Privacy Policy
ToBoost Models & Talent Management
PRIVACY POLICY
Last updated: 11 November 2025
ABOUT THIS PRIVACY POLICY
The website www.toboost.com (the “Site”) is operated by ToBoost Agency (“we”, “us”, “our”), a company registered in Albania. Our offices are located at Bulevardi Dyrrah, Durrës 2001, Albania / Rruga Myslym Shyri, Tiranë, Albania.
We are committed to protecting your privacy and complying with our data protection obligations under Albanian data protection laws, including Law No. 9887/2008 on the Protection of Personal Data, as amended, and any other applicable local legislation (together, “Data Protection Law”).
When you interact with us or use the Site, ToBoost Agency acts as the data controller of your personal data. This means we are responsible for processing your personal data and determining how it is used. This privacy policy explains the types of personal data we may collect about you, the reasons for collecting it, how we use it, and your rights regarding that data. “Personal data” refers to any information that can identify an individual, and “processing” means any action we take with your personal data, including collecting, using, storing, sharing, and deleting it.
This policy was last updated on the date shown at the top. ToBoost Agency may update this policy at any time by posting a new version on the Site and will make reasonable efforts to inform you of any significant changes. You are encouraged to review the policy before using the Site, as any changes will take effect from the date they are posted.
CONTACT INFORMATION
If you have any questions or would like more information about our use of data or this policy, you can contact ToBoost Agency at models@toboost.com.
WHAT INFORMATION DO WE COLLECT?
We collect, store and use the types of personal data set out in the table at the end of this policy.
HOW WILL WE USE YOUR PERSONAL DATA?
Your personal data will be used by us for the purposes outlined in the table at the conclusion of this policy.
HOW DO WE SHARE YOUR PERSONAL DATA?
When sharing personal data, we comply with Data Protection Law. Certain personal data may be shared, when necessary, with employees, contractors, consultants, or advisors to support sales and other general business purposes. In addition, where necessary, your personal data may be shared with our group, associated, or affiliated companies, including ToBoost Agency, Albania, for internal administrative purposes. If the company or business is sold, transferred, or merged with another business, personal data may be shared with our advisers, a potential buyer, the buyer’s advisers, or the new owner to facilitate the process. We may also share aggregated and anonymized information and analytics about our customers with third parties. Before doing so, we will ensure that it cannot be used to identify you. In certain cases, sharing personal data may involve transferring it to countries outside Albania that have different data protection standards than those in Albania. When we transfer personal data outside Albania, we will ensure that adequate safeguards are in place to protect your privacy rights under Data Protection Law.
YOUR RIGHTS
We respect your privacy rights and will respond to any requests to access or manage your personal information in accordance with Data Protection Law. Depending on the reason we have your personal data, you have rights to access, correct, delete, restrict, or object to processing your data as described in this policy.
DATA RETENTION
We will retain your personal data only for as long as needed to fulfill our purposes. The specific retention periods are listed in the table at the end of this policy.
DATA PROTECTION PRINCIPLES
We process your personal data lawfully, fairly, and transparently; collect it for specific and legitimate purposes; ensure accuracy; and store it only as long as necessary, applying appropriate security measures against unauthorized or unlawful processing.
WHAT IS OUR LAWFUL BASIS FOR PROCESSING?
We will process personal data only when there is a lawful basis for doing so, such as consent, contract performance, legal obligation, vital interest, public interest, or legitimate interest.
TABLE OF PERSONAL INFORMATION WE USE
| Category of personal data | Purpose of processing | Lawful basis for processing | Retention period |
|---|---|---|---|
| Name and contact details | To deliver orders, provide updates, prevent fraud, and send marketing communications. | Contractual necessity / Legal compliance / Explicit consent | 3 years or until consent is withdrawn |
| Date of birth | To verify legal age for certain products. | Contractual / Legal obligation / Legitimate interest | 3 years since last log-in |
| Contact history | To provide customer service and staff training. | Contractual / Legitimate interest | 6 years since last log-in |
| Purchase history | To support returns, understand preferences. | Contractual / Consent | 3 years or until consent withdrawal |
| Browser, device & Site usage info | To enhance Site, prevent fraud, and set defaults. | Contractual / Legitimate interest | 3 years since last log-in |
| Survey, competition, and promotion responses | To manage surveys, competitions, or promotions. | Contractual / Legitimate interest | 6 years |
| Customer comments and product reviews | To improve services and manage claims. | Contractual / Legitimate interest | 6 years |
| Information generated via service use | For R&D and feature testing. | Contractual / Legitimate interest | 4 years |
| Cookies and similar technologies | To analyze usage and market trends. | Consent | 3 years or until consent withdrawal |
ToBoost Agency © 2025