Legal
Privacy Policy
1. Who we are
BotxBot is a trading name of IRAS Ltd, a company registered in Malta (hereinafter "we", "us", or "our"). IRAS Ltd is the data controller for all personal data collected through this website.
We have not appointed a Data Protection Officer. For all data protection enquiries, please contact us at privacy@botxbot.store.
2. What data we collect
All personal data we hold about you is provided directly by you. We do not obtain personal data about you from any third-party source.
We collect only the data you actively provide to us:
- Email address: when you submit the "Notify me" form on this website, requesting to be notified when BotxBot opens.
We do not use tracking pixels, third-party analytics, advertising cookies, or any technology that identifies you without your knowledge. We do not collect browsing behaviour, device fingerprints, or any other passive data.
3. Why we collect it and our legal basis
We collect your email address for one purpose only: to send you a single notification when BotxBot opens. We will not send you newsletters, marketing sequences, or any other communications.
Our legal basis for processing your email address is consent under Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679 (GDPR). You provide this consent explicitly by ticking the consent checkbox before submitting the form. The checkbox is not pre-ticked; you must actively select it to provide consent.
You may withdraw your consent at any time by emailing privacy@botxbot.store. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal. For details of all your rights, including the right to lodge a complaint with the IDPC, see Section 7.
4. How long we keep your data
We will retain your email address until one of the following occurs, whichever is earliest:
- You withdraw your consent (we will delete your data within 30 days of your request).
- We have sent the opening notification email and 90 days have passed.
- BotxBot does not open and the project is wound down (we will delete all collected data).
5. Who we share your data with
We do not sell, rent, or trade your personal data to any third party.
We may share your email address with an email delivery service provider (such as a transactional email platform) solely for the purpose of sending the opening notification. Any such provider is bound by a data processing agreement and may only use your data as instructed by us.
We will never share your data with advertisers, data brokers, or marketing platforms.
6. Local Storage and Similar Technologies
This website does not use cookies. It uses one browser localStorage entry for the following purpose:
- bbx_cc (localStorage key): Stores your preference regarding this notice (dismissed or not). It contains no personal data, is not used for tracking or profiling, and is used solely to avoid displaying this notice on every visit. Duration: persistent until you clear your browser storage.
Because this localStorage entry contains no personal data, is not used for tracking or profiling, and performs a purely functional role for your benefit, no separate consent is required under Article 5(3) of the ePrivacy Directive.
We do not use analytics cookies, advertising cookies, or any third-party cookies or tracking technologies. No data is transmitted to third parties as a result of this localStorage entry.
7. Your rights under GDPR
As a data subject under the GDPR, you have the following rights:
- Right of access: You may request a copy of any personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate data.
- Right to erasure: You may ask us to delete your personal data at any time.
- Right to restriction: You may ask us to restrict how we process your data.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to withdraw consent: You may withdraw consent at any time with no penalty.
- Right to object: As our processing is based solely on your consent, you may exercise this right by withdrawing that consent (see above).
- Right not to be subject to automated decision-making: We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Malta, this is the Information and Data Protection Commissioner (IDPC).
To exercise any of these rights, contact us at privacy@botxbot.store. We will respond within one calendar month of receiving your request, as required by Article 12(3) of the GDPR. In complex cases we may extend this by a further two months and will notify you accordingly.
8. Data transfers
IRAS Ltd is based in Malta, which is an EU member state. Your data is processed within the EU/EEA. If we engage an email delivery provider headquartered outside the EEA, we will ensure appropriate safeguards are in place (such as Standard Contractual Clauses) and will update this policy accordingly.
9. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to collected email addresses is restricted to personnel who need it to send the opening notification.
10. Children
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted their data to us, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. If we make material changes, we will notify subscribers via the email address provided (where applicable).
12. Contact
For any privacy-related questions, requests, or complaints, please contact:
If you are not satisfied with our response, you have the right to contact the Information and Data Protection Commissioner (IDPC), the supervisory authority in Malta.