Privacy Policy

1. Data Controller

The data controller responsible for processing personal data collected through this platform is:

2. Types of Data Collected

We collect only the minimum data necessary to operate our platform and fulfil your orders.

Personal information

• Name and email address (required to create an account and deliver your order)
• Order history (details of digital products purchased)

Technical and browsing data

• IP address and browser information collected automatically when you visit the site
• Website interaction data collected via analytics tools (see Section 5)

What we do NOT collect

• Payment information — all transactions are processed by NOWPayments, our third-party payment provider. We never receive or store your payment credentials.
• Cryptocurrency wallet addresses — these are processed pseudonymously by NOWPayments and are not stored by Genghis.
• Government-issued identity documents — we do not require KYC verification.

3. Purpose of Data Processing

Order fulfilment

To process your purchase, deliver your digital product, and provide customer support.

Platform security and fraud prevention

To detect and prevent fraudulent activity, protect user accounts, and maintain platform integrity.

Analytics and service improvement

To understand how users interact with the platform and improve our services. This is done using aggregated, anonymised data where possible.

Marketing communications

To send promotional offers and platform updates, only where you have given explicit consent. You may withdraw consent at any time by contacting privacy@genghis.pro.

4. Legal Basis for Processing

We process personal data under the following legal grounds in accordance with the UK GDPR and EU GDPR:

• Contractual necessity — to fulfil and manage your purchase orders.
• Legitimate interests — to improve our services, ensure platform security, and prevent fraud.
• Legal obligations — to comply with applicable tax, accounting, and regulatory requirements.
• Consent — for sending marketing communications. You may withdraw consent at any time.

5. Cookies and Tracking Technologies

We use the following tools to understand platform usage and optimise our marketing:

You can manage or disable cookies through your browser settings or via our cookie consent management system. Note that disabling certain cookies may affect platform functionality.

6. Data Sharing with Third Parties

We do not sell or rent personal data to third parties under any circumstances.

We may share data with the following categories of third-party service providers strictly for the purpose of operating our platform:

Payment processing

We use NOWPayments to handle cryptocurrency transactions. We do not share personally identifiable information such as your email address with NOWPayments. Transactions are processed pseudonymously using blockchain identifiers. We encourage you to review NOWPayments' Privacy Policy.

Analytics and marketing tools

Data is shared with the analytics and advertising providers listed in Section 5 for performance monitoring and ad optimisation, subject to your cookie preferences.

Email communications

We use email service providers to deliver order confirmations and, where consented, promotional communications. These providers are bound by data processing agreements and may not use your data for their own purposes.

7. Data Transfers Outside the EU/EEA

8. Data Retention

• Order-related data — retained for up to 10 years to comply with UK legal and tax obligations.
• Marketing data — retained until you withdraw consent or request deletion.
• Analytics data — retained according to the individual tool provider's data retention settings (typically 14 months for GA4).
• Account data — retained for as long as your account is active. You may request deletion at any time.

9. Your Rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Restriction — request that we limit the processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing purposes.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at privacy@genghis.pro. We will respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Data Security

We implement industry-standard security measures to protect personal information, including:

• SSL/TLS encryption for all data transmitted between your browser and our platform.
• Access controls to limit who within our organisation can access personal data.
• Regular security reviews of our platform and third-party integrations.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at privacy@genghis.pro.

11. Minors

12. Changes to This Privacy Policy

13. Contact

For any questions, concerns, or requests relating to this Privacy Policy or your personal data: