Privacy Policy

1. Introduction

CryptoForge Security Technologies Ltd. ("we," "our," or "CryptoForge") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase our hardware wallets, or use our services.

By using our website and services, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of our website and services.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Personal Information

We collect information that you voluntarily provide to us when you:

• Make a purchase (name, email, phone number, shipping address, billing address)
• Create an account (username, email, password)
• Contact customer support (name, email, inquiry details)
• Subscribe to newsletters (email address)
• Participate in surveys or promotions

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, referring URLs)
• Cookies and tracking technologies
• Location data (country, region, city based on IP address)

3.3 Hardware Wallet Device Information

Our hardware wallets are designed with privacy in mind. We do NOT collect:

• Your private keys or seed phrases
• Cryptocurrency addresses or balances
• Transaction details or history
• Personal usage patterns from the device

We may collect anonymous, aggregated device diagnostics for firmware updates and security improvements (e.g., firmware version, device model).

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our website.

4.1 Types of Cookies

• Essential Cookies: Required for the website to function properly (e.g., shopping cart, language preferences)
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Marketing Cookies: Track visitors across websites to display relevant advertisements
• Preference Cookies: Remember your settings and preferences (e.g., language, region)

4.2 Cookie Control

You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality. Our cookie consent banner allows you to accept or decline non-essential cookies.

5. How We Use Your Information

We use collected information for the following purposes:

• Order Processing: To process and fulfill your orders, including shipping and customer support
• Communication: To send order confirmations, shipping updates, and respond to inquiries
• Product Improvement: To enhance our products and services based on user feedback
• Security: To detect and prevent fraud, abuse, and security incidents
• Marketing: To send promotional materials, newsletters, and product updates (with your consent)
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Analytics: To analyze website usage and improve user experience

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

6.1 Service Providers

We share information with third-party service providers who assist us in:

• Payment processing (e.g., Stripe, PayPal)
• Shipping and logistics (e.g., DHL, FedEx, Royal Mail)
• Email communications (e.g., SendGrid, Mailchimp)
• Website hosting and analytics (e.g., AWS, Google Analytics)
• Customer support platforms

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order Data: Retained for 7 years for accounting and tax purposes
• Account Data: Retained until account deletion request
• Marketing Data: Retained until unsubscribe or consent withdrawal
• Support Tickets: Retained for 3 years for service improvement
• Website Analytics: Aggregated data retained indefinitely; individual data for 26 months

8. Your Rights (GDPR & UK GDPR)

Under GDPR and UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO) in the UK

To exercise any of these rights, please contact us at [email protected] or use our contact form. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area (EEA). We ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Adequacy decisions for countries with equivalent data protection laws
• Privacy Shield Framework (where applicable)

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] .

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email. The "Last Updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the supervisory authority: