Privacy Policy

Effective date: October 5, 2026

This Privacy Policy explains how Boostology (“Boostology,” “we,” “us,” or “our”) collects, uses, shares and protects personal information when you visit theboostology.com (the “Site”), contact us, request a free audit, or work with us as a client.

Boostology is a website design, development and digital marketing agency. We build websites (mainly in Webflow, and also in WordPress), and we provide SEO and content writing, guest posting and link building, social media marketing, Meta (Facebook and Instagram) advertising, and graphic design and branding. We work with clients in the United States and other countries, and our team works remotely.

If you have a question about this policy, email info@theboostology.com.

1. Who we are

Boostology is led by Hamza Zaheer (CEO) and Nusrat Bashir (Co-Founder). For the personal information described in this policy, Boostology is the business responsible for deciding how that information is used. Under the EU and UK General Data Protection Regulation (GDPR), this makes us the “controller.”

Our contact details:

  • Email: info@theboostology.com
  • Mail: Boostology, 9558 112th Street, South Richmond Hill, NY 11419, USA
  • Phone: +1 (901) 262-1535 (USA) or +92 333-1601192 (Pakistan)

2. Information we collect

We try to collect only what we need to answer you, do the work, and run the Site.

Information you give us

  • Contact form: when you use the contact form on the Site, we collect your name, email address, company name, budget range and the message you write.
  • Free audit form: when you request a free audit, we collect your website URL and your email address.
  • Emails, calls and messages: if you email, call, text or message us, we receive your contact details and whatever you choose to share, such as project details, files and links.
  • Client information: if you become a client, we collect the details needed to deliver and bill the work. This can include your name, business name, billing address, email, phone number, invoice and payment records, project briefs, brand assets, content, and the access or login details you choose to share with us for platforms such as Webflow, WordPress, your hosting provider, Google Analytics, Google Search Console or Meta Business Suite.

Please do not send us sensitive personal information (such as health information, government ID numbers or financial account numbers) through the forms or by email. We do not need it.

Information collected automatically

When you visit the Site, some information is collected automatically by our hosting, security and analytics tools, and by cookies or similar technologies. This can include:

  • IP address and approximate location (city or region, based on IP address)
  • Browser type, device type and operating system
  • Pages you visit, the time spent on them, and the page or site that referred you
  • Clicks, scrolls and form submissions (as events, not the contents of what you type, except the forms you actually submit)
  • Date and time of your visit, and server and security logs

Analytics and advertising cookies are only set after you agree to them in our cookie banner, where consent is required. See Section 5.

Information from other sources

  • Public website data: when you request a free audit, we review the website you send us using publicly available information and standard SEO and performance tools. We do not access any private part of your site unless you give us access.
  • Marketplaces and referrals: if you contact or hire us through a freelance marketplace (such as Upwork) or are referred by someone, we receive the information that platform or person shares with us.
  • Social media: if you interact with our Facebook or Instagram pages, we may see your public profile name and the messages or comments you send. Those platforms handle that data under their own privacy policies.

3. How we use your information and our legal bases

Here is what we use personal information for. For visitors in the European Economic Area (EEA), the United Kingdom or Switzerland, we also name the legal basis we rely on under the GDPR.

