📅 Last Updated: February 3, 2025

This Privacy Policy was last updated on February 3, 2025. We regularly update this policy to reflect changes in our data practices.

Introduction

HiiCrypto ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website hiicrypto.online and use our services.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using our website, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

PERSONAL INFORMATION

Contact Information

Name, email address, and any information you voluntarily provide through contact forms, newsletter signups, or support requests.

USAGE DATA

Website Analytics

Information about how you interact with our website, including pages visited, time spent, and navigation patterns through analytics tools.

TECHNICAL DATA

Device Information

IP address, browser type, device type, operating system, and other technical information automatically collected when you access our website.

COOKIE DATA

Preferences & Settings

Information stored in cookies about your preferences, login sessions, and website settings to enhance your browsing experience.

How We Use Your Information

Educational Services

We use your information to provide and improve our educational content, respond to your inquiries, send newsletters (if subscribed), and personalize your experience on our website.

Website Improvement

Usage data helps us understand how visitors interact with our content, identify popular topics, and improve the overall user experience and functionality of our website.

Communication

We may use your contact information to respond to your questions, provide customer support, send important updates about our services, and deliver educational content you've requested.

Legal Compliance

We process data as necessary to comply with legal obligations, resolve disputes, and enforce our terms and policies.

Data Protection & Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption
All data transmission is encrypted using SSL/TLS protocols. Sensitive information is encrypted at rest using industry-standard encryption methods.
Access Controls
Strict access controls limit who can access personal data. Only authorized personnel with a legitimate need can access your information.
Regular Audits
We conduct regular security audits and assessments to identify and address potential vulnerabilities in our systems and processes.
Data Minimization
We only collect and retain data that is necessary for our stated purposes and delete data when it is no longer needed.

Your Privacy Rights

👁️

Right to Access

You have the right to request copies of your personal data and information about how we process it.

✏️

Right to Correction

You can request that we correct inaccurate or incomplete personal information we hold about you.

🗑️

Right to Deletion

You can request deletion of your personal data, subject to certain legal and contractual limitations.

🚫

Right to Opt-Out

You can opt out of marketing communications and certain data processing activities at any time.

📤

Right to Portability

You can request your data in a structured, machine-readable format to transfer to another service.

⚖️

Right to Complain

You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better browsing experience and allow certain features to function properly.

Types of Cookies We Use

ESSENTIAL COOKIES

Necessary for Functionality

Required for basic website functionality, security features, and user authentication. These cannot be disabled.

ANALYTICS COOKIES

Performance & Analytics

Help us understand how visitors interact with our website by collecting anonymous usage statistics and performance metrics.

FUNCTIONALITY COOKIES

Enhanced Features

Remember your preferences and settings to provide enhanced functionality and personalized features during your visit.

Managing Cookies

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website. We provide a cookie consent banner that allows you to accept or decline non-essential cookies.

Third-Party Services

We use reputable third-party services to enhance our website functionality. These services have their own privacy policies and may collect data as described below:

Analytics Providers

We use analytics services (such as Google Analytics) to understand website usage patterns. These services collect anonymous data about visitor behavior and help us improve our content.

Email Services

Our newsletter and email communications are managed through third-party email service providers who maintain their own privacy standards and security measures.

Hosting & Infrastructure

Our website is hosted on secure servers with providers who implement industry-standard security measures and data protection protocols.

Contact Us About Your Privacy

If you have questions about this Privacy Policy, want to exercise your privacy rights, or need to update your preferences, please contact us through any of these methods:

Data Protection Officer
dpo@hiicrypto.online

For privacy-related questions and concerns

General Privacy Questions
privacy@hiicrypto.online

For general privacy policy questions

Data Requests
data@hiicrypto.online

For data access, correction, or deletion requests

California Residents (CCPA)

California residents have additional rights under the CCPA. Contact us at ccpa@hiicrypto.online to exercise your rights or learn more about our CCPA compliance.

EU Residents (GDPR)

EU residents have rights under GDPR. You can contact our EU representative at gdpr@hiicrypto.online for any GDPR-related inquiries or complaints.

