1. INTRODUCTION
This Privacy Policy explains how Verity Forensic Trace (“Company”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal information in connection with its website and professional services.
Verity Forensic Trace is an independent blockchain forensics and digital asset recovery consultancy registered in Liechtenstein.
Registered Address:
Bangarten 21, Vaduz, LiechtensteinOur services include blockchain forensic investigations, cryptocurrency asset tracing, smart contract analysis, cryptocurrency fraud investigations and digital asset recovery advisory.
We recognise the importance of responsible personal data processing and respect for individual privacy rights.
This Policy is intended to provide information about our data-processing activities and the rights available under applicable data-protection laws.
2. DATA CONTROLLER
For the personal data processing activities described in this Policy, the responsible data controller is:
Company: Verity Forensic Trace
Registered Address:
Bangarten 21, Vaduz, LiechtensteinPrivacy Contact: [Privacy Email Address]
Data Protection Officer: [If Applicable]
Where we process information on behalf of another organisation, our role and responsibilities may differ according to the relevant contractual arrangements and applicable law.
3. APPLICABLE DATA-PROTECTION FRAMEWORK
Liechtenstein is a member of the European Economic Area.
The European Union’s General Data Protection Regulation (GDPR) applies within the EEA, including Liechtenstein, through the relevant legal framework.
Our processing activities may also be subject to additional applicable data-protection requirements depending on the nature of the engagement and the jurisdictions involved.
We aim to process personal information according to relevant legal requirements, including principles of:
- Lawfulness, fairness and transparency.
- Purpose limitation.
- Data minimisation.
- Accuracy.
- Storage limitation.
- Integrity and confidentiality.
- Accountability.
4. CATEGORIES OF PERSONAL INFORMATION
Depending on the nature of the interaction or engagement, we may process the following categories of information.
4.1 Identity Information
- Full name.
- Country of residence.
- Contact details.
- Relevant identification information where lawfully required.
- Information concerning authorised representatives.
4.2 Contact Information
- Email address.
- Telephone number.
- Correspondence address where relevant.
- Communication preferences.
4.3 Case Assessment Information
- Description of the reported incident.
- Relevant dates and circumstances.
- Nature of the requested services.
- Supporting explanations and documentation.
4.4 Blockchain Transaction Information
- Public cryptocurrency wallet addresses.
- Transaction identifiers.
- Blockchain network information.
- Token and cryptocurrency amounts.
- Relevant transaction timestamps.
- Publicly available blockchain activity.
4.5 Financial Information
- Relevant transaction documentation.
- Cryptocurrency purchase records.
- Supporting financial statements where necessary.
- Information concerning reported financial losses.
4.6 Communications
- Emails.
- Contact form submissions.
- Relevant messages.
- Professional correspondence.
4.7 Technical Website Information
Subject to the website’s actual configuration:
- IP addresses.
- Browser information.
- Device characteristics.
- Website interaction information.
- Cookies and similar technologies.
4.8 Supporting Documentation
Relevant documents submitted during case assessments or professional engagements.
We do not request wallet seed phrases, private keys or authentication passwords for our stated investigative services.
5. SOURCES OF PERSONAL INFORMATION
Personal information may be obtained from:
Directly from Individuals
Information provided through contact forms, case assessment submissions, emails or other communications.
Authorised Representatives
Information provided by individuals lawfully acting on behalf of clients.
Public Blockchain Records
Transaction information available through public blockchain networks.
Publicly Available Sources
Information lawfully accessible through public records or other relevant sources.
Professional Service Providers
Information received from appropriate third parties where there is a lawful basis for processing.
Website Technologies
Technical information collected through the website, subject to applicable requirements and the technologies actually deployed.
6. PURPOSES OF DATA PROCESSING
We may process personal information for the following purposes.
6.1 Responding to Enquiries
Reviewing and responding to contact requests and preliminary case submissions.
6.2 Assessing Potential Engagements
Evaluating whether a proposed investigation falls within our services and capabilities.
6.3 Providing Professional Services
Conducting agreed blockchain investigations, asset tracing and technical advisory work.
6.4 Preparing Investigative Reports
Documenting relevant findings and supporting technical evidence.
