Chain Trace Labs supports sensitive individual and professional investigations. We therefore design data handling around purpose limitation, controlled access, data minimisation and clear accountability across cases, workspaces and integrations.
The information involved depends on whether you browse the site, submit an individual case, use a firm workspace, connect an integration or contact our team. The categories below explain the principal data we may handle.
We use information for stated, authorised and legally permitted purposes.
We use authorised case and blockchain data to provide tracing, risk analysis, monitoring, evidence management, OSINT-supported research, workflows, collaboration, integrations and agreed outputs.
Account and contact information supports authentication, role-based access, workspace administration, service notices, case communications, delivery and support. Marketing communications, where offered, require an appropriate basis and can be opted out of.
Commercial records are used to manage proposals, orders, invoicing, payment status, entitlements, usage, renewals where agreed, accounting and applicable legal obligations.
Standard server logs (IP address, access time) are retained for 30 days to detect abuse, brute-force attempts, and fraudulent submissions. They are not used for any other purpose.
In the event we are subject to a lawful legal order from a competent authority, we may be required to disclose data. We will notify you where legally permitted to do so.
We never sell, share, rent, or otherwise transfer your data to advertisers, data brokers, analytics companies, or any third party for commercial purposes.
We retain information only for as long as reasonably necessary for the engagement, account or purpose for which it was collected, and for security, audit, dispute, contractual, regulatory and legal requirements. Retention may therefore differ by data category and customer arrangement.
If you request deletion of your data at any point, we will action that request promptly -see your rights below.
Note: Public blockchain records are maintained independently of Chain Trace Labs. Deleting information from our systems cannot erase transaction data that remains recorded on a blockchain or information retained by an independent third party.
Regardless of where you are in the world, we recognise and honour these fundamental data rights.
You can request a copy of all personal data we hold about you. We will provide it in a readable format within 30 days.
If data we hold about you is inaccurate or incomplete, you can request that we correct or complete it.
You can request deletion of your personal data. We will respond within the period required by applicable law, subject to identity verification, lawful exemptions and retention obligations.
You can object to how we process your data. Where your objection is valid, we will cease the relevant processing.
In certain circumstances you can request that we limit how we use your data while a dispute or review is in progress.
You can request your data in a structured, machine-readable format so that it can be transferred to another service.
To exercise any of these rights, email us at privacy@chaintracelabs.com. We will respond within the period required by applicable law. You may also have the right to lodge a complaint with your national data protection authority if you believe your rights have not been respected.
We use only technically essential cookies required for the platform to function. We do not use advertising cookies, third-party trackers, analytics platforms that profile users, or pixel tracking of any kind.
We do not use Google Analytics, Facebook Pixel, Hotjar, Intercom, or any similar third-party tool that collects data on your browsing behaviour.
Authorised analysis may require limited technical requests to services that return relevant blockchain or supporting information. Only the identifiers reasonably necessary for the requested function are transmitted, subject to applicable safeguards and service terms.
Our server host processes data incidentally as part of delivering the website. They process information only as necessary to provide infrastructure services and are subject to contractual, confidentiality and security controls appropriate to their role.
We have no advertising relationships. Your data is never shared with or sold to any advertiser, marketing platform, or data broker for advertising or unrelated commercial use.
We do not disclose case data to exchanges or other external organisations unless directed or authorised by the customer, necessary for an agreed service, required to protect rights and security, or compelled by applicable law.
If compelled by a valid, lawful legal order from a competent authority in an applicable jurisdiction, we may be required to disclose data. We will notify you where permitted by law.
Customer case content is not used to train general-purpose public AI models. Where an engagement includes AI-assisted functions, relevant content may be processed only to provide that function under applicable controls and provider terms.
We apply reasonable technical and organisational measures to protect data from unauthorised access, loss, or disclosure. These include encrypted transmission (HTTPS), access controls, and regular review of data handling practices.
No internet-based system can guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you in accordance with applicable law.
To exercise any of your data rights, ask a question about how your information is handled, or raise a concern, contact us directly. We respond within the period required by applicable privacy law.