Privacy Notice

1. Our data-minimisation approach

The Wallet is designed to minimise data. SFFL does not ask for or receive your private keys, seed phrases, identity documents, biometric data or the contents of third-party credentials.

We do not sell personal data or use or share it for targeted or behavioural advertising.

2. Information SFFL processes

Access and technical information. We may process your IP address, approximate country, device or browser information, timestamps, technical logs and security signals when an SFFL service is accessed.

Wallet and blockchain information. We may process wallet addresses, network and transaction-request information, transaction status and public blockchain data to operate, secure and display the Wallet. This does not mean SFFL holds your assets or private key.

Limited provider results. If you use an identity or credential feature, SFFL may receive a limited status and technical reference. The provider processes the underlying information under its own privacy notice.

Information you send us. If you choose to communicate with SFFL, we process the information contained in that communication.

3. Why we process it

We process this information to provide the Wallet under our Terms of Use; authenticate access; apply user instructions and geographic restrictions; prevent misuse; comply with law; and maintain SFFL services.

Our legal bases are our contract with you, SFFL's legitimate interests in operating and protecting the Wallet, and legal obligations. We rely on consent only where we ask for it for a specific purpose.

Automated technical checks may restrict access to the Wallet interface based on location, eligibility or security signals. They do not give SFFL custody or control of your assets.

4. Who receives information

We disclose information only where needed to providers supporting hosting, security, wallet infrastructure, blockchain connectivity or identity functions; to confidential professional advisers; or where required by law or needed to protect rights, users or the Wallet.

Some providers process information for SFFL. Others provide a separate service to you under their own terms and privacy notices.

5. Public blockchains and third-party services

Public blockchains independently record wallet addresses and transactions. This information is public, may remain available indefinitely and may be linked to other information. SFFL cannot make a public blockchain record private, amend it or erase it.

Connected applications, agents, networks and other services may process information independently under their own privacy notices.

6. International processing and retention

Providers may process information outside your country. Where SFFL is responsible for a transfer, we use a mechanism required by law, such as an adequacy decision or approved contractual safeguards.

SFFL keeps information only as long as reasonably needed for the purposes above, including security, disputes and legal requirements, then deletes or anonymises it where practicable. SFFL does not control retention by public blockchains or third parties.

7. Your rights and contact

Depending on applicable law, you may have rights to access, correct, delete, restrict, object or receive certain data in a portable form. These rights may be limited by law and do not enable SFFL to alter public blockchain data or information controlled by another provider.

To exercise a privacy right, write to SFFL at the registered office above. You may also lodge a complaint with the UK Information Commissioner's Office or the data-protection authority where you live.

We may update this Notice and will provide any further notice required by law before a material new use of personal data begins.