6.5 Professional Communication
Communicating with clients and authorised representatives regarding relevant matters.
6.6 Contract Administration
Managing professional engagements, invoices and related administrative obligations.
6.7 Legal Compliance
Meeting applicable legal, regulatory and other mandatory obligations.
6.8 Website Operation
Maintaining the functionality, reliability and security of the website.
6.9 Establishing or Defending Legal Claims
Processing information where necessary and lawful in connection with legal rights or proceedings.
Personal information should not be used for purposes incompatible with the lawful basis and original purpose of collection.
7. LEGAL BASES FOR PROCESSING
Where the GDPR applies, personal data processing must have an appropriate legal basis.
Depending on the circumstances, relevant bases may include:
Contractual Necessity
Processing required to perform a contract or take requested steps before entering into one.
Legal Obligations
Processing necessary to comply with applicable legal requirements.
Legitimate Interests
Processing necessary for legitimate interests pursued by the Company or another party, provided those interests are not overridden by relevant individual rights and freedoms.
Consent
Processing based on valid consent where consent is the appropriate legal basis.
Legal Claims
Certain processing activities may be necessary for the establishment, exercise or defence of legal claims, subject to applicable requirements.
The applicable legal basis depends on the specific processing activity.
Where special-category personal data or criminal-offence-related data is involved, additional legal conditions may apply.
Processing Activity and Legal Basis Matrix: [To Be Confirmed]
8. BLOCKCHAIN DATA & PERSONAL INFORMATION
Public blockchain records may contain information that can be linked to identifiable individuals.
Although cryptocurrency wallet addresses do not necessarily identify their owners directly, they may constitute personal data where they can be associated with identifiable persons.
Blockchain investigations may involve analysis of:
- Public wallet addresses.
- Transaction identifiers.
- Asset movements.
- Transaction relationships.
- Smart contract interactions.
- Publicly available blockchain records.
We recognise that public availability does not automatically remove applicable data-protection obligations.
Blockchain analysis should be conducted for legitimate purposes and within the scope of the relevant engagement.
9. CASE ASSESSMENT & DOCUMENT SUBMISSIONS
Individuals may submit preliminary case information through the website.
Such submissions may include personal details, cryptocurrency transaction records and supporting documentation.
We request that individuals provide only information relevant to their enquiry.
Sensitive information should not be submitted unnecessarily.
Important Security Notice
Do not submit:
- Cryptocurrency wallet seed phrases.
- Private keys.
- Account passwords.
- Authentication codes.
- Unrelated confidential information.
Submission of a case assessment does not automatically establish a professional client relationship.
10. DISCLOSURE OF PERSONAL INFORMATION
Personal information may be disclosed where appropriate and lawful.
Potential recipients may include:
Authorised Personnel
Individuals requiring access for legitimate professional responsibilities.
Technical Service Providers
Providers supporting website hosting, information systems or other necessary technical operations.
Professional Advisers
Qualified legal or other professional advisers where appropriately engaged.
Authorised Client Representatives
Individuals or organisations authorised to receive relevant information.
Competent Authorities
Public authorities where disclosure is required or otherwise permitted by applicable law.
Other Appropriate Recipients
Third parties where disclosure is necessary, lawful and consistent with the relevant processing purpose.
We do not disclose personal information without an appropriate legal basis.
Actual Categories of Processors and Recipients: [To Be Confirmed]
11. INTERNATIONAL DATA TRANSFERS
Our services may involve international clients and professional activities.
Personal information may therefore be processed or accessed across different jurisdictions.
Where personal data is transferred outside the European Economic Area, relevant GDPR requirements must be considered.
Depending on the circumstances, lawful transfer mechanisms may include:
- European Commission adequacy decisions.
- Appropriate contractual safeguards.
- Standard Contractual Clauses.
- Other mechanisms permitted under applicable law.
International transfers must be assessed according to the relevant circumstances and legal requirements.
Actual International Transfer Arrangements: [To Be Confirmed]
12. DATA RETENTION
Personal information should be retained only for as long as necessary for legitimate purposes, subject to applicable legal obligations.
Retention periods may depend on:
- The nature of the information.
- The purpose of processing.
