Privacy Policy

Effective date: 2025-11-06

1. Data Controller

Boost technologies, MB, company code 307115307, address Mokyklos g. 9-7, Mokolų k., LT-68461 Marijampolė, Lithuania.
Email: info@boostpowerbank.lt, tel. +370 640 60285.

2. Scope

This policy applies to the website boostpowerbank.lt and the mobile application “BOOST”, when providing powerbank rental services.

3. Data we process

• Account data: name, email, phone number, password hash.
• Rental events: station, powerbank/station ID, start/end time, rates, delays.
• Payments: transaction identifiers, pre-authorisations/deposits (card data is processed by the payment provider).
• Technical data: IP, device and app identifiers, OS, logs, diagnostics, crash reports.
• Location (if you allow): to find nearby stations and to record the rental location event (no background collection without permission).
• Marketing (optional): newsletters and/or push notifications – only with consent.
• Customer support: your requests, chat records (if in-app chat is used).

4. Purposes and legal bases

• Service delivery and payments – contract.
• Accounting and taxes – legal obligation.
• Security, fraud prevention, debt recovery, service improvement – legitimate interest (we perform an LIA).
• Marketing, non-essential cookies/SDKs – consent (you can withdraw at any time).

5. Recipients (processors/partners)

• Payments: [insert, e.g., Stripe / MakeCommerce].
• Hosting/data centres: [insert, e.g., AWS (EU region)].
• Email/SMS/push: [insert, e.g., MailerLite/Sendgrid, Firebase Cloud Messaging].
• Analytics/diagnostics: [insert, e.g., Google Analytics/Firebase/Amplitude, Sentry/Crashlytics].
• In-app support (if any): [insert, e.g., Intercom].

Data may be transferred outside the EEA; in such cases we apply Standard Contractual Clauses (SCCs) and other appropriate safeguards.

6. Retention

• Accounting and transaction data – 10 years.
• Rental event logs, security/fraud flags – 2–3 years.
• Customer support requests – 2 years.
• Analytics (if consented) – 14–26 months.
• Marketing consents – until withdrawal (we retain a short proof record of consent).
  If a dispute or investigation is ongoing, we may keep data longer until it ends.

7. Your rights

You have the right to access, rectify, erase, restrict processing, data portability, object to processing based on legitimate interests, and withdraw consent (this does not affect service delivery where consent is not required).
Submit requests via info@boostpowerbank.lt. We will respond within 1 month.
You may lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt.

8. Cookies and SDKs

Necessary cookies operate without consent. Statistics/marketing cookies and SDKs operate only with consent. Until consent, they are not loaded. You can change choices in the website’s “Cookie preferences” and in the app settings. A detailed inventory is provided in the “Cookies and SDK Policy.”

9. Security

We use TLS encryption in transit, access control (RBAC, MFA), log reviews, backups, least-privilege access for processors, and incident management procedures.

10. International transfers

Where providers are outside the EEA, we use SCCs; information on specific transfers is available on request.

11. Changes

We will update this page and show the effective date; for material changes we will notify you in the app and/or by email.

Contacts: info@boostpowerbank.lt, Mokyklos g. 9-7, Mokolų k., LT-68461 Marijampolė, Lithuania.