Last updated: 19 April 2023
CoinJar UK Limited ("CoinJar", "we", "us", "our") operates a digital currency exchange via www.coinjar.com/uk, sub-domains, any associated web-based and mobile applications, and APIs (collectively, "Website"). For more information about the services available in your region ("Services"), please visit our Website and refer to our Terms of Service.
|What personal data we process
|Why we process this personal data
|Our lawful basis for processing
Identity Data: this includes your first name, middle name, surname, date of birth, identity documentation, nationality, country of residence.
Contact Data: this includes your address (business and/or residential), phone number(s), email address and any other contact details you may provide.
Financial Data: this includes your sort code, bank account number or IBAN, and account name.
Profile Data: this includes data regarding your deposits, withdrawals and trades on the Website and any cryptocurrency wallet addresses.
Usage Data: we may process data regarding your use of the Services, including incidences of download and deletion, average time spent, means of connection, operating system, any problems reported, your IP address, device type, and number and frequency of logins.
We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of any personal data we collect or you provide.
Any personal data uploaded by you or collected by us via the Website happens over an SSL-secured communication channel and is encrypted and protected with digital signatures. We store your personal data securely throughout the life of your CoinJar account on our servers in the UK, European Union, Australia and elsewhere in the world where CoinJar facilities or our service providers are located (for more information on data transfers see section 4 below).
Payment card data is securely transferred and hosted off-site by a payment partner in compliance with Payment Card Industry Data Security Standards (PCI DSS). This information is not accessible to CoinJar.
When you use the Services, we may need to disclose your personal data to the following categories of third parties:
We may also need to disclose your personal data in the following limited circumstances:
The personal data we share with these third parties and in these circumstances will in each case be limited to that strictly necessary to satisfy the reasons set out in the table above.
We will not transfer your personal data outside of the UK, except to our parent company in Australia, and selected third parties that we have instructed to help us provide the Services to you. Such third parties may process and store your personal data in geographically distributed data centres.
In the case of transfers of your personal data outside of the UK, where the transfers are not to countries covered by UK adequacy regulations, we will put in place appropriate safeguards to cover transfers of your personal data which may include, for example, signing an international data transfer agreement issued under section 119A of the Data Protection Act 2018.
We store your personal data in line with legal, regulatory, financial and good-practice requirements. If you deactivate your CoinJar account, we will mark your account in our database as "Deactivated", but will keep your account information in our database for 7 years. This is necessary in order to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account.
As a result of us collecting and processing your personal data, you have the following legal rights:
To exercise any of your rights set out above, including to withdraw your consent where we have stated we are processing your personal data based on your consent, please contact us at email@example.com.
Cryptoassets traded on CoinJar UK Limited are largely unregulated in the UK, and you are unable to access the Financial Service Compensation Scheme or the Financial Ombudsman Service. We use third party banking, safekeeping and payment providers, and the failure of any of these providers could also lead to a loss of your assets. We recommend you obtain financial advice before making a decision to use your credit card to purchase cryptoassets or to invest in cryptoassets. Capital Gains Tax may be payable on profits. CoinJar’s digital currency exchange services are operated in the UK by CoinJar UK Limited (company number 8905988), registered by the Financial Conduct Authority as a Cryptoasset Exchange Provider and Custodian Wallet Provider in the United Kingdom under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, as amended (Firm Reference No. 928767).
The CoinJar Prepaid Mastercard is issued by EML Money DAC pursuant to a license by Mastercard. EML Money DAC is regulated by the Central Bank of Ireland. EML Money DAC is authorised and regulated as an issuer of electronic money by the Central Bank of Ireland under registration number C95957. EML Money DAC is deemed authorised and regulated by the Financial Conduct Authority. Details of the Temporary Permissions Regime, which allows EEA-based firms to operate in the UK for a limited period while seeking full authorisation, are available on the Financial Conduct Authority’s website. Registered office: EML Payments, 2nd Floor La Vallee House, Upper Dargle Road, Bray, Co. Wicklow, Ireland. Company Registration number: 423276.
Apple Pay and Apple Watch are trademarks of Apple Inc. Google Pay is a trademark of Google LLC.