Privacy Policy
Coin Back Up Buddy – Premium Digital Asset Trading Platform
Last Updated: June 2026
At Coin Back Up Buddy ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.
1. Information We Collect
We collect information that you voluntarily provide to us when you:
- Register for an account (name, email address, phone number, username)
- Complete the one-time fee payment (payment verification details only)
- Communicate with our support team
- Participate in platform activities
We do NOT collect, store, or have access to:
- Your cryptocurrency wallet private keys
- Your wallet seed phrases
- Your bank account login credentials
- Your cryptocurrency holdings (transactions occur on-chain, not on our servers)
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Facilitate your access to the Metamorpho Vault and trading features
- Process your one-time registration fee payment
- Communicate important platform updates and security notices
- Respond to your support inquiries
- Comply with legal and regulatory obligations (AML/CTF)
- Improve and optimize our platform
3. Legal Basis for Processing (GDPR Compliance)
If you are located in the European Economic Area (EEA), we process your personal information based on the following legal grounds:
- Contractual Necessity: To perform our contract with you (account registration, platform access).
- Legitimate Interests: To improve our services, prevent fraud, and ensure platform security.
- Legal Compliance: To comply with anti-money laundering and counter-terrorism financing laws.
- Consent: For marketing communications (you may opt out at any time).
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
- Service Providers: Third-party vendors who help us operate the platform (e.g., hosting, payment processing, email services). These providers are contractually obligated to protect your data.
- Legal Requirements: If required by law, court order, or government regulation (e.g., anti-money laundering compliance).
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any such change).
- Protection of Rights: To protect the security and integrity of our platform, or to defend against legal claims.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of sensitive data in transit (SSL/TLS)
- Hashed password storage (bcrypt)
- Regular security audits and updates
- Access controls and authentication measures
- Secure data centers with restricted access
Important: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are also responsible for maintaining the security of your account credentials and wallet private keys.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with services. We may also retain and use your information as necessary to:
- Comply with legal obligations (e.g., AML record-keeping requirements)
- Resolve disputes
- Enforce our agreements
- Detect and prevent fraud
Typically, we retain transaction-related information for at least 5 years to comply with financial regulations.
7. Your Rights (For EEA and UK Users)
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data ("right to be forgotten").
- Right to Restrict Processing: Limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent for marketing communications.
To exercise any of these rights, please contact us through our contact form or support email.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform. For detailed information about our cookie usage, please see our separate Cookie Policy.
Types of cookies we use:
- Essential Cookies: Required for platform functionality (login, sessions, security).
- Preference Cookies: Remember your settings and preferences.
- Analytics Cookies: Help us understand how users interact with our platform.
You can control cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission.
10. Children's Privacy
Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a minor, we will delete it immediately.
11. Third-Party Links
Our platform may contain links to third-party websites, including blockchain explorers, wallet providers, and external exchanges. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
12. Do Not Track Signals
Our platform does not currently respond to "Do Not Track" (DNT) signals from web browsers, as there is no universal standard for DNT implementation.
13. California Privacy Rights (CCPA Compliance)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell your data).
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your California privacy rights, please contact us through our contact form or support email.
14. South African POPIA Compliance
For users in South Africa, we comply with the Protection of Personal Information Act (POPIA). Under POPIA, you have the right to:
- Request confirmation of whether we hold your personal information
- Request access to your personal information
- Request correction of inaccurate personal information
- Object to the processing of your personal information
- Lodge a complaint with the Information Regulator
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our platform
- Sending an email to your registered email address
- Displaying a prominent notice on the platform
The "Last Updated" date at the top of this policy indicates when the latest changes were made. Your continued use of the platform after any changes constitutes acceptance of the revised Privacy Policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our website contact form or support email.
Coin Back Up Buddy – Making Crypto Trading Effortless.
