Privacy Policy

1 Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our platform.

Information You Provide

Account Information: Name, email address, password, phone number, and profile details when you create an account.
Payment Information: Credit/debit card details, billing address, and transaction history processed through our secure payment provider (Stripe).
Communications: Messages, feedback, and support requests you send to us.
Newsletter: Your email address when you subscribe to our newsletter.

Information Collected Automatically

Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages visited, time spent on pages, click patterns, and referral sources.
Location Data: General geographic location based on your IP address.

2 How We Use Your Data

We use the information we collect for the following purposes:

To provide, maintain, and improve our services and platform.
To process transactions, send purchase confirmations, and deliver vouchers.
To create and manage your user account.
To send you promotional communications, newsletters, and deal alerts (with your consent).
To respond to your inquiries and provide customer support.
To detect and prevent fraud, abuse, and security incidents.
To analyze usage trends and improve user experience.
To comply with legal obligations and enforce our terms of service.

3 Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following parties:

Vendor Partners: We share relevant order information with the vendors whose deals you purchase, so they can fulfill your voucher.
Payment Processors: Stripe processes your payment information securely. We do not store full credit card numbers on our servers.
Service Providers: Third-party services that help us operate our platform (hosting, email delivery, analytics).
Legal Requirements: When required by law, regulation, or legal process, or to protect our rights and safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform.

Types of Cookies We Use

Essential Cookies: Required for the platform to function properly (authentication, session management, CSRF protection).
Functional Cookies: Remember your preferences such as language and locale settings.
Analytics Cookies: Help us understand how visitors interact with our platform (e.g., Google Analytics).
Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

5 Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for all data transmitted between your browser and our servers.
Encrypted storage of passwords using industry-standard hashing algorithms.
PCI-DSS compliant payment processing through Stripe.
Regular security audits and vulnerability assessments.
Access controls limiting employee access to personal data on a need-to-know basis.

6 Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and applicable Italian and Spanish data protection laws, you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
Right to Restriction: You can request that we limit how we process your data.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Object: You can object to processing of your data for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@bonusland.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or the relevant supervisory authority in your jurisdiction.

7 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Account Data: Retained for the duration of your active account plus 2 years after account deletion.
Transaction Data: Retained for 10 years to comply with Italian tax and accounting regulations.
Marketing Data: Retained until you unsubscribe or withdraw consent.
Analytics Data: Aggregated and anonymized data may be retained indefinitely.

Table of Contents