Effective date: [28/10/2025]
Notice at Collection (CPRA)
| Category of Personal Information | Examples | Business/Commercial Purpose | “Sharing” / Disclosure | Retention |
| Identifiers | Name, email, IP (truncated), device ID | Site operations, communications, security | Service providers (hosting, security, analytics) | Up to 24 months (emails); IP logs shorter |
| Internet/Network Activity | Page views, clicks, referrers, session time | Analytics & performance improvement | Analytics providers (with safeguards) | 14–26 months (configurable) |
| Approximate Geolocation | Country/region from IP | Locale/content optimization, abuse prevention | Service providers; not public | Aligned with analytics retention |
| Inferences (limited or none) | Aggregated interest segments (if used) | Content relevance; measurement | Not sold; may be “shared” only with consent | As short as feasible |
| Sensitive Personal Information (SPI) | Not collected/processed by BTCUSA | N/A | N/A | N/A |
This Privacy Policy (“Policy”) explains how BTCUSA.com (“BTCUSA”, “we”, “us”, “our”) collects, uses, shares, and protects information when you visit https://btcusa.com (the “Website”) and related services (“Services”). By using the Services, you confirm you have read and understood this Policy.
1) Key Definitions
Personal Data / Personal Information — any data relating to an identified or identifiable natural person.
Processing — any operation with Personal Data (collection, storage, use, disclosure, deletion, etc.).
Controller — the party defining purposes and means of Processing (here: BTCUSA).
Processor / Service Provider — a third party processing data on our behalf.
Cookies / Tracking Tech — small files or similar technologies stored on your device to enable features, analytics, and advertising measurement.
Consent — a freely given, specific, informed and unambiguous indication of your wishes.
2) Principles We Follow
We process Personal Data lawfully, fairly and transparently; for specified purposes; only the minimum required; keep it accurate and up to date; store no longer than necessary; protect it with appropriate technical and organizational measures; and document compliance (accountability).
3) What We Collect
3.1 Data you provide: contact data (name, email) for newsletters, contact forms, press/sponsor/advertise requests; public comments (if enabled); any info you voluntarily provide.
3.2 Data collected automatically: usage/device data (pages viewed, timestamps, referrers, session duration, scroll/click events, browser/OS, device type), and approximate geolocation (derived from IP). Cookies/Tracking data for essential functions, analytics, fraud/security, ad‑measurement (see Cookie Policy).
We do not intentionally collect sensitive categories (SPI) and do not conduct automated decision‑making that produces legal effects.
4) Legal Bases (GDPR/UK‑GDPR)
Consent (e.g., marketing emails, non‑essential cookies);
Performance of a contract (providing the Services you request);
Legitimate interests (site security, analytics, improving Services, preventing abuse), balanced against your rights;
Legal obligation (responding to lawful requests, accounting/record‑keeping).
5) Why We Use Your Data
Provide & operate Services — deliver pages, render content, maintain uptime.
Communicate with you — respond to emails, press/advertising inquiries, support.
Newsletters & updates — send crypto/news digests or product updates (unsubscribe anytime).
Analytics & performance — measure traffic, debug, improve UX.
Security & fraud prevention — detect abuse, protect from DDoS/bot activity.
Compliance & enforcement — respond to regulators, enforce Terms.
6) Children’s Privacy
Our Services target adults. We do not knowingly collect data from individuals under 16 (or lower age permitted by local law, but never under 13). If you believe a child provided data to us, contact info@btcusa.com and we will delete it.
7) Cookies & Similar Technologies
Strictly necessary cookies (security, load balancing, consent records);
Analytics (e.g., Google Analytics or privacy‑centric tools);
Ad‑measurement/attribution (where applicable, and only with consent in regions that require it).
See Cookie Policy for details and controls.
8) Sharing & Disclosure
With Service Providers under contractual confidentiality (hosting/CDN, security, analytics, newsletter delivery, CRM, ad‑measurement).
For legal reasons — to comply with law, requests of courts/regulators, to enforce Terms, or protect rights, safety and property of BTCUSA, users or the public.
