1. Information We Collect
- Account data: email, name, password hash, country.
- Order data: products purchased, shipping address, contact phone.
- Payment data: on-chain wallet addresses, transaction hashes, payment status (we never see private keys or card numbers).
- Technical data: IP address, browser, device, language, referrer, pages visited.
- Communications: support tickets, chat transcripts, emails.
2. How We Use Your Information
- Process and fulfil orders, including customs and shipping.
- Confirm crypto payments and detect fraud.
- Provide customer support and respond to disputes.
- Improve the storefront, recommendations, and security.
- Send transactional emails (you may opt out of marketing at any time).
- Comply with legal obligations, including tax and AML rules.
3. Legal Bases (GDPR / UK GDPR)
We rely on contract performance (order fulfilment), legitimate interests (fraud prevention, service improvement), legal obligation (tax, AML), and consent (marketing, optional cookies).
4. Sharing
We share only what is needed with: payment processors (NOWPayments and others), shipping carriers, fraud and analytics providers, hosting providers, and law enforcement when legally required. We do not sell personal data.
5. International Transfers
We ship and operate globally. Where data leaves your region we use Standard Contractual Clauses or equivalent safeguards.
6. Retention
Order and tax records are kept for up to 7 years to satisfy accounting and AML rules. Account data is kept while your account is active and deleted within 90 days of closure unless retention is legally required.
7. Your Rights
Subject to your jurisdiction (GDPR, UK GDPR, CCPA, LGPD, etc.) you may request access, correction, deletion, portability, restriction, or objection. Contact privacy@cryptopayworld.com.
8. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed. Access is restricted on a need-to-know basis. No system is perfectly secure — report vulnerabilities to security@cryptopayworld.com.
9. Children
The service is not intended for users under 16. We do not knowingly collect data from children.
10. Changes
Material changes will be announced on this page and, where required, by email. Continued use after changes means acceptance.
11. Contact
Data Protection Officer — privacy@cryptopayworld.com.