  • To reply to your inquiry and send you a quote or proposal. Legal basis: steps you ask us to take before entering into a contract, and our legitimate interest in answering business inquiries.
  • To prepare and send your free audit. Legal basis: steps you asked us to take before a possible contract, and our legitimate interest in showing prospective clients how we can help.
  • To deliver services to clients, manage projects, communicate during the work, and provide support after launch. Legal basis: performance of a contract.
  • To send invoices, collect payment and keep accounting and tax records. Legal basis: performance of a contract and compliance with legal obligations.
  • To follow up after an inquiry or audit, for example to ask if you have questions or to share a relevant offer. We keep this limited, and you can ask us to stop at any time. Legal basis: our legitimate interest in following up on a request you made; where the law requires consent for marketing emails, we will ask for it.
  • To understand how visitors use the Site and improve it, using Google Analytics and Google Search Console. Legal basis: consent (for analytics cookies) and our legitimate interest in improving the Site (for aggregated Search Console data, which does not use cookies on your device).
  • To measure and improve our own advertising on Facebook and Instagram, if we use the Meta Pixel. Legal basis: consent.
  • To keep the Site secure, prevent spam and abuse, and fix technical problems. Legal basis: our legitimate interest in protecting the Site and our business.
  • To remember your cookie choices and accessibility settings. Legal basis: our legitimate interest in providing a working, accessible Site, and compliance with legal obligations around consent.
  • To comply with the law, respond to lawful requests, and establish or defend legal claims. Legal basis: compliance with legal obligations and our legitimate interests.

When we rely on legitimate interests, we have weighed our interests against your rights and believe the use is reasonable and expected. You can object at any time (see Section 8).

We do not use your personal information for automated decision-making that has legal or similarly significant effects on you. We do not sell lists of contacts.

4. How we use AI tools

We use AI tools to help with research, drafts and design work. A person on our team reviews everything before it goes to a client. We do not put your personal information or confidential client material into public AI tools that use inputs to train their models. If you would like us to avoid AI tools on your project, tell us and we will agree on that in writing.

5. Cookies and similar technologies

Cookies are small files stored in your browser. Similar technologies include local storage and tracking pixels. We use CookieYes to show a cookie banner and record your choices. Where the law requires consent (for example, for visitors in the EEA and UK), analytics and advertising cookies are blocked until you accept them. You can change your choice at any time using the cookie settings link or icon on the Site.

We group cookies into these categories:

  • Necessary: needed for the Site to work and be secure, and to remember your cookie choices. For example, CookieYes sets a cookie (usually named “cookieyes-consent”) that stores your consent settings for up to 12 months. Our security and caching tools may set technical cookies, mainly for logged-in site administrators.
  • Functional: remember your preferences. The Ally accessibility widget may store the settings you choose (such as text size or contrast) in your browser so they stay in place as you move between pages.
  • Analytics: Google Analytics uses cookies (such as “_ga” and “_ga_” followed by an ID) to count visits and see how people use the Site. These usually last up to 2 years. We use this information in aggregate form.
  • Advertising: if we use the Meta Pixel, it may set cookies (such as “_fbp,” usually for about 3 months) and send data about your visit to Meta so we can measure our ads and show ads to people who visited the Site.

The exact list of cookies may change as we update the Site. The CookieYes banner on the Site shows the current list.

You can also block or delete cookies in your browser settings. If you block necessary cookies, some parts of the Site may not work properly. You can learn more about Google’s practices at policies.google.com/technologies/partner-sites and opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout. You can manage ad preferences on Meta in your Facebook or Instagram account settings.

Global Privacy Control and Do Not Track

We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of the “sale” or “sharing” of your personal information for that browser, where state law requires it. There is no agreed industry standard for “Do Not Track” signals, so we do not respond to them separately, but you can always refuse non-necessary cookies in the banner.

6. Who we share information with

We share personal information only with the service providers we need to run the Site and our business, and only for the purposes in this policy. These providers process data under their own terms and privacy policies.

