Privacy Policy
Thank you for choosing to engage with TokenStream (“we,” “our,” or “us”). We are committed to safeguarding your personal data and upholding your fundamental right to privacy. This Privacy Policy outlines how we collect, use, disclose, and store your information when you visit and interact with our website, https://tokenstreamhq.com, or when you otherwise communicate with us via available channels.
We operate under a strict privacy-first ethos that aligns with the highest standards set by the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). Please review this policy carefully to understand how your data is treated.
1. Our Commitment to Privacy and Data Protection
TokenStream recognizes the importance of protecting your personal data and observes reasonable technical and organizational security measures to safeguard that data. We are fully dedicated to maintaining your trust by managing your information with complete transparency and accountability.
2. Scope of this Policy and Our Role as Data Controller
This Privacy Policy applies to all user interactions with our website, https://tokenstreamhq.com, and the services offered through it. As the data controller, TokenStream determines the purposes and means of processing your personal data.
If you have any concerns regarding your data, you may contact us at [email protected].
3. Categories of Data We Process
We may collect and process various types of personal data, depending on how you interact with the website:
a. Usage Data
Includes details such as browser type and version, IP address, geographical location, referral source, length of visit, pages viewed, and user navigation paths. This helps us understand how the site is used to improve functionality and user experience.
b. Account Data
Includes your name, postal address, email address, and phone number. Account Data is collected during sign-up or when you voluntarily submit this information, such as through contact forms.
c. Profile Data
Includes your preferences, purchase history, and behavioral insights derived from your interaction with our services (such as time spent on certain pages or product interest).
d. Communication Data
Includes any personal data contained in communications you send to us, or we exchange with you, including support tickets, emails, or messages sent via contact forms.
e. Technical Data
Includes information about your device (hardware model, operating system, browser, screen resolution, language preferences, time zone settings) and system configurations.
f. Transaction Data
Includes billing address, payment details (processed via secure and compliant third-party payment processors), delivery address, and order history.
g. Preference Data
Includes your expressed preferences about receiving marketing communications and product updates, as well as inferred interests based on your interactions with our platform.
4. Legal Bases for Processing Personal Data
We rely on the following lawful bases as defined by GDPR to process your personal data:
– Consent: For activities such as marketing communications or non-essential cookies.
– Contractual Necessity: For processing necessary to perform a contract with you or pre-contractual steps at your request.
– Legitimate Interests: For understanding user behavior, maintaining site security, improving UX, and fulfilling legal obligations.
– Legal Obligation: Where required to comply with applicable laws or lawful requests.
5. Your Data Protection Rights
Under GDPR and CCPA (for applicable Californian users), you have the following rights:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You are entitled to request correction of inaccuracies in your personal information.
– Right to Erasure (“Right to be Forgotten”): You may ask for your data to be erased, where processing is no longer necessary or consent is withdrawn.
– Right to Restrict Processing: You may request that we restrict the processing of your data under specific circumstances.
– Right to Data Portability: You may receive your data in a structured, commonly-used, machine-readable format and transfer it to another controller.
– Right to Object: You may object to processing, particularly where we rely on legitimate interest or use your data for direct marketing purposes.
– Right to Non-Discrimination: Under CCPA, you are entitled not to be discriminated against for exercising your privacy rights.
To exercise any of these rights, please email us at [email protected].
6. Security Measures
To protect your personal data, we implement appropriate technical and organizational safeguards, including:
– SSL encryption protocols
– Secure cloud-based infrastructure with limited access
– Role-based access control for internal staff
– Regular security audits and penetration testing
– Staff privacy training and compliance certifications
– Encrypted data backups with versioning and rollback capabilities
7. International Transfers
If your personal data is transferred outside of your jurisdiction (e.g., from the EU to the US), such transfers are performed in compliance with GDPR requirements. We implement Standard Contractual Clauses (SCCs) approved by the European Commission and other applicable safeguards to ensure an adequate level of protection.
8. Data Retention Timelines
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:
– Account Data: Kept for 24 months following account closure.
– Transaction Data: Retained for 7 years to comply with financial recordkeeping laws.
– Communication Data: Stored for 18 months after last interaction.
– Usage and Technical Data: Retained for 12 months for analytical purposes.
– Marketing Preference Data: Retained until consent is withdrawn or for up to 24 months.
9. Cookie Policy
We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. Types of cookies include:
– Essential Cookies: Required for website functionality and cannot be disabled.
– Functional Cookies: Enable customization of the website for repeat visitors.
– Analytics Cookies: Help us understand how users interact with pages and content to guide future improvements.
– Performance Cookies: Monitor system health and responsiveness across regions.
All cookies are deployed in accordance with applicable law and privacy principles.
10. Cookie Management and Compliance with GDPR & CCPA
We offer full cookie consent management in compliance with GDPR and CCPA. Upon your first visit, you are presented with an opt-in cookie banner allowing you to manage your preferences. You may update your selections or revoke consent at any time through your browser or our site’s Cookie Preferences panel.
Do Not Track (DNT) browser signals are recognized where legally required, and we honor global privacy control settings where detected.
11. Protection of Children’s Data
Our website is not intended for children under the age of 13. We do not knowingly collect or solicit personal data from minors. If we become aware that we have collected data from a child under age 13 without verified parental consent, we will delete such information promptly. Please contact us at [email protected] if you believe a child has submitted personal data to us.
12. Policy Modifications and Notifications
We may update this Privacy Policy to reflect material changes in law, technology or our business practices. When changes are made, we will revise the content of this page and notify users where appropriate, including through our website or via email where legally mandated.
13. Contact Information
Your trust is important to us, and we welcome any questions or concerns regarding your privacy or this policy. You may reach our privacy team at:
Email: [email protected]
Website: https://tokenstreamhq.com
Compliance Statement
We strive to maintain full compliance with the GDPR, CCPA, and other applicable data protection frameworks. If you have any questions or require further information about your rights or our data practices, please reach out to [email protected].