Effective date: 1 June 2025 · Last updated: 1 June 2025
cryptorafills ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have over your information when you use our platform at cryptorafills.com.
1. Data We Collect
Account information: name, email address, username, and password (hashed).
Transaction data: crypto wallet addresses, order history, gift card SKUs, and amounts.
Device & usage data: IP address, browser type, pages visited, and session duration.
Communications: support messages and any information you voluntarily provide.
2. How We Use Your Data
To process orders, deliver digital products, and manage your account.
To detect fraud, comply with anti-money-laundering (AML) obligations, and protect platform security.
To send transactional emails (order confirmations, delivery codes) and, with your consent, promotional updates.
To improve our services through aggregated, anonymised analytics.
3. Legal Basis for Processing (GDPR)
Contract performance — processing is necessary to fulfil your order.
Legal obligation — AML/KYC compliance and tax reporting requirements.
Legitimate interests — fraud prevention, security monitoring, and service improvement.
Consent — marketing communications (you may withdraw at any time).
4. Cookies & Tracking
We use essential cookies to keep you logged in and process payments securely. Analytics cookies (e.g., Google Analytics) help us understand traffic patterns. You can manage or withdraw cookie consent at any time via our Cookie Settings banner or by visiting our Cookie Policy.
5. Third-Party Sharing
Payment processors and blockchain infrastructure providers to complete transactions.
Gift card and top-up suppliers who fulfil your digital product orders.
Cloud hosting and CDN providers operating under strict data-processing agreements.
We do not sell your personal data to advertisers or data brokers.
6. International Transfers
Your data may be processed in countries outside the EEA. Where this occurs, we ensure appropriate safeguards are in place — including Standard Contractual Clauses (SCCs) approved by the European Commission — to protect your information.
7. Your Rights (GDPR & CCPA)
Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate or incomplete information.
Erasure — ask us to delete your data where there is no overriding legal reason to retain it.
Portability — receive your data in a structured, machine-readable format.
Opt-out (CCPA) — California residents may opt out of any sale of personal information (we do not sell data, but the right is acknowledged).
Lodge a complaint with your local data protection authority at any time.
8. Data Retention
We retain account and transaction records for up to 7 years to comply with financial regulations and tax obligations. Analytics data is anonymised after 26 months. You may request earlier deletion of non-regulated data by contacting us.
9. Security
cryptorafills employs TLS 1.3 encryption in transit, AES-256 encryption at rest, and multi-factor authentication for internal systems. We conduct regular security audits. No method of transmission over the internet is 100{42cc9adfadb97e464be1455b84503205515c00cb007aa2d2bdef658a53e33c69} secure; we cannot guarantee absolute security but we follow industry best practices.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in law or our practices. We will notify registered users by email at least 14 days before material changes take effect. Continued use of cryptorafills after the effective date constitutes acceptance of the revised policy.