Loading legal document, please wait
This Privacy Policy has been updated on May 31, 2025
1.1 Baxity Store (“BAXITY”, “Baxity Store”, “We”, “Us”, “Our”) is always committed to protecting the privacy of our users, and we take our responsibilities to protect personal data very seriously.
1.2. If you have any questions regarding this Privacy Policy and the privacy terms of your personal data, you can contact us at [email protected].
This Privacy Policy describes how We collect, process and use the personal data you provide through the Baxity Store website referred to in this Privacy Policy, which includes the websites and/or domain names https://baxity.com/ and https://baxity.com/store/. It also describes the choices available to you regarding our use of your personal data and how you can access the information. We respect your privacy, and We take protecting it seriously.
Reading Privacy Policy is important so we hope you will give it time and attention.
1.3. This Privacy Policy applies to the following people:
a) people who use the Website (For the purposes of this policy, We define the term “User”, “you”, “your“, “yours“ as a person which has interacted with the Website).
b) people who make complaints to us by email.
1.4. If you are not a Baxity Store User, do not use of our services but use the Baxity Store website https://baxity.com/store (the “Website”) or otherwise interact with us or contact us regarding the terms of purchase of Baxity Store products and/or services, this Privacy Policy also applies to you together with our Cookie Policy. Therefore, this Privacy Policy should be read together with our Cookie Policy, which provides further information about our use of cookies on the Website. Our Cookie Policy can be found here.
1.5. Baxity Store uses several different legal entities in its operations. In this regard, depending on the terms of service, such as the payment method selected for goods and/or services, the controller of your personal data is the legal entity that has a contractual relationship with a specific payment provider and which determines the “means” and “purposes” of the personal data processing, as well as directly processing personal data.
1.6. In this Policy and for the purposes of the applicable laws personal data controller ("Data Controller") means the legal entity which, alone or jointly with others, determines the “purposes” and “means” of the processing of personal data, and which processes personal data.
1.7. Below in this Privacy Policy are set out the terms of Baxity Store relationship with you, depending on the applicable legal entity.
1.7.1. If you, as a User of Baxity Store, access or use the Website, make purchases on the Website and pay for digital products and/or services through such payment methods and/or payment providers as Astropay, Binance Pay, PayOp, your personal data Controller who collects, processes, uses and discloses your personal information is Baxity OÜ, Reg. code: 16540425, Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 7-634, 10117, Estonia. Since this company is registered in Estonia, control over the processing of personal data is carried out by the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), information about which you can find on their official website https://www.aki.ee.
1.7.2. If you, as a User of Baxity Store, access or use the Website, make purchases on the Website and pay for digital products and/or services through such payment methods and/or payment providers as Сryptomus, KuCoin Pay, your personal Data Controller, who collects, processes, uses and discloses your personal information, is CardEzy LLC, Reg. no.: 3684 LLC 2024, Registered address: Euro House, Richmond Hill Road, P. O. Box 2897, Kingstown, St. Vincent & the Grenadines. The processing of personal data by a company registered in Saint Vincent and the Grenadines is carried out in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”), the Data Protection Act 1998 (as amended), Directive 2002/58/EC – ePrivacy Directive (as amended) and other applicable local laws (“Personal Data Protection Laws”).
1.7.3. If you, as a User of Baxity Store, access or use the Website, make purchases on the Website and pay for digital products and/or services through such payment methods and/or payment providers as Zen, your personal Data Controller, who collects, processes, uses and discloses your personal information, is TECHNOLOGY OF SUCCESS LTD, Reg. No.: 201255995, Registered address: r. Manastirski livadi, str. Maystor Alexi Rilets № 38, fl. 1, 1618 Sofia, Bulgaria. The processing of personal data by a company registered in Bulgaria is carried out in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”) and the Bulgarian Personal Data Protection Act (PDPA). Control over the processing of personal data is carried out by the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), information about which you can find on their official website https://www.cpdp.bg/.