Policy Updates

📅 How We Update This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of significant changes through:

  • Email notifications to registered users
  • Prominent notices on our website
  • Updated "Last Modified" date at the top of this policy

Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Data Retention & Deletion

Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Information
Retained for the duration of your active account plus 2 years after account closure for legal compliance and dispute resolution purposes.
Communication Records
Support emails and contact form submissions retained for 3 years to maintain service quality and resolve potential disputes.
Analytics Data
Aggregated usage statistics retained for 5 years for research and improvement purposes. Individual tracking data anonymized after 26 months.
Newsletter Subscriptions
Email addresses and subscription preferences retained until you unsubscribe, plus 30 days to process opt-out requests.

Data Deletion Procedures

Upon receiving a deletion request, we follow a secure 30-day deletion process:

  • Immediate Action: We suspend processing of your data within 24 hours
  • Verification: Identity verification required to prevent unauthorized deletion
  • Backup Removal: Data removed from active systems and backups within 30 days
  • Third-Party Notification: Service providers instructed to delete your data
  • Confirmation: Written confirmation provided upon completion

⚠️ Exceptions to Deletion

Some data may be retained as required by law or legitimate business needs including: financial records (7 years for tax purposes), legal dispute documentation, and anonymized statistical data that cannot identify you.

International Data Transfers

HiiCrypto operates globally, and your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data during international transfers.

Transfer Mechanisms

When transferring data outside the European Economic Area (EEA), UK, or other jurisdictions with data protection laws, we utilize the following safeguards:

EU STANDARD CONTRACTUAL CLAUSES

Article 46 GDPR

We use EU Commission-approved Standard Contractual Clauses (SCCs) with transfer impact assessments for data transfers to countries without adequacy decisions.

ADEQUACY DECISIONS

Recognized Safe Countries

Data transfers to countries with EU adequacy decisions (such as UK, Canada, Japan, South Korea, and selected others) proceed without additional safeguards.

BINDING CORPORATE RULES

Intra-Group Transfers

For transfers within our corporate group, we maintain approved Binding Corporate Rules (BCRs) ensuring consistent data protection standards globally.

SUPPLEMENTARY MEASURES

Enhanced Protection

Following Schrems II, we implement additional technical measures including end-to-end encryption and pseudonymization for sensitive transfers.

UK Data Transfers

For UK data subjects, we utilize the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs. UK-US data transfers may also benefit from the UK Extension to the EU-US Data Privacy Framework where applicable.

Your Rights Regarding International Transfers

You have the right to request a copy of the specific safeguards we use for international transfers of your personal data. Contact our Data Protection Officer for this information.

Children's Privacy

COPPA & GDPR Compliance

Protecting children's privacy is a priority. Our services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 without verifiable parental consent.

🛡️ Age Verification Measures

  • Account registration requires users to confirm they are 13+ years old
  • Email verification required for all registrations
  • No collection of precise geolocation data from any users
  • Parental consent mechanism for EU users aged 13-16

Teen Users (13-17 Years)

Users aged 13-17 may use our services with limited data collection. We implement:

  • Default privacy settings set to maximum protection
  • No behavioral advertising or profiling for users under 18
  • Restricted data sharing with third parties
  • Enhanced parental access rights under applicable laws

Parental Rights & Controls

Parents and legal guardians can contact us to:

  • Review personal information collected from their child
  • Request deletion of their child's personal information
  • Refuse further collection or use of their child's information
  • Revoke previously given consent

Report Child Data Concerns: children@hiicrypto.online

Automated Decision Making & Profiling

Our Approach to AI and Automation

HiiCrypto is committed to transparent and ethical use of automated systems. We use automated decision-making in limited circumstances to enhance user experience and platform security.

Automated Processes We Use

CONTENT PERSONALIZATION

Educational Recommendations

Algorithm-based suggestions for articles and guides based on your browsing history and interests. You can opt out in your account settings.

SECURITY MONITORING

Fraud Prevention

Automated detection of suspicious activity patterns to protect your account and our platform from unauthorized access attempts.

EMAIL FILTERING

Spam Detection

Automated classification of contact form submissions to prioritize legitimate user inquiries and filter spam messages.

USAGE ANALYTICS

Trend Analysis

Aggregated pattern analysis to identify popular content and improve our educational offerings. Individual data is pseudonymized.