- The status of the engagement.
- Applicable contractual requirements.
- Relevant legal obligations.
- Potential legal claims.
Information that is no longer required should be deleted, anonymised or otherwise handled according to applicable retention procedures.
Specific Retention Periods: [To Be Confirmed]
13. INFORMATION SECURITY
We recognise the importance of protecting personal information against unauthorised access, disclosure, alteration or loss.
Appropriate technical and organisational measures should reflect the nature of the information, the processing activities and relevant risks.
Such measures may include, where implemented:
- Access controls.
- Authentication safeguards.
- Secure transmission.
- Appropriate storage protections.
- Personnel confidentiality obligations.
- Security monitoring.
- Backup and recovery procedures.
- Incident response processes.
The specific measures used depend on the Company’s operational systems and documented procedures.
No information system can be guaranteed to be entirely free from security risks.
14. PERSONAL DATA BREACHES
Where a personal data breach occurs, the Company must assess the incident according to applicable legal requirements.
Depending on the circumstances, obligations may include:
- Investigating the incident.
- Assessing relevant risks.
- Taking appropriate containment measures.
- Documenting the incident.
- Notifying the competent supervisory authority where legally required.
- Informing affected individuals where legally required.
Relevant notification obligations depend on the circumstances and applicable law.
15. INDIVIDUAL DATA-PROTECTION RIGHTS
Subject to applicable legal conditions, individuals may have rights concerning their personal information.
These may include:
Right of Access
Requesting information about relevant personal data processing.
Right to Rectification
Requesting correction of inaccurate personal information.
Right to Erasure
Requesting deletion of personal information where applicable conditions are satisfied.
Right to Restriction
Requesting restrictions on certain processing activities.
Right to Data Portability
Receiving certain personal data in a structured format where applicable.
Right to Object
Objecting to certain processing activities under applicable conditions.
Rights Concerning Automated Decisions
Relevant protections may apply to certain solely automated decisions.
Right to Withdraw Consent
Where processing relies on consent, individuals may withdraw consent according to applicable requirements.
These rights are subject to legal conditions and exceptions.
16. EXERCISING PRIVACY RIGHTS
Individuals may submit privacy-related requests through the Company’s designated contact channels.
Privacy Contact: [Privacy Email Address]
Requests should provide sufficient information to identify the relevant processing activity.
Additional verification may be required where appropriate to protect personal information against unauthorised disclosure.
Requests will be handled according to applicable legal requirements.
18. THIRD-PARTY WEBSITES
The Website may contain links to external websites or services.
External websites may operate under their own privacy policies and information-handling practices.
Visitors should review the relevant policies before submitting personal information to third parties.
The Company does not control the privacy practices of independent external websites.
19. CHILDREN’S PERSONAL INFORMATION
The Company’s professional services are intended for adults and appropriately authorised organisations or representatives.
The Website is not designed to solicit personal information directly from children.
Where information concerning minors is involved in a legitimate investigation, relevant legal requirements and appropriate safeguards must be considered.
Minimum Client Age: [To Be Confirmed]
20. AUTOMATED DECISION-MAKING & PROFILING
Certain digital services may involve automated processing or profiling.
The Company should disclose any relevant automated decision-making activities where required by applicable law.
Automated Decision-Making Activities: [To Be Confirmed]
No automated decision-making or profiling activity should be claimed or described unless it reflects actual operations.
22. CHANGES TO THIS PRIVACY POLICY
The Company may update this Privacy Policy to reflect changes in its services, processing activities or applicable legal requirements.
Updated versions should identify the relevant effective date.
Where required, additional notice or consent may be obtained.
23. CONTACT INFORMATION
For enquiries concerning this Privacy Policy or personal data processing:
Verity Forensic Trace
Privacy Email: [Privacy Email Address]
General Contact: [Official Company Email]
Website: https://vftrace.com
24. FINAL INFORMATION
This Privacy Policy is intended to explain the Company’s approach to personal data processing in connection with its website and professional services.
Specific processing activities, legal bases, retention periods, third-party recipients and technical safeguards must reflect the Company’s actual operations.
Document Status: Draft — Subject to Legal Review
Version: 1.0