Privacy Policy

This Privacy Policy describes how Castille Media Ltd collects, uses, and protects your personal data when you visit lucky-boom.us.com. We are committed to protecting your privacy and handling your data in a transparent manner, in accordance with the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679.

1. Controller

The controller responsible for the processing of your personal data on this website is:

Castille Media Ltd
120 Triq ir-Rebha
SLM 3010 Sliema
Malta

Email: legal@lucky-boom.us.com

For any data protection related queries, you may contact our Data Protection Contact:

Nadia Camilleri
Email: privacy@lucky-boom.us.com

2. What we collect

We collect certain information when you interact with our website. This includes:

• Server Log Files: When you visit our website, our servers automatically record information that your browser sends. This may include your IP address, the date and time of your visit, the type of browser and operating system you use, and the referring URL (the website you visited before ours). This data helps us ensure the security and stability of our site.
• Consent Records: We maintain records of your consent for certain data processing activities, particularly in relation to cookies. This includes the date and time of consent, and the specific choices you made.
• Contact Form Data: If you use a contact form on our site to get in touch with us, we collect the information you provide, such as your name and email address, along with the content of your message. This data is used solely to respond to your enquiry.

3. Legal bases

We process your personal data based on the following legal grounds as outlined in Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a) GDPR): We rely on your explicit consent for the use of non-essential cookies and for processing data submitted via contact forms. You are free to withdraw your consent at any time, with the same ease as it was given.
• Legitimate Interests (Art. 6(1)(f) GDPR): We process server log files based on our legitimate interest in maintaining the operational security of our website, detecting technical issues, and ensuring the proper delivery of content. This processing is necessary for the effective functioning of our services and does not override your fundamental rights and freedoms.

4. Cookies and analytics

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

• Essential Cookies: Some cookies are strictly necessary for the operation of our website (e.g., for security or session management). These do not require your explicit consent.
• Non-Essential Cookies: For all other cookies, such as those used for analytics or tracking preferences, we will only deploy them after receiving your explicit consent. You can manage your cookie preferences at any time through our cookie consent tool.

We utilise analytics services to understand how visitors interact with our website, allowing us to improve its design and content. This involves the use of cookies to collect anonymised data about your usage patterns. You have the right to withdraw your consent for these cookies at any time, and the process for doing so will be as straightforward as providing it.

5. Recipients and transfers

We may share your personal data with certain third parties under specific circumstances:

• Hosting Providers: Our website is hosted by a third-party service provider. This provider may have access to server log files and other data necessary for the operation and maintenance of our website.
• Analytics Processors: We use third-party analytics services (e.g., Google Analytics) to help us understand website traffic and usage patterns. These providers process data on our behalf and are contractually bound to protect your data.

Any transfer of your personal data outside the European Economic Area (EEA) will only occur if appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or if the recipient country is deemed to provide an adequate level of data protection by the European Commission.

6. Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Server Log Data: Typically, server log files are retained for a short period, usually a few days to a few weeks, to troubleshoot issues and ensure security.
• Contact Form Data: Information submitted via contact forms is kept for the duration required to address your enquiry and for a reasonable period thereafter for administrative purposes.
• Consent Records: We retain records of your consent for as long as the relevant processing activity is ongoing and for a period thereafter to demonstrate compliance.

Once the retention period expires, your personal data will be securely deleted or anonymised.

7. Your rights under the GDPR

Under the GDPR, you have several rights regarding your personal data:

• Right of Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly when processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the Netherlands, the country where you reside, work, or where the alleged infringement took place.

To exercise any