Your Rights Regarding Automation

Under GDPR Article 22 and similar regulations, you have rights concerning automated decision-making:

  • Right to Explanation: Request information about automated decisions affecting you
  • Right to Human Intervention: Request human review of automated decisions
  • Right to Contest: Challenge automated decisions and express your point of view
  • Right to Opt-Out: Decline profiling for marketing or personalization (where applicable)

🚫 What We DON'T Do

  • Make credit or financial eligibility decisions using algorithms
  • Use automated systems that produce legal or similarly significant effects on users
  • Sell algorithmic profiles to third parties
  • Use facial recognition or biometric data analysis

Data Breach Notification

Our Security Incident Response

While we implement robust security measures, no system is completely immune to breaches. We have established comprehensive procedures to detect, respond to, and notify affected individuals of any personal data breaches.

Breach Response Timeline

Detection & Assessment (0-24 hours)
Immediate security team mobilization to contain the breach, assess scope, and identify affected data categories and individuals.
Regulatory Notification (Within 72 hours)
Data protection authorities notified within 72 hours of becoming aware of a reportable breach, as required by GDPR Article 33.
Individual Notification (Without delay)
Affected individuals notified when the breach is likely to result in high risk to their rights and freedoms, providing clear recommendations.
Remediation & Review (Ongoing)
Post-incident analysis to strengthen security measures and prevent recurrence. Lessons learned incorporated into security protocols.

What You'll Receive

In the event of a breach affecting your personal data, you will receive:

  • Clear description of what happened and when
  • Categories of personal data affected
  • Potential consequences and risks to you
  • Specific steps we've taken to contain and resolve the breach
  • Recommended actions you should take to protect yourself
  • Contact information for our Data Protection Officer

Security Concerns?

If you suspect a security issue or vulnerability, please report it immediately:

security@hiicrypto.online

Marketing & Communication Preferences

Communication Types

TRANSACTIONAL

Essential Communications

Account-related notifications, security alerts, and service updates. These cannot be disabled as they are necessary for service operation.

EDUCATIONAL

Newsletters & Updates

Cryptocurrency education content, security tips, and platform updates. Opt-in required, easy unsubscribe via link in every email.

MARKETING

Promotional Content

Occasional promotional communications about partner services, new features, or special offers. Strict opt-in consent required.

SURVEYS

Feedback Requests

User experience surveys and feedback requests to improve our services. Voluntary participation, sent infrequently.

Managing Your Preferences

You have complete control over your communication preferences:

  • Email Preferences: Manage subscriptions via the "Manage Preferences" link in every email
  • Account Dashboard: Update all communication settings in your account settings
  • One-Click Unsubscribe: Immediate opt-out from any email category
  • Do Not Track: Browser-based opt-out signals honored where technically feasible

📬 No Spam Guarantee

We never sell or rent your email address to third parties for marketing purposes. All third-party communications are sent through our systems with your explicit consent. Maximum email frequency: 2 per week unless you opt for daily updates.

Legal Basis for Marketing

For GDPR compliance, we rely on consent as the legal basis for marketing communications. For CCPA compliance, we provide the "Do Not Sell or Share My Personal Information" option and respect Global Privacy Control signals.

Financial & Cryptocurrency Data

Educational Platform, Not Financial Services

Important: HiiCrypto is an educational platform only. We do not provide financial services, wallet services, or cryptocurrency trading. We never ask for or store your private keys, wallet passwords, or financial account credentials.

🚨 Scam Warning

HiiCrypto will NEVER ask you to:

  • Share your private keys or seed phrases
  • Send cryptocurrency to any address
  • Provide exchange account passwords
  • Connect your wallet through unsolicited links

If you receive such requests, they are fraudulent. Report to security@hiicrypto.online immediately.

Financial Information We Do NOT Collect

We maintain a strict policy of never collecting:

  • Credit card or bank account numbers
  • Cryptocurrency wallet private keys or seed phrases
  • Cryptocurrency wallet addresses (unless voluntarily shared in support requests)
  • Investment amounts or portfolio values
  • Trading history or exchange account information
  • Social Security numbers or tax identification numbers

Voluntary Financial Education Data

In educational contexts, you may voluntarily share generalized information about your cryptocurrency interests to receive personalized content recommendations. This information:

  • Is never used for financial profiling or credit decisions
  • Is not shared with financial institutions or advertisers
  • Can be deleted at any time through your account settings
  • Is anonymized for analytics purposes

Artificial Intelligence & Machine Learning

AI Transparency

HiiCrypto may use AI and machine learning technologies to improve our services. We are committed to transparency about how these systems use your data.

How We Use AI

CONTENT RECOMMENDATIONS

Personalized Learning Paths

ML algorithms suggest educational content based on your interests and learning patterns. Data is processed in aggregated, pseudonymized form.

