Privacy Policy

Last Revised on October 17, 2024

This Privacy Policy (“Policy”) for Taofu B.V., and its subsidiaries (“Organization”, “we”, “our”, or “us”), outlines how we process personal data collected from users of our website https://taofu.xyz/, including any subdomains (“Website”), and any tools, services, features, and functionalities available through the Website (collectively, the “Services”). The Organization is the controller for purposes of applicable data protection laws. “You” and “your” refer to you as the user of the Services.

Please read this Policy carefully to understand your rights concerning your personal data and how we will collect, use, and process your personal data. If you do not agree to this Policy, please do not use, access, connect to, interact with, or download any of the Services or provide your information to us.

Personal Data We Collect About You, Why We Process It, and the Legal Basis for Processing

When you access, use, connect to, or interact with the Services, we may collect certain categories of information about you, including personal data, from various sources.

Information You Provide to Us

Personal data may include:

  • (i) Names
  • (ii) Addresses
  • (iii) Telephone numbers
  • (iv) Email addresses
  • (v) Government-issued identification numbers
  • (vi) User passwords or PINs
  • (vii) User identification and account access credentials
  • (viii) Financial account numbers
  • (ix) IP Address and/or Wallet information
  • (x) Geolocation data

Additionally, personal data may include:

  • Social media handles and related information
  • Transaction data or history (e.g., blockchain transaction history)
  • Profile data (e.g., profile name and avatar)
  • Marketing preferences
  • Token holdings
  • Any other information collected through the Services

When you contact us, we will collect the content of those communications and any personal data contained within.

Purposes of Processing

We process this information to:

  • Perform our contract with you and provide you with our Services
  • Obtain your consent to process your personal data for marketing and alerts
  • Send you announcements related to security, privacy, or administrative matters

Information We Collect Automatically

When you visit our Website, we may collect:

  • (i) IP Address of the requesting device
  • (ii) Internet access provider's name
  • (iii) Date and time of access
  • (iv) Name and URL of the retrieved file
  • (v) Referring website
  • (vi) Country of access
  • (vii) Operating system and browser information
  • (viii) Transmission protocol used (e.g., HTTP/1.1)

This data is processed for:

  • Enabling your access to and interaction with the Services
  • Identifying potential Prohibited Persons
  • Verifying your identity and eligibility for Services

We also use this data to improve security, perform data analytics, and maintain the safety of our Services.


Cookies and Tracking Tools

We may use cookies, web beacons, geolocation, and tracking technologies to collect data about your access to, use of, or interaction with the Services (“Usage Data”). With your consent, we may use this data to enhance user experience and for marketing purposes.

Categories of Personal Data Collected, Purposes of and Bases for the Processing

Purpose of Processing

Personal Data

Legal Ground (basis)

Communicating with you regarding inquiries or support tickets

Email address, subject, content, and attachments

Legitimate interests / contractual obligations

Sending email newsletters

Email address

Your consent

Contractual obligations (terms of use)

Providing access to users of a decentralized protocol

Wallet addresses, transaction and balance information

Analyzing website visitors’ actions to improve Services

See section “Cookies and Automatically Collected Data”

Your consent

Your personal data is collected directly from you or authorized third parties. We do not process special categories of personal data unless voluntarily provided.

Your Rights With Regard to Personal Data Processing

In connection with accessing and using the Services, you have certain rights under the General Data Protection Regulation, although some may not apply given the nature of our Services:

  • Right to Access: Request all personal data via email
  • Right to Rectification: Request correction of certain data (e.g., email address)
  • Right to Erasure: Request deletion of personal data via email
  • Consent Withdrawal Right: Withdraw consent to processing; change cookie choices via our tool or unsubscribe from emails
  • Automated Decision-Making, Profiling: We do not carry out automated decision-making without consent

Personal Data Storage Period

Your personal data will be stored until:

  • Necessary for providing Services
  • Your consent is no longer valid
  • Deleted following your request
  • Other applicable legal obligations are met

We will not store your personal data longer than necessary for processing purposes.

Personal Data Recipients and Transfer of Personal Data

Your personal data may be shared with:

  • Providers and Partners: Acting as data processors (e.g., hosting, web analytics)
  • Government Authorities: Only as required by law
  • Other Third Parties: As explicitly requested by you

Note that using services based on public blockchains may expose your data to forensic analysis, which could lead to deanonymization.

Security of Processing

Your personal data is protected from loss, misuse, or unauthorized access during transmission and upon receipt.

Contacts and Requests; Changes to the Privacy Notice

For requests or queries related to your rights and freedoms regarding personal data protection, contact us at info@taofu.xyz.

Changes to this Privacy Notice will be reflected by the “Last Revised” date. All versions of the Privacy Notice will be archived.