1. Who We Are and Scope of This Policy
1.1CarrotBoost.gg is operated as an online platform connecting League of Legends players with experienced coaches for personalized instruction, structured coaching programs, and account rank improvement carried out by verified players. Throughout this document, "we," "us," and "our" refer to CarrotBoost, and "you" refers to anyone visiting our website or using our services.
1.2This policy applies to the CarrotBoost.gg website, our booking and checkout system, our support channels including live chat and email, and any other service we operate under the CarrotBoost name.
1.3It explains what personal information we collect, why we collect it, who we share it with, and the choices you have. If any part of this policy is unclear, our support team is happy to walk through it with you directly rather than leave you guessing.
1.4We operate primarily online rather than out of a public storefront. Our full registered business details are available on request by emailing us, and we are glad to provide them to any customer, payment partner, or authority who asks.
2. Information We Collect
2.1We collect only what is genuinely needed to run our coaching and account services, process payments, and keep our platform secure. Here is what that includes in practice.
2.2Account details: your email address, a username you choose, and a password that we store using a one way cryptographic hash so that even we cannot read it back.
2.3Order and service details: the in game identifier and server you provide for a session, your current rank and the rank or goal you are working toward, your preferred coaching times, and any notes you leave for your coach.
2.4Payment information: transactions are processed by regulated third party payment providers such as Stripe and PayPal, both certified under the PCI DSS standard that governs how card data is handled online. We never see or store your full card number, its expiry date, or its security code. What reaches our systems is limited to a payment confirmation, an order reference, and the last four digits of a card where the processor makes those available for support purposes. Once your payment details reach that processor, their own privacy policy governs how they handle it, alongside ours.
2.5Support communications: anything you send us through our contact form, live chat, or email, along with whatever contact details you include so we can reply.
2.6Device and usage data: your IP address, browser and device type, general location inferred from your IP address, the pages you visit, and how long you spend on them. This helps us catch abuse, fix bugs, and understand which parts of the site are actually useful to people.
2.7Cookies: small pieces of data stored in your browser that keep you logged in and remember your preferences. Section 10 below covers this in detail.
2.8What we do not collect: we have no reason to ask for and do not knowingly collect special category data such as health information, biometric data, racial or ethnic origin, religious beliefs, or similar sensitive personal data. If you ever include something like that in a free text field, such as a support message, we treat it with the same restricted access as payment information rather than general account data.
3. Legal Basis for Processing
3.1If you are located in the European Economic Area or the United Kingdom, data protection law requires us to have a valid legal basis for each way we use your personal information. Ours break down as follows.
3.2Contractual necessity: processing your order details and payment information so we can actually deliver the coaching session or service you booked.
3.3Legitimate interest: using technical and usage data to keep the platform secure, prevent fraud, and understand how our services are used, weighed against your right to privacy.
3.4Consent: sending marketing emails or using non essential cookies, both of which you can withdraw at any time through the methods described later in this policy.
3.5Legal obligation: retaining certain financial records because tax and accounting law in the jurisdictions we operate in requires it.
4. How We Use Your Information
4.1We use the information described above to:
4.2Create and manage your account, and let you book, reschedule, or review coaching sessions and account services.
4.3Match you with a coach or account specialist whose rank, role, and availability fit what you are looking for.
4.4Process payments, issue refunds where applicable, and prevent fraudulent or chargeback abuse.
4.5Respond to support requests and keep you updated about anything affecting your order.
4.6Improve our services based on real patterns in how the site is used, not assumptions.
4.7Meet legal and tax obligations, and enforce our Terms of Service where necessary to protect our users and our business.
4.8Send you service related emails, such as order confirmations, which are not optional since they are necessary to deliver what you purchased. Marketing emails are separate and only sent with your consent, and you can unsubscribe at any point.
5. How We Share Your Information
5.1We do not sell your personal information, and we never share it with anyone for their own marketing purposes.
5.2We do share limited information in these specific situations.
5.3With your coach or account specialist: only the in game identifier, server, and order notes needed to actually carry out your session or service. They never receive your email address, your payment details, or your account password.
5.4With service providers we rely on to run the business: payment processors, cloud hosting providers, and customer support tools, each bound by contracts that limit what they can do with your data.
5.5For legal reasons: if we are required to disclose information by law, regulation, court order, or a legitimate request from a government authority, or if disclosure is necessary to protect someone's safety or our legal rights.
5.6In a business transfer: if CarrotBoost is ever acquired, merged, or sells its assets, your information may transfer as part of that transaction, under the same protections described in this policy unless you are notified otherwise.
6. International Data Transfers
6.1Our team, our coaches, and the service providers we rely on are located in different countries. That means your information may be processed outside the country you live in, including outside the European Economic Area. Where that happens, we rely on recognized safeguards such as Standard Contractual Clauses, or we work only with providers that maintain their own equivalent data protection commitments.
6.2If you are contacting us from the European Economic Area or the United Kingdom about how your data is transferred internationally, direct that request to the email address in Section 17 and we will route it to whoever is responsible for answering it, appointing a formal representative if our size and processing activities ever require one under local law.
