Effective Date / Last Updated: December 26, 2025
MEDIABOSS OÜ (“MEDIABOSS,” “we,” “our,” or “us”) operates websites (“Website(s)”) that allow eligible users in Canada to participate in promotional gift card giveaways (“Giveaways”) of gift cards purchased by us. This Privacy Policy (“Policy”) explains how we collect, use, store, share, and disclose personal information (“Personal Information”) when you use our Website or participate in any Giveaway.
Capitalized terms used but not defined here have the meaning given in our Terms & Conditions, which are incorporated by reference.
We aim to handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), which is built on principles such as accountability, limiting collection, safeguards, transparency, and providing individuals access to their personal information.
1. Who We Are (Organization & Accountability)
MEDIABOSS OÜ is a company registered in Estonia with the following details:
- Company name: MEDIABOSS OÜ
- Registration code: 16036448
- VAT No: EE102285244
- Registered address: Nisu tn 25-25, 10317 Tallinn, Estonia
MEDIABOSS acts as the organization responsible for Personal Information under its control. Under PIPEDA, organizations must be accountable for Personal Information and designate responsibility for compliance.
Privacy Contact:
Email: privacy@mediaboss.com
2. Acceptance of This Policy
By using our Website or participating in a Giveaway, you acknowledge that this Policy governs our collection, use, disclosure, and sharing of your Personal Information.
If you do not agree with this Policy, please do not use the Website or participate in any Giveaway.
3. Changes to This Policy
We may revise this Policy from time to time. If we make material changes, we may notify you by:
posting the updated Policy on the Website and updating the “Last Updated” date, and/or
sending additional notice where required by law.
Your continued use of the Website after changes become effective constitutes your acceptance of the updated Policy.
4. Canada-Only Participation + Age Requirement (19+)
Our Website and Giveaways are intended exclusively for residents of Canada who are 19 years of age or older. We do not knowingly collect Personal Information from individuals under 19.
If you believe a minor has provided Personal Information, please contact us at privacy@mediaboss.com so we can take appropriate action.
5. Categories of Personal Information We Collect
We may collect the following categories of Personal Information:
5.1 Identifiers & Contact Information
- full name
- email address
- mobile phone number
- postal address (if required for prize delivery or verification)
- IP address
- device identifiers
5.2 Eligibility & Entry Information
- age confirmation (19+)
- quiz responses and lead-form entries
- marketing preferences and consent records
5.3 Internet and Technical Data
- browsing activity on our Website
- browser type, device type, user agent data
- referral URLs
- general geolocation (not precise location)
5.4 Interaction & Consent Data
- records of consent for communications
- interaction history with emails, SMS messages, and Website pages
5.5 Inferences
We may create internal segments or inferred interest categories based on:
- engagement behavior
- Giveaway participation activity
- general interests expressed through quiz responses
We do not collect financial information for entry.
We do not request government-issued identification unless required for winner verification, fraud prevention, or eligibility confirmation.
6. How We Collect Personal Information
We collect Personal Information from the following sources:
6.1 Directly from You
When you:
- register for a Giveaway
- submit your contact details
- complete a quiz or lead form
- opt into marketing communications
- complete surveys or forms
- contact our support team
6.2 Automatically Through Website Technologies
Including:
- cookies
- tracking pixels
- analytics tools
- log files
6.3 From Service Providers
Such as:
- email service providers
- SMS delivery providers
- hosting and security vendors
- analytics platforms
6.4 From Business Partners (Where Applicable)
If you interact with external promotions or advertisements that direct you to our Website.
6.5 Combined and Aggregated Data
We may combine information from multiple sources to improve accuracy, fraud detection, and relevance.
7. Why We Collect and Use Personal Information (Purposes)
We collect and use Personal Information for the following purposes:
7.1 Giveaway Administration
- verifying eligibility (Canadian residency, age 19+, uniqueness of entry)
- confirming entry and participation status
- communicating draw details
- selecting and notifying winners
- delivering prizes
- preventing fraud, misuse, and prohibited activities
7.2 Website Functionality and Improvement
performance testing
analytics and reporting
user experience optimization
7.3 Marketing and Communications (With Consent)
Where permitted and where you have provided the required consent, we may send:
- promotional emails
- SMS marketing messages
- automated communications (where permitted by law)
- partner offers and third-party promotions
- PIPEDA requires that individuals understand the purposes for which Personal Information is collected, used, or disclosed, and emphasizes meaningful consent.
