Smart Token Labs Privacy Policy
Effective Date: 21 December 2022
Who we are
This is the Privacy Policy for Smart Token Labs (“STL”), which may be found at https:// smarttokenlabs.com/ (“the Site”), and its related mobile and web-based applications and services, including TokenScript (https://tokenscript.org/), and AlphaWallet (https://alphawallet.com/), and other related applications and services (collectively, “Applications and Services”).
This Privacy Policy describes how we may collect, use, disclose and process your personal data when you:
access or use this Site, and Applications and Services; and/or
provide us with your personal data.
We will only use your personal data where you have given us your consent or where we have other lawful basis for doing so, and in the manner set out in this Privacy Policy.
By providing us with personal data, you acknowledge that our collection, use, disclosure and processing of personal data will be in accordance with this Policy, including, for the avoidance of doubt, the cross-jurisdictional transfer of your data. DO NOT provide any personal data to us if you do not accept this Privacy Policy.
This Privacy Policy supplements but does not supersede or replace any consents you may have provided to us, or any other agreements or arrangements that you may have with us, in respect of your personal data.
Our Applications and Services may contain links to other websites that are not owned or maintained by us. These links are provided only for your convenience. You may also be accessing our Applications and Services through third party websites and/or platforms. This Privacy Policy only applies to our Applications and Services. When visiting these third party websites, their privacy policies apply.
If you have any feedback or issues in relation to your personal data, or about this Privacy Policy, or wish to make a complaint to us, you may contact our Data Protection Officer at :
Email : compliance@smarttokenlabs.com
When you contact us, we may require that you submit certain forms or provide certain information, including verification of your identity, before we are able to respond.
What personal data we collect and why we collect it
What is personal data. “Personal data” is data that can be used to identify a natural person. Examples of personal data include name, address, contact details, identification numbers, financial information, transactional information based on your activities on our websites, applications and platforms, telephone numbers, email address, images, and any other information of a personal nature.
Voluntary provision of personal data. We may collect personal data (1) that you voluntarily provide to us; or (2) from third parties; or (3) through your use of our (or our services provider’s) digital technologies and services (Please see Section 4 How We Collect Personal Data for further details). What personal data we collect depends on the purposes for which the personal data is collected and what you have chosen to provide.
When our collection is based on consent, you can choose not to provide us with personal data. You also have the right to withdraw your consent for us to continue collecting, using, disclosing and processing your personal data, by contacting us in accordance with paragraph 1.7. However, if you do so, it may not be possible for us to fulfil the purposes for which we require the personal data,
including processing your transactions or providing you with the products and services that you require.
Providing personal data belonging to others. In certain circumstances, you may also provide us with personal data of persons other than yourself (such as your family members and friends). If you do so, you represent and warrant that you have brought this Privacy Policy to his/her attention, informed him/her of the purposes for which we are collecting his/her personal data and that he/she has consented to your disclosure of his/her personal data to us for those purposes and that he/she accepts this Privacy Policy. You agree to indemnify and hold us harmless from and against any and all claims by such individuals relating to our collection, use and disclosure of their personal data.
Accuracy and completeness of personal data. You are responsible for ensuring that all personal data that you provide to us is true, accurate and complete. You are responsible for informing us of any changes to your personal data.
Minors. Our Applications and Services are not intended to be accessed or used by children, minors or persons who are not of legal age. If you are a parent or guardian and you have reason to believe your child or ward has provided us with their personal data without your consent, please contact us.
Tokens. You acknowledge and consent to the collection, use, disclosure, processing, transfer and storage of your personal data by us and/or third party service providers that facilitate the transactions and activities between you and other users or third parties on or through our Applications and Services, for the purposes of generating, creating, providing, storing, processing, facilitating, transferring, transmitting and managing Tokens.
In this Policy, “Tokens” refers to cryptographic tokens, assets, or other such term describing an asset on any blockchain possessing unique identifiers or other metadata that distinguishes such asset from other tokens or assets on a blockchain in a manner that makes such asset irreplaceable. Such an asset may be fungible or non-fungible. Non-fungible tokens are unable to be exchanged for a similar token or asset of like kind or nature. For example, a derivative NFT created by a partner platform using STL technology represents a unique derivative of a unique intellectual property asset, while other tokens may be digital tickets (entitling a holder to entry to a particular event), or digital representations denoting ownership of non-fungible physical assets such as cars. You acknowledge and consent for us (or our service providers) to disclose your data and information (including information about Tokens) to third parties at your instruction and/or direction.
HOW WE COLLECT PERSONAL DATA
Personal data you provide. We collect personal data that is relevant to our relationship with you. We may collect your personal data directly or indirectly through various channels, such as when:
you access, download or use our Applications and Services;
you authorise us to obtain your personal data from a third party;
you enter into agreements with us;
you transact with us, contact us or request that we contact you through various communication channels, for example, through social media platforms, messenger platforms, face-to-face meetings, telephone calls, emails, fax and letters;
you request to be included in an e-mail or our mailing list;
you attend events or functions organised by us;
we seek information about you and receive your personal data in connection with your relationship with us; and
when you submit your personal data to us for any other reason.
