1. Introduction
Bit Guardian GmbH (“Bit Guardian,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal data when you purchase products through our online store (the “Store”), communicate with our customer support teams, or interact with services associated with your purchase.
This Privacy Policy applies to customers who purchase any product offered through the Store. It covers all products sold through the Store and is not limited to any particular product or software application.
For the purposes of applicable data protection legislation, Bit Guardian GmbH acts as the data controller for the personal data it processes in connection with the Store, except where another party independently determines the purposes and means of processing.
2. Legal Basis for Processing
We process personal data only where a valid legal basis applies. Depending on the circumstances, this may include:
- Contractual necessity: To process your order, complete your purchase, deliver the purchased product, manage payments, and provide related customer services.
- Legal obligations: To comply with applicable accounting, tax, consumer protection, and other legal requirements.
- Legitimate interests: To maintain and secure the Store, prevent fraud, manage disputes, improve our services, and protect our legal rights, provided that these interests do not override your rights and freedoms.
- Consent: Where you have given consent for specific processing activities, such as certain non-essential cookies or marketing communications where consent is required.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
3. Applicable Legal Principles
The processing of your personal data is based on the following legal principles:
- of Article 6 (1) GDPR serves as the legal basis for processing operations for which your consent has been obtained.
- of Article 6 (1) GDPR is the legal basis for data processing to fulfill our services, to carry out contractual arrangements and to answer inquiries.
- of Article 6 (1) GDPR applies as far as we need to process your personal data to fulfill our legal obligations.
- of Article 6 (1) GDPR serves as a legal basis if the processing of your personal data is necessary to protect your vital interests or the vital interests of another natural person.
- of Article 6 (1) GDPR is used for the protection of our legitimate interests or the legitimate interests of a third party commissioned by us.
4. Information We Collect
Depending on how you interact with the Store and the services associated with your purchase, we may collect the following categories of information.
4.1 Information Provided by You
| Type of Information |
How We Use It |
| Contact information: First name, last name, email address, and optional phone number. |
To identify you in connection with your order, communicate order-related information, respond to inquiries, and provide customer support. Providing a phone number is optional unless a particular service expressly requires it. |
| Order information: Details of the products purchased, order reference, purchase date, order status, and related transaction records. |
To process and manage your purchase, provide order confirmations, handle refunds or cancellations, and maintain transaction records. |
| Billing information: Information necessary to complete payment and maintain billing records, which may include billing address, country, postal code, and other details required by the selected payment method. |
To facilitate payment processing, maintain accurate billing records, manage refunds, and comply with applicable financial and tax obligations. |
| Payment information: Payment-related details processed through the selected payment provider. |
To complete transactions, verify payments, prevent fraudulent transactions, and resolve payment-related disputes. Payment card details may be collected and processed directly by the relevant payment provider. |
| Customer communications: Information contained in emails, support requests, or other communications you send to us or our authorized support centres. |
To respond to your requests, troubleshoot issues, assist with product installation or use, and maintain records of customer interactions where necessary. |
4.2 Technical and Usage Information
| Type of Information |
How We Use It |
| Online identifiers: IP address, cookie identifiers, and similar online identifiers. |
To maintain Store functionality, support session management, protect against fraud and abuse, and help secure our systems. |
| Technical information: Browser type and version, operating system, language settings, device-related information, and other technical information transmitted by your browser. |
To ensure compatibility, maintain the Store, diagnose technical issues, and improve its performance and reliability. |
| Store usage information: Information about interactions with Store pages and relevant checkout steps, where collected. |
To understand Store performance, troubleshoot problems, and improve the purchasing experience. Analytics or similar tracking that requires consent will be used only in accordance with applicable requirements and your consent choices. |
| Security and verification information: Information generated through security checks, bot detection, and fraud-prevention measures. |
To protect the Store, verify legitimate activity, prevent automated abuse, and identify potentially fraudulent transactions. |
If we combine information that does not independently identify you with personal data, we will treat the combined information as personal data for as long as it remains identifiable or attributable to you.
