Privacy Policy

We respect your data and privacy is our main focus

At Cryptvice, we respect your data and treat privacy as a core principle. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, and the rights you have under applicable data protection law.

Effective April 23, 2024

Translations of this Privacy Policy may be provided for convenience only. In the event of any discrepancy or misunderstanding, the English version shall prevail.

1. Who we are (Data Controller)

Controller: Cryptvice
Address: Avenida de Manolete 3A, 29660 Nueva Andalucía, Marbella, Spain
NIF: B72758436
Email: support@cryptvice.com

Cryptvice is responsible for the processing of personal data as described in this Privacy Policy.

2. Scope

This Privacy Policy applies to:

Visitors to cryptvice.com and related Cryptvice websites
Customers (current, former, and prospective)
Individuals who contact us for information, support, returns, or warranty service

3. Privacy-first approach

We design our systems to reduce personal data exposure where reasonably possible. We aim to:

collect only the information needed to deliver your order and support you,
avoid unnecessary tracking and profiling,
protect data through modern security practices.

4. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

4.1 Data you provide

Name
Billing and delivery address
Email address
Phone number (where required for delivery or support)
Order details and communications (support emails, return requests)

4.2 Transaction and payment data

Payment status and payment reference (e.g., transaction ID)
We do not store full payment card details. Payment processing is handled by payment providers where applicable.

4.3 Technical and security data

We may process limited technical data necessary for:

website operation and security (e.g., anti-abuse, error logging),
preventing fraud and protecting our services.

We do not use technical data for advertising profiling.

5. Legal bases for processing (GDPR Article 6)

We process personal data only when there is a lawful basis:

Contract performance: to process orders, deliver products, manage returns, and provide support
Legal obligation: to meet accounting, tax, and regulatory requirements
Legitimate interests: to secure our website and services, prevent fraud, and improve service quality (balanced against your rights)
Consent: where required (e.g., marketing communications)

Where processing is based on consent, you may withdraw consent at any time.

6. Why we process your data (Purposes)

We process personal data for the following purposes:

Order fulfillment: to confirm, prepare, and ship your order
Customer service: to respond to questions, warranty requests, and returns
Payments & invoicing: to process transactions and comply with tax/accounting rules
Security & fraud prevention: to protect our systems, customers, and operations
Service improvement: to improve customer experience and operational reliability
Marketing (optional): to send product updates or promotions only when permitted or you have opted in

Cryptvice does not sell your personal data.

7. Cookies and similar technologies

Cryptvice aims to minimize tracking. We do not use advertising cookies or third-party profiling.

However, like most websites, we may use strictly necessary cookies and similar technologies that are required to:

enable core website functionality (e.g., cart/checkout),
maintain security and prevent abuse,
ensure stable performance.

If we introduce non-essential cookies (e.g., analytics), we will provide appropriate notice and choice as required by law and update this Privacy Policy and/or a dedicated Cookie Policy.

8. How we share data (Recipients)

We share personal data only when necessary for the purposes described above, including with:

Shipping and logistics providers (to deliver your order)
Payment service providers (to process payments)
IT and infrastructure providers (hosting, email, security, and technical operations)
Professional advisors (legal/accounting) where required
Authorities where we are legally obliged to disclose information

When third parties process personal data on our behalf, they act as processors under contractual obligations to protect your data and use it only for agreed purposes.

9. International transfers

Where personal data is transferred outside the European Economic Area (EEA), we use appropriate safeguards such as:

EU adequacy decisions, and/or
EU Standard Contractual Clauses (SCCs), and/or
other lawful transfer mechanisms under GDPR.

10. Data retention

We retain personal data only as long as necessary for the relevant purpose:

Order fulfillment and operational records: retained as needed to process the order, handle delivery issues, and support customer inquiries
Warranty and support: retained for the period necessary to provide support and manage warranty claims
Accounting and invoicing: retained for up to 7 years (or longer where legally required)
Legal claims and disputes: retained for up to 10 years where necessary to establish, exercise, or defend legal claims
Security logs: retained for a limited period appropriate for security and fraud prevention

Retention periods may vary depending on legal requirements and the nature of the data.

11. Security

Cryptvice uses appropriate technical and organisational measures to protect personal data, including:

encryption where appropriate,
access controls and least-privilege access,
secure operational procedures and monitoring.

If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify affected individuals and authorities as required by law.

12. Your rights (GDPR)

Subject to applicable law, you may exercise the following rights:

Right of access (obtain a copy of your personal data)
Right to rectification (correct inaccurate data)
Right to erasure (delete data where applicable)
Right to restriction (limit processing in certain cases)
Right to object (to processing based on legitimate interests)
Right to data portability (receive your data in a machine-readable format)
Right to withdraw consent (where processing is based on consent)
Right to lodge a complaint with a supervisory authority

To protect your privacy, we may request reasonable proof of identity when handling sensitive requests. Please avoid sending excessive identification documents unless requested.

13. Complaints (Supervisory authority)

If you believe your rights have been infringed, you may lodge a complaint with the competent supervisory authority.

For Spain, this is typically:
Agencia Española de Protección de Datos (AEPD)

14. Third-party links

Our website may contain links to third-party websites. Cryptvice is not responsible for the privacy practices of external sites. Please review their privacy policies separately.

15. Contact

For privacy-related questions or requests, contact:

Cryptvice – Data Protection Team
Avenida de Manolete 3A
29660 Nueva Andalucía, Marbella, Spain
Email: support@cryptvice.com

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Changes will be published on this page and will apply prospectively from the effective date shown above. We recommend reviewing this page periodically.