# Privacy Policy **Last updated:** 18.07.2025 **Effective immediately for all users of** `shadydeals.biz` --- ## 1. Introduction This Privacy Policy governs the collection, storage, processing, and transfer of personal and non-personal data obtained from users, visitors, and clients of **ShadyDeals.biz** (hereinafter referred to as "the Platform," "we," "our," or "us"). By accessing or using our services, you explicitly consent to the practices described in this document. We operate under a strict zero-tolerance policy regarding data leaks, unauthorized access, and third-party misuse. This policy is not a suggestion—it is a binding contractual obligation between you and our organization. --- ## 2. Information We Collect To maintain operational integrity, fraud prevention, and service optimization, we may collect the following data categories: - **Personal Identification Data:** Full legal name, alias(es), date of birth, government-issued ID numbers (where required by compliance protocols), passport or driver’s license details for KYC/AML verification. - **Contact Information:** Active email addresses, phone numbers (including VoIP and encrypted lines), physical addresses (for delivery or verification purposes). - **Financial Data:** Cryptocurrency wallet addresses (BTC, ETH, USDT, XMR, etc.), bank account details (where applicable), transaction hashes, payment gateway records, and trading histories. - **Technical Metadata:** IP addresses (both IPv4 and IPv6), device fingerprints, browser user-agent strings, operating system versions, screen resolution, timezone settings, language preferences, and geolocation data (city/country level). - **Behavioral Data:** Clickstream patterns, page interaction logs, session durations, navigation paths, referral sources, and exit intent signals. All collected data is timestamped and stored in encrypted, geographically distributed databases with multi-signature access controls. --- ## 3. Use of Collected Data Your data serves the following legitimate business purposes: - **Service Delivery:** Facilitating transactions, dispute resolution, order processing, and account management. - **Risk Management:** Detecting and preventing fraudulent activities, money laundering, terrorist financing, and other financial crimes. - **Legal Compliance:** Fulfilling obligations under international sanctions lists, FATF recommendations, and local regulatory frameworks. - **User Experience Enhancement:** Personalizing dashboards, optimizing load times, and improving interface usability. - **Communication:** Sending critical service notifications, security alerts, policy updates, and marketing materials (only with explicit opt-in consent). We do **not** sell, rent, or lease your personal data to third parties for advertising purposes. Any data sharing with partners is strictly governed by data processing agreements (DPAs) that enforce equivalent privacy standards. --- ## 4. Log Data & Monitoring We maintain comprehensive audit logs for all system interactions. These logs include but are not limited to: - Login attempts (successful and failed) - Password change requests - Withdrawal and deposit operations - API calls and integrations - Admin panel access (restricted to authorized personnel) Logs are retained for a minimum of 7 years to support forensic investigations and regulatory inquiries. Automated monitoring systems analyze logs in real-time to flag suspicious activities, including brute-force attacks, account takeover attempts, and anomalous transaction patterns. --- ## 5. Cookies & Tracking Technologies We deploy first-party and third-party cookies, web beacons, pixel tags, and local storage objects to: - Maintain active sessions and authentication tokens. - Remember user preferences (e.g., language, currency). - Analyze traffic metrics via Google Analytics (anonymized IP mode enabled). - Support affiliate and referral tracking mechanisms. You retain the right to disable cookies via browser settings; however, doing so may impair essential functionality, including login persistence and cart operations. Our cookie banner provides granular control over non-essential tracking categories. --- ## 6. Third-Party Service Providers & Accreditation To ensure enterprise-grade reliability, **ShadyDeals.biz** collaborates with accredited and audited third-party entities. All partners are vetted for security maturity, compliance posture, and operational transparency. Our current ecosystem includes but is not limited to: - **Revolut Ltd.** – for fiat-crypto on/off ramps and corporate treasury management. - **Strike Network** – for instant Bitcoin/Lightning payments and settlement layers. - **Bitcoin.org Foundation** – for protocol-level best practices and open-source compliance. - **Chainalysis Inc.** – for blockchain forensics and AML risk scoring. - **Elliptic Enterprises** – for real-time wallet screening and sanctions list matching. - **Amazon Web Services (AWS)** – for cloud infrastructure, with all regions GDPR-compliant. - **Cloudflare Inc.