This policy explains what personal data Coldcore processes and why. Controller: [Company name and legal form], [Street and number, postcode, city], [Country], e-mail [Contact e-mail address].
What we don't do
No advertising or analytics trackers, no social-media plugins, no third-party fonts or scripts: every page and file is served by our own server. We don't sell or share your data for marketing.
Data we process
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, e-mail address, delivery and invoice address, phone number (if given), order contents | Processing and delivering your order, customer service, invoices | Contract, Art. 6(1)(b) |
| Payment data: chosen cryptocurrency, the payment address created for your order, amounts and transaction IDs | Matching your payment to your order, refunds | Contract, Art. 6(1)(b) |
| Customer account (if you create one): e-mail, password (stored hashed), addresses, order history | Your account | Contract, Art. 6(1)(b) |
| Messages you send us (contact form, e-mail) | Answering your request | Contract or legitimate interest, Art. 6(1)(b)/(f) |
| Newsletter and "notify me when available" e-mail address | Sending what you signed up for; you can unsubscribe at any time | Consent, Art. 6(1)(a) |
| Technical data: IP address, browser, pages visited, time | Running and securing the shop, our own visit statistics | Legitimate interest, Art. 6(1)(f) |
| Invoices and order records | Tax and accounting obligations | Legal obligation, Art. 6(1)(c) |
Cookies
We only use the cookies needed for the shop to work: your session, cart, login and checkout progress. They are deleted when they expire or when you log out. No tracking cookies are used, so no cookie consent is needed for them.
Blockchain payments
Cryptocurrency transactions are recorded on public blockchains, permanently and visible to anyone. We can't change or delete them. On its own, a blockchain transaction doesn't show your name: the link between your order and the payment address exists only in our records. Monero transactions are private by design.
To convert prices, our payment server asks public exchanges (such as Kraken and KuCoin) for the current exchange rate. These requests contain no personal data or order details.
Who receives your data
- The shipping carrier: name, delivery address, and phone number if needed for delivery.
- Our hosting provider ([Hosting provider, country]) and e-mail provider ([E-mail provider, country]), who process data only on our behalf.
- Customs authorities, for deliveries outside the EU (customs declaration).
- Authorities, where we are legally required to.
How long we keep it
- Order and invoice records: as long as tax and accounting law requires (usually 6 to 10 years).
- Customer accounts: until you delete your account or ask us to.
- Abandoned carts and guest data not needed for an order: deleted after a few months.
- Server logs: a few weeks at most.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Write to [Contact e-mail address]. You can also lodge a complaint with a data protection supervisory authority, for example [Data protection authority in your country, with link].
You can download or delete your data from your customer account (Personal data).