1.7.4. If you, as a User of Baxity Store, access or use the Website, make purchases on the Website and pay for digital products and/or services through such payment methods and/or payment providers as Skrill, Paysafecard, Neteller, your personal data Controller who collects, processes, uses and discloses your personal information is Old Tree Partners Limited, Reg. No.: 79583837, Registered address: Unit 308, 3/F., Chevalier House, 45-51 Chatham Road South, Tsim Sha Tsui, Hong Kong. The processing of personal data by a company registered in Hong Kong is carried out in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (the "PDPO") and, where applicable, Regulation (EU) 2016/679 - General Data Protection Regulation (“GDPR”). Control over the processing of personal data in Hong Kong is carried out by the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD), information about which you can find on their official website https://www.pcpd.org.hk/.
1.8. Baxity Store entities may share your personal data with each other, in that case they will use it in accordance with the terms of this Privacy Policy.
1.9. Baxity Store does not sell your personal data to third parties. A “sale” of personal data under the CCPA is defined broadly to include the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means” the Personal data of a User to another business or third party “for monetary or other valuable consideration.” If We decide to sell the Website, We will inform you about this, so you can forbid Us to transfer your personal data together with our business. If so, We will delete your data from the databases prior to a business transfer.
1.10. We adhere to the following principles in order to protect your privacy:
a) principle of purposefulness – We process personal data fairly and in a transparent manner only for the achievement of determined and lawful objectives, and they shall not be processed in a manner not conforming to the objectives of data processing;
b) principle of minimalism – We collect personal data only to the extent necessary for the achievement of determined purposes and do not keep personal data if it is no longer needed;
c) principle of restricted use – We use personal data for other purposes only with the consent of the data subject or with the permission of a competent authority;
d) principle of data quality – We update personal data shall be up-to-date, complete and necessary for the achievement of the purpose of data processing;
e) principle of security – security measures shall be applied in order to protect personal data from unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures;
f) principle of individual participation – the persons shall be notified of data collected concerning him or her, the persons shall be granted access to the data concerning him or her and the persons have the right to demand the correction of inaccurate or misleading data.
2.1. Personal information (“Personal Data”) is data that identifies an individual or relates to an identifiable individual. This includes information you provide to us, information which is collected about you automatically, and/or information we obtain from third parties while providing services for you.
2.2. To open personal account and access to our services and purchase digital goods, we'll ask you to provide us with some personal information about yourself. This information is either required by law (e.g., to verify your identity and comply with “Know Your Customer”, “KYC”), necessary to provide the requested services (e.g., you will need to provide your email address in order to open your account), or is relevant for certain specified purposes, described in greater detail below.
2.3. In some cases, such as when legislation changes or to comply with anti-money laundering and combating the financing of terrorism (“AML/CFT”) measures and requirements, you may be asked to provide us with additional information.
2.4. Failure in providing the required Personal Data implies that Baxity Store will not be able to offer you, our services.
2.5. In order to fulfill our obligations and provide you with opportunity to use our Website and purchase goods there, We are entitled to ask you to provide us with your Personal Data, including, but not limited to, the following:
a) Full name;
b) Date of birth;
c) Country of residence
d) Phone number;
e) Email address;
f) and other relevant data necessary to fulfill obligations in accordance with Baxity Store Terms and Conditions and our legal obligations and legitimate interest such as your address, your photographic identification, details of your identity documents (identity card, driver license or passport).
This information is used by us to identify the Users and provide them with services, mailings, notification, support and marketing actions, and to meet other contractual obligations.
2.6. Personal Data collected by or transmitted to the BAXITY in the course of accessing, interacting and operating of the Website may include, without limitation, the following Personal Data:
2.6.1. server and purchase log information, which may include (but is not limited to) your login details, the date and time of visits, the pages viewed, your IP address;
2.6.2. information collected by cookies and other tracking technologies. We use various technologies to collect information when you interact with the Website, including cookies and web beacons. ‘Cookies’ are small data files that are stored on your device when you visit the Website which enable us to collect information about your device identifiers, IP address, web browsers used to access the Website, pages or features viewed, time spent on pages and links clicked. You can manage your cookies settings through the Website. Web beacons are graphic images that are placed on a website or in an email that is used to monitor the behavior of the User visiting the website or sending the email. They are often used in combination with cookies. More information about cookies you can find in our Cookie Policy.
2.7. BAXITY may collect the Personal Data from you in a variety of ways and circumstances, including, but not limited to, registering through our Website, subscription to a newsletter, buying goods through the Website, providing us with feedback. BAXITY shall be entitled to combine Personal Data collected in the course of your interaction with different sections of the Website with any other relevant available information.
