Privacy Policy
We respect your privacy and are committed to protecting your personal information. Here's how we handle your data.
Last updated: July 12, 2025
Overview
Big Monster Ltd (trading as CryptoKaiju) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, purchase our products, or interact with our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws. As a UK-based company, we act as the data controller for your personal information.
1. Information We Collect
1.1 Personal Information You Provide
When you interact with our services, you may provide:
- Contact Information: Name, email address, phone number
- Shipping Information: Delivery address, postal code, city, country
- Payment Information: Wallet addresses, transaction details (payment card data is processed by our payment providers)
- Account Information: Username, preferences, communication history
- User Content: Messages, feedback, support requests
1.2 Information Automatically Collected
When you visit our website, we automatically collect:
- Technical Information: IP address, browser type, device information, operating system
- Usage Information: Pages visited, time spent, referring websites, clickstream data
- Location Information: General location based on IP address
- Cookies and Tracking: See our Cookie Policy section below
1.3 Blockchain Information
When you interact with NFTs or blockchain transactions, certain information becomes publicly available on the Ethereum blockchain, including wallet addresses, transaction amounts, and timestamps. This information is permanent and cannot be deleted.
2. How We Use Your Information
We process your personal information for the following purposes:
2.1 Service Provision (Contractual Necessity)
- Processing and fulfilling your orders
- Delivering physical products to you
- Providing customer support and responding to inquiries
- Managing your account and preferences
- Facilitating NFT minting and blockchain interactions
2.2 Legitimate Business Interests
- Improving our website and services
- Analyzing usage patterns and user behavior
- Preventing fraud and enhancing security
- Conducting research and development
- Managing our business operations
2.3 With Your Consent
- Sending marketing communications and newsletters
- Notifying you about new releases and exclusive offers
- Using cookies for analytics and personalization
- Sharing success stories or testimonials (with your permission)
2.4 Legal Compliance
- Complying with legal obligations and regulations
- Responding to legal requests and court orders
- Protecting our rights and preventing illegal activities
3. Information Sharing and Disclosure
We may share your information with:
3.1 Service Providers
- Payment Processors: Stripe, PayPal for payment processing
- Shipping Partners: Delivery companies for product fulfillment
- Cloud Services: Hosting providers, email services
- Analytics Providers: Google Analytics for website insights
- Customer Support: Help desk and communication tools
3.2 Business Transfers
If we're acquired, merge with another company, or sell our assets, your information may be transferred as part of that transaction.
3.3 Legal Requirements
We may disclose information when required by law, to protect our rights, prevent fraud, or ensure user safety.
3.4 Public Blockchain
NFT transactions and wallet interactions are recorded on public blockchains and are permanently visible to anyone.
4. Data Security
We implement industry-standard security measures to protect your personal information:
- SSL encryption for all data transmissions
- Secure hosting with reputable providers
- Regular security audits and updates
- Limited access to personal data on a need-to-know basis
- Password protection and two-factor authentication where applicable
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. International Data Transfers
Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure adequate protection through:
- Adequacy decisions by the UK government
- Standard contractual clauses approved by UK authorities
- Certification schemes and codes of conduct
- Other appropriate safeguards as required by law
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and support your account
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Improve our services and prevent fraud
Specific retention periods:
- Account data: Until account deletion or 3 years of inactivity
- Transaction records: 7 years for tax and legal compliance
- Marketing data: Until you unsubscribe or withdraw consent
- Analytics data: 26 months (Google Analytics default)
7. Your Rights
Under UK GDPR, you have the following rights:
π Right to Access
Request a copy of the personal data we hold about you
βοΈ Right to Rectification
Correct any inaccurate or incomplete personal data
ποΈ Right to Erasure
Request deletion of your personal data (subject to legal exceptions)
βΈοΈ Right to Restrict Processing
Limit how we use your personal data in certain circumstances
π¦ Right to Data Portability
Receive your data in a structured, machine-readable format
β Right to Object
Object to processing based on legitimate interests or for marketing
π Right to Withdraw Consent
Withdraw consent for processing where we rely on consent
Important note: Some data on public blockchains cannot be deleted or modified due to the permanent nature of blockchain technology.
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
8.1 Essential Cookies
Required for the website to function properly. These cannot be disabled.
8.2 Analytics Cookies
Help us understand how you use our website (Google Analytics). You can opt out of these.
8.3 Marketing Cookies
Used to show you relevant advertisements. Require your consent.
8.4 Managing Cookies
You can control cookies through your browser settings or our cookie banner. Note that disabling certain cookies may limit website functionality.
9. Children's Privacy
Our services are not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you're a parent and believe your child has provided us with personal data, please contact us immediately, and we'll take steps to remove that information.
10. Third-Party Links and Services
Our website may contain links to third-party websites (like OpenSea, Discord, Twitter). We're not responsible for their privacy practices. We encourage you to read their privacy policies before providing any personal information.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated via email or prominent website notice. The "Last updated" date at the top indicates when changes were made.
12. Contact Us
For any privacy-related questions, to exercise your rights, or to make a complaint:
Data Protection Officer: info@cryptokaiju.io
Email: info@cryptokaiju.io
Company: Big Monster Ltd (trading as CryptoKaiju)
Address: 35 Sandileigh Avenue, Hale, Altrincham, WA15 8AT, United Kingdom
Right to complain: You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your personal data.