Privacy Policy
This policy was prepared in the English language and, where any translation is made available, the English language version shall prevail in the event of any conflict, discrepancy or ambiguity between translations.
Effective Date: 28 October 2026
Summary of how we use your data
We respect your privacy and are committed to protecting it as described in this policy.
We use your personal data to provide, improve and administer the Crosschain Association product(s), to enter into and perform the terms of service with our users, and to comply with legal and regulatory requirements.
Data is shared with our vendors and partners, and when we have a good faith belief that doing so is necessary to comply with legal and regulatory enquiries or requirements.
Our privacy policy sets out more details of this processing, including information in relation to your data protection options, and your right to object to certain processing.
What does this policy cover?
This policy describes how Crosschain Association and its affiliates (referred to as “we”, or “us” in this policy) will collect, make use of, and share (i.e. “process”) your personal data in connection with our website(s), apps and services (including API services). For the purposes of this policy, the term “affiliate” shall mean any entity, individual, firm, or corporation, directly or indirectly, through one or more intermediaries, controlling, controlled by, or under common control with Crosschain Association.
This policy also describes data protection rights you may have (depending on applicable law), such as a right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Your rights” section.
What personal data do we process?
We process personal data about you when you interact with us, our websites, our apps or our services (including API services). This may include:
any details that you provide to us from time to time, such as your name, email address, and other identifying information where you contact us or otherwise provide it by other means;
your marketing and other communication preferences, and a record of any consents you have given us;
information related to the browser or device you use to access our website or apps, your IP address and the approximate location derived from it, as well as data that tells us which features of the website or app are popular, or suffer from issues we need to fix;
the content and details (e.g. date) of messages you post or that you send us (e.g. customer support queries); and
customer service notes and other records.
We will aim to mark data fields as optional or mandatory when collecting personal data from you via forms. Note that where personal data is stated as mandatory: if relevant data is not provided, then we will not be able to do these things and provide the services you expect.
What personal data do we receive from third parties?
We may learn which partner or campaign referred you to our website (for example, through the link you used). We don’t buy personal data.
How do we use this personal data, and what is the legal basis for this use?
We process this personal data for the following purposes:
To fulfil (or take steps linked to) a service agreement with you. This includes:
communicating with you; and
providing customer services.
As required by us or third parties to conduct their business and pursue their other legitimate interests, in particular:
to provide services you have requested;
to monitor, improve and protect the services we provide (on our own or with others), in particular by looking at how they are used, testing alternatives, and by learning from feedback and comments you provide;
to personalise our services and user interfaces;
to monitor user behaviour to prevent, investigate and/or report misconduct such as spam, misrepresentation, security incidents, market manipulation, or crime (such as fraud), in accordance with applicable law, and to cooperate with authorities seeking to do the same;
to investigate any complaints received from you or from others;
in connection with legal claims, compliance, regulatory, or investigative purposes (including disclosure in connection with legal process or litigation); and
to invite individuals to take part in market research and beta tests.
Where you give us consent (so far as that consent is required):
we may place cookies, monitor user engagement, and use other similar technologies as described in the “Cookies and related technologies” section below and in the information provided to you when those technologies are used;
on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law, in particular:
in response to requests by relevant courts and public authorities, such as those conducting an investigation.
Relying on our legitimate interests
To the extent required by law, we aim to carry out balancing tests when significant data processing activities are justified on the basis of our “legitimate interests”, as described above.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. You may have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time, in accordance with applicable law. Where you do have such a right, you can exercise it by following the unsubscribe link in our emails, or by contacting us using the details set out below.
Who will we share this data with, and where?
We will share your personal data with our affiliates so they can help deliver and improve our services, run our business, and comply with our legal obligations and related third party requests.
Personal data may be shared with courts or public authorities if required as described above, mandated by law or regulation, or required for the legal protection of our or third party legitimate interests, in compliance with applicable laws and regulations, and relevant / competent public authorities’ requests.