3. USE OF COLLECTED PERSONAL DATA
3.1 We may use the information collected from you for a variety of purposes, primarily, relating to providing our Website and buying digital products and/or goods. We may also use the information for such other purposes as otherwise allowed by law. For example, We (or a supplier or our affiliate company acting on our behalf and only under our instructions) may use your personal information, including personally identifiable information, for such purposes, including but not limited to:
3.1.1. to provide access to the Website and possibility to buy products, goods or services;
3.1.2. to manage your personal account and your registration as a User. The Personal Data you provide can give you access to different functionalities of the service that are available to you as a registered user, i.e., to enable you to complete purchases on the Website;
3.1.3. to properly fulfill the procedure of identifying your identity and verifying your personal account on the Website in accordance with the requirements of the AML/CFT laws;
3.1.4. to handle your orders and requests, including requests for technical support and assistance;
3.1.5. to comply with legal obligation purposes such as properly fulfill tax-related and accounting, fraud prevention and other obligations imposed by applicable laws;
3.1.6. to ensure security of your personal account (for example, if you make a request to disable 2-factor authentication we can ask you to provide additional information to confirm your identity);
3.1.7. to detect, investigate, and prevent illegal activities or conduct that may violate the Terms of Use of the Website and this Privacy Policy;
3.1.8. to personalize your experience with our Website;
3.1.9. to contact you in relation to, and conduct, surveys or polls you choose to take part in and to analyze the data collected for market research purposes;
3.1.10. to conduct internal research and development and to improve, test and enhance the features and functions of our Website;
3.1.11. marketing and promotion of our Website or related products, including those of a third party’s products which are related to our Website (If you do not want us to use your data in this way, please let us know by contacting us at: [email protected];
3.1.12. to meet our internal and external audit requirements, including our information security obligations;
3.1.13. tracking purchases and usage information;
3.1.14. any other purpose as We determine, in our sole discretion, to be necessary or required to ensure the safety and/or integrity of our Users, employees, third parties, public, and/or our Website, or to comply with requirements of any applicable law.
4.1. Personal Data that we process and collect may be shared and/or transferred between Baxity Store entities as a normal part of conducting business and providing our digital product and/or services to you.
4.2. Depending on the payment method and/or payment provider you use to pay for digital products and/or services on the Website, the procedure for identifying your identity (KYC) and verifying your personal account in accordance with AML/CFT requirements may be carried out by different Baxity Store entities:
a) If you make purchases on the Website and pay for digital products and/or services through payment methods and/or payment providers such as Astropay, Binance Pay, PayOp, your Personal Data Controller, who collects, processes and uses your Personal Data for the KYC procedure, is Baxity OÜ, Reg. no.: 16540425, Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 7-634, 10117, Estonia;
b) If you make purchases on the Website and pay for digital products and/or services through payment methods and/or payment providers such as Сryptomus, KuCoin Pay, your Personal Data Controller, who collects, processes and uses your Personal Data for the KYC procedure, is CardEzy LLC, Reg. no.: 3684 LLC 2024, Registered address: Euro House, Richmond Hill Road, P. O. Box 2897, Kingstown, St. Vincent & the Grenadines;
с) If you make purchases on the Website and pay for digital products and/or services through payment methods and/or payment providers such as Zen, your Personal Data Controller, who collects, processes and uses your Personal Data for the KYC procedure, is TECHNOLOGY OF SUCCESS LTD, Reg. No.: 201255995, Registered address: r. Manastirski livadi, str. Maystor Alexi Rilets № 38, fl. 1, 1618 Sofia, Bulgaria;
d) If you make purchases on the Website and pay for digital products and/or services through payment methods and/or payment providers such as Skrill, Paysafecard, Neteller, your Personal Data Controller, who collects, processes and uses your Personal Data for the KYC procedure, is Old Tree Partners Limited, Reg. No.: 79583837, Registered address: Unit 308, 3/F., Chevalier House, 45-51 Chatham Road South, Tsim Sha Tsui, Hong Kong.
4.3. Also, we may share your Personal Data with third parties (including any other Baxity Store entities) if we believe that sharing your Personal Data is in accordance with, or required by, any contractual relationship with you (including Baxity Store Terms and Conditions) or us, applicable law, regulation or legal process. When sharing your Personal Data with other Baxity Store entities, we will use our best endeavours to ensure that such entities are either subject to this Privacy Policy or follow practices at least as protective as those described in this Privacy Policy.