5. How We Collect Information
We may collect personal data through the following methods:
- Directly from you: When you enter your details during checkout, make a purchase, contact customer support, or communicate with us.
- Automatically: Through the Store and technologies such as cookies, server logs, and security or verification tools, subject to applicable consent requirements.
- Through service providers: From payment processors, fraud-prevention providers, customer support centres, and other third parties involved in providing or supporting the Store and its services, where legally permitted.
You are generally not required by law to provide personal data to us. However, certain information is necessary to complete a purchase or provide services you request. If you do not provide required information, we may be unable to process your order or fulfil the relevant request.
6. Information We Collect from Store Customers
The following table summarises the principal categories of customer information and the purposes for which they may be processed.
| Information Collected |
Purpose of Processing |
Legal Basis |
| Name and email address entered during checkout. |
To identify your order, send purchase confirmations, provide order-related updates, and communicate with you about your transaction. |
Performance of a contract and, where applicable, compliance with legal obligations. |
| Optional phone number. |
Where provided, to assist with order-related matters or allow an authorized support centre to contact you regarding your purchase or product-related questions. |
Performance of a contract where necessary, or legitimate interests, depending on the circumstances. Marketing calls or messages will be made only where legally permitted. |
| Order and transaction records. |
To manage purchases, process refunds, resolve disputes, maintain records, and meet accounting and tax requirements. |
Performance of a contract and compliance with legal obligations. |
| Payment-related information. |
To authorize and complete payments, detect suspicious transactions, and manage payment disputes. |
Performance of a contract, compliance with legal obligations, and legitimate interests in preventing fraud. |
| Customer support correspondence. |
To answer inquiries, investigate complaints, provide technical assistance, and follow up on unresolved matters. |
Performance of a contract or legitimate interests in providing customer service and resolving issues. |
| Technical information and online identifiers. |
To operate and secure the Store, detect abuse, troubleshoot technical issues, and improve functionality. |
Legitimate interests, or consent where required for particular technologies or purposes. |
| Information generated by security checks. |
To detect fraudulent activity, protect transactions, and maintain the security of the Store. |
Legitimate interests and, where applicable, compliance with legal obligations. |
7. Sharing of Personal Data
We do not disclose personal data indiscriminately. We may share it with third parties when necessary for the purposes described in this Privacy Policy, where permitted by law, or where disclosure is otherwise legally required.
The categories of recipients may include:
- Third Party Service Providers – We may share your information with third-party service providers who perform services on our behalf, including API integration, payment processing, tracking and analytics, server hosting, service functionality and support, and marketing. These providers may operate in different jurisdictions and may include credit service providers, banks, and other payment processing service providers.
- Legal Requirements – We may disclose your information to the extent necessary to comply with applicable laws, regulations, legal proceedings, or requests from governmental authorities, including court orders and injunctions.
- Enforcement of Policies – We may disclose your information to the extent necessary to enforce our policies, investigate potential violations, detect or prevent illegal activities, and address suspected fraud, security concerns, or other misconduct.
- Protection of Company Rights – We may disclose your information to the extent necessary to establish, exercise, or defend our legal rights, including in connection with legal claims or proceedings.
- Protection of Third-Party Rights – We may disclose your information to the extent necessary to protect the rights, property, or safety of our company, users, you, or other third parties. This may also include cooperating with law enforcement authorities and enforcing intellectual property rights or other legal rights.
- Affiliated Companies – Certain information, including marketing-related information such as mailing addresses, may be shared with our affiliated companies within the same corporate group.
- Business Partners – If you access or use our Services through a business partner, we may process your information on their behalf and share relevant information, including billing, order, and invoicing details, with that business partner as necessary to provide the Services.
