Skip to main content

Privacy Policy

How we collect, use, and protect your data

Last updated: April 2026

Information We Collect

When you create an account or make a purchase, we collect the information you provide directly: email address, display name, and payment transaction identifiers. We do not collect or store full credit card numbers, bank account details, or cryptocurrency wallet private keys.

Our platform also collects technical data automatically: IP address, browser type, operating system, pages visited, and timestamps. This data helps us maintain security, prevent fraud, and improve our services.

We follow a data minimization principle — we only collect what is necessary to provide our services.

How We Use Your Data

Your data is used strictly for the following purposes: processing and delivering your orders, managing your account, providing customer support, preventing fraud and abuse, and sending transactional notifications (order confirmations, delivery updates, password resets).

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not send promotional emails unless you explicitly opt in.

Data Security

All data transmitted between your browser and our servers is encrypted using TLS 1.2/1.3. Passwords are hashed using bcrypt with industry-standard cost factors and are never stored in plaintext.

Access to customer data is restricted to authorized personnel only, using role-based access controls. Our infrastructure runs on isolated containers with regular security updates.

Full transport encryption (TLS 1.2+), bcrypt password hashing, role-based access control.

Cookies & Tracking

We use essential cookies to maintain your session and authentication state. These cookies are strictly necessary for the platform to function and cannot be disabled.

We do not use third-party advertising trackers, social media pixels, or cross-site tracking technologies. We do not participate in any advertising networks.

Your Rights

You have the right to access, correct, or delete your personal data at any time. You can update your profile information directly in your personal cabinet, or contact our support team for assistance.

You may request a complete export of your data or request account deletion. Upon deletion, all personal data is permanently removed from our active systems within 30 days, except where retention is required by law.

Data Retention & Deletion

Account data is retained for as long as your account is active. Transaction records are retained for 3 years to comply with financial reporting obligations and to support dispute resolution.

If you delete your account, personal data is purged within 30 days. Anonymized, aggregated statistics (order counts, revenue totals) may be retained indefinitely as they cannot be linked back to any individual.

Still have questions?

Our support team is here to help.

support@getdma.com