Privacy Policy

Version 0.2 · [date] · Controller: [Company name], [address]. Contact: [privacy email]. [ICO registration number].

#What we collect. Account details (email, display name, statement), wallet addresses and on-chain activity, terms acceptances and attestations, marketing preferences, identity-check results from our verification provider (we store the result and a reference, not your documents), delivery addresses (encrypted, deleted 90 days after delivery), device and usage data (hashed IP address, browser), messages you send us, and Discord account ID if you link it.

#Why and on what basis.

• To provide the service: accounts, trading, delivery, notifications — contract.
• To meet legal duties: identity, anti-money-laundering and sanctions checks, record keeping — legal obligation.
• To keep Nicest secure and prevent fraud and market abuse — legitimate interests.
• To send news and event invitations by email — consent, which you can withdraw at any time.
• To measure how the site is used (analytics cookies) — consent.

#Public information. Blockchain transactions, wallet addresses, holdings, bids and sales are public by nature. Your collection page is public unless you hide it in settings; even then, ownership of a Token remains visible on chain.

#Who we share with. Hosting (Railway), wallet and sign-in (Privy, WalletConnect), identity checks (Persona), sanctions screening (Chainalysis), location lookup (MaxMind), email (Resend), file storage and IPFS pinning (Railway / Pinata), analytics (PostHog, only with consent), error monitoring (Sentry), Discord (if you link it), couriers (for delivery), and authorities where the law requires. Some providers are outside the UK; we use UK-approved safeguards.

#How long we keep it. Account data while your account is open; identity and transaction records for 5 years after our relationship ends; delivery addresses for 90 days after delivery; marketing consent history for as long as we hold your email plus 2 years.

#Your rights. Access, correction, deletion, restriction, objection, portability, and withdrawing consent. Use Settings → Privacy to download your data or delete your account, or email us. You can complain to the Information Commissioner's Office (ico.org.uk).