4.4. Third parties: we employ other companies and individuals to perform functions on our behalf. Examples include analysing data, providing marketing assistance, processing payments, transmitting content, and assessing and managing credit risk, KYC and/or AML/CTF service providers (for the purposes of transaction monitoring), security service providers (for investigating fraud and security incidents). The third-party service providers only have access to personal information needed to perform their functions but may not use it for other purposes. Further, they must process the personal information in accordance with our contractual agreements and only as permitted by applicable data protection laws. In accordance with and as far as provided by applicable law, your Personal Data may also be shared by third parties upon exercising your right to data portability. We may share your contact data with carefully selected third parties for marketing purposes to provide you with tailored information about products, services, promotions, and events that may be of interest to you. We will only share your contact data with third parties for marketing purposes if you have given your explicit consent to receive marketing updates. When you use third-party services (for example when you verify your identity and personal account through our partner's service) or websites that are linked through our Services, the providers of those services or products may receive information about you that Baxity Store, you, or others share with them. Please note that when you use third-party services or Baxity Store affiliate services which are not governed by this Privacy Policy, their own terms and privacy policies will govern your use of those services and products.
5.1. By using our Website, registering a personal account on the Website, making purchases on the Website and paying for digital products and/or services, you hereby agree to our Privacy Policy and agree to its terms.
5.2. By agreeing to this Privacy Policy, you confirm your consent to the transfer of Personal Data between Baxity Store entities, including cross-border data transfer between Baxity Store entities – Baxity OÜ, CardEzy LLC, TECHNOLOGY OF SUCCESS LTD and Old Tree Partners Limited. The sharing and/or transfer of your Personal data between Baxity Store entities is carried out on the terms of this Privacy Policy and strictly for the purpose of providing you with digital goods/products and services and/or the requirements of applicable law.
5.3. EU Persons Consent to Personal Data processing
5.3.1. If you are an EU Person and to process your Personal Data We need to receive your consent, as it is prescribed by the General Data Protection Regulation (GDPR), We will process your Personal Data only in the case We have received from you a freely given, specific, informed and unambiguous indication of your wishes by which you signify agreement to the processing of your Personal Data (“Consent“).
5.3.2. You may give your Consent by ticking a box when registering the personal account through the Website. In the case you tick the respective box, you irrevocably and unconditionally consent and agree that BAXITY shall be entitled to process your Personal Data as it is indicated by your Consent.
5.3.3. Your Consent covers all processing activities with your Personal Data carried out for the same purpose or purposes. When the Processing has multiple purposes, your Consent should be deemed given for all of them.
5.3.4. You have the right to withdraw your Consent at any time. You can submit such a request by sending us an email to [email protected]. Your withdrawal of Consent shall not affect the lawfulness of your Personal Data processing based on Consent before its withdrawal.
5.3.5. Except as required or enabled by law We will not use or disclose your Personal Data for any purpose for which you refuse Consent or later withdraw your Consent. If you withdraw Consent, you agree that in spite of this withdrawal, We may continue to use those Personal Data previously provided to us to the extent that We are contractually or otherwise legally obliged to do so and to the extent necessary to enforce any contractual obligation you may have towards BAXITY or in any other way permitted by law.
5.4. Non-EU Persons Consent to Personal Data processing
5.4.1. If you are not an EU Person, by transferring to us your Personal Data via the Website or otherwise, you irrevocably and unconditionally consent and agree that the BAXITY shall be entitled, in accordance with this Policy:
5.4.1.1. To Process in any manner, including to collect, store, use, disclose, share and transfer (including cross-border), your Personal Data so provided to us, as well as your Personal Data collected from your use of the Website (i.e. your Personal Data which We collect automatically and/or from other sources); and
5.4.1.2. to use cookies and web beacons (pixel tags) to collect your Personal Data.
6.1. If you are located in the European Economic Area (EEA) privacy rights are granted and all processing of Personal Data is performed in accordance with regulations and rules following the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, known as the General Data Protection Regulation (“GDPR”).
6.2. If you are located in California, all processing of Personal Data is performed in accordance with regulations and rules following the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. (“CCPA”).
