Privacy Policy

1. Introduction

ElecBitX Limited ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website, purchase our products, or interact with our services.

We are headquartered in Ireland and comply with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. As a data controller, we are responsible for ensuring your personal data is processed lawfully, fairly, and transparently.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Order Information: Purchase history, product preferences, payment information (processed securely through third-party payment processors)
• Communication Data: Records of your communications with us, including support requests and feedback
• Technical Information: IP address, browser type, device information, and website usage data

2.2 Information We Do NOT Collect

We want to be clear about what we do NOT collect:

• Private keys, seed phrases, or any cryptographic data from your hardware wallet
• Information about your cryptocurrency holdings or transactions
• Biometric data or other sensitive personal identifiers
• Social media profiles or third-party account information

3. How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To process and fulfill your orders, including shipping and customer support
• Communication: To respond to your inquiries, provide customer support, and send important product updates
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To improve our products and services, conduct research, and maintain our business records
• Security: To protect against fraud, unauthorized access, and other security threats

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations when you purchase our products
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud
• Legal Obligation: Processing required to comply with legal or regulatory requirements
• Consent: Where you have given explicit consent for specific processing activities

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business (e.g., shipping companies, payment processors)
• Legal Requirements: When required by law, court order, or government regulation
• Business Protection: To protect our rights, property, or safety, or that of our customers or others
• Business Transfers: In connection with a merger, acquisition, or sale of business assets

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure data centers and infrastructure
• Incident response procedures

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing under certain conditions
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us at privacy@elecbitx.ie.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specific retention periods include:

• Customer Data: 7 years after last interaction for tax and legal compliance
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months from collection
• Support Records: 3 years after case closure

9. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes

10. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience and analyze website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

11. Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.