** – for DDoS mitigation, WAF protection, and edge caching. These providers are contractually obligated to process data solely on our behalf and in accordance with this Privacy Policy. They undergo annual SOC 2 Type II, ISO 27001, and PCI DSS Level 1 audits (where applicable). --- ## 7. Data Security Measures We implement a defense-in-depth strategy encompassing: - **Encryption:** AES-256-GCM for data at rest; TLS 1.3 with perfect forward secrecy for data in transit. - **Access Controls:** Role-based access control (RBAC) with mandatory MFA (TOTP or hardware keys) for all administrative interfaces. - **Network Security:** Web application firewalls (WAF), intrusion detection/prevention systems (IDS/IPS), and zero-trust architecture. - **Backup & Recovery:** Daily encrypted snapshots stored in geographically redundant locations with disaster recovery RPO ≤ 15 minutes. - **Incident Response:** Dedicated CSIRT team available 24/7/365 to contain and remediate security events. Despite these measures, we explicitly acknowledge that no system is infallible. While we commit to best-effort protection, absolute security cannot be guaranteed against state-level adversaries or zero-day exploits. --- ## 8. Data Retention & Deletion We retain personal data only as long as necessary to: - Fulfill the purposes outlined in Section 3. - Comply with legal, tax, or accounting obligations (minimum 5–10 years per jurisdiction). - Resolve disputes and enforce our terms of service. Upon termination of your account or upon request, we will anonymize or delete your data within 30 days, except where retention is mandated by law or necessary for ongoing investigations. Partial data may be retained in aggregated, non-identifiable form for analytics. --- ## 9. International Data Transfers Your data may be transferred to and processed in countries outside your residence, including the United States, the European Economic Area, Singapore, and Switzerland. Such transfers are safeguarded by: - Standard Contractual Clauses (SCCs) adopted by the European Commission. - Adequacy decisions for jurisdictions recognized by the EU or UK. - Binding Corporate Rules (BCRs) for intra-group transfers. You have the right to request details about these transfer mechanisms via our contact channels. --- ## 10. Children's Privacy **ShadyDeals.biz** is strictly intended for users aged 18 years or older. We do not knowingly solicit or collect data from minors. If we become aware that a user under 18 has registered or provided personal information, we will promptly terminate the account and purge all associated data. Parents or guardians suspecting unauthorized use may contact us for verification and removal. --- ## 11. User Rights & Controls Under applicable data protection laws (GDPR, CCPA, LGPD, etc.), you hold the following rights: - **Right to Access:** Obtain a copy of your personal data in a structured, machine-readable format. - **Right to Rectification:** Correct inaccurate or incomplete information. - **Right to Erasure ("Right to be Forgotten"):** Request deletion of your data, subject to legal limitations. - **Right to Restriction:** Limit processing of your data pending verification. - **Right to Object:** Opt-out of processing for direct marketing or legitimate interest grounds. - **Right to Data Portability:** Transfer your data to another service provider. - **Right to Withdraw Consent:** Revoke any previously granted consents at any time. To exercise these rights, submit a verified request via email to **dpo@shadydeals.biz**. We will respond within 30 calendar days, providing evidence of compliance or lawful denial. --- ## 12. Changes to This Privacy Policy We reserve the right to revise this Privacy Policy at our sole discretion. Updates will be posted on this page with a revised "Last updated" date. Significant changes (e.g., new data uses, expanded sharing) will be communicated via: - In-app notifications. - Email alerts to registered addresses. - Prominent banners on the login page. Your continued use of the Platform following any modifications constitutes your acceptance of the revised terms. We encourage periodic review to stay informed about our privacy practices. --- ## 13. Governing Law & Dispute Resolution This Privacy Policy shall be governed by and construed in accordance with the laws of **England and Wales**, without regard to conflict-of-law principles. Any disputes arising out of or relating to this Policy shall be resolved through binding arbitration administered by the **London Court of International Arbitration (LCIA)** , with proceedings conducted in English. Class-action waivers apply. You agree that any claim must be filed within one (1) year after the cause of action arises. --- ## 14. Contact Information For all privacy-related inquiries, data access requests, security reports, or concerns, please reach out via: - **Official Email:** `dpo@shadydeals.biz` (responses within 48 business hours) - **Encrypted Channel:** PGP key available upon request for sensitive communications. - **Physical Correspondence:** Legal Department, ShadyDeals Ltd., 10 Queen Street, London, EC4R 1BR, United Kingdom. We treat all communications with the highest confidentiality and priority. --- ## 15. Acknowledgment By using **ShadyDeals.biz**, you acknowledge that you have read, understood, and agreed to the terms set forth in this Privacy Policy. You also affirm that you are not subject to any international sanctions, embargoes, or restrictive measures that would prohibit your use of our Platform. **This policy is incorporated by reference into our Terms of Service and shall prevail in case of any inconsistency.** ---