7. Data Retention
7.1We keep personal information only for as long as it is genuinely needed for the purposes explained in this policy, or as long as the law requires.
7.2Account data stays active for as long as your account exists. If you close your account, we delete or anonymize your personal data within 90 days, except where a longer retention period is required by law.
7.3Financial and order records connected to a transaction are kept for up to 7 years, which matches standard tax and accounting requirements in most jurisdictions we operate in.
7.4Support conversations are generally kept for up to 2 years to help us maintain consistent service quality, unless you ask us to delete them sooner and no legal reason requires us to keep them.
8. Data Security
8.1We take reasonable, industry standard steps to protect your information. All data sent between your browser and our servers travels over TLS encryption. Passwords are hashed using a modern, salted hashing algorithm rather than stored in plain text.
8.2Internal access to personal data is limited to staff who genuinely need it to do their job, and we practice data minimization, meaning we simply do not collect a field if we cannot point to a real reason we need it.
8.3We also run regular security audits and vulnerability checks on our own systems, and we anonymize personal data in our internal reporting wherever the underlying purpose does not actually require it to be identifiable.
8.4No system connected to the internet can be made completely immune to every possible risk, and we do not claim otherwise. If a breach ever occurs that affects your personal information, we will notify affected users and the relevant authorities without undue delay, and within 72 hours of becoming aware of it where GDPR or a similar law requires that specific timeline.
9. Your Privacy Rights
9.1Depending on where you live, you may have some or all of the following rights over your personal data.
9.2Access: ask us for a copy of the personal information we hold about you.
9.3Correction: ask us to fix information that is inaccurate or incomplete.
9.4Deletion: ask us to delete your personal data, subject to legal exceptions such as financial recordkeeping requirements.
9.5Restriction: ask us to limit how we use your data in specific circumstances.
9.6Portability: request your data in a structured, commonly used format so you can transfer it elsewhere.
9.7Objection: object to processing based on legitimate interest, including for direct marketing.
9.8Withdrawing consent: where processing is based on your consent, withdraw it at any time without affecting anything we did before that point.
9.9If you are a California resident, the CCPA gives you the specific right to know what categories of personal information we have collected about you, to request deletion of that information, and to opt out of any sale or sharing of it. We do not sell personal information, so there is nothing to opt out of on that front, but the request channel below covers this right the same as any other.
9.10To use any of these rights, email us at Contact@CarrotBoost.gg. We will confirm your identity where necessary and respond within 30 days, or sooner where local law requires a faster response. If you are not satisfied with how we handle your request, you also have the right to lodge a complaint with your local data protection authority.
11. Automated Decision Making
11.1We do not use fully automated systems to make decisions that produce legal or similarly significant effects about you, such as automatically closing an account or denying a refund without human review. Fraud detection tools may flag an order for closer review, but a person always makes the final call.
11.2We also do not use your personal information to train artificial intelligence or machine learning models, ours or anyone else's. If that ever changes, we will update this policy first and give you a way to opt out before it happens, not after.
12. Children's Privacy
12.1Age requirements for our services follow the strictest rule that applies to you. In the United States, we do not knowingly collect personal information from anyone under 13, in line with COPPA. In the European Economic Area and the United Kingdom, our default cutoff is 16, matching the standard set by GDPR, though a small number of member states set it lower by local law.
12.2If you believe a child has provided us with personal data, contact us at Contact@CarrotBoost.gg and we will remove it promptly.
13. Reviews and User Submitted Content
13.1If you submit a review, testimonial, or similar content for us to publish on our website or social media, you are agreeing that it may be shown publicly, edited lightly for length or clarity, and attributed to the name or username you submitted it under.
13.2You can ask us to remove content you submitted at any time by contacting us, and we will take it down unless there is a legitimate reason, such as an active dispute, to keep a record of it.
14. Third-Party Links and Services
14.1Our website links to third party services such as Discord, payment processors, and game related resources. Once you leave our site through one of these links, this policy no longer applies. We encourage you to read the privacy policy of any third party site before providing them with personal information, since we do not control and are not responsible for their practices.
15. Independence From Game Publishers
15.1CarrotBoost is an independent coaching and gaming services provider. We are not affiliated with, sponsored by, or endorsed by Riot Games or any other game publisher, and League of Legends and any other game names referenced on this site remain the property of their respective owners.
15.2Any personal information you share with us is handled under this policy alone, not under the privacy practices of any game publisher.
16. Changes to This Policy
16.1We may update this policy as our services, our legal obligations, or industry standards change. When a change is meaningful, we will update the date at the top of this page and, where required, let you know directly. Continuing to use CarrotBoost after an update takes effect means you accept the revised policy.
17. Contact Us
17.1If anything in this policy is unclear, or you want to exercise any of the rights described above, reach out to us directly.
17.2Email: Contact@CarrotBoost.gg Live chat: available on the website Website: CarrotBoost.gg
17.3We aim to resolve any privacy related question or concern as quickly and clearly as we can.