6.3. If you are located in Brazil, all processing of Personal Data is performed in accordance with regulations and rules following the Lei Geral de Proteção de Dados (“LGPD”).
6.4. The Child Online Privacy and Protection Act (“COPPA”) regulates online collection of information from persons under the age of 13 (covered person). Covered persons are required to obtain parental consent before providing Personal Data via the Website. If you are a parent of a COPPA covered person, you have the option to agree to the collection and use of your COPPA covered person’s information. You may revoke your consent, review your COPPA covered person’s personal information, ask to have it deleted, and/or refuse to allow any further collection or use of your COPPA covered person’s information at any time, contact us at [email protected].
6.5. We process Personal Data as a Data Controller, as defined in the GDPR.
7.1. You can review, correct, update, delete or transfer your personal identifiable information. For that, contact us directly at [email protected]. We will acknowledge your request within seventy-two (72) hours and handle it promptly and as required by law.
7.1.1. Right to access. You may contact us to get confirmation as to whether or not We are processing your Personal Data. When We process your Personal Data, We will inform you of what categories of Personal Data We process regarding you, the processing purposes, the categories of recipients to whom Personal Data have been or will be disclosed and the envisaged storage period or criteria to determine that period.
7.1.2. Right to withdraw consent. In case our processing is based on consent granted, you may withdraw the consent at any time by contacting us or by using the functionalities of our Website. You can withdraw your consents at any time by replying to the email with your withdrawal and your Personal Data will be deleted in 48 business hours. Withdrawing consent may lead to fewer possibilities to use our Website.
7.1.3. Right to object. In case our processing is based on our legitimate interest to run, maintain and develop our business, you have the right to object at any time to our processing. We shall then no longer process your Personal Data unless for the provision of our services or if We demonstrate other compelling legitimate grounds for our processing that override your interests, rights and freedoms or for legal claims. Notwithstanding any consent granted beforehand for direct marketing purposes, you have the right to prohibit us from using Personal Data for direct marketing purposes, by contacting us or by using the functionalities of the Website or unsubscribe possibilities in connection with our direct marketing messages.
7.1.4. Right to restriction of the processing. You have the right to obtain from us restriction of processing of your Personal Data, as foreseen by applicable data protection law, e.g. to allow our verification of accuracy of Personal Data after your contesting of accuracy or to prevent us from erasing personal data when Personal Data are no longer necessary for the purposes but still required for your legal claims or when our processing is unlawful. Restriction of processing may lead to fewer possibilities to use our Website.
7.1.5. Right to data portability. You have the right to receive your Personal Data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party, in case our processing is based on your consent and carried out by automated means.
7.1.6. Right to lodge a complaint with the relevant data protection authority. As a law-abiding company we hope that we can satisfy any queries you may have about the way in which we process your personal data. However, if you have unresolved concerns, you also have the right to complain to the data protection authority in the location in which you live, work or believe a data protection breach has occurred.
7.1.7. How to use these rights. To exercise any of the above-mentioned rights, you should primarily use the functions offered by our Website. If such functions are, however, not sufficient for exercising such rights, you shall send us a letter or email to the address set out below under Contact, including the following information: name, address, phone number, email address, and a copy of a valid proof of identity. We may request additional information necessary to confirm your identity. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.
8.1. While retention requirements vary by jurisdiction, information about our typical retention periods for different aspects of your personal data is described below.
8.2. Personal Data collected to comply with our legal obligations under AML/CFT laws may be retained after account closure for as long as is required under such laws.
8.3. Personal Data such as your name, email address and phone number for marketing purposes is retained on an ongoing basis and until you (a) unsubscribe, or we (b) delete your personal account. Thereafter we will add your details to an unsubscribed list to ensure we do not inadvertently market to you.
8.4. Information collected via cookies, web page counters and other analytics tools is kept for a period of up to one year from the date of the collection of the cookie of the relevant cookie.
8.5. We store your Personal Data for as long as needed to provide you with any services available on our Website, and as may be required by law such as for tax and accounting purposes, compliance with Anti-Money Laundering and Terrorist Financing laws, or to resolve disputes and/or legal claims or as otherwise communicated to you. We may store Data longer, but only in a way that it cannot be tracked back to you. When Personal Data is no longer needed, We delete it using reasonable measures to protect the Data from unauthorized access or use.