  • Hostinger: hosts the Site and our business email (info@theboostology.com). Form submissions, emails and server logs are stored on Hostinger systems.
  • WordPress and Elementor: the Site is built on WordPress with Elementor. Contact and audit form submissions are stored in our WordPress database and sent to our email inbox.
  • CookieYes: provides our cookie banner and keeps a record of consent choices.
  • Google (Google Analytics and Google Search Console): helps us understand Site traffic and search performance. Google may process data in the United States and other countries.
  • Meta Platforms (Meta Pixel), if used: helps us measure and improve our own Facebook and Instagram ads.
  • LiteSpeed Cache: speeds up the Site by caching pages on our hosting server. It runs on Hostinger and does not send your data to a separate company.
  • Ally accessibility widget: provides accessibility settings on the Site.
  • Site security tools (such as Wordfence and login protection plugins): help block attacks and spam. They may process IP addresses and request details for that purpose.
  • Project and design tools (such as Figma, Webflow and file-sharing or project management tools): used to deliver client work.
  • Payment and accounting providers: the bank, payment processor or invoicing tool named on your invoice, and our accountants or tax advisers.
  • Freelance marketplaces: if you work with us through a platform such as Upwork, we share information with that platform as needed to manage the contract and payment.
  • Trusted contractors: team members and vetted contractors who help with client projects, under confidentiality obligations.
  • Legal and safety: authorities, courts or advisers when the law requires it, or when needed to protect our rights, our clients, or the safety of others.
  • Business transfers: if Boostology is involved in a merger, sale or similar transaction, personal information may be transferred as part of that deal, and this policy will continue to apply to it.

We do not sell personal information for money. Under some US state laws (such as California’s), letting the Meta Pixel collect data on our Site for advertising may count as “sharing” for cross-context behavioral advertising, or as a “sale.” If we use the Meta Pixel, you can opt out by rejecting advertising cookies in the cookie banner, by using the “Do Not Sell or Share My Personal Information” option in our cookie settings where shown, or by turning on Global Privacy Control in your browser.

7. How long we keep information

We keep personal information only as long as we need it for the reasons in this policy, and then delete or anonymize it. As a general guide:

  • Contact and audit form inquiries that do not lead to a project: up to 24 months after our last contact, so we can follow up on the same conversation.
  • Client project files and communications: for the length of the project and up to 3 years after it ends, so we can support you, answer questions and handle warranty or follow-up work. You can ask us to delete project files sooner, unless we need to keep them for a legal reason.
  • Invoices, contracts and accounting records: up to 7 years after the end of the tax year they relate to, to meet tax and accounting requirements.
  • Login details or access you share for a project: we ask you to remove our access when the project ends, and we delete any credentials we hold when they are no longer needed.
  • Google Analytics data: we set retention to the shortest period that meets our needs (Google offers 2 or 14 months for detailed data). Aggregated reports may be kept longer.
  • Cookie consent records: up to 12 months, or as set in CookieYes.
  • Security and server logs: usually a few weeks to a few months, depending on our hosting and security settings.

8. Your privacy rights

You can contact us at info@theboostology.com at any time to ask what we hold about you or to make a request. You do not need to create an account.

Rights for US residents

Several US states, including California (under the CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others, give their residents privacy rights. Some of these laws only apply to businesses above certain size or revenue thresholds, and Boostology may not meet them. We still choose to honor the following requests from any US resident:

  • Right to know: ask what personal information we have collected about you, where it came from, why we use it, and who we share it with.
  • Right to access: ask for a copy of your personal information, in a portable format where possible.
  • Right to correct: ask us to fix inaccurate information.
  • Right to delete: ask us to delete your personal information, subject to legal exceptions (for example, records we must keep for taxes).
  • Right to opt out of sale, sharing and targeted advertising: tell us not to “sell” or “share” your information or use it for targeted ads. See Section 6 for how.
  • Right to limit use of sensitive personal information: we do not collect sensitive personal information to infer characteristics about you, so this does not normally apply.
  • Right to non-discrimination: we will not treat you differently, charge you more, or provide a lower level of service because you used your privacy rights.
  • Right to appeal: if we decline your request, you can appeal by replying to our decision or emailing info@theboostology.com with the subject “Privacy appeal.” We will respond within the time the law allows. If you are not satisfied, you may contact your state Attorney General.

In the last 12 months, we have collected the following categories of personal information described in the CCPA: identifiers (such as name, email address and IP address), commercial information (such as services requested and invoices), internet or network activity (such as pages viewed), approximate geolocation, and professional information (such as company name and job role). We collect these from the sources and for the purposes described in Sections 2 and 3, and disclose them to the categories of recipients in Section 6.