Business transfers — in M&A, restructuring, or similar; the acquirer will be bound by this Policy or a materially similar one.
With your consent — for specific features or partnerships.
We do not sell your Personal Data for money. In some U.S. states, certain analytics/ad‑measurement may be considered a “sale” or “sharing” — see Section 12.
9) International Transfers
Your data may be processed outside your country (including outside the EEA/UK). Where we transfer EEA/UK data internationally, we use appropriate safeguards (EU Standard Contractual Clauses; UK Addendum; adequacy decisions; Data Privacy Framework participation by providers where applicable).
10) Retention
We retain Personal Data only as long as needed for stated purposes, legal requirements, or dispute resolution. Examples: support/email records up to 24 months; newsletter data until unsubscribe; analytics 14–26 months (or shorter). Criteria include legal obligations, security needs, and service optimization.
11) Security
We apply industry‑standard measures (encryption in transit, access controls/least‑privilege, logging/monitoring, backups, vendor due‑diligence). No system is 100% secure; if a breach occurs, we will notify authorities and affected individuals when legally required.
12) Your Rights
12.1 GDPR/UK‑GDPR (EEA/UK residents): access, rectification, erasure, restriction, portability, objection; withdraw consent at any time. Contact info@btcusa.com. You may complain to your Data Protection Authority; in the UK — ICO.
12.2 U.S. state privacy laws (e.g., CCPA/CPRA, CO/CT/VA/UT, NV): know/access, correct, delete, portability; opt‑out of “sale”/“sharing”/targeted advertising; non‑discrimination; appeals. Submit requests via info@btcusa.com or our “Do Not Sell or Share My Personal Information” page. We honor Global Privacy Control (GPC) where required. Appeals: we provide instructions and timelines per your state.
12.3 UAE residents: rights to information, correction, erasure, restriction, objection (incl. direct marketing), portability, and to complain to the UAE Data Office. We aim to respond within 30 days.
13) Editorial Independence & Sponsored Content
Sponsored posts/press releases are clearly labeled. Any sponsor tracking/pixels load only with consent where required and under our Cookie Policy. We do not disclose your identity to sponsors unless you submit data directly to them.
14) Third‑Party Links
External websites have their own privacy practices. Review their policies before sharing information.
15) Changes to this Policy
We may update this Policy periodically. We will change the “Last updated” date and, where changes are material, provide prominent notice (banner/email). Continued use after the effective date means acceptance.
16) Contact
Email: info@btcusa.com
17) Do Not Sell or Share My Personal Information (US)
US residents may opt out of activities deemed a “sale,” “sharing,” or “targeted advertising.” Use the footer link or email info@btcusa.com with subject “Opt‑Out”. We honor GPC signals where required.
18) Fair Information Practices
If a data breach occurs, we notify affected users by Website notice and/or email within legally required periods (subject to law enforcement guidance).
19) List of Typical Processors (illustrative)
Hosting/CDN/Security: Cloudflare, Fastly.
Analytics: Google Analytics, Plausible, Matomo.
Email/Newsletter: Mailchimp, Brevo, ConvertKit.
Forms/Docs: Typeform, Google Workspace.
Ad‑Measurement: Google Ad Manager (if applicable).
20) Jurisdiction‑Specific & Representative Notice
EU/UK Representative (Article 27): Not appointed — BTCUSA does not target/monitor individuals in the EEA/UK on a regular basis in a manner requiring appointment. If this changes, we will designate a representative and update this Policy.
Nevada: We do not sell personal information as defined under Nevada law but provide a contact at info@btcusa.com for Nevada‑specific requests.
Financial incentives: We do not offer financial incentives related to the collection or sale/sharing of Personal Data.
Verification: We verify consumer requests (and authorized agents) by matching data points and may request reasonable additional information to confirm identity. Logs of requests are retained as required by applicable law.
Profiling/automated decisions: We do not make decisions producing legal or similarly significant effects solely by automated means.
© BTCUSA.com — All rights reserved.
