Privacy Policy

            Last updated: January 2025

            ChainAds Ltd., here referred to as “ChainAds”, “Company”, “we”, etc., commits to compliance with data protection laws. The following Privacy Policy outlines the practices we use to collect personal data and the services we provide to Advertisers and Publishers (“You”, “Your” etc.), and shares practices for www.chainads.online (the/our “Website”, “the Platform”).

            What is personal data?
            In this Privacy Policy, “personal data” means any information relating to you as an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an online identifier or to one or more factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity.

            For the avoidance of doubt, personal data does not include data from which you cannot be identified (which is referred to simply as data, non-personal data, anonymous data, or de-identified data).

            In this Privacy Policy, “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

            How do we collect personal data and for what purposes?
            ChainAds collects personal data at the time a customer signs up on the Website, with their consent. Subsequently, if you enter into an agreement or contract with ChainAds, personal data will be processed only as is necessary for the performance of that agreement or contract or to take steps at your request prior to entering such agreement. By submitting your information to us, you agree to the processing described in this Privacy Policy. Your data is stored while your partnership with ChainAds is ongoing and, once the relationship ends, only retained for compliance purposes or legitimate interests unless objected to.

            As a data subject, you have rights under applicable legislation to access, rectify, request deletion or restriction, object to processing, or request to receive or transfer (port) your personal data free of cost at any time, according to applicable law.

            ChainAds collects and processes personal data necessary for delivering products and services. We may collect and process the following categories of data:

            - Identity Data: includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.
            - Contact Data: includes billing address, delivery address, email address and telephone numbers.
            - Financial Data: includes bank account and payment card details (where applicable).
            - Transaction Data: includes details about payments to and from you and products/services/transactions you have obtained.
            - Technical Data: includes IP address, login data, browser type and version, time zone, device type and behavior on the site. It also includes usage data from site navigation and performance tracking.
            - Marketing and Communications Data: includes your marketing preferences and communications history.

            Most data is provided directly by you via forms, email, phone, or account activity. Some data may be collected via third-party integrations or services including analytics and advertising providers.

            Failure to provide required data may result in an inability to provide services or fulfill contractual obligations. We will notify you where applicable.

            How we use your personal data
            We use personal data when visiting our website for:
            - Delivering website content
            - Optimizing and improving site usability and performance
            - Ensuring information security and legal compliance
            - Aggregated statistical purposes (if de-identified)

            The legal basis for processing includes legitimate interests, performance of a contract, legal obligations, and your consent.

            Retention of personal data is based on cookie expiry settings, legal requirements, and ChainAds's operational needs.

            KYC and AML/CFT checks
            ChainAds may process your personal data to perform identity verification, fraud prevention, anti-money laundering (AML), and counter-financing of terrorism (CFT) screening. Information may be shared with authorities or partners as required by law or regulation.

            Other uses of your personal data
            We may also use your data:
            - To establish, exercise, or defend legal claims
            - To comply with legal obligations
            - To send system or marketing communications (with consent)
            - To facilitate payments via Braintree, a PayPal service (subject to their privacy policy)

            The processing is subject to our legitimate interests or legal obligations, and protected by technical and organizational measures to safeguard your data integrity.

            Changes to our Privacy Policy
            We may change the content of our website or services without notice, and consequently our Privacy Policy (and/or Cookies Policy) may change at any time in the future. We, therefore, encourage you to review it from time to time to stay informed of how we are using personal information.

            If we update or modify this Privacy Policy, we will change the “Last Updated” date at the beginning of this Privacy Policy (the same applies to our Cookies Policy). Any amended policy will be effective immediately after the date it is posted. If you do not agree to the revised policy, you should discontinue your use of the Website. By continuing to access or use the Website after the effective date, you confirm your acceptance of the revised policy and all of the terms incorporated therein by reference.

            Any social media channels connected to the Website and third-party applications will be subject to the privacy and cookies policies and practices of the relevant platform providers which, unless otherwise indicated, are not affiliated or associated with us.

            Your rights as a data subject
            You have certain rights under applicable legislation, and in particular under the GDPR. We explain these below. You can find out more about the GDPR and your rights by accessing the European Commission’s website.

            To exercise any of the below rights please contact us in the first instance on the above contact details.

            Requests are free of charge, unless manifestly unfounded or excessive in which case we may charge a reasonable fee. Alternatively, we may refuse to comply with your request in these circumstances.

            Requests will be processed within one month of receipt but this might be extended to two months in case of a complex request, where you have made a number of requests, or if the identity of the requestor cannot be verified. In such cases, we will notify you and keep you updated, and may seek additional information to allow us to understand your request.

            Please note that the Company may be subject to legal and regulatory obligations which may limit or restrict the enforcement of your rights on some occasions.

            Right to information
            You have a right to be informed about the processing of your personal data (and if you did not give it to us, information as to the source) and this Privacy Policy intends to provide such information. Of course, if you have any further questions you can contact us on the above details.

            Right of access
            You have a right to obtain confirmation from us as to whether or not your personal data are being processed and, where this is the case, a right of access to your personal data. We have an obligation to provide additional information when complying with an access request, and we have endeavored to capture this information within this Privacy Policy. We are happy to provide you with details of the personal data that we process about you. To protect our customers' personal information, we follow strict storage and disclosure procedures, which means that we will require proof of identity from you prior to disclosing such information. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

            Right to rectification
            You have the right to have any inaccurate personal data rectified and to have any incomplete personal information about you completed.

