Where required, implementing standard contractual clauses approved by the European Union commission, or similar contractual clauses in other jurisdictions;
Transferring personal information to countries that regulators deemed to have adequate protections for the treatment of personal information; and
Where required by law, obtaining your consent to share your personal information outside of your country.
Any critical personal data, as may be notified by the relevant authority, shall only be processed where permitted and shall be transferred outside the territory as may be provided under the applicable data protection laws.
- This Policy explains when, why and how we collect, store, transfer and use personal information of people who visit our Website or use our Services (“User(s)”), the conditions under which we may disclose your personal information to others, and how we keep your personal information secure. We advise Users to familiarize themselves with our privacy practices.
- We may change this Policy from time to time. Your continued use of our Services after we make changes is deemed to be acceptance of those changes. Hence, we request you to check the Policy periodically for updates.
- By accessing or using any of our Services you provide us your consent to the collection, transfer, storage, disclosure, and use of your personal data in accordance with this Policy. This Policy applies when we are acting as a data controller with respect to the personal data of our users. If you do not agree with the terms and conditions of this Policy, we advise you to refrain from accessing or using the Services.
- The Services provided by Hefty are only limited to the people who have attained the age of majority. Thus, this Policy is not applicable to minors or individuals who are not competent to enter into a contract. You therefore acknowledge that you have attained the age of majority and are competent to enter into a contract, Hefty shall not be responsible for you and has no control over any information submitted by you for the purpose of using the Services.
PERSONAL DATA WE COLLECT AND HOW WE COLLECT IT
- INFORMATION YOU GIVE TO US
- When you make an account on the Website to use our Services (“Account”) or otherwise contact Hefty, we collect your account data depending on your use our Services which may include personal identification information such as your name, date of birth, age, nationality, gender, signature, phone number, physical mailing and/or billing address, and/or email address (business or personal), and formal identification information such as Tax ID number, passport number, driver's license details, national identity card details, photograph identification cards, and/or visa information (collectively, “Account Data”).
The Account Data may be processed for the purposes of providing our Services to you, satisfying anti-money laundering and know-your-customer obligations, and ensuring the security of the Services, maintaining back-ups of our databases and communicating with you. This information is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested Services.
We process financial information such as bank account details, credit card, cryptocurrency wallet details or other information when you use our Services in order to facilitate the processing of payments (“Personal Data”). The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.
We may automatically process information contained in or relating to any communication that you send to us (“Correspondence Data”). The Correspondence Data may include the communication content and metadata associated with the communication. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
We may process information included in your personal profile, which may include your location, time zone, website and any other such related data (“Profile Data”). The Profile Data may be processed for the purposes of providing you a better user experience when using the Services. The legal basis for this processing is your consent.
INFORMATION WE AUTOMATICALLY COLLECT FROM YOUR USE OF THE SERVICES.
When you use our Services, we may automatically process information about your computer and internet connection (including your unique device identifiers, operating system, browser type and domain name), your mobile carrier, device information (including device and application IDs), search terms, web pages that you view, the additional links you click on, cookie information, your activity on our Website as well as information about the timing, frequency and pattern of your use of our Services, information about to the transactions you make on our Services, such as the name of the recipient, your name, the amount and timestamp, your interactions with our customer support such as the date, time, and reason for contacting us, transcripts of any chat conversations; and if you call us, your phone number and call recordings, advertisement identifiers such as identifier for advertising, google advertising identifier, and data related to your interaction with the advertisements that are served on the Website and/or Services (“Service Data”). The Service Data is processed for the purpose of providing our Services. We may generate reports and analysis based on the Service Data for internal analysis, monitoring and marketing decisions. The legal basis for this processing is the adequate performance of the contract between you and us, to enable us to comply with legal obligations and our legitimate interest in being able to provide and improve the functionalities of the Services.
We may also collect information about your activity on our Services which is not personally identifiable with you but may be linked to your account information including but not being limited to, your Account including but not being limited to, your username, the NFTs you have viewed, bid on or purchased. INFORMATION WE COLLECT FROM THIRD PARTIES.
From time to time, we may obtain information about you from third party sources as required or permitted by applicable law, such as public databases, credit bureaus, ID verification partners, resellers and channel partners, joint marketing partners, and social media platforms. ID verification partners use a combination of government records and publicly available information about you to verify your identity. Such information includes your name, address, job role, public employment profile, credit history, status on any sanction’s lists maintained by public authorities, and other relevant data. We obtain such information to comply with our legal obligations, such as anti-money laundering laws. The legal basis for the processing such data is compliance with legal obligations.
