Privacy Policy
1. Scope of Processing
This policy describes how Blockchain Asset Solutions Ltd. collects, uses, and safeguards personal data in accordance with the GDPR (EU 2016/679), UK GDPR, and CCPA (California Consumer Privacy Act). It applies to all clients, counterparties, and website visitors.
2. Data Collected
- Identity Data: Full name, nationality, date of birth, passport/driver’s license
- Contact Data: Email, phone, residential address (utility bill required)
- Financial Data: Bank account details, source of funds, transaction history
- Technical Data: IP address, browser fingerprint, geolocation, session recordings
- Blockchain Data: Wallet addresses, transaction hashes, on-chain analytics
3. Lawful Bases
Processing is based on: (a) contractual necessity for account opening and transaction execution; (b) legal obligations under anti-money laundering (AML) and counter-terrorist financing (CTF) regulations; (c) legitimate interests for fraud prevention and network security; (d) explicit consent for marketing communications.
4. Data Sharing
- Service providers: Custodians, blockchain analytics (Chainalysis), cloud hosting (AWS, GCP)
- Regulatory bodies: FinCEN, FCA, MAS, on request
- No sale of personal data to third parties
5. Data Retention
Personal data is retained for the duration of the business relationship plus 5 years post-closure, as required by record-keeping obligations. Blockchain transaction data is permanently stored on public ledgers and cannot be deleted.
6. Your Rights
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17), subject to legal retention
- Right to data portability (Art. 20)
- Right to opt-out of sale (CCPA Section 1798.120)
7. Cross-Border Transfers
Data may be transferred to countries with adequacy decisions (EU-US Data Privacy Framework) or under Standard Contractual Clauses (SCCs).
8. Contact & Complaints
DPO: [email protected]. Supervisory authority: Information Commissioner’s Office (UK), CNIL (France).