PRIVACY NOTICE

INCLUDING EU & UK

Chainstack Pte. Ltd. (“Chainstack”) respects your privacy and will process any personal data only in accordance with applicable data protection laws. This Privacy Notice covers the information we collect about you when you use our website and our Services (as defined below) and how we process that personal data.

The references to “you” or “your” in this Privacy Notice are to the individual who is visiting our website, is accessing, using or applying to use our Services (as defined below) either on your own account or on behalf of a business. This includes any other director and officer, shareholder, partner and beneficial owner of a Customer, as well as any user accessing or using the Services on behalf of a Customer.

THE TYPES OF PERSONAL DATA WE MAY COLLECT

We may collect data about you that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you (“Personal Data“). Personal Data can be provided voluntarily by you or they can be collected automatically. This Privacy Notice applies to the Personal Data we process as a “data controller”, meaning, as the party that determines what data is collected and why.

When you use our Services and website, we may collect Personal Data which includes:

Information provided voluntarily

We may ask you to provide your contact details in to access to our Services, additional resources and documentation, to register an account with us, to subscribe to marketing communications from us, and/or to submit enquiries to us. The Personal Data that you are asked to provide, and the reasons why you are asked to provide may include:

• Contact information, such as your name, postal address and email address  (each whether associated with you in your personal or professional capacity);
  • Authentication data, such as user name, password, password hints and other similar information used to verify the identity of our Customers;
  • Commercial information, such as information about Services you subscribe to and payment information you provide in connection with these transactions (including billing address and payment card data);
  • Preferences, such as how you prefer to communicate with us, Services that you are interested in, or other preferences you communicate to us; and
  • Other information you provide, such as information in emails or other communications that you send to us or otherwise contribute.

• Information that we collect automatically
  When you visit our website and/or use our Services, we may collect certain information automatically from your device (e.g., information like your IP address, broad geographic location (i.e., country or city-level location) and other technical information) through the use of cookies or similar tracking technology. We may also collect information about how your device has interacted with our website, including the pages accessed and links clicked. In some countries, including countries in the European Economic Area, this information may be considered Personal Data under applicable data protection laws.

The Personal Data we may obtain through cookies includes:

• Unique identifiers, such as IP address, browser type, operating system, the pages you view, the pages you view immediately before and after you access the websites, and the search terms you enter on the websites, Internet or other electronic network activity information;
• General location data; and
• Inferences drawn from the above categories.

Personal Data Chainsatack does not seek to collect

Chainsatack does not need special categories of Personal Data (also known as “sensitive personal information or data”), as defined by the GDPR and UK GDPR, to provide its Services. Chainsatack avoids collecting sensitive Personal Data from you through the Services or otherwise. Unless Chainsatack specifically requests it, please do not provide sensitive Personal Data to us. In the rare circumstances in which Chainsatack does seek to collect sensitive Personal Data, we will do so in accordance with the applicable data protection laws and/or ask for your consent.

INTERNATIONAL DATA TRANSFERS

Use of our Services sometimes involves cross-border transfers of Personal Data. 

For cross-border transfers of Personal Data to jurisdictions not guaranteeing an adequate level of data protection, Chainstack uses appropriate safeguards to guarantee that your Personal Data is protected in accordance with this Notice and applicable data protection laws. 

MEASURES TO KEEP YOUR DATA SAFE

We maintain reasonable and appropriate technical and organizational security measures to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration, or destruction in light of the risks inherent in processing this information. We regularly review our security policies and procedures to ensure our systems are secure and protected.

DATA RETENTION

We retain Personal Data we collect from you as long as we have an ongoing legitimate business need to do so (e.g., to provide you with a Service you have requested or to comply with applicable legal, tax or accounting requirements).  When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymise it or, if this is not possible (e.g., because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

EU & UK 

Within the EU and the UK, the data controller (i.e., the person who or entity that determines the purpose and means of processing) for the Personal Data collected pursuant to this Privacy Notice is Chainstack Pte. Ltd., 8 Temasek Boulevard #30-01/02 Suntec Tower 3 Singapore 038988.

Under the GDPR, UK GDPR and the Swiss Data Protection Act you have the following rights in relation to your Personal Data:

Right of access: You have the right to know if and what Personal Data we process about you and may request a copy of that Personal Data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.

Right to rectification: You are entitled to have incorrect or incomplete Personal Data about you corrected or completed. If we have shared your Personal Data with others, we will tell them about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.

Right to erasure: You may ask us to delete your Personal Data. Under some circumstances we might not be able to delete your Personal Data (e.g., in case we are required to keep your Personal Data by law). If we have shared your Personal Data with others, we will inform them about the erasure where possible. If you ask us, where possible and lawful to do so, we will also inform you with whom we shared your Personal Data so that you can contact them directly.

Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or object to the processing of it. We will tell you before we lift any restriction on processing. If we have shared your Personal Data with others, we will inform them about the restriction where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.

Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so:

• if we are relying on a legitimate interest to process your Personal Data – unless we demonstrate compelling legitimate grounds for the processing; or
• if we are processing your Personal Data for direct marketing purposes.

Please note that the limitation or deletion of your Personal Data may mean that we will be unable to provide you our Services.

Right to data portability: You also have the right to receive your Personal Data in a machine-readable format and have the data transferred to another party responsible for data processing.

Rights in relation to automated decision-making and profiling: You have the right to be free from decisions based solely on the automated processing of your Personal Data, including profiling, unless such profiling is necessary for providing the Services or their performance.

Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time by sending the notice to the email address: [email protected] Right for a complaint: If you have a concern about our privacy practices, including the way we have handled your Personal Data, you can report it to the data protection authorized authority.