SEARCH IMPROVEMENT

Enhanced Search Results

Natural language processing helps improve search results and content discovery. Search queries may be processed to improve algorithm accuracy.

SECURITY

Threat Detection

Automated systems identify suspicious patterns to prevent spam, fraud, and abuse. False positives reviewed by human moderators.

CHATBOT SUPPORT

AI-Assisted Support

Automated responses to common support questions with human escalation pathways. Conversations logged for quality improvement.

Your Rights Regarding AI Processing

You have the right to:

  • Know when AI systems are making decisions that affect you
  • Request human review of AI-driven decisions with legal or significant effects
  • Opt out of personalization algorithms (with some feature limitations)
  • Request deletion of data used to train personalization algorithms

🤖 AI Ethics Commitment

We do not use AI for: predictive policing, social scoring, facial recognition, or creating profiles that could lead to discrimination. Our AI systems are regularly audited for bias and accuracy.

Social Media & External Links

Social Media Integration

HiiCrypto maintains official social media accounts for community engagement. When you interact with us on social media platforms, your interactions are subject to both this Privacy Policy and the privacy policies of the respective platforms.

PLATFORM DATA

Third-Platform Sharing

Social media platforms may share aggregated engagement data with us. We do not receive personal information beyond what you publicly share on these platforms.

SOCIAL SHARING

Share Buttons

Our website includes social sharing buttons that may set cookies when used. These platforms may track your browsing activity on our site.

EMBEDDED CONTENT

YouTube & Media

Educational videos or social media feeds embedded on our site are subject to the respective platforms' privacy policies and may collect viewing data.

COMMUNITY

Public Forums

Information shared in public forums, comments, or community spaces is visible to other users. Do not share sensitive personal information in public areas.

External Links Disclaimer

Our website contains links to external sites, including cryptocurrency wallets, exchanges, and educational resources. When you click these links:

  • You leave our website and are subject to the external site's privacy policy
  • We are not responsible for the content or privacy practices of external sites
  • We recommend reviewing the privacy policy of any site before providing personal information
  • Some links may be affiliate links, clearly marked with [Affiliate] disclosure

⚠️ Security Tip

Always verify you're on the correct website before entering any sensitive information. Check for HTTPS and the correct domain name. Report suspicious links impersonating HiiCrypto to our security team immediately.

Accessibility in Privacy

Accessible Privacy Communications

We are committed to ensuring that our privacy practices and communications are accessible to all users, including those with disabilities.

📱

Alternative Formats

This privacy policy available in screen-reader friendly HTML, plain text, and large print formats upon request.

🔊

Audio Version

Full audio recording of this policy available for visually impaired users. Contact accessibility@hiicrypto.online.

🌐

Plain Language

We use clear, jargon-free language. Complex legal terms explained in accessible summaries throughout this policy.

🎨

Visual Accessibility

High contrast design, scalable text, and screen reader compatibility for all privacy-related pages and forms.

Requesting Assistance

If you need assistance understanding this policy or exercising your privacy rights due to accessibility needs, we provide:

  • Dedicated support line with extended hours for accessibility inquiries
  • Video call support with sign language interpretation (upon request)
  • Extended response times for data requests when using accessible formats
  • Proxy authorization options for users requiring assistance

Accessibility Contact: accessibility@hiicrypto.online

Dispute Resolution

Resolving Privacy Concerns

We are committed to resolving privacy-related concerns quickly and fairly. If you have a concern about how we handle your personal data, we encourage you to contact us first.

Internal Resolution Process

Step 1: Contact Us
Submit your concern to our Data Protection Officer at dpo@hiicrypto.online with full details of your complaint.
Step 2: Investigation (10 Days)
We acknowledge receipt within 48 hours and conduct a thorough investigation into your specific privacy concern.
Step 3: Response (30 Days)
We provide a detailed written response explaining our findings and any corrective actions taken or planned.
Step 4: Escalation
If unsatisfied, you may escalate to supervisory authorities or alternative dispute resolution as described below.

Alternative Dispute Resolution

If we cannot resolve your concern internally, you have the right to:

  • EU/UK Residents: Lodge a complaint with your local Data Protection Authority
  • California Residents: Contact the California Attorney General's Office
  • Binding Arbitration: Pursue binding arbitration under applicable privacy laws
  • Small Claims Court: Pursue claims individually in small claims court

Supervisory Authorities

EU residents may contact their local Data Protection Authority. A list of EU DPAs is available at European Data Protection Board. UK residents may contact the Information Commissioner's Office (ICO).

