new content or features (with your consent, and you may opt out at any time).
• Monitor and analyse usage to improve the Platform and content offerings.
• Enforce our Terms and Conditions and Content Policy.
• Comply with legal obligations under Australian law.
• Detect, investigate, and prevent fraudulent or illegal activity.

3. Legal Basis for Processing (GDPR)

For users in the EEA, our legal bases for processing personal data are:

• Contract performance: processing necessary to provide the streaming service you signed up for.
• Legitimate interests: analytics, security, and fraud prevention.
• Consent: marketing communications, optional cookies.
• Legal obligation: compliance with applicable laws.

4. Disclosure of Your Information

We do not sell your personal information. We may share your information with:

• Service providers: third-party vendors who assist us in operating the Platform (cloud hosting, email delivery, analytics). These providers are contractually bound to keep your information confidential and use it only for the services they provide to us.
• Legal authorities: where required by law, court order, or government request.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and subject to a different privacy policy.

5. Data Storage and Security

Your data is stored on secure servers operated by Neon (database) and Cloudflare (media storage). Both providers maintain industry-standard security certifications. Your data may be stored and processed in Australia or in overseas locations including the United States.

We implement technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Watch progress and usage data may be retained in anonymised, aggregated form for analytics purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information ("right to be forgotten").
• Portability: request your data in a structured, machine-readable format (GDPR).
• Objection: object to processing based on legitimate interests (GDPR).
• Withdrawal of consent: withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at hello@boomirang.com. We will respond within 30 days of receiving your request.

8. Children's Privacy

The Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@boomirang.com and we will delete it promptly.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Cookies

We use cookies and similar tracking technologies. For detailed information, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending an email to the address associated with your account. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

12. Complaints

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Act, you may lodge a complaint with us at hello@boomirang.com. If we are unable to resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Contact

For any privacy-related questions or to exercise your rights, please contact our Privacy Officer at:

Boomirang Pty Ltd — Privacy Officer
Brisbane, Queensland, Australia
Email: hello@boomirang.com