Privacy Policy

Who We Are

This website is operated by ChainLight ("we", "us", or "our").

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, you can contact us at:

privacy@chainlight.io

What Data We Collect

We only collect information that you voluntarily provide through this website, together with limited technical information where you have given your consent.

Contact Form

When you contact us through our website, we collect:

• Your name
• Your email address
• Your company name (if provided)
• The contents of your message

Risk Scan Requests

When requesting a Risk Scan, we collect:

• The wallet address, token address, or smart contract address you submit
• The email address used to deliver your report

Newsletter

If you subscribe to our newsletter, we collect:

• Your email address

Technical Information

If you consent through our cookie banner, we may collect technical and usage information through analytics services, including:

• Browser type
• Device information
• Pages visited
• Session interactions
• Approximate location
• Referring website
• Campaign attribution data

More information is available in our Cookie Policy.

Why We Process Your Data (Legal Basis)

Under the UK GDPR and EU GDPR, we process personal data only where a lawful basis exists.

Responding to Your Inquiries

We process your contact information to respond to questions, requests, and potential business inquiries.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures).

Delivering Risk Scan Reports

We process wallet addresses and your email address to generate and deliver the requested Risk Scan report.

Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

Newsletter

We send newsletters only where you have explicitly opted in.

Legal basis: Article 6(1)(a) GDPR (consent).

You may unsubscribe at any time using the unsubscribe link included in every email.

Analytics and Marketing

Analytics tools and marketing measurement technologies are activated only after you have given consent through our cookie banner.

Legal basis: Article 6(1)(a) GDPR (consent).

You may withdraw your consent at any time by clearing your browser data or changing your cookie preferences when available.

Where Your Data Is Stored

Your information may be processed by our hosting, cloud infrastructure, database, analytics, and email service providers.

These providers may operate infrastructure located within the European Economic Area (EEA), the United Kingdom, and the United States.

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

Access to personal data is limited to authorized personnel who require it to perform their duties.

We do not sell your personal data and we do not share it with advertisers.

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected.

Typical retention periods are:

• Contact inquiries and business leads: up to 24 months after our last communication.
• Risk Scan requests and related correspondence: up to 24 months, unless a longer retention period is required for an ongoing engagement.
• Newsletter subscriptions: until you unsubscribe.
• Analytics data: according to the retention settings of the respective analytics provider.

Where legal obligations require longer retention, we will retain information for the required period.

Your Rights

Subject to applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data ("right to be forgotten").
• Request restriction of processing.
• Receive your personal data in a portable format.
• Object to processing where applicable.
• Withdraw any consent previously given.

To exercise any of these rights, please contact:

privacy@chainlight.io

You also have the right to lodge a complaint with your local data protection authority if you believe your personal data has been processed unlawfully.

Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmitting information over the Internet or storing electronic data can be guaranteed to be completely secure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices.

The date shown at the top of this page indicates when this policy was last updated. The latest version will always be available on this website.