            It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. If we do hold personal data and you believe it is incorrect, you may submit a request to us to correct any alleged mistakes.

            We shall communicate any rectification of personal data to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, and shall inform you about such recipients if you request it.

            Right to erasure (‘right to be forgotten’)
            You have the general right to request the erasure of your personal information in the following circumstances:
            - the personal information is no longer necessary for the purpose for which it was collected;
            - you withdraw your consent to consent-based processing and no other legal justification for processing applies;
            - you object to processing for direct marketing purposes;
            - we unlawfully processed your personal information; and/or
            - erasure is required to comply with a legal obligation that applies to us.

            We will proceed to comply with an erasure request without delay unless continued retention is necessary for:
            - Exercising the right of freedom of expression and information;
            - Complying with a legal obligation under EU or other applicable law;
            - The performance of a task carried out in the public interest;
            - Archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, under certain circumstances; and/or
            - The establishment, exercise, or defence of legal claims.

            We shall communicate any erasure of personal data to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, and shall inform you about such recipients if you request it.

            Right to restrict processing
            Instead of requesting erasure, you also have the right to restrict processing of your personal information where:
            - you contest the accuracy of the personal information;
            - processing is unlawful, but you do not want us to erase it;
            - we no longer need to process your personal information but you need us to retain your information as you need it for the establishment, exercise, or defence of legal claims; or
            - you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

            We shall communicate any restriction of personal data to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, and shall inform you about such recipients if you request it.

            Right to object to processing
            You also have the right to object to processing of your personal information under certain circumstances, such as:
            - where the processing is based on your consent and you withdraw that consent;
            - where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms; or
            - where we are processing your personal data for direct marketing purposes.

            Exercise of this right may impact the services we can provide and we will explain this to you if you decide to exercise it. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms, and this may allow us to continue to (wholly or partly) process your personal information.

            Right to data portability
            With respect to automated information which you initially provided consent for us to use, or where the processing is necessary for the performance of a contract to which you are party (or in order to take steps at your request prior to entering into a contract), you have a right to receive the personal information you provided to us in a structured, commonly used and machine-readable format, or ask us to send it to another party.

            Right to object
            You have a right to object at any time to the processing of personal data (including profiling) concerning you which is based on:
            - the performance of a task carried out in the public interest or in the exercise of official authority vested in a controller; or
            - the legitimate interests pursued by a controller.

            ChainAds does not process personal data on grounds of public interest or exercise of official authority. However, we do rely on our legitimate interests as a lawful basis for processing personal data, as outlined in this Privacy Policy. This applies, in particular, to any direct marketing activities.

            We will only send you marketing information where you have agreed to opt in to receive it. You have a choice about whether or not you wish to receive direct marketing communications from us. We will not contact you for marketing purposes unless:
            - you have an existing business relationship with us and we rely on our legitimate interests as the lawful basis for processing; or
            - you have otherwise given your prior consent.

            We will use your preferred communication channels for contact, and every marketing message will include a simple method to unsubscribe or change your preferences. You may opt out at any time by clicking an ‘unsubscribe’ link or contacting us directly.

            Please note that necessary administrative or service-related communications (such as updates to our Privacy Policy or changes in service) may still be sent to you. These communications are essential to the provision of our services and do not offer an opt-out option.

            Other rights
            Right to withdraw consent
            Where the legal basis for processing your personal information is your consent, you have the right to withdraw that consent at any time. However, this does not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw consent, some services may no longer be available to you. We will inform you if that is the case.

            Raising a complaint about how we have handled your personal data
            If you wish to raise a complaint about how we have handled your personal data, you can contact us using the details provided earlier in this policy, and we will investigate your concern.

            Right to lodge a complaint with a relevant supervisory authority
            If you are not satisfied with our response or how we handled your complaint, you are entitled to lodge a complaint with a data protection authority. In Cyprus, this is the:

            Office of the Commissioner for Personal Data Protection
            Iasonos 1, 1082 Nicosia, Cyprus
            Website: http://www.dataprotection.gov.cy

            You may also lodge a complaint with the supervisory authority in your country of residence, place of work, or where an alleged infringement took place (if you are based in the EEA).

            Your California Privacy Rights
            If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

            - Right to know and access: You can request details about the personal information we have collected about you, its sources, how it's used, and with whom it's shared.
            - Right to delete: You may request that we delete personal information we’ve collected from you, subject to certain legal exceptions.
            - Right to opt out of sharing: You can ask us not to share your personal information with third parties.
            - Right to correct: You may request correction of inaccurate personal information we hold.
            - Right to limit use and disclosure of sensitive personal information**: You can direct us to limit the use of your sensitive data (e.g., financial or health data) strictly to necessary services.

            Contacting Us
            If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us at:

            Email: support@chainads.online

            This website is owned and operated by ChainAds Ltd., a company incorporated in Cyprus with its registered address at:

            160, M. Sfakianaki
            DA, Diethnis Aerolimenas Pafou, 8320
            Cyprus