7.4 Legal, Compliance, and Security
- complying with applicable laws and lawful requests
- responding to requests from regulators or authorities
- protecting against fraud, abuse, or security incidents
- enforcing our Terms & Conditions
7.5 Business Purposes
- maintaining suppression lists (e.g., unsubscribes)
- internal analysis and reporting
- improving marketing relevance
- developing and improving services
8.1 Meaningful Consent
We seek consent at the time you provide Personal Information, including when you enter a Giveaway or opt into marketing. Under PIPEDA, consent should be meaningful, meaning you understand:
- what information is collected,
- for what purposes,
- and with whom it may be shared.
8.2 Withdrawing Consent
You may withdraw consent for marketing communications at any time (see Section 9).
However, withdrawing consent may affect our ability to:
- administer your Giveaway entry,
- verify eligibility,
- contact you if you are selected as a winner.
9. Marketing Messages (CASL Compliance)
Where we send commercial electronic messages (CEMs) such as promotional emails or SMS, we comply with Canada’s Anti-Spam Legislation (CASL), which generally requires:
- consent (express or implied, depending on the circumstances),
- identification of the sender,
- and an unsubscribe mechanism.
Unsubscribe / Opt-Out
You may unsubscribe at any time by:
- clicking “Unsubscribe” in marketing emails
- replying “STOP” (or following instructions) in SMS messages
- contacting us at privacy@mediaboss.com
We will process unsubscribe requests as required by applicable law.
10. How We Share Personal Information
We may share Personal Information with:
10.1 Service Providers (Processors)
Such as:
- email and SMS platforms
- hosting providers
- analytics providers
- customer support tools
- IT and cybersecurity vendors
These providers are permitted to process Personal Information only to perform services for us and must protect it appropriately.
10.2 Business Partners (Marketing, With Consent)
If you provide the required consent, we may share Personal Information with selected business partners for marketing and promotional communications.
10.3 Marketing and Advertising Vendors
To:
- display targeted advertisements
- measure campaign performance
- conduct remarketing
10.4 Compliance, Legal, and Safety
We may share Personal Information when necessary to:
comply with law or lawful requests
protect our rights, property, and safety
investigate suspected fraud, abuse, or security incidents
10.5 Corporate Transactions
If we undergo a merger, acquisition, reorganization, or sale of assets, Personal Information may be transferred as part of that transaction. We will provide notice when required.
We do not sell Personal Information for money.
We may share Personal Information for marketing purposes only where consent or another lawful basis exists.
11. International Transfers and Cross-Border Processing
Because MEDIABOSS OÜ is located in Estonia, your Personal Information may be stored or processed outside Canada, including in:
- Estonia (EU)
- EU/EEA data centers
- third-party server locations used by our service providers
PIPEDA allows cross-border transfers for processing, but the organization remains accountable for protecting Personal Information transferred to third parties.
When Personal Information is processed outside Canada, it may be subject to the laws of that jurisdiction and may be accessible to foreign authorities in accordance with local laws.
We take reasonable steps to ensure appropriate safeguards are in place for cross-border processing.
12. Data Retention
We retain Personal Information only as long as necessary for the purposes described in this Policy, including:
- operating and auditing Giveaways
- fraud prevention and security
- legal compliance and dispute resolution
- marketing purposes (unless you opt out)
Typical retention period: up to 6 years after your last interaction with us, unless a longer period is required or permitted by law.
We may anonymize or aggregate information where appropriate.
13. Security Measures
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against:
- loss or theft
- unauthorized access
- disclosure, copying, misuse, or modification
No method of transmission or storage is perfectly secure. However, we work to maintain safeguards appropriate to the sensitivity of the information.
14. What Happens If You Do Not Provide Information
If you choose not to provide required Personal Information:
- you may not be able to enter the Giveaway
- we may not be able to contact you if you win
- we may not be able to confirm eligibility or deliver prizes
- certain Website functionality may be limited
15. Your Rights (Access, Correction, Complaints)
Subject to applicable law, you may:
- request access to your Personal Information
- request correction of inaccurate or incomplete Personal Information
- ask questions about our privacy practices
- submit a privacy complaint
To request access or correction, contact us at privacy@mediaboss.com. We may require identity verification before responding.
PIPEDA includes principles around transparency and access to Personal Information held by organizations.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC).
16. Cookies and Tracking Technologies
We may use cookies, pixels, and similar technologies to:
- enable core Website functionality
- analyze performance and user behavior
- prevent fraud and abuse
- measure marketing effectiveness
You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.
17. Contact Us (Privacy Office)
For privacy-related concerns, requests, or complaints:
- Email: privacy@mediaboss.com
- Subject Line Recommendation: “Privacy Request – Canada”
We aim to respond within a reasonable timeframe and in accordance with applicable law.