Privacy Policy

Last Updated: November 13, 2025 1. Introduction 1.1 Important information and who we are Welcome to Boredom's Privacy and Data Protection Policy ("Privacy Policy"). At Boredom ("we", "us", or "our"), we are committed to protecting and respecting your privacy and Personal Data in compliance with the United Kingdom General Data Protection Regulation ("GDPR"), the Data Protection Act 2018, and all other mandatory laws and regulations of the United Kingdom. This Privacy Policy explains how we collect, process, and keep your data safe. It also explains your privacy rights, how the law protects you, and the obligations of our employees and partners when processing data. The individuals from which we may gather and use data include: • Users of the Boredom mobile app • Vendors and their representatives • Business contacts • Third parties involved in user verification, payments, or venue operations • Any other people that the platform interacts with or may need to contact This Privacy Policy applies to all employees, contractors, and staff members, and all Personal Data processed by Boredom at any time. 1.2 Who is Your Data Controller and Data Protection Officer Boredom is your Data Controller and is responsible for your Personal Data. Data Protection Officer (DPO): Full name: Usman Jaji Email address: Hello@boredomhq.com Postal address: (To be updated) You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to handle your concerns before you approach the ICO, so please contact us first. 1.3 Processing Data on Behalf of a Controller As a Data Controller, we may use employees or third-party service providers ("Processors") to process data on our behalf. Boredom and its Processors have responsibilities including: • Ensuring all Personal Data processing has a lawful basis • Ensuring confidentiality obligations are in place • Maintaining appropriate security measures • Keeping detailed records of processing activities • Reporting data breaches without undue delay • Cooperating with supervisory authorities • Ensuring all individuals handling data act only on our instructions 2. Legal Basis For Data Collection 2.1 Types of Data / Privacy Policy Scope "Personal Data" refers to any information that identifies an individual. At Boredom, we collect: **Profile/Identity Data:** Name, age, date of birth, gender. **Contact Data:** Phone number, email address, social media login details. **Location Data:** Real-time or approximate device location for meetups and venue discovery. **Activity Data:** App interactions, event participation, in-app chats (encrypted), vendor visits, and preferences. **Marketing and Communications Data:** Your preferences for notifications, updates, and promotions. **Aggregated Data:** App usage metrics, venue performance insights, event engagement statistics—non-identifiable unless combined with personal data. **Sensitive Personal Data (Special Categories):** Information on beliefs, orientation, or political opinions only when voluntarily provided (e.g., profile preferences). Enhanced legal basis applies for special categories. 2.2 Legal Basis We rely on the following legal grounds under GDPR: **Consent** **Contractual Obligations** **Legal Compliance** **Legitimate Interests** **Necessity (for any special category data)** 3. How We Use Your Personal Data We only use your data when permitted by law. Uses include: • Account creation and identity verification • Matching users to meetups and events • Recommending venues, activities, and other users • Location-based features • Payment processing and bill-splitting • Vendor insights, safety checks, and compliance • App improvement, analytics, and fraud prevention You will receive marketing updates unless you opt out. 4. Your Rights & How We Protect Your Data Users may: • Delete their account • Request access to their data • Request corrections • Restrict or object to processing • Withdraw consent Data is secured through encryption, access controls, and secure storage. 5. Your Data and Third Parties We may share data with: • Payment processors • Authentication providers • Vendors offering Boredom-hosted experiences • Analytics partners • Legal or regulatory authorities • Parties involved in business mergers/acquisitions 6. Data Retention We retain data only as long as necessary for the original purpose. Extended retention applies in cases of disputes or regulatory requirements. 7. Age Limit Users must be **18 or older** to use Boredom. 8. International Transfer Data may be stored or processed outside the UK, in compliance with GDPR transfer safeguards. 9. Policy Updates Changes will be reflected on this page, and continued use of the app indicates acceptance. 10. Interpretation All uses of the term "including" imply "not limited to".