CryptoFlex Privacy Policy – How We Protect Your Data

Last Updated: 15.03.2025

Welcome to CryptoFlex LLC. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR), the Laws of Georgia, and applicable financial regulations. This policy applies to all user and investor-related data, including transactions, agreements, and online services.

1. Introduction

2. Who We Are

CryptoFlex LLC

Legal Entity No. 445757547 – LEPL Georgia
Ilia Chavchavadze Str. 78-88
6010 Batumi, Georgia
Email: privacy@crypto-flex.com
Website: www.crypto-flex.com

3. What Personal Data We Collect and Why We Collect It

We may collect and process the following types of personal data:

Identity Data: Full name, date of birth, nationality, government-issued identification, tax ID.
Contact Data: Email, phone number, address.
Financial Data: Payment details, investment amount, transaction history, bank account details.
Legal & Compliance Data: KYC/AML documentation, shareholder agreements, regulatory filings.
Correspondence & Contractual Data: Investment agreements, signatures, meeting minutes.
Technical Data: IP address, browser type, cookies, device information.
Usage Data: Interactions with our website and services.

4. How We Collect Data

We collect data through:

Direct interactions: When you sign up, contact us, complete transactions, or enter into investment agreements.
Automated technologies: Cookies, analytics tools, log files.
Third-party sources: Payment processors, compliance providers, banking institutions, legal advisors.

5. Purpose of Data Processing

We process your data for the following purposes:

To provide and manage our crypto payment services and investment platform.
To comply with legal and regulatory obligations (e.g., KYC/AML compliance, tax laws, financial reporting).
To process transactions, investments, and payments securely.
To improve our platform, security, and user experience.
To send service-related communications, investment reports, and shareholder notifications.
To comply with corporate governance and financial laws.

6. Legal Basis for Processing

We process your data based on the following legal grounds:

Performance of a contract (e.g., providing financial services, executing investment agreements).
Legal obligations (e.g., AML/KYC compliance, tax laws, corporate governance requirements).
Legitimate interests (e.g., fraud prevention, security improvements, maintaining shareholder records).
Consent (e.g., marketing communications, optional cookies).

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined above and to comply with legal obligations.

Investment agreements & shareholder records: Minimum 10 years after termination of investment (legal requirement).
KYC/AML compliance records: Minimum 5 years after the last transaction.
Financial transaction records: Minimum 7 years for tax and accounting compliance.
User accounts: Until account deletion request.
Marketing data: Until consent is withdrawn.
Communications & meeting records: Retained as necessary for company governance.

8. Data Sharing & Third Parties

We may share data with:

Regulatory authorities (e.g., tax agencies, financial regulators, anti-money laundering bodies).
Payment processors and banks (to facilitate transactions and dividend payments).
Legal advisors & auditors (for compliance and due diligence purposes).
Company directors & corporate governance bodies (to maintain shareholder records).

→ We do not sell or share your personal data for marketing purposes.

9. International Data Transfers

If data is transferred outside the EU/EEA, we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) or transfers to countries with adequate data protection laws.

10. Data Security

We implement strict security measures to protect personal data, including:

Encrypted storage of sensitive data.
Restricted access controls for authorized personnel only.
Secure physical storage for signed agreements.
Regular security audits & compliance checks.

11. Your Rights Under GDPR (DSGVO)

You have the following rights regarding your personal data:

Right to Access – Request a copy of your personal data.
Right to Rectification – Request correction of inaccurate data.
Right to Erasure (“Right to Be Forgotten”) – Request deletion of data where legally applicable.
Right to Restriction of Processing – Limit how we use your data.
Right to Data Portability – Receive your data in a structured format.
Right to Object – Object to processing for direct marketing purposes.
Right to Withdraw Consent – Withdraw previously given consent at any time.
Right to Lodge a Complaint – File a complaint with your local data protection authority.

To exercise your rights, contact us at privacy@crypto-flex.com.

12. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve user experience. Users can manage or disable cookies via browser settings. For more details, refer to our Cookie Policy.

13. Comments & Media

Comments: When visitors leave comments, we collect data shown in the comment form, visitor’s IP address, and browser details.
Media: If users upload images, they should avoid uploading images with embedded location data (EXIF GPS), as visitors can extract this data.

14. Analytics

We use third-party web analytics services, such as Google Analytics, to help us analyze how users engage with our services. These vendors may collect data such as the third-party website from which you arrive, browsing behavior, and interactions within our platform. The information collected may be used for evaluating service performance and improving user experience. You can prevent Google Analytics from using your data by installing the Google Analytics Opt-Out Browser Add-on.

We may also allow third-party advertising networks to place cookies or other tracking technologies on your device to provide tailored advertising based on past interactions. These networks may use cookies associated with de-identified data linked to or derived from information you voluntarily submit. You can opt out of tailored advertising through the Network Advertising Initiative (NAI) Consumer Opt-Out Link, the Digital Advertising Alliance (DAA) Consumer Opt-Out Link, or the European Interactive Digital Advertising Alliance.

For more details, refer to our Cookie Policy.

15. Where Your Data is Sent

Data may be transferred outside the EU/EEA. We ensure these transfers comply with EU data protection standards through Privacy Shield, SCCs, or binding corporate rules.

16. Contact Information

For privacy-related concerns, contact us at:

CryptoFlex LLC
Ilia Chavchavadze Str. 87
6010 Batumi, Georgia
Email: privacy@crypto-flex.com

17. Additional Information

How We Protect Your Data:

Encryption, multi-factor authentication, and staff training.

What Data Breach Procedures We Have in Place:

Internal reporting systems, security audits, and legal compliance reviews.

What Third Parties We Receive Data From:

Compliance providers, financial institutions, and marketing partners.

What Automated Decision Making and/or Profiling We Do:

Fraud detection and risk assessment algorithms.

18. Changes to This Privacy Policy

CryptoFlex LLC reserves the right to update this policy as required by law or operational changes. Any revisions will be communicated via our website or direct notification where necessary.

Privacy Policy