8.6. EU Territory. We store Personal Data as long as it is needed for the provision of any services available on our Website. Traffic information is erased or made anonymous when it is no longer needed for the purpose of the transmission. Direct marketing and provision of value-added services information (including traffic information used for these purposes) is stored as long as the same is necessary for the provision of these activities, or up to the time when a User opts out from such use in accordance with this Privacy Policy. Other information is stored for as long as We consider it to be necessary for the provision of our Website. This Section shall not prevent any technical storage or access to information for the sole purpose of carrying out the transmission of a communication or as strictly necessary in order for us to provide you with any services available on our Website.
8.7. As explained in the GDPR statement, We strive to anonymize the data when possible. If you decide to exercise your right to erasure We will also inform our Providers to delete all your data.
8.8. US Territory. We will retain collected information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable legislation.
8.9. Storing might be different depending on the territory of collecting the information and the applicable legislation, but We always strive to store the information only as long as it is needed for the purposes of providing, improving or personalizing our Website.
8.10. We do not use the Website to knowingly solicit information from or market to children under the age of 13. In the event that We learn that We have collected personal data from a child under 13 years of age We will delete that information as quickly as possible. If you believe that We might have any information from or about a child under 13 years of age please contact us at [email protected].
9.1. We care to ensure the security of Personal Data. We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once We receive it. We maintain technical, physical, and administrative security measures to provide reasonable protection for your Personal Data. When We or our contractors process your information, We also make sure that your information is protected from unauthorized access, loss, manipulation, falsification, destruction or unauthorized disclosure. This is done through appropriate administrative, technical and physical measures.
9.2. We have implemented technical and organisational security measures to ensure the confidentiality, integrity, availability, and accountability of your Personal Data and to protect it from loss, misuse, unauthorised alteration, disclosed or destruction. Such measures include:
a) the pseudonymisation and TLS encryption of Personal Data;
b) 2-factor authentication;
c) strict access control;
d) processes to ensure the ongoing confidentiality, integrity, availability of our processing systems and services;
e) reliable backups to restore access to Personal Data in a timely manner in the event of a physical or technical incident.
9.3. All data transferred between legal entities of the Baxity Store for the purposes of this Privacy Policy are transferred strictly via secure communication channels that exclude unauthorized access by third parties.
9.4. In addition, we limit access to your Personal Data to those employees, agents. Only authorised personnel of Baxity Store have access to your Personal Data, and these personnel are required to treat the information as confidential.
9.5. Where you have consented to or we are obliged to pass on Personal Data to third parties to provide you with the requested service or in the carrying out of a regulatory or legal obligation, we will request that the high levels of technical and organisational security measures be applied through contractual arrangements, where possible.
9.6. We conduct testing, assessment, and evaluation of our technical and organisational measures effectiveness on a regular basis. Technical and organisational security measures in place, from time to time, are reviewed in line with legal and technical developments.
9.7. In the event of incidents, Personal Data leakage or the failure of security measures to protect such information we will notify you without undue delay.
9.8. Our security procedures mean that we may ask you to verify your identity to protect you against unauthorised access to your account. We recommend using a unique password for your Baxity Store personal account that is not utilized for other online accounts and signing off when you finish using a shared computer.
9.9. There is no 100% secure method of transmission over the Internet or method of electronic storage. Therefore, We cannot guarantee its absolute security.
9.10. We never process any kind of sensitive data and criminal offense data. Also, We never undertake profiling of Personal Data.
10.1. To facilitate our global operations, Baxity Store may transfer your Personal Data outside of the European Economic Area (“EEA”), UK and Switzerland. The EEA includes the European Union countries as well as Iceland, Liechtenstein, and Norway. Transfers outside of the EEA are sometimes referred to as “third country transfers”.
10.2. We may transfer your Personal Data to our affiliates, third-party partners, and service providers based throughout the world. In cases where we intend to transfer personal information to third countries or international organisations outside of the EEA, Baxity Store puts in place suitable technical, organizational and contractual safeguards (including Standard Contractual Clauses), to ensure that such transfer is carried out in compliance with applicable data protection rules.
10.3. When transferring Personal Data We also rely on decisions from the European Commission (“adequacy decisions”) where they recognize that certain countries and territories outside of the European Economic Area ensure an adequate level of protection for Personal Data.
