Privacy Policy

This Privacy Policy explains how [Company Legal Name], a company registered in Saint Vincent and the Grenadines (“History Stamps”, the “Company”, “we”, “us”, or “our”), collects, uses, discloses, stores, and otherwise processes personal information when you:

• visit or use the History Stamps website at [Website URL];
• connect a supported blockchain wallet;
• purchase, mint, receive, view, or otherwise interact with a History Stamps NFT;
• use wallet-based profile or collection features;
• contact us regarding support, refunds, legal matters, intellectual property, or privacy;
• otherwise interact with the website or related services.

This Privacy Policy should be read together with our Terms of Service, Cookie Policy, Risk Disclaimer, and Refund and Cancellation Policy.

This Privacy Policy describes our processing practices and your privacy rights. It does not form a contract and does not replace any rights or obligations established by applicable data protection law.

Where we rely on your consent, including for certain analytics, advertising, and remarketing technologies, we will request that consent separately. You may withdraw your consent through the available privacy or cookie settings, subject to applicable law.

For the purposes of applicable data protection laws, [Company Legal Name] is generally the controller of the personal information described in this Privacy Policy.

A controller is the organisation that determines why and how personal information is processed.

Our details are:

• Legal name: [Company Legal Name]
• Country of registration: Saint Vincent and the Grenadines
• Company registration number: [Registration Number]
• Registered address: [Registered Address]
• Website: [Website URL]
• Privacy and legal contact: legal@domain

We currently use the same contact address for privacy, legal, refund, and intellectual property enquiries.

Where required under applicable law, details of our representatives in the European Economic Area or the United Kingdom will be stated below:

• EEA representative: [Name, address, and email, if required]
• UK representative: [Name, address, and email, if required]

We have not appointed a Data Protection Officer unless and until such appointment is required by applicable law. Privacy enquiries may be submitted using the contact details above.

3.1 Information You Provide Directly

When you contact us, submit an enquiry, or otherwise communicate with us, we may collect:

• your name (if provided);
• your email address (if provided);
• the subject and content of your communications;
• attachments or documents you voluntarily submit; and
• any other information you choose to provide.

You are not required to create a traditional user account to use the Services.

3.2 Blockchain Wallet Information

When you voluntarily connect a supported blockchain wallet to the Services, we may collect:

• your public blockchain wallet address;
• the blockchain network used;
• wallet connection status;
• wallet interaction logs necessary for the operation and security of the Services.

We do not collect, access, store, or request:

• private keys;
• seed phrases;
• recovery phrases;
• wallet passwords; or
• other wallet credentials.

3.3 NFT and Transaction Information

When you purchase, mint, receive, or transfer a History Stamps NFT through the Services, we may process information relating to:

• the NFT identifier;
• collection name;
• blockchain transaction hash;
• wallet address involved in the transaction;
• blockchain network;
• transaction timestamp;
• transaction status.

We do not process payment card information.

3.4 Device and Technical Information

When you access the Services, we may automatically collect certain technical information, including:

• IP address;
• browser type and version;
• operating system;
• device type;
• language preferences;
• referring website;
• pages visited;
• access times;
• error logs;
• security-related logs.

3.5 Analytics Information

Subject to applicable consent requirements, we may collect analytics information, including:

• website usage statistics;
• interaction events;
• session information;
• approximate location derived from IP address;
• traffic source information;
• advertising attribution information;
• aggregated performance metrics.

Analytics technologies are described in our Cookie Policy.

We use personal information for legitimate business, operational, security, and legal purposes, including to:

• provide, operate, maintain, and improve the Services;
• enable users to access and interact with the Services;
• facilitate NFT-related functionality and blockchain interactions;
• authenticate wallet connections and maintain the security and integrity of the Services;
• communicate with you and respond to your enquiries or support requests;
• monitor, analyse, and improve the performance, functionality, and user experience of the Services;
• detect, prevent, investigate, and respond to fraud, security incidents, misuse, or other unlawful activities;
• comply with applicable laws, regulations, legal processes, and legitimate requests from competent authorities;
• establish, exercise, or defend legal claims;
• enforce our Terms of Service and other applicable policies; and
• fulfil any other purpose disclosed to you at the time the information is collected or otherwise permitted by applicable law.

Where required by applicable law, we will obtain your consent before processing personal information for purposes that require consent, including certain analytics, advertising, and similar technologies.

Where applicable, we may also use Google advertising and measurement technologies, including Google Ads, Google Signals and related audience measurement features, to measure advertising effectiveness, understand user interactions, create audience segments and improve the relevance of our advertising, subject to applicable law and user consent where required.

Where the General Data Protection Regulation ("GDPR"), the UK GDPR, or similar data protection laws apply, we process personal information only where we have an appropriate legal basis to do so.

Depending on the circumstances, we may process personal information on one or more of the following legal bases:

Performance of a contract

We process personal information where necessary to provide the Services, enable wallet connectivity, facilitate NFT-related functionality, respond to your requests, and perform our obligations under our Terms of Service.

