Privacy Policy

1. Identity of the Data Controller

Key Haven Crypto Recovery ("KeyHaven," "we," "us," "our") is the data controller responsible for personal data collected through this website and in the course of providing wallet access recovery services.

For all privacy-related inquiries, contact us at: [email protected].

2. Data We Collect

We collect only data that is necessary for the purpose for which it is gathered. The categories of data we collect are described below, grouped by stage.

At the intake stage (before any case is accepted):

• Name and contact information: email address and, if you choose to provide it, a phone number.
• A description of your situation: the wallet type, the nature of the access problem, and an approximate asset value range. You determine what to share at this stage; we do not require more than you volunteer.
• Basic technical metadata transmitted automatically when you submit the intake form, including the date and time of submission and the form provider's standard submission metadata.

At the assessment and recovery stage (only if a case is accepted):

• Encrypted wallet files, partial seed phrase fragments, device backups, or other technical material you provide specifically for examination. This material is transmitted and stored only through the secure transfer protocol described to you in writing before you submit it.
• Written correspondence between you and KeyHaven over the course of the engagement.
• Proof of ownership documentation, where requested.

We do not request complete seed phrases or private keys at any stage. We strongly advise you not to submit them through any channel. Possession of a complete seed phrase or private key constitutes full, irrevocable access to the associated wallet. Any party requesting it is seeking to take your funds, not recover your access.

Website technical data: When you visit this website, standard server and browser metadata is transmitted, including your IP address, browser type, and the pages visited. This data is used solely for the operation and security of the website. It is not associated with your case data or shared with advertising networks.

3. How We Use Your Data

We use the data we collect for the following purposes only:

• To evaluate whether your case falls within our technical scope and whether we are able to assist.
• To perform the contracted recovery services if a case is accepted.
• To communicate with you about your case status and any information we require from you.
• To invoice and process payment for the applicable fees.
• To comply with our legal and regulatory obligations, including responding to valid legal process.
• To detect and prevent fraud or misuse of our services.

We do not use your data for advertising, behavioural profiling, or any purpose unrelated to your engagement. We do not sell, rent, or license your personal data to third parties for their own use.

4. Legal Basis for Processing

We process your personal data on the following legal bases, which apply cumulatively or separately depending on the processing activity:

• Performance of a contract: processing necessary to evaluate your intake submission and, if a case is accepted, to deliver the recovery services you have engaged.
• Compliance with legal obligations: processing required by applicable law, including tax and financial record-keeping requirements, and responses to valid legal process.
• Legitimate interests: processing for the purpose of fraud detection, security of our systems, and the general operation of a professional services business, where those interests are not overridden by your rights.

Where we rely on legitimate interests, we have assessed that our interests do not override your privacy interests in the relevant context. If you have questions about this assessment or wish to object to processing on this basis, contact us using the details in Section 11.

Note to owner: if your business is subject to the General Data Protection Regulation (GDPR) or a comparable regime, verify that these bases are accurate and complete for each processing activity. Add a consent basis if applicable. If you are subject to the California Consumer Privacy Act (CCPA) or similar legislation, specific additional disclosures and rights may be required. Your attorney should review this section carefully.

5. Data Storage and Security

All case materials, including wallet files and correspondence, are stored in encrypted form using current industry-standard encryption. Access to case data is restricted to personnel directly involved in your engagement on a need-to-know basis.

We apply appropriate technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures are reviewed and updated as the threat environment evolves.

No method of transmission over the internet or method of electronic storage is completely secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. You submit information at your own risk. If you have concerns about a specific transfer, contact us before submitting and we will advise on the appropriate channel.

6. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our specific retention periods are as follows:

• Intake submissions that do not proceed to a case: deleted immediately once it is determined that the inquiry will not proceed.
• Correspondence and case materials for accepted cases: deleted immediately after the case is resolved, whether by successful recovery, unsuccessful outcome, or termination by either party.
• Financial records (invoices and payment records): retained for the period required by the tax and accounting laws applicable in Texas, United States. These records contain only the financial transaction data, not case materials.
• Proof of ownership documentation: deleted immediately after the engagement closes, unless a longer retention period is required by applicable law.

Where we are required by law to retain data beyond these periods, the data is retained in the minimum form necessary to satisfy the legal obligation and is not used for any other purpose.

7. Third Parties

We do not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes.

We share data only with the following categories of service provider, each of whom processes data on our behalf under appropriate data processing terms:

• Intake form provider: the third party service we use to receive and transmit intake form submissions. This provider processes only the data you include in the intake form.
• Payment processor: the third party we use to invoice and receive payment. This provider processes the financial data necessary to complete the transaction and issues a receipt. It does not receive case materials.

We may also disclose data to law enforcement agencies, courts, regulatory bodies, or other government authorities where we are required to do so by applicable law, or where we have a good faith belief that disclosure is necessary to prevent fraud, abuse, or harm.

We do not use your data for any third party's advertising or marketing purposes.

8. International Transfers

If data you submit is transferred to, stored in, or processed in a country other than your country of residence, we will ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. If you have questions about where your data is processed, contact us at the address in Section 11.

9. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal data:

• Access: the right to request a copy of the personal data we hold about you.
• Correction: the right to request that we correct personal data that is inaccurate or incomplete.
• Deletion: the right to request that we delete your personal data, subject to our obligations to retain data required by law or for the completion of an ongoing engagement.
• Restriction: the right to request that we restrict our processing of your data in certain circumstances, for example while a complaint is being investigated.
• Objection: the right to object to processing carried out on the basis of our legitimate interests, on grounds relating to your particular situation.
• Portability: the right to receive a copy of data you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible and where processing is carried out by automated means.

To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request promptly and respond substantively within 2 business days. We may ask you to verify your identity before fulfilling a request.

If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

10. Cookies and Tracking

This website does not use advertising cookies, cross-site tracking cookies, or analytics cookies that identify individual visitors. The intake form may use session-level cookies strictly necessary for its technical operation. These cookies are essential to the functionality of the form, do not persist after your session ends, and do not identify you across other websites. No consent banner is required for strictly necessary cookies.

If you wish to prevent cookies entirely, you may configure your browser to reject them; however, this may affect the functionality of the intake form.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. The effective date at the top of this page reflects the most recent version. Where a change materially affects how we use your data, we will take reasonable steps to notify affected clients, which may include email notification or a prominent notice on this website. We recommend reviewing this page periodically.

12. Contact and Complaints

For any privacy-related questions, requests, or complaints, contact us at: [email protected].

We will respond to all substantive inquiries within 2 business days.