10.4. We may transfer your Personal Data in the following cases:
a) if the country where we transfer your Personal Information provides the adequate level of personal data protection, as determined by the European Commission.
b) if we take appropriate safeguards to ensure that your rights as a data subject are protected.
c) if any derogations for specific situations apply, such as if the transfer is necessary for the establishment, exercise, or defence of legal claims or for an important reason of public interest.
11.1. Depending on the payment method and/or payment provider you use to pay for digital products and/or services on the Website, the applicable law may differ for you.
If the Data Controller of your Personal Data is Baxity OÜ, the applicable law and jurisdiction of dispute resolution is the Republic of Estonia.
If the Data Controller of your Personal Data is CardEzy LLC, the applicable law and jurisdiction of dispute resolution is St. Vincent & the Grenadines.
If the Data Controller of your Personal Data is TECHNOLOGY OF SUCCESS LTD, the applicable law and jurisdiction of dispute resolution is Bulgaria.
If the Data Controller of your Personal Data is Old Tree Partners Limited, the applicable law and jurisdiction of dispute resolution is Hong Kong.
12.1. We work with third party service providers who provide website, application development, hosting, maintenance, processing credit card payments and other Services for us. They may be located outside of the EEA. These contractors may have access to, or process Personal Data on behalf of us as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions. We concluded additional NDAs with all our contractors to which Personal Data may be transferred.
12.2. All data transfers are performed in accordance with the highest security regulations. Transfer of Personal Data to countries outside of the European Economic Area may be possible only in the case, when We have obtained your consent for it.
12.3. All data processed by Us is stored exclusively in secure hosting facilities provided by Hostinger and located in Lithuania.
12.4. We use Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. You can learn more about it by visiting this page: https://marketingplatform.google.com/about/analytics/?hl=ru
12.5. We use Yandex Metrica to evaluate website traffic and analyze User behavior. For more information on the privacy practices of Yandex Metrica, please visit the Privacy Policy: https://metrica.yandex.com/about/info/privacy-policy
12.6. We use Jivochat. For more information on the privacy practices of Jivochat, please visit the Privacy Policy: https://www.jivochat.com/files/privacy_policy.pdf
12.7. We use Telesign to check the risk score of phone numbers and protect Users accounts from unauthorized access. For more information on the privacy practices of Telesign, please visit the Privacy Policy: https://www.telesign.com/privacy-notice
12.8. We use ShuftiPro as a service for KYC procedure. For more information on the privacy practices of ShuftiPro, please visit the Privacy Policy: https://shuftipro.com/privacy-policy/
12.9. We use reCAPTCHA. For more information on the privacy practices of reCAPTCHA, please visit the following website: https://www.google.com/recaptcha/about/
12.10. We use Cloudflare. For more information on the privacy practices of Cloudflare, please visit the Privacy Policy: https://www.cloudflare.com/privacypolicy/
12.11. We use Trustpilot. For more information on the privacy practices of Trustpilot, please visit the Privacy Policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
13. OPT-OUT
13.1. You can deactivate local notifications by changing the notification settings in accordance with the instructions of the operating system running on the Users’ device.
14.1. This Privacy Policy is applicable to our Website. Once redirected to another website or App, this Policy is no longer applicable.
15.1. We assume that all Users have carefully read this document and agree to its content. If one does not agree with this Privacy policy, they should refrain from using the Website.
16.1. From time to time, We may update this Privacy Policy. We encourage you to periodically check back and review this Policy so that you always will know what information We collect, how We use it, and with whom We share it.
16.2. The terms of our business and services, as well as legal and regulatory requirements, may change, and we may update this Privacy Policy from time to time. We recommend you to periodically check back and review this Privacy Policy to see recent changes. We will charge the “Updated date” accordingly at the beginning of this Privacy Policy. We will announce any material changes to this Privacy Policy on Website or by sending an email that you have provided under your account.
16.3. Your continued use of Baxity Store after the changes to this Privacy Policy means that you understand and agree to such changes.
This Privacy Policy may be published in different languages. In case of any discrepancy, current English version shall prevail.
18.1. Regardless of which Baxity Store entities processes your Personal Data, you can send any questions or issues you have about this policy and the terms of processing Personal Data to the Baxity Store email address [email protected] and we will try to resolve it. You also have the right to contact the applicable Data Protection Authority.