GDPR — Data subject rights

This page sets out the rights granted by the General Data Protection Regulation (GDPR) and comparable frameworks, and how they work in practice with us. It complements the Privacy Policy, which describes what data we hold, why and for how long, and does not replace it.

The controller for user data is the operator of Walletbridge (wallet-bridge.com); details of the legal entity are available on request via support. No EEA representative has been appointed, as the service is not established on an ongoing basis in a particular EEA country; no data protection officer has been appointed either — requests are handled by the service team. Single point of contact: help@wallet-bridge.com.

We rely on performance of a contract (registration, Orders, payouts, support), legitimate interests (security, fraud prevention, failure diagnosis), compliance with legal obligations (recording operations and answering binding requests) and consent (newsletters). Each purpose uses one basis, and we do not extend processing beyond it without a separate notice.

You have the following rights in respect of your personal data:

• Right of access — obtain confirmation that we process your data and a copy of what we hold.
• Right to rectification — have inaccurate data corrected and incomplete data completed.
• Right to erasure ("right to be forgotten") — request deletion, subject to statutory retention obligations.
• Right to restriction of processing — have use of your data limited, for example while its accuracy is verified.
• Right to data portability — receive the data you provided in a structured, machine-readable format.
• Right to object — to processing based on legitimate interests, and to direct marketing at any time.
• Right to withdraw consent — where processing relies on it; withdrawal does not affect the lawfulness of earlier processing.
• Right to lodge a complaint — with the supervisory authority in your country of residence or where the alleged infringement took place.

Email help@wallet-bridge.com from the address on your account, name the right you want to exercise and, if the request concerns a specific operation, include the Order number. No particular form is required. You may also call the number below, but we will need written confirmation from your account email before acting.

Before disclosing or deleting data we must be satisfied the request comes from you. An email from your account address plus confirmation of recent operation details is normally enough. We ask for additional documents only where there is reasonable doubt, and we do not keep them longer than the request requires.

We answer a verified request within one month of receiving it. For complex or numerous requests this may be extended by up to two further months; we will tell you about the extension and the reason within the first month. Handling requests is free of charge; for manifestly unfounded or excessively repetitive requests we may charge a reasonable fee or refuse, giving our reasons.

We provide a copy of your data in a machine-readable format (JSON or CSV) together with an explanation of the categories. Where a request touches other people's data — for example correspondence involving a third party — we provide an extract with that data removed.

We apply automated security rules that may lead to an extra check, a paused operation or a declined payout. For decisions that significantly affect you, you may require human involvement, obtain an explanation and contest the outcome — write to us and an operator will review the decision.

Some processors are located outside the EEA. For those transfers we rely on the European Commission's standard contractual clauses or other safeguards permitted by the Regulation, limit the data transferred and require comparable protection from processors. The list of recipient categories is on the Data Sharing page.

If our answer does not satisfy you, you may complain to the data-protection authority of your country of residence, place of work or the place of the alleged infringement. This right does not depend on contacting us first, but we ask that you give us a chance to resolve the matter.

We update this page when the procedure for handling requests or the set of processors changes. The version in force is published here and its date is shown at the top of the document.