Personal data will also be accessed by employees or contractors, or shared with third party service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party website and database hosting; web and app analytics; and customer services and support.
In the event that the business is transferred to or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s advisers, and to the new owners of the business.
Your rights
Depending on applicable law (in particular, whether the laws of the UK or EEA countries apply), you may have the right to ask us for a copy of personal data about you; to correct or delete that personal data; restrict the processing of that personal data; and to obtain a copy of personal data about you that you provided to us (in connection with our agreement with you, or with your consent), in a structured, machine readable format, and to ask us to port this data to (i.e. share that data with) another organisation.
In addition, applicable law may provide the right to object to the processing of personal data about you, in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
If these rights apply, they may however be limited, for example if fulfilling your request would reveal personal data about another person, would infringe the rights of another person or legal entity (including our rights), or if you ask us to delete or change data which we are required by law to keep (or have other compelling legitimate interests in keeping). We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch using the details set out below. If you have unresolved concerns, you typically have the right to complain to regulators, depending on applicable law. For example, in the EEA, your complaint can likely be taken to data protection authorities where you live, work or where you believe a breach may have occurred.
How long do we retain data?
Where we process personal data in connection with performing an agreement with you, we keep the data for 6 years from your last interaction with us.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of that request indefinitely, so that we can continue to respect your request in future.
Where we process personal data for site security purposes, we retain it for 3 years.
Longer retention periods may apply, such as where ongoing access to records continues to be important to our defence of legal claims or where we are required by law or regulation to retain information for specific periods.
Cookies and related technologies
Cookies are small files stored on your device. We use the following technologies on chainflip.io:
Privacy-friendly analytics (no consent needed). We use Plausible Analytics, a cookieless web analytics tool, to understand aggregate usage trends, such as which pages and features are popular. It does not use cookies, does not set persistent identifiers, does not track you across sites or devices, and does not collect or store personal data that identifies you. We rely on our legitimate interests in maintaining and improving our website.
Google Analytics. We use Google Analytics 4 (Google Ireland Limited) with two properties: one for the site and one for blog pages. It sets the cookies _ga and _ga_<ID>, which are kept for up to 2 years. Event data is kept for 2 months and user data for 14 months. Google signals is off. Data may be processed by Google in the United States under the EU–US Data Privacy Framework. In the EU, Google Analytics only runs after you accept in the cookie banner (legal basis: your consent, Art. 6(1)(a) GDPR, § 25(1) TDDDG). In other regions it is on by default, and you can decline in the cookie banner.
Website hosting. Our website is built and hosted with Framer (Framer B.V.), which processes technical data such as your IP address and browser information so that the website can be delivered securely.
Consent tool. Our cookie banner stores your choice in your browser and passes it to Google via Google Tag Manager.
Newsletter. If you sign up for updates, we use your email only to send them. Signups are processed by Cloudflare and stored with Resend, our email provider. Every email has an unsubscribe link.
When you first visit chainflip.io, a cookie banner asks for your consent. In the EU, Google Analytics cookies are only set after you accept. You can change or withdraw your consent at any time via “Cookie Settings” in the footer. Withdrawing consent does not affect processing that took place before you withdrew it.
External links
Although our website and apps only look to include quality, safe and relevant external links, users should always adopt a policy of caution before clicking any links to third party websites or apps. We cannot control, guarantee or verify their contents. They will have their own policies and practices, for example with regard to privacy and personal data, and you should acquaint yourselves with those before further engaging with those third party websites or apps.
Changes to this policy
We may revise this Privacy Policy from time to time. If we make a change to this policy that we consider material, we will take steps to notify users by a notice on the website and/or app. Your continued use of our website, apps and services (including API services) will be subject to the updated Privacy Policy.
Getting in touch with us
If you have any questions or concerns about how we process your data, including if you would like to exercise any rights, you can get in touch with our contact point for privacy queries at contact@crosschainassociation.com.