1. Introduction
CoinSpent ("CoinSpent", "we", "us", "our") operates a platform that lets users buy and sell digital assets and receive or send funds in local currency. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have.
By creating an account or using our website and services, you acknowledge that you have read this policy. If you do not agree with it, please do not use our services.
2. Information We Collect
We collect this information directly from you, automatically when you use the site, and from service providers such as identity verification and payment partners.
3. How We Use Your Information
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide the service | Create your account, process buy and sell orders, send payouts | Performance of a contract |
| Verify identity and prevent financial crime | KYC checks, sanctions screening, transaction monitoring | Legal obligation |
| Security and fraud prevention | Detect suspicious logins, rate limiting, abuse investigation | Legitimate interests |
| Customer support | Answer questions and resolve disputes | Contract / legitimate interests |
| Service improvement | Analytics, performance monitoring, product development | Legitimate interests / consent |
| Marketing (optional) | Product news and offers | Consent, which you can withdraw at any time |
4. Cookies and Similar Technologies
We use cookies and local storage to keep you signed in, remember preferences such as currency and language, protect against fraud, and understand how the site is used.
- Essential: required for login, security and core functionality.
- Preference: remember your country, currency and language.
- Analytics: help us understand usage so we can improve the platform.
You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the site from working.
5. How We Share Information
We share personal data only where necessary and with appropriate safeguards:
- Service providers: identity verification, payment processing, hosting, email and analytics vendors acting on our instructions.
- Banking and payment partners: to execute fiat payouts and collections.
- Authorities: regulators, law enforcement or courts where required by law or to protect rights and safety.
- Business transfers: in connection with a merger, financing or sale of assets, subject to confidentiality.
We do not sell your personal data to third parties.
6. International Transfers
Because we serve users in many countries, your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as contractual protections to keep your data protected to a comparable standard.
7. Data Retention
We keep personal data only as long as needed for the purposes described above. Financial and identity records are generally retained for at least five years after the end of the relationship, or longer where the law requires. When data is no longer needed, we delete or anonymise it.
8. Data Security
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, access controls, rate limiting, audit logging and restricted internal access. No system is completely secure, so please use a strong, unique password and never share your credentials or one-time codes.
9. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion, subject to legal retention duties.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent for optional processing such as marketing.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us using the details below. We may need to verify your identity before responding.
10. Children's Privacy
Our services are only for people aged 18 or over. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date above shows the latest revision. For material changes we will notify you by email or through the website.
Contact our support team at support@coinspent.com or through the Support page. We aim to respond within 2 business days.