Privacy Policy
This Privacy Policy explains how Exchange-ETH.com collects, uses, stores, and protects personal data when you visit our website or use our services.
We are committed to handling personal data responsibly and in line with applicable privacy principles. Because digital asset services may involve security, compliance, and fraud-prevention obligations, some data processing is necessary to operate the service safely and lawfully.
Scope
This Privacy Policy applies to:
- visitors to Exchange-ETH.com
- users who submit requests through the website
- users who initiate or complete cryptocurrency exchange transactions
- individuals who communicate with our support or compliance teams
Data We May Collect
Depending on how you use the site, we may collect the following categories of data:
1. Technical and Usage Data
IP address, browser type and version, device information, operating system, language settings, pages visited, session timing, referring URLs, and interaction and diagnostic data.
2. Transaction Data
Transaction ID or order reference, wallet addresses, selected exchange pair, amounts sent and received, blockchain status data, timestamps, and exchange route information.
3. Contact and Communication Data
Email address, message content, support history, and compliance correspondence.
4. Compliance and Verification Data
Where required for risk control, fraud prevention, sanctions screening, or legal compliance, we may collect additional information, including identity-related information, proof of source of funds where appropriate, screenshots or transaction evidence, and information needed to respond to lawful requests.
How We Use Personal Data
We may use personal data for the following purposes:
- providing and operating the website
- processing exchange requests
- calculating and confirming transaction details
- responding to support inquiries
- monitoring transactions for fraud or suspicious activity
- complying with AML, sanctions, legal, and regulatory obligations
- maintaining security and service integrity
- improving website performance and user experience
- enforcing our terms and internal policies
- establishing, exercising, or defending legal claims
Legal Bases for Processing
Depending on the jurisdiction and context, we may process data on the basis of:
- performance of a service requested by the user
- compliance with legal obligations
- legitimate interests in operating, securing, and improving the service
- user consent where required by law
Data Sharing
We may share personal data with third parties where reasonably necessary, including:
- technical service providers
- hosting and infrastructure providers
- analytics providers
- compliance, fraud-prevention, and blockchain analysis providers
- payment or exchange processing partners
- legal, regulatory, or law enforcement authorities where required
We do not sell personal data in the ordinary sense of that term.
International Data Transfers
Because cryptocurrency services and web infrastructure often operate internationally, your data may be processed in multiple jurisdictions. Where applicable, we take reasonable steps to ensure an appropriate level of protection for personal data transferred across borders.
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including:
- service delivery
- recordkeeping
- dispute resolution
- compliance reviews
- fraud prevention
Retention periods may vary depending on the type of data and the legal requirements that apply.
Security
We use reasonable technical and organizational safeguards to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no internet-based system can be guaranteed to be fully secure, and users should also take their own precautions when using digital asset services.
Your Rights
Depending on applicable law, you may have rights such as:
- access to your personal data
- correction of inaccurate data
- deletion of data in certain circumstances
- restriction of processing
- objection to certain processing
- withdrawal of consent where processing is based on consent
These rights are not absolute and may be limited where we are required to retain data for legal, security, or compliance reasons.
Children
Exchange-ETH.com is not intended for use by children or minors who are not legally permitted to use digital asset services in their jurisdiction. We do not knowingly collect personal data from children.
Third-Party Links
The website may contain links to third-party websites or services. We are not responsible for the privacy practices of those external services. Users should review the privacy notices of third-party websites separately.
Changes to This Privacy Policy
We may revise this Privacy Policy from time to time. The updated version published on this page will apply from the date of publication unless otherwise stated.
Contact
For privacy-related questions or requests, contact: [email protected]