- Corporate Transactions – We may disclose or transfer your personal information in connection with a corporate transaction, such as a merger, acquisition, consolidation, sale of a substantial portion of our business, or transfer of assets. In such circumstances, the acquiring entity or relevant affiliated company may assume the rights and obligations relating to your personal information, subject to this Privacy Policy and applicable laws.
8. Data Retention
We retain personal data for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy and in accordance with applicable laws. Requests for the deletion of personal data will be handled in accordance with applicable data protection legislation. However, certain information may be retained where required by law, such as billing records for tax and accounting purposes. We reserve the right, at our sole discretion, to delete or modify personal data in our systems, without prior notice, once we determine that it is no longer necessary for the purposes for which it was collected, subject to any applicable legal retention requirements.
9. Information Security
We take reasonable technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures may include access controls, restricted permissions, security monitoring, and the use of service providers that implement appropriate safeguards.
Where payment processing is handled by a third-party payment provider, the provider's systems and security practices may also apply to the payment information it processes.
No method of electronic transmission or storage is completely secure. Accordingly, although we take reasonable steps to protect personal data, we cannot guarantee absolute security.
If a personal data breach occurs, we will take appropriate steps in accordance with applicable law, including notifying the relevant supervisory authority and affected individuals where required.
10. Your Privacy Rights
Depending on your location and the applicable data protection laws, you may have the following rights in relation to your personal data:
In accordance with Articles 15 to 20 GDPR you have the following rights in relation to the collection of your data:
a) Right to Obtain Information
You have the right to obtain information about the personal data stored about you.
b) Right to Rectification
You have the right to request the immediate rectification of inaccurate personal data and/ or completion of incomplete personal data concerning you.
c) Right to Restriction of Processing
You have the right to demand the restriction of processing of your personal data, as far as the accuracy of the personal data is contested by you, or as far as the processing is unlawful. As an alternative to deletion, you may demand from us to restrict the use of your personal data, as far as you need this data for the establishment, exercise, or defense of legal claims. You may further demand the restriction or omittance of the erasure if you have objected to the processing of your data pursuant to Article 21 (1) GDPR pending the verification of whether our legitimate interests in data use and/ or processing override those of you.
d) Right to Erasure
You have the right to obtain the erasure of personal data that we have stored about you unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
e) Right to Notification
If you have asserted your right to rectify, erase or limit processing, we will notify all recipients to whom your personal data have been disclosed of such rectification or erasure or restriction of processing of the data unless this proves to be impossible or would involve a disproportionate effort.
f) Right to Data Portability
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format. The same applies if you demand that your data is to be transmitted to a third party. If you require the data being directly transmitted to another controller, this will only be done where technically feasible.
g) Right to Object
If your personal data is processed on the basis of legitimate interests in accordance with point (f) of Article 6 (1) GDPR, you have the right to object to the processing at any time in accordance with Article 21 of the GDPR.
h) Right to Revoke Previously Given Consent
You have the right to revoke your consent to the collection of data at any time with effect for the future. The data collected until the legal validity of the revocation remains unaffected. Please understand that for technical reasons the implementation of your revocation may take a little time during which you may still receive messages from us.
i) Right to Lodge a Complaint with a Supervisory Authority
In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates data protection law or is otherwise unlawful.
To exercise your rights, please contact us using the contact details provided in the final section of this Privacy Policy. We may request information reasonably necessary to verify your identity and locate the relevant records.
We will respond within the time limits established by applicable law. If we cannot fulfil your request, we will explain the reasons where required and inform you of any applicable options for further action.
These rights are subject to legal conditions and exceptions. They do not apply in every situation, and we may need to retain certain information where required or permitted by law.
11. Cookies and Similar Technologies
The Store may use cookies and similar technologies to support essential functionality, maintain checkout sessions, enhance security, remember relevant settings, and understand how the Store performs.
A cookie is a small data file stored on your device when you visit a website. Similar technologies may collect information about your browser, device, or interactions with the Store.
