Privacy Policy

TheArtOfCrypto (“us”, “we”, “our”, or the “Company”) operates the websites https://app.theartofcrypto.co and https://theartofcrypto.co (the “Service”).

Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, your rights regarding your data, and how you can contact us.

By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Quick Summary (Plain English)

We collect your name, email, and usage data to provide you access to trading education services, improve our Service, and send you updates and offers (if you consent).
We do not sell your data.
You can unsubscribe anytime and request deletion of your data.
Different laws give you different rights depending on where you live (EU/UK = GDPR, California = CCPA, Canada = CASL, Malaysia = PDPA).

2. Definitions

For the purposes of this Privacy Policy:

Cookies – small files stored on your device.
Data – any information collected through your use of the Service, including Personal Information, Usage Data, and Cookies.
Data Controller – the Company (TheArtOfCrypto), which decides how and why your data is processed.
Data Processor – a third party that processes data on our behalf (e.g., Stripe, Google Analytics).
Data Subject – you, the individual using our Service.
Personal Information – data that identifies you, such as your name, email, or payment information.
Service Providers – companies we engage to help provide or analyze the Service.
Usage Data – information collected automatically, such as IP address, browser type, time spent on pages.

3. Information We Collect

3.1 Personal Information

When using our Service, we may collect:

First and last name
Email address
Phone number
Billing or mailing address
Payment details (processed securely by third-party providers; we do not store card information)

3.2 Usage Data

We automatically collect:

IP address, browser type, version, and device type
Pages visited, time/date of visit, time spent on pages
Clicks and navigation data for analytics

3.3 Cookies

We use cookies and similar technologies for:

Essential functions (session cookies)
Preferences (remembering settings)
Analytics & performance (Google Analytics)
Security

You can disable cookies in your browser. However, some features may not work properly.

4. How We Use Your Data

We use your data for:

Providing and maintaining the Service.
Managing your account and purchases.
Processing payments (via Stripe, PayPal, or other providers).
Sending service updates, course materials, and support.
Sending newsletters and promotions only if you consent.
Improving the Service via analytics and feedback.
Detecting and preventing fraud or abuse.

5. Legal Basis for Processing (GDPR Compliance)

If you are in the EU/UK, we process your data based on:

Contractual necessity – to deliver services you sign up for.
Consent – for newsletters, promotions, and cookies (you can withdraw anytime).
Legitimate interest – analytics, fraud prevention, improving our Service.
Legal obligation – when required by law.

6. Data Retention

We keep your personal data only as long as necessary:

Account and billing data – until you request deletion, or as required by law.
Usage Data – typically retained for up to 24 months for analytics.
Payment information – not stored by us; handled by third-party providers.

7. Data Transfers

Your data may be transferred to servers outside your country (e.g., Canada, US).

For EU/UK users, we ensure transfers are protected by:

Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Sharing of Data

We may share your data with:

Service Providers – e.g., Google Analytics (analytics), Stripe/PayPal (payments), email marketing platforms (newsletters).
Legal authorities – if required by law.
Business transfers – in the event of a merger, sale, or acquisition.

We do not sell or rent your data.

9. Your Privacy Rights

9.1 EU/UK (GDPR)

You have the right to:

Access your data.
Correct or update your data.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Request data portability.
Withdraw consent anytime.

9.2 California (CCPA/CPRA)

You have the right to:

Know what data we collect.
Request deletion of your data.
Opt-out of the sale or sharing of personal data (we do not sell data).
Equal service and price, even if you exercise your rights.

9.3 Canada (CASL)

We only send marketing emails if you explicitly consent. You can unsubscribe at any time.

9.4 Malaysia (PDPA)

You may request access to, correction of, or withdrawal of consent for your personal data at any time.

10. Security of Data

We use reasonable technical and organizational measures (e.g., encryption, secure servers, PCI-DSS compliant payment processors) to protect your data. However, no online system is 100% secure.

11. Children’s Privacy

Our Service is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe your child has provided us with data, contact us to delete it.

12. Links to Other Sites

Our Service may contain links to third-party websites. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted here with a new effective date. Your continued use of the Service means you accept the updated policy.

14. Contact Us

If you have questions or want to exercise your rights:

📧 support@theartofcrypto.co
📍 Registered Address: AOC SDN. BHD., 7-2, Plaza Danau 2, Jalan 2/109f, Taman Danau Desa, 58100 Kuala Lumpur, Federal Territory of Kuala Lumpur