Personal data provided by others. Depending on your relationship with us, we may also collect your personal data from third party sources, for example, from:
any third parties whom you have authorised us to obtain your personal data from;
entities in which you (or a party connected to you) have an interest;
our business partners such as third parties providing services to us;
your family members or friends who provide your personal data to us on your behalf; and/or
public agencies or other public sources.
WHAT WE DO WITH YOUR PERSONAL DATA
General purposes. We collect, use, disclose and process your personal data for purposes connected or relevant to our business, to manage your relationship with us. Such purposes would include:
carrying out your transactions with us and our business partners, taking steps as may be directed by you, or to provide products and/or services to you;
facilitating your use of our Applications and Services, including verifying and establishing your identity (where necessary);
facilitating business asset transactions;
communicating with you, and assisting you with your queries, requests, applications, complaints, and feedback;
resolving any disputes, investigating any complaint, claim or dispute or any actual or suspected illegal or unlawful conduct;
carrying out research and statistical analysis, including development of new products and services or evaluation and improvement of our existing products and services;
security purposes, e.g. protecting our Applications and Services from unauthorised access or usage and to monitor for security threats;
compliance with any legal or regulatory obligations, applicable laws, regulations, codes of practices, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
performing data analytics and related technologies on data, to enable us to deliver relevant content and information to you, and to improve our websites and digital platforms;
managing and engaging third parties or data processors that provide services to us, e.g. IT services, technological services, delivery services, and other professional services;
carrying out our legitimate business interests;
such purposes that may be informed to you when your personal data is collected; and/or
any other reasonable purposes related to any of the above purposes.
Where personal data is used for a new purpose and where required under applicable law, we shall obtain your consent.
Legitimate business interests. In accordance with law, we may also collect, use, disclose and process your personal data for the following purposes to support our legitimate business interests, which include:
managing our business and relationship with you, and providing services to our customers;
assistance of carrying out corporate restructuring plans;
complying with internal policies, and procedures;
protecting our rights and interests, and those of our customers;
enforcing our terms and conditions, and obligations owed to us, or protecting ourselves from legal liability;
managing our investor and shareholder relations; and
process or share your personal data to facilitate acquisitions, mergers, or transfers of our business.
Marketing purposes. In order for us to market products, events and services which are of specific interest and relevance to you, we may analyse and rely on your personal data provided to us, or data collected from your interactions with us. However, no marketing, using your personal data in non-aggregated and/or identifiable form would be carried out unless you have provided us with your consent to use your personal data for such marketing purposes. If you do not want us to use your personal data for the purposes of marketing you can withdraw your consent at any time by contacting us in accordance with paragraph 1.7 above.
Use permitted under applicable laws. We may also collect, use, disclose and process your personal data for other purposes, without requiring your consent, where this is required or permitted by law. Your personal data may be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claim. We will not delete personal data if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.
Contacting you. When we contact or send you information for the above purposes and purposes for which you have consented, we may do so by post, e-mail, SMS, telephone or such other means provided by you. If you do not wish to receive any communication or information from us, or wish to restrict the manner by which we may contact or send you information, you may contact us in accordance with paragraph 1.7 above.
USE OF AUTOMATED DATA COLLECTION TECHNOLOGIES
Automated Data Collection Technologies. To improve our products or services, we collect data by way of “cookies”. A cookie is a small file of letters and numbers that we store via your browser on the hard drive of your computer or mobile device. We use third party cookies, which are placed by someone other than us which may gather data across multiple websites or sessions.
How we use Automated Data Collection Technologies. We use cookies and other similar technologies for performance / analytics and product development purposes. These cookies collect information on how users use our Website, for example which pages you visit most often, whether you receive any error messages and how you arrived at our Applications and Services. Information collected by these cookies is used only to improve your use of our Applications and Services. These cookies are sometimes placed by third party providers of web traffic and analysis services.
Automated Data Collection Technologies we use. A list of cookies and similar technologies used in our Applications and Services are as follows:
Name of toolkit
Why it is used
Company
Third party privacy policies
User controls
Performance / analytics and product development
Mixpanel
Users can disable collection of analytics in the settings. (In iOS, Settings tab > Advanced > Analytics)
(In Android, this feature will be available in January 2023)Performance / analytics and product development
Firebase
Disabling of this feature is underway, will be available in January 2023
Where we allow third parties identified above to drop cookies or similar technologies, we have no control over those technologies or the data generated. Please refer to the third party's privacy policy for information on what information they collect and how they use it.
Refusing or deleting cookies. Most internet browsers are set up by default to accept cookies. However, if you want to refuse or delete them (or similar technologies), please refer to the help and support area on your browser (for example: Google Chrome, Mozilla Firefox and Safari) for instructions on how to block or delete cookies. Please note you may not be able to take advantage of all the features of our Applications and Services, including certain personalised features, if you delete or refuse cookies.
Mobile Opt-out. If you access our Applications and Services through mobile devices, you can enable a "do not track" feature so as to control interest-based advertising on an iOS or Android mobile device in the privacy section of your Settings on iOS or via advertising preferences on Android devices (e.g. in Google Settings).
If you are a resident in the EU or United States. For more information on managing cookies, please visit:
EU residents: www.youronlinechoices.eu and www.aboutcookies.org ; or US residentswww.aboutads.info and www.networkadvertising.org
The above links have further information about behavioural advertising and online privacy.
Changes to our uses of Automated Data Collection Technologies. If we change anything important about this Paragraph 5 on cookies, we will (for a reasonable length of time prior to and following the change) notify you through a pop-up on the website. You may review this Paragraph by visiting the sites and clicking on the “Privacy Policy” link.
DISCLOSURE OF PERSONAL DATA
Disclosure to related parties. We may disclose or share your personal data with parties related to us so as to provide our services to you, for management and compliance purposes, and to utilise shared group IT functions.
Disclosure to third parties. We may also disclose your personal data to third parties in connection with purposes described in paragraph 4, including without limitation the following circumstances:
disclosing your personal data to third parties who provide services to us (including, but not limited to, data providers, technology providers, insurance providers, and other professional services (including accountants, lawyers and auditors));
disclosing your personal data to other users or third parties for the purposes of any transaction;
disclosing your personal data to third parties in order to fulfil such third party products and/or services as may be requested or directed by you;
disclosing your personal data to authorities, governments, law enforcement agencies or public agencies;
If we are discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality;
If we are reorganised or sold, information may be transferred to a buyer who can continue to provide continued relationship with you; and
If we are defending a legal claim your information may be transferred as required in connection with defending such claim.
When disclosing personal data to third parties, we will (where appropriate, required or permissible) enter into contracts with these third parties to protect your personal data in a manner that is consistent with all applicable laws and/or ensure that they only process your personal data in accordance with our instructions. Please also note the provisions of paragraph 4.4 above.
TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES
Transfers. We may transfer your personal data to different jurisdictions in connection with the purposes described in paragraph 4:
from the jurisdiction where it is collected (or where you are located) to any other jurisdictions that we operate in; and
to third parties in other jurisdictions.
Safeguards. Where we transfer your personal data across jurisdictions, we will ensure that your personal data is protected in accordance with this policy and applicable laws regardless of the jurisdictions they are transferred to, but in any event to a level that is no less stringent than the jurisdiction from which the personal data is transferred. When we transfer your personal data internationally and where required by applicable law we put in place appropriate safeguards including EU Model Clauses or rely on EU Commission adequacy decisions. You may obtain details of these safeguards by contacting us.
SECURITY AND RETENTION OF PERSONAL DATA
Unauthorised access. While we take reasonable precautions to safeguard your personal data in our
possession or under our control, you agree not to hold us liable or responsible for any loss or damage resulting from unauthorised or unintended access that is beyond our control, such as hacking or cybercrimes.
Vulnerabilities. We do not make any warranty, guarantee, or representation that your use of our systems or applications is safe and protected from malware, and other vulnerabilities. We also do not guarantee the security of data that you choose to send us electronically. Sending such data is entirely at your own risk.
Period of retention. We retain your personal data only for as long as is necessary to fulfil the purposes we collected it for, and to satisfy our business and/or legal purposes, including data analytics, audit, accounting or reporting purposes. How long we keep your personal data depends on the nature of the data, e.g. we keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Some information may also be retained for longer, e.g. where we are required to do so by law.
Anonymised data. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we are entitled to retain and use such data without restriction.
YOUR RIGHTS
Rights you may enjoy. Depending on the jurisdiction that you are in or where we operate, you may enjoy certain rights under applicable law in relation to our collection, use, disclosure and processing of your personal data. Such rights may include:
Access: you may ask us if we hold your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of and information on the personal data we hold about you.
Correction: you may request that any incomplete or inaccurate personal data we hold about you is corrected.
Erasure: you may ask us to delete or remove personal data that we hold about you in certain circumstances.
Restriction: you may withdraw consent for our use of your personal data, or ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy.
Portability: you may request the transfer of certain of your personal data to another party under certain conditions.
Objection: where we are processing your personal data based on a legitimate interest (or those of a third party) you may object to processing on this ground.
If you wish to exercise any of your rights, you may contact us in accordance with paragraph 1.7. We may require that you submit certain forms or provide certain information to process your request. Where permitted by law, we may also charge you a fee to process your request.
Limitations. We may be permitted under applicable laws to refuse a request, for example, we may refuse (a) a request for erasure where the personal data is required for in connection with claims; or
(b) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.