Depending on the technologies implemented, we may use the following categories:
| Technology Category |
Purpose |
| Essential cookies and technologies |
To enable core Store functionality, maintain sessions, support checkout, and help protect against fraudulent or abusive activity. |
| Security and verification technologies |
To distinguish legitimate visitors from automated or malicious traffic and protect the Store. |
| Analytics technologies |
To measure usage and performance and identify opportunities to improve the Store, where legally permitted. |
| Preference technologies |
To remember settings or choices that improve your experience, where such technologies are used. |
Where required by law, we will obtain your consent before using non-essential cookies or similar technologies. You may manage your preferences through any cookie controls made available on the Store and, where appropriate, through your browser settings.
Disabling certain cookies may affect the functionality of the Store or prevent some checkout features from working correctly.
12. Third-Party Services and Websites
The Store may rely on third-party services or provide links to websites operated by other organizations.
Where a third party processes personal data independently as a controller, its own privacy policy and practices may apply. We encourage you to review the privacy information provided by those organizations.
We are not responsible for the privacy practices of independent third-party websites that we do not control. This does not affect any obligations Bit Guardian has under applicable data protection law in relation to services it uses or personal data it processes.
13. Direct Marketing
We may send emails or other communications about our company and Services to our Business Partners and Customers. We may also send newsletters, updates, and other promotional communications to individuals who have subscribed to our newsletter or used our Services.
You may opt out of receiving promotional communications and request the removal of your Personal Information from our marketing mailing list at any time by clicking the unsubscribe link included at the bottom of our communications or by contacting us at support@bit-guardian.com
Please note that if you are a Business Partner, opting out of promotional communications will not prevent us from sending you essential service-related communications, including service announcements, administrative notices, and messages concerning your account or transactions related to the Services. These communications are necessary for the ongoing provision and administration of our Services and may not be opted out of unless you terminate and delete your account.
To request the deletion of your account, please contact us at support@bit-guardian.com. Please note that deleting your account does not necessarily mean that all your Personal Information will be deleted. We may retain certain information where required by applicable law or where retention is necessary for legitimate business purposes. For example, we may retain invoices and related financial records to meet our accounting, financial reporting, and legal obligations.
14. Children's Privacy
The Store is intended for individuals who are legally able to make purchases under the laws applicable to them. We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.
Where applicable law requires parental authorization or imposes other restrictions on processing a child's personal data, we will comply with those requirements.
If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us so that we can assess the situation and take appropriate action.
15. International Data Transfers
We may store or process your personal data in other countries, depending on the location of our service providers and the systems used to operate our Store. Accordingly, when you access our Store or use our services, your personal data may be transferred to and processed in a country other than the country in which you are located.
Where personal data is transferred to a country outside the EEA, we will ensure that the transfer complies with applicable data protection legislation. Depending on the circumstances, this may involve relying on an adequacy decision, entering into the European Commission's Standard Contractual Clauses, or implementing another legally recognized transfer mechanism.
Where required, we will also assess whether supplementary safeguards are necessary to ensure an appropriate level of protection for the transferred data.
If you are a resident of a jurisdiction where transfer of your personal data requires your consent, then your consent to this Privacy Policy includes your express consent for such transfer of your data.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data-processing practices, the services offered through the Store, applicable legal requirements, or other relevant circumstances.
When we make changes, we will update the “Last Updated” date at the beginning of the policy. Where required by applicable law, we will provide additional notice of material changes.
We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal data.
17. Do Not Track Disclosure
Our Store does not currently respond to “Do Not Track” signals. For more information about these signals and how they work, please visit All About Do Not Track.
18. Contact Information
If you have questions about this Privacy Policy or wish to exercise your data protection rights, you may contact:
Bit Guardian GmbH
Am Kirchenhölzl 14,
82166 Gräfelfing, Germany
support@bit-guardian.com