Last updated: 19th June 2024
CipherTraces Asset Recovery, Inc. ("CipherTraces", "we", "us", or "our") operates the website at ciphertraces.com and provides blockchain forensics and crypto asset recovery services. Our registered address is 1 Canada Square, Canary Wharf, London E14 5AB, United Kingdom.
For questions about this policy, contact our Data Protection Officer at privacy@ciphertraces.com.
We collect information you provide directly, such as your name, email address, phone number, wallet addresses, and details about your case when you submit an intake form, contact us, or create an account.
We collect information automatically when you use our website, including IP address, browser type, pages visited, time spent on pages, and referring URLs. We use cookies and similar technologies as described in our Cookie Policy.
We may receive information from third parties, including law enforcement agencies, exchanges, and analytics providers, where this is necessary to investigate a case or comply with legal obligations.
We use your information to provide and manage our recovery services; communicate with you about your case; comply with legal, regulatory, and law enforcement obligations; prevent fraud and unauthorised access; improve our website and services; and send service updates and, where you have consented, marketing communications.
We process your data on the following legal bases: performance of a contract (where processing is necessary to deliver our services), compliance with a legal obligation, our legitimate interests (fraud prevention, security, service improvement), and, where required, your explicit consent.
We do not sell your personal data. We may share your information with:
— Exchanges and financial institutions, where necessary to freeze or recover assets on your behalf. — Law enforcement agencies, regulators, and courts, where required by law or to protect legal rights. — Service providers acting as data processors on our behalf (cloud hosting, email delivery, analytics) who are bound by data processing agreements. — Professional advisers including lawyers, auditors, and insurers under duties of confidentiality. — A successor entity in the event of a merger, acquisition, or sale of assets, subject to standard confidentiality obligations.
CipherTraces operates globally. Your data may be transferred to and processed in countries outside the UK and EEA. Where we transfer data internationally, we rely on adequacy decisions, standard contractual clauses approved by the relevant authority, or other lawful transfer mechanisms. Contact us if you would like details of the specific safeguards in place.
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. Case records are typically retained for seven years following case closure. We review and delete or anonymise data that is no longer required on a rolling basis.
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; object to or restrict processing; withdraw consent at any time (where processing is consent-based); data portability; and lodge a complaint with your local supervisory authority.
To exercise any of these rights, email privacy@ciphertraces.com. We will respond within 30 days. We may need to verify your identity before processing your request.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include encryption at rest and in transit, access controls, regular security assessments, and staff training. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.
Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have collected information from a child, contact us at privacy@ciphertraces.com and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be notified by email or a prominent notice on our website at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.