# KeepKey Privacy Policy

## Online Privacy Notice

Data protection and security are important to Key Hodlers, LLC (“KeepKey”; “we”), as is your trust in our company and services. KeepKey is committed to processing your personal data responsibly and in compliance with legal requirements.

This Online Privacy Notice describes how we collect and process your personal data when you use our website <https://shapeshift.io/keepkey/> (including any sub-sites and related extensions thereof; “the website”).

## Personal data we collect and process in order to make the website available

You can visit the website and obtain information about our services without telling us who you are. As with any connection with a webserver, however, the server on which we host the website automatically logs and temporarily stores certain technical data.

Technical data that is stored includes the IP address and operating system of your device, the data and time of access, or the type of browser you use to access the website. This is required for technical reasons to make the website available to you. To the extent we, thereby, process personal data, we do so based on our legitimate interest to bring you the best possible user experience and to safeguard the security and stability of our systems.

Our website uses fonts by Google LLC (“Google”) (“Google Fonts”). To integrate Google Fonts into the website, your browser establishes a connection to the Google server. In doing so, the IP address of your device is transmitted to Google. Google logs records of font queries and protects this data from unauthorized access. Google analyzes aggregated data to optimize Google Fonts and identify which websites use Google Fonts. Further information on Google Fonts can be found here: <https://fonts.google.com>. Further information on how Google handles personal data can be found here: <https://policies.google.com/privacy?hl=en>.

## Personal data we collect and process to provide services to you and to respond to your inquiries

If you interact with order or inquiry forms on the website (e.g. purchasing a KeepKey device or requesting support regarding a device), we will collect the information that you provide to us. We collect and process this personal data for the purpose of providing products and services, as well as information about our products and services to you.

This may include your full name, your shipping and billing address, your phone number, your e-mail address, and your credit card information.

Where such processing of your personal data is not strictly necessary to perform our contractual obligations to you or to comply with legal requirements, we will use this personal data based on our legitimate interest to respond to your inquiry, to contact you if we have any questions about your inquiry, to follow up on your inquiry, to process your orders, to develop, enhance and improve our products and services, to bring you the best possible experience or to safeguard the security and stability of our services. Further, based on our legitimate interest to inform our customers and partners about new developments, products, services or offers, we will send you certain commercial information (e.g. our newsletter or blog posts). However, you may at any time opt-out of receiving such information.

If you download and interact with the KeepKey client on Google Chrome, we will collect and process your device’s xpub data. This data is necessary to provide the services of the KeepKey client and will always be stored securely. We also use the services of BlockCypher for certain indexing requirements. Further information on data protection and your options in connection with the services of BlockCypher can be found here: <https://www.blockcypher.com/privacy.html>.

## We store all of the personal data you provide to us in an encrypted fashion

We use the services of Shopify to process orders on our website. Further information on data protection and your options in connection with the services of Shopify can be found here: <https://www.shopify.com/legal/privacy>.

We use the services of ShipStation for order fulfillment and shipping logistics. Further information on data protection and your options in connection with the services of ShipStation can be found here: <https://www.shipstation.com/privacy-policy/>.

We also use the services of FedEx for some order fulfillment and shipping logistics. Further information on data protection and your options in connection with the services of FedEx can be found here: <https://www.fedex.com/en-us/trust-center/global-privacy-policy.html>.

We use the services of SendGrid to send transactional emails. Further information on data protection and your options in connection with the services of SendGrid can be found here: <https://sendgrid.com/policies/privacy/>.

We also use the services of Autopilot, an email automation platform, to better reach KeepKey product subscribers who have opted in to receive such communications. Emails are sent out to convey information such as notifications related to activity on the platform, general updates, product additions, product news, partnerships, event announcements, and survey requests. Autopilot does not sell or otherwise use the information it collects on behalf of KeepKey, except as discussed in this policy. More information about data protection and your options in connection with the services of AutoPilot can be found here: <https://www.autopilothq.com/legal/privacy-policy>.

We use the services of Zendesk, Inc. (“Zendesk”) to answer live queries on the website, in which we have a legitimate interest. Zendesk uses cookies in order to provide these services. Further information on data protection and your options in connection with the services of Zendesk can be found here: <https://www.zendesk.com/company/customers-partners/privacy-policy/> (Zendesk Privacy Policy) and <https://www.zendesk.com/company/customers-partners/cookie-policy/> (Zendesk Cookie Policy).

## Data we collect and process to analyze and improve the use of the website; use of cookies

In addition, based on our legitimate interest to bring you the best possible user experience, we analyze the use of the website to gain insight on how we may improve our services. The website uses cookies (text files that are downloaded to your computer or mobile device when you visit a website) to support this analysis.

The data we collect may include information on the type of web browser or device you use to access the website, the geographical region where you access the website, the date and time of your access, and the parts of the website you access.

We also use cookies to analyze the use of the website, to optimize our services and to enable the use of marketing tools. Further information on web analysis and our marketing activities can be found below.

We use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies to collect the information that is required to evaluate your use of the website in order to create reports on the use of the website and to provide other services that support our analysis and improvement of the use of the website, in which we have a legitimate interest.