- THIRD-PARTY WALLETS
- DISCLOSURE OF PERSONAL DATA
- We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
- We may disclose Service Data to a variety of third-party service providers insofar as reasonably necessary to improve the functionalities of the Services and customise our user experience.
- We may share aggregated data (information about our users that we combine together so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.
- In the event of a dispute in P2P transaction, we may disclose some of your Personal Data with the counterparty to such transaction to the extent we deem required, in our discretion, to resolve any dispute or to facilitate the transaction.
- Further, we may disclose your personal data if we believe that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; or in order to protect your vital interests or the vital interests of another natural person; to protect the safety or integrity of the Services, or to explain why we have removed content or accounts from the Services; or to address fraud, security, or technical issues; or to protect our rights or property or the rights or property of those who use the Services.
- We offer individuals the opportunity to choose (opt out) whether their personal information is: (i) to be disclosed to a third party; or (ii) to be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals. In order to opt out from disclosure of your personal information, please write to us at [email protected].
- Cookie and tracking information collected by us may be shared with third-parties which directly support our advertising/promotional activities to deliver advertisements that relate to User’s interest, and are involved in development/updating of our Website.
- Commonly used browsers are set up to automatically accept cookies however you can modify your device’s settings to either alert you when you receive cookies or block cookies. If you disable/ block cookies, it may affect the performance and functionality of our Services and may also restrict your experience. If you use different devices to access our Services, you would be required to modify each device’s settings individually to suit your cookie preferences.
- TRANSFER OF PERSONAL DATA
We may need to transfer or share your personal data to third parties outside of the territory of the country you reside in, especially to our affiliates and subsidiaries, for various reasons including for regulatory compliance. In such circumstances where we may need to transfer or share your personal data to third parties outside of the territory of the country you reside in (including our affiliates and subsidiaries), we will ensure that such transfers are compliant with the requirements under applicable laws.
- You shall not assign or transfer any right or obligation that has accrued to you under this Policy and any attempt by you to assign or transfer such rights and obligations, shall be null and void.
- We may assign, novate, or transfer any or all rights and obligations that accrued in our favour under the Policy, at our sole discretion, to our subsidiaries, affiliated entities, or any other third party, especially in order to comply with regulatory requirements in India, and for our users, to offer them a full suite of services in globally through our subsidiaries or affiliates
- DATA SECURITY
- We have implemented measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
- We use commercially reasonable security practices and procedures industry practices and procedures designed to help keep your personal information safe and secure. Although we strive to protect your personal information, we cannot guarantee the security of your data while it is being transmitted to our Service; any transmission is at your own risk. We will also ensure, on a commercially reasonable efforts basis, that any agent or third party that we employ complies with the same security standards as we do for the protection of your personal information.
- Steps taken to ensure data security:
- All the user information can only be accessed by authorized users;
- Users need to authenticate themselves with a username-password combination; and
- All data is hosted on AWS servers.
- Unfortunately, the transmission of information via public networks such as the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee or absolutely ensure the security of your personal data transmitted through the Services. Any transmission of personal data is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Services.
- DATA RETENTION
- We retain your personal information as long as necessary for providing you the services and as per the lawful basis of processing and to comply with our legal obligations. In particular, when determining how long we retain personal data, we take into account how long we need it to:
- Maintain business records for analysis and/or audit purposes;
- Comply with record retention requirements under the law;
- Defend or bring any existing or potential legal claims; and
- Deal with any complaints regarding the Website/any services provided on the Website.
- At the end of the retention period your personal data will be anonymized.
- If you no longer want us to use your information, then you can request that we erase your personal information and close your Account. Erasure of your information will result in your subscription being terminated without any refunds. We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend an Account for fraud or safety reasons, we may retain certain information from that account to prevent that user from opening a new account in the future.
- We make no warranties and shall not be liable regarding non-availability or non-retention of any information and/or data provided by you beyond the deletion of your account.
- YOUR RIGHTS WITH REGARD TO PERSONAL DATA
- You may deal with your personal data available with us in the following ways:
- You may correct, amend, add or update personal data from your account at any time by logging in to your account.
- You are free to remove or delete your content from your account at any point in time, provided, however, Hefty may retain all or some of your data as per applicable law.
- Copies of public content may be retained indefinitely in our systems, including in cached and archived pages of our Website, or if other users have copied or saved that information.
- You may also, at any time while availing the Services or otherwise, withdraw the consent given earlier to Hefty provided that such withdrawal request is sent in writing to [email protected]. However, please note that in the event you withdraw the consent granted to us, we shall be unable to provide you with Services.