Privacy is the cornerstone of human dignity, and we stand resolute in defending yours.
This document explains how we handle your data: we collect it from you and your activities, process only what’s necessary to fulfill your requests or meet legal obligations, protect it with secure technology, and never share it with anyone—unless required by law or of pure necessity for the platform to work.
We are committed to protecting the privacy and confidentiality of your personal data. Access to your data is limited only to authorized Bitrefill officers, employees, contractors, or others who may require access to it in order to perform the services requested by you.
We may collect your data directly from you, indirectly from others, or automatically through technologies like cookies. Below is an overview of the types of data we may collect and how we collect it:
We do not collect sensitive personal data (e.g., race, religion, health, or sexual orientation) beyond what is necessary as outlined above.
Some services require specific personal data (e.g., your email or phone number to deliver a gift card or top-up). Without this information, we cannot provide the service, and we reserve the right to terminate your account if essential data is no longer available for processing.
To provide the BitGiftCard service, we work with partners, providers, and other third parties. In doing so, we may share certain information as follows:
Your personal data will only be shared with law enforcement or government authorities when required by law or regulation, such as through a subpoena, warrant, or equivalent legal instrument.
In rare and exceptional circumstances, such as emergencies involving the protection of human life or the prevention of significant harm, we may respond differently but always in compliance with legal requirements.
We keep your personal data for as long as necessary to achieve the purpose for which it was collected, whether that’s providing our services, meeting legal requirements, or safeguarding interests.
If you have an account with us, we will retain information associated with it for as long as the account remains active.
Data required for legal compliance, such as records related to ongoing investigations or regulatory obligations, is retained for the period specified by applicable laws, typically at least 5 years.
If you ask us to delete your personal data, we will do so where possible. However, some circumstances may require us to keep it, such as compliance with legal or regulatory obligations, and we will inform you if this applies.
Our website and services are not intended for children under 18 years of age.
We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information to us without parental consent. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.