We use Google Analytics only with IP anonymization enabled. This means that your IP address will be shortened beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Accordingly, Google only stores the information collected via cookies in anonymous form and processes it in aggregated form. You can prevent Google Analytics from using your data by downloading and installing a browser add-on to disable Google Analytics (<https://tools.google.com/dlpage/gaoptout?hl=en>). Further information on data protection and your options in connection with Google Analytics can be found here: <https://support.google.com/analytics/answer/6004245?hl=en>.

We use the services of Cloudflare, Inc. (“Cloudflare”) in order to identify trusted web traffic (i.e. to identify individual clients behind a shared IP address and apply security settings on a per-client basis), in which we have a legitimate interest. Cloudflare uses cookies in order to provide these services. The cookies do not correspond to any user ID in your web application, and do not store any personal data. Further information on data protection and your options in connection with the services of Cloudflare can be found here: <https://www.cloudflare.com/privacypolicy/> (Cloudflare Privacy Policy) and <https://www.cloudflare.com/cookie-policy/> (Cloudflare Cookie Policy).

By adjusting your web-browser’s settings accordingly, you can prevent the storage of cookies on your device and the collection of data. Note, however, that some functions of the website may be limited or unavailable if you disable the storing of cookies.

## Data that we collect and process to target potential customers

We use Google Tag Manager to generate tags for the website and applications. These tags enable us to tailor marketing measures for our services to potential customers (re-targeting).

We use advertising technologies by Google (AdWords). Google sets conversion cookies in accordance with our settings in Google Tag Manager. This is necessary for checking the effectiveness of the respective advertising campaigns. We have a legitimate interest in this. We also use Google Tag Manager to set re-targeting tags. These tags enable us to target users with information about our services when they visit different websites. For information regarding your choices in relation to usage-based online advertising, see: [http://www.youronlinechoices.com](http://www.youronlinechoices.com/). For information about your options in connection with cookies, see above “Data we collect and process to analyze and improve the use of the website; use of cookies”.

## How we process and protect your personal data; how long we store it

We collect, process and protect your personal data responsibly and in accordance with applicable laws. We process it only for the purposes for which you provide the personal data to us, as set forth in this Online Privacy Notice and/or in accordance with applicable laws. We store your personal data only for as long as this is necessary.

We apply adequate technical and organizational security measures, commensurate with the level of known risk, in order to protect the confidentiality and integrity of the personal data we collect on the website.

## With whom we share your personal data

In connection with the offers and services provided on the website, to protect our legitimate interests or to fulfill legal requirements, it may be necessary to share your personal data with our affiliate ShapeShift Global Limited, with business partners of KeepKey, as well as with applicable public authorities and law enforcement upon receipt of a facially valid formal law enforcement request.

Specifically, such sharing of data may be necessary to manage your order, to respond to your inquiry, to execute the transaction, to provide access to additional information, or to follow up on your inquiry and inform you on new services or offers.

Further, to the extent we are requested by public authorities or courts and legally required to do so, we will share your personal data with them or other third parties.

The data sharing may include transfers to companies or organizations in countries without an adequate standard of data protection. In these cases, we transfer personal data in accordance with applicable provisions on the international transfer of personal data, such as, where applicable, the respective provisions of the EU General Data Protection Regulation (GDPR).

## The rights you have regarding your personal data

If you are a citizen of the European Union, you have certain individual rights regarding the personal data that we collect and process about you through the website.

You have the right to access or receive certain information about the personal data we process about you. You also have a right to have your personal data rectified, to object to the processing of your personal data, or to ask us to restrict processing or delete your personal data. If the GDPR applies and we process your personal data to perform a contract with you or based on your consent, you also have the right to receive a copy of your personal data for the purpose of transferring such data to a third party.

Please note, however, that your rights are subject to exceptions or derogations. Specifically, we may need to further process and retain your personal data to perform a contract with you or your company or organization, to protect our legitimate interests (such as the establishment, exercise or defense of legal claims) or to comply with legal requirements. To the extent permitted by law, namely to protect the rights and freedoms of others or to protect our own legitimate interests, we may therefore refuse to satisfy your request or we may satisfy your request only restrictedly.

Lastly, you have a right to lodge a complaint with the competent supervisory authority.

## Who we are and how to contact us

KeepKey is the controller in relation to the collection and processing of personal data through the website. Key Hodlers, LLC is an LLC formed under the laws of the State of Delaware, United States.

If you have any questions or concerns, you may contact us by writing to KeepKey as set forth below.

To inquire about the collection or processing of your personal data in connection with the website, or if you have any questions or concerns about this Online Privacy Notice, you may contact us through the KeepKey Help Center, located here: <https://keepkey.zendesk.com/hc/en-us>. In addition, you may also email us at <privacy@shapeshift.io> with any questions and/or requests.

For all correspondence, please include any necessary identifying information such as your name, return e-mail or physical address. Failure to do so may prevent us from providing a response.

## Links to Other Websites

Our website does contain links to affiliate and other websites. KeepKey does not claim nor accept responsibility for any privacy policies, practices and/or procedures of other such websites. Therefore, we encourage all users and visitors to be aware when they leave our website and to read the privacy statements of each and every website that collects personally identifiable information. The aforementioned Privacy Policy Agreement applies only and solely to the information collected by our website.

## How we can change this Online Privacy Notice

We reserve the right to change this Online Privacy Notice at any time. The version published on the website is the applicable version.