Legitimate interests

We process personal information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This includes operating, maintaining, improving, securing, and administering the Services, preventing fraud and abuse, responding to legal claims, protecting our rights, and understanding how the Services are used.

Consent

Where required by applicable law, we rely on your consent, including for certain cookies, analytics, advertising, and similar technologies. You may withdraw your consent at any time through the available privacy or cookie settings. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal obligations

We may process personal information where necessary to comply with applicable laws, regulations, court orders, or lawful requests from competent public authorities.

Where more than one legal basis applies to a particular processing activity, we may rely on multiple legal bases as permitted by applicable law.

We do not sell your personal information.

We may disclose or make personal information available only where reasonably necessary for the purposes described in this Privacy Policy, including to the following categories of recipients:

Service Providers

We may share information with trusted third-party service providers that support the operation, maintenance, security, analytics, hosting, infrastructure, customer support, website functionality, or other business operations of the Services.

Blockchain Networks

Certain information, including public blockchain wallet addresses and blockchain transaction information, may be recorded on public blockchain networks as a result of your interactions with the Services.

Professional Advisers

We may disclose information to our legal advisers, auditors, accountants, insurers, consultants, or other professional advisers where reasonably necessary for legal, regulatory, or business purposes.

Competent Authorities

We may disclose information where required or permitted by applicable law, regulation, court order, legal process, or a lawful request from a competent governmental or regulatory authority.

Corporate Transactions

If the Company is involved in a merger, acquisition, corporate reorganization, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

We require service providers that process personal information on our behalf to protect such information appropriately and to process it only for authorized purposes.

The Company operates internationally. As a result, your personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.

Where required by applicable data protection laws, we implement appropriate safeguards designed to protect personal information transferred internationally. Depending on the circumstances, these safeguards may include:

• adequacy decisions issued by competent authorities;
• standard contractual clauses or other approved transfer mechanisms;
• contractual protections with service providers; or
• other lawful transfer mechanisms recognized under applicable law.

You acknowledge that certain information relating to public blockchain transactions may be processed through decentralized blockchain networks that operate globally and are not controlled by the Company.

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, protect our legal rights, and operate the Services.

The retention period depends on the nature of the information, the purpose for which it was collected, applicable legal requirements, and legitimate business needs.

Analytics and cookie-related information is retained in accordance with the settings configured for the relevant analytics and advertising technologies and may vary depending on the category of information and applicable legal requirements.

When personal information is no longer required, we will delete, anonymize, or securely dispose of it where reasonably practicable and in accordance with applicable law.

Depending on your place of residence and the applicable data protection laws, you may have certain rights regarding your personal information.

Subject to applicable law, these rights may include:

Right of Access

You may request confirmation of whether we process your personal information and, where applicable, obtain access to such information.

Right to Rectification

You may request that inaccurate or incomplete personal information be corrected.

Right to Erasure

You may request the deletion of your personal information where applicable law provides such a right. Please note that certain information may need to be retained to comply with legal obligations or to establish, exercise, or defend legal claims.

Right to Restrict Processing

You may request that we restrict the processing of your personal information in circumstances provided by applicable law.

Right to Object

Where applicable law permits, you may object to certain processing activities based on our legitimate interests.

Right to Data Portability

Where applicable, you may request to receive certain personal information in a structured, commonly used, and machine-readable format or request that it be transferred to another controller where technically feasible.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Lodge a Complaint

If you believe that your personal information has been processed in violation of applicable data protection laws, you may lodge a complaint with the competent data protection authority in your jurisdiction.

To exercise your rights, please contact us at:

Email: legal@domain

We may request additional information to verify your identity before responding to your request where permitted or required by applicable law.

We maintain reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmitting information over the Internet or storing information electronically is completely secure. Accordingly, we cannot guarantee absolute security of personal information.

Users are responsible for maintaining the security of their own devices, blockchain wallets, private keys, seed phrases, recovery phrases, passwords, and other credentials. The Company is not responsible for unauthorized access resulting from the loss, compromise, or misuse of such credentials.

The Services are intended only for individuals who are at least eighteen (18) years of age.

We do not knowingly collect personal information from children or individuals who are not legally permitted to use the Services under applicable law.

If we become aware that personal information has been collected in violation of this Section, we will take reasonable steps to delete or otherwise address such information as required by applicable law.

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, technology, or business practices.

Where required by applicable law, we will provide appropriate notice of material changes before they become effective.

The "Last Updated" date at the beginning of this Privacy Policy indicates when this Privacy Policy was most recently revised.

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us using the details below:

• Legal Name: [Company Legal Name]
• Registered Address: [Registered Address]
• Email:> legal@[domain]
• Website:> [Website URL]

We will respond to privacy-related requests within the timeframe required by applicable law.

In the event of any inconsistency between translated versions of this Privacy Policy, the English version shall prevail unless otherwise required by applicable law.