Rights for visitors in the EEA, UK and Switzerland

If the GDPR or a similar law applies to you, you have the right to:

  • Access the personal information we hold about you and get a copy
  • Correct inaccurate or incomplete information
  • Erase your information (the “right to be forgotten”) in certain cases
  • Restrict how we use your information in certain cases
  • Object to our use of your information based on legitimate interests, including for direct marketing (we will always stop direct marketing if you object)
  • Data portability: receive information you gave us in a structured, commonly used format, or have it sent to another company
  • Withdraw consent at any time, for example by changing your cookie settings. This does not affect anything we did before you withdrew it.
  • Lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first, so please contact us.

How to make a request

Email info@theboostology.com with the subject “Privacy request” and tell us which right you want to use. You can also write to us at our mailing address in Section 1 or call either phone number.

  • Verification: to protect you, we will ask you to confirm your identity, usually by replying from the email address we have on file. We will only use the information you give for verification to handle your request.
  • Authorized agents: you can have someone act for you. We will ask for proof that they have your permission, and we may still need to verify your identity directly.
  • Timing: we will confirm that we received your request within 10 business days and respond within 45 days (or within one month for GDPR requests). If we need more time, we will tell you why, as the law allows.
  • Cost: requests are free. We may charge a reasonable fee or decline requests that are clearly unfounded or excessive, as the law allows, and we will explain why.

9. International data transfers

Boostology is based in the United States, and our team works remotely, including from outside the United States (for example, Pakistan). Our service providers, such as Google, Meta and Hostinger, may store or process data in the United States and other countries. This means your information may be handled in countries with different data protection laws than where you live.

When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses included in our providers’ terms, or a provider’s certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where available. Team members who access personal information are bound by confidentiality obligations. You can contact us for more information about these safeguards.

10. Children’s privacy

The Site and our services are for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, email info@theboostology.com and we will delete it.

11. How we protect your information

We use reasonable technical and organizational measures to protect personal information, including:

  • HTTPS encryption on the Site
  • Security plugins, firewall rules and login protection on our WordPress site, and regular updates of WordPress, themes and plugins
  • Strong passwords and two-factor authentication on our key accounts where available
  • Access limited to team members who need it for their work
  • Asking clients to give us role-based or user-level access to their platforms (for example, adding us as a user in Webflow, WordPress, Google or Meta Business Suite) instead of sharing their main passwords
  • Removing access and deleting credentials when a project ends

No website, email or storage system is 100% secure, so we cannot guarantee absolute security. If we learn of a data breach that affects your personal information, we will notify you and any authorities as required by law.

12. Client data we handle for clients

When we build or manage a website, ads account or analytics setup for a client, we may have access to personal information that belongs to the client’s own customers or visitors (for example, form entries on the client’s site, or audience lists in a Meta ads account). In that case, the client decides how that data is used, and we act as the client’s service provider or “processor.” We use that data only to provide the services the client asked for, and as described in our agreement with the client. Questions about that data should go to the client first. Clients who need a data processing agreement can request one from us.

13. Links to other websites

The Site may link to other websites, such as our social media pages, client websites in our portfolio, or tools we mention. We are not responsible for the privacy practices of those sites. Please read their privacy policies.

14. Changes to this policy

We may update this policy when our services, tools or the law change. When we do, we will change the effective date at the top. If the changes are significant, we will make that clear on the Site or, for clients, let you know by email.

15. Contact us

If you have any questions, requests or complaints about this policy or your personal information, please contact us:

  • Email: info@theboostology.com (subject: “Privacy”)
  • Mail: Boostology, Attn: Hamza Zaheer, 9558 112th Street, South Richmond Hill, NY 11419, USA
  • Phone: +1 (901) 262-1535 or +92 333-1601192