1. Who we are

BRAND PASS, available at brandpass.pro, is operated by BIR BOA Ltd, a company registered in London, United Kingdom. In this policy, “we,” “us” and “our” refer to BIR BOA Ltd.

Our website provides information about selected financial products for the U.S. market and links to independent providers and comparison marketplaces. This policy explains how we handle personal information when you browse our website, use our contact form or communicate with us.

Privacy enquiries: contact@briboa.com. We act as the controller of personal information collected for our website and enquiries. This policy does not cover the independent websites of banks, lenders, insurers, marketplaces or other providers.

2. Information we collect

We collect information directly from you and through the technical services that operate the website. An IP address may indicate an approximate location; it is not the same as precise GPS location.

3. How we use information

We use personal information to:

• Operate, maintain and protect the website.
• Respond to enquiries, privacy requests and other communications.
• Resolve errors, prevent misuse and investigate suspected fraud or security incidents.
• Maintain appropriate business records and establish, exercise or defend legal claims.
• Comply with applicable legal obligations.

Contacting us does not itself subscribe you to marketing emails. If we introduce a newsletter or a new collection purpose, we will provide the relevant information and obtain consent where required.

4. Cookies and similar technologies

The website and its technical service providers may use cookies or similar technologies for functions such as security, session management and remembering choices. Cookies are small files stored by your browser.

You can manage or delete cookies through your browser settings. Blocking some cookies may affect website functionality. Browser settings apply to that browser and device and do not necessarily control tracking on third-party provider websites.

Nonessential analytics, advertising or remarketing technologies require appropriate disclosure and, where applicable, consent or opt-out controls. Any such technologies used on the website must be described in the applicable cookie notice and preference controls.

Affiliate tracking on a provider or network website is governed by that party’s notices and settings. Visiting a provider through a link may involve technologies outside our control.

5. Affiliate links and provider websites

Our pages contain links to financial product providers and comparison services. Some links may be affiliate links. If you follow an affiliate link and complete a qualifying action, we may receive a commission.

An affiliate link may contain a referral identifier that attributes a visit or transaction to BRAND PASS. The provider or affiliate network may collect device, browsing or transaction information under its own privacy policy. Where affiliate reporting is provided to us, it may show referral activity or commission information.

We do not operate the linked provider’s application process. Information you enter on a provider’s website is handled by that provider, including any identity, credit, income or financial information it requests. Review its privacy notice before supplying information.

An affiliate relationship is not, by itself, a determination that personal information is “sold” or “shared” under a privacy statute. The applicable treatment depends on the actual data practices. See the U.S. privacy rights section below.

6. When information is disclosed

We may disclose information to:

• Service providers: companies supporting website hosting, security, maintenance, contact-form delivery, email and professional advice, to the extent needed for those services.
• Authorities or other parties: where necessary to meet legal obligations, respond to lawful requests, protect rights and safety or address fraud and security incidents.
• Business transaction participants: advisers or a prospective buyer if a merger, acquisition or transfer is considered, subject to appropriate safeguards and legal requirements.
• Recipients you request: when you ask us to share information or otherwise authorize a disclosure.

A contact enquiry is not permission to submit a financial application on your behalf. Providers receiving information directly through their own websites act under their own privacy notices.

7. Retention and security

We retain information for as long as reasonably necessary for the purposes described in this policy. Relevant factors include the time needed to resolve an enquiry, maintain records, investigate abuse, comply with legal obligations and address disputes.

Contact records are reviewed in light of the enquiry and any ongoing need. Technical logs are retained according to operational and security needs. Backup copies may remain until the applicable backup cycle expires. We delete or de-identify information when it is no longer needed, subject to lawful retention requirements.

We use reasonable technical and organizational measures appropriate to the information handled. No website, email system or storage method can be guaranteed completely secure. Avoid sending sensitive information through a general contact form or ordinary email.

8. U.S. privacy rights

Depending on your state of residence, the law’s applicability to our business and applicable exceptions, you may have rights to access, correct or delete personal information, obtain a portable copy, or opt out of sale, certain sharing, targeted advertising or specified profiling.

California residents may have rights under the California Consumer Privacy Act, as amended, where that law applies, including rights to know, delete, correct, opt out of sale or sharing and limit certain uses of sensitive information. Other state laws provide different rights. Not every right applies in every situation.

To submit a request, email contact@briboa.com with the subject “Privacy Request,” identify your state of residence and explain the request. You may request access, correction or deletion even if you are uncertain which law applies.

We may request information reasonably needed to verify identity and locate relevant records. An authorized agent may need to provide evidence of authorization. We will respond within the period required by applicable law, subject to permitted extensions and exceptions, and will not unlawfully discriminate against you for exercising privacy rights.

If an applicable state law provides an appeal right, reply to our decision with the subject “Privacy Appeal.” We will explain the outcome and any further complaint route required by that law.

9. Privacy signals and opt-out requests

Browser “Do Not Track” signals and Global Privacy Control (GPC) are different mechanisms. A browser signal does not necessarily stop ordinary website delivery, security logging or processing needed to handle an enquiry.

Where applicable law requires recognition of a valid universal opt-out signal, including GPC, for covered sale, sharing or targeted advertising, that signal must be respected for the processing it covers. You can also contact us about an opt-out request at contact@briboa.com.

An opt-out on BRAND PASS does not control the separate practices of a provider you visit. Use that provider’s privacy controls as well. For information about GPC, visit Global Privacy Control.

10. UK operation and international processing

Although BRAND PASS focuses on the U.S. market, BIR BOA Ltd is based in the United Kingdom. Personal information may be processed in the UK and in other countries where relevant service providers operate.

Where UK data-protection law applies, our processing bases include legitimate interests in operating a secure website and answering enquiries, compliance with legal obligations and consent where required. Where processing is necessary to take steps at your request before a contract or to perform a contract, that basis may also apply.

Where required for an international transfer, we use an applicable adequacy arrangement or appropriate contractual safeguards. You may contact us for information about relevant safeguards.

Subject to applicable conditions, UK data-protection rights include access, correction, erasure, restriction, portability and objection. You can withdraw consent for consent-based processing without affecting earlier lawful processing. You may raise a concern with us or complain to the UK Information Commissioner’s Office.

11. Children’s privacy

BRAND PASS is intended for an adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our contact form.

If you believe a child under 13 has provided information to us, contact contact@briboa.com. We will take appropriate steps to investigate and remove the information where required. Age and eligibility requirements on linked financial websites are determined by those providers.

12. Changes to this policy

We may update this policy when our practices, services or legal requirements change. The “Last updated” date will show the latest revision. Where required, we will provide additional notice or obtain consent before applying a material change.

Use of the website does not waive your statutory privacy rights or substitute for consent where the law requires it.

13. Contact us

Include enough information for us to understand your enquiry and identify relevant records. Do not send passwords, full financial account details or other unnecessary sensitive information.