Privacy Policy

Introduction

This Privacy Policy explains how Pandestic Gallery (we, us, our) collects, uses, shares, and protects the personal data of visitors and users (you, your) of our NFT gallery platform accessible at [domain] (the Platform).

‍

Data Controller

For purposes of the EU General Data Protection Regulation (GDPR) and other applicable laws, the data controller is Pandestic Gallery, [Registered Address], contact: privacy@[domain].

‍

Personal Data We Collect

We collect and process the following categories of data:

  • Identification data: wallet address/public key, username, profile picture.
  • Contact data: email address, social media handles, optional phone.
  • Transaction data: on‑chain transactions, token IDs, purchase history.
  • Technical data: device type, browser, IP address, log files, and metadata.
  • Usage data: pages viewed, time spent, clicks, referral URLs.
  • Marketing preferences and communications.We do not intentionally collect sensitive personal data.

‍

How We Obtain Data

  • Directly from you when you create an account or connect a wallet.
  • Automatically through cookies, pixels, and similar technologies.
  • From public blockchain networks when you engage in NFT transactions.
  • From service providers such as analytics or payment processors.

‍

Legal Bases for Processing (GDPR)

We rely on one or more of the following legal bases:

  • Contract performance.
  • Legitimate interests (e.g., security, fraud prevention, service improvement).
  • Consent (for marketing and non‑essential cookies).
  • Compliance with legal obligations.

‍

Purposes of Processing

  • Provide, operate, and maintain the Platform and marketplace.
  • Facilitate NFT minting, listing, bidding, purchasing, and transfers.
  • Verify identity where required by law (KYC/AML).
  • Communicate with you about your account, orders, or support requests.
  • Monitor, detect, and prevent fraud, spam, and abuse.
  • Conduct analytics, research, and product development.
  • Deliver marketing messages you have opted into.
  • Comply with tax, accounting, and regulatory obligations.

‍

Blockchain Transparency Notice

Transactions recorded on public blockchains are immutable and may be visible to anyone. Due to this decentralized design, we cannot edit or delete data recorded on‑chain. You should carefully consider the information you include when transacting on the Platform.

‍

Disclosure of Personal Data

We share data with:

  • Cloud hosting and infrastructure providers.
  • Payment processors and on‑ramp/off‑ramp partners.
  • Analytics and marketing service providers.
  • Law enforcement or regulators where legally required.
  • Other users, to the extent necessary to fulfill marketplace transactions.We never sell your personal data.

‍

International Transfers

We may transfer data outside the EEA/UK. Where we do, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions.

‍

Data Retention

We retain personal data as long as necessary to fulfill the purposes collected, comply with legal obligations, and resolve disputes. Wallet addresses and on‑chain records remain perpetually on the blockchain.

‍

Your Rights

Under GDPR and other laws you have rights to: access, rectification, erasure, restriction, data portability, and objection. To exercise rights, contact privacy@[domain]. We will respond within 30 days.

‍

Automated Decision‑Making

We do not perform automated decision‑making that produces legal effects on you.

‍

Security

We implement technical and organizational measures including encryption, access controls, and regular audits. However, no online service is 100% secure.

‍

Children

The Platform is not directed to children under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us for deletion.

‍

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be announced via the Platform or email. Last updated: [Date].

‍

Contact

Questions or complaints? Email privacy@[domain] or write to Pandestic Gallery, [Address].