✅ Class Action Waiver

By using our services, you agree that any disputes will be resolved individually through the mechanisms described above, not through class action proceedings. This waiver does not apply where prohibited by law (such as certain EU jurisdictions).

Privacy by Design

Our Privacy-First Approach

HiiCrypto implements Privacy by Design and Default principles, embedding privacy considerations into every aspect of our product development and business operations.

🏗️

Proactive Embedding

Privacy features built into products from the ground up, not added as afterthoughts or optional features.

⚙️

Privacy as Default

Maximum privacy settings enabled by default. Users opt-in to share more, rather than opt-out of sharing.

🔒

End-to-End Security

Full lifecycle protection of personal data from collection to deletion with encryption at all stages.

👁️

Full Transparency

Clear visibility into what data is collected, why it's needed, and how it's processed and protected.

👤

User-Centric

Strong user controls allowing individuals to access, correct, and delete their information easily.

Continuous Verification

Regular privacy audits, assessments, and updates to maintain compliance and best practices.

Data Minimization Commitment

We collect only the minimum data necessary for specific purposes:

  • No collection of unnecessary demographic information
  • Pseudonymization of analytical data where possible
  • Regular purging of unnecessary log data
  • Anonymization of data used for research and statistics
  • Configurable data collection preferences for users

Privacy Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for:

  • New products or features involving personal data processing
  • Use of new third-party services or data processors
  • Changes to data retention periods
  • Implementation of new tracking or analytics technologies
  • Significant changes to existing privacy practices

Governing Law & Severability

Applicable Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the jurisdiction in which you reside, with specific consideration to:

  • EU/EEA Residents: General Data Protection Regulation (GDPR)
  • UK Residents: UK General Data Protection Regulation and Data Protection Act 2018
  • California Residents: California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
  • Other US States: Applicable state privacy laws (Virginia CDPA, Colorado CPA, etc.)
  • Global Users: Local data protection laws applicable in your jurisdiction

Jurisdiction

Any legal action or proceeding arising under this Privacy Policy will be brought exclusively in the courts located in the jurisdiction where you reside or where the alleged violation occurred, unless otherwise required by applicable law.

Severability Clause

⚖️ Legal Severability

If any provision of this Privacy Policy is held invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be severed and the remaining provisions shall continue in full force and effect. The invalid provision shall be replaced by a valid provision that achieves the original intent as closely as possible.

No Waiver

Our failure to enforce any right or provision of this Privacy Policy will not be considered a waiver of those rights. Any waiver of any provision will be effective only if in writing and signed by an authorized representative of HiiCrypto.

Assignment

We may assign or transfer our rights and obligations under this Privacy Policy in connection with a merger, acquisition, reorganization, or sale of assets. We will notify you of any such change by updating the "Last Updated" date and, where required by law, obtaining your consent.

Entire Agreement

This Privacy Policy, together with our Terms of Service, Cookie Policy, and any other legal notices published on our website, constitutes the entire agreement between you and HiiCrypto regarding privacy and data protection matters, superseding any prior agreements or communications.

Contact Information Summary

For quick reference, here are all the ways to reach our privacy team:

📧 Data Protection Officer
dpo@hiicrypto.online

For GDPR compliance, data requests, and general privacy concerns

🔒 Security Issues
security@hiicrypto.online

Breach reports, vulnerability disclosures, security questions

♿ Accessibility
accessibility@hiicrypto.online

Accessibility accommodations for privacy rights

👨‍👩‍👧 Children & Teens
children@hiicrypto.online

Parental consent, children's data inquiries

⚖️ CCPA/CPRA
ccpa@hiicrypto.online

California privacy rights and opt-out requests

📮 Physical Mail

HiiCrypto Legal Department
Data Protection Office
Street: 2575 N San Fernando Rd
Los Angeles, CA 90065, United States.

⏰ Response Times

  • GDPR Data Requests: 30 days (extendable to 60 for complex requests)
  • CCPA Requests: 45 days (extendable to 90 days)
  • General Inquiries: Within 48 hours
  • Security Reports: Immediate acknowledgment, resolution varies by severity
  • Complaints: 10 days acknowledgment, 30 days resolution