Privacy Policy

1. Introduction

Mubboo (“we”, “us”, “our”, “Mubboo”) operates mubboo.uk. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy describes how we handle personal information collected through our website and AI assistant service. It also explains your rights under UK data protection law and how you can exercise them.

2. What Information We Collect

Personal information we may collect:

• Account information: name, email address (when you register)
• Usage data: search queries, pages visited, features used, device type, browser, IP address
• Voice data: audio is processed in real-time for voice commands via AWS speech services — audio is NOT permanently stored
• Location: city-level location via IP detection or your manual selection (used to show relevant local content)
• Cookies and similar technologies: session cookies, city preference cookie (mubboo-city), analytics cookies
• Transaction data: if you subscribe to Mubboo Plus, payment is processed by our third-party payment provider — we do not store credit card details

What we do NOT collect:

• We do not collect special category data (health, race, political opinions, religious beliefs) unless you voluntarily share it in a chat query
• We do not record or store voice audio beyond the real-time processing session
• We do not store credit card or bank account details

3. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Contract: to provide and personalise the Mubboo AI assistant service, manage your account and subscription
• Legitimate interests: to show relevant local deals, prices, and recommendations based on your city; to improve our service through anonymised, aggregated usage analytics
• Consent: to send you marketing communications (you can withdraw consent at any time)
• Legal obligation: to comply with legal obligations under the laws of England and Wales

We will NEVER:

• Sell your personal information to third parties
• Use your data for purposes unrelated to the Mubboo service
• Send you unsolicited marketing without your explicit consent

4. Affiliate Links and Third-Party Services

Mubboo earns commissions through affiliate links when you click through to retailer websites and make purchases (see our Affiliate Disclosure).

When you click an affiliate link, you leave mubboo.uk and are redirected to a third-party retailer website. That website has its own privacy policy which we encourage you to review.

We use the following third-party services:

• AWS (Amazon Web Services) — hosting, voice processing, data storage (London region, eu-west-2)
• Google Analytics — anonymised website usage analytics
• Affiliate networks (Awin, Amazon Associates UK, CJ Affiliate, Travelpayouts) — affiliate link tracking

These third-party services have their own privacy policies and may collect data independently.

5. Cookies

Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) as well as UK GDPR. We use the following cookies:

• Strictly necessary cookies: session management, authentication, city preference — these do not require consent under PECR
• Analytics cookies: Google Analytics (anonymised, no personally identifiable information) — set only with your consent
• We do NOT use advertising cookies or tracking pixels for ad targeting

You can manage cookies through your browser settings or our cookie consent banner. Disabling strictly necessary cookies may affect service functionality.

6. Data Storage and Security

• All data is stored on secure servers hosted by AWS in London, United Kingdom (eu-west-2 region)
• We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest
• Access to personal data is restricted to authorised personnel only
• While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure

7. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account deletion request
• Chat history: retained for the duration of your account (you can clear chat history at any time)
• Guest session data: automatically deleted after 7 days
• Voice audio: processed in real-time only, not permanently stored
• Analytics data: retained in anonymised, aggregated form

8. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data where there is no compelling reason for its continued processing
• Right to data portability: Request transfer of your personal data to another service provider in a structured, commonly used, machine-readable format
• Right to object: Object to processing of your personal data where we rely on legitimate interests as our lawful basis
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances
• Right to withdraw consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk if you are not satisfied with our response

To exercise any of these rights, contact us at privacy@mubboo.ai. We will respond within 30 days.

9. Children's Privacy

Mubboo is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly. Parents or guardians who believe their child has provided us with personal information should contact us at privacy@mubboo.ai.

10. International Data Transfers

Our primary servers are located in London, United Kingdom (AWS eu-west-2 region). Your data is stored and processed within the UK.

Where data is transferred outside the UK (for example, to third-party service providers), we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK Government.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated date. For material changes, we will notify registered users by email. Your continued use of Mubboo after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

13. Contact Us