Privacy policy.

The controller of data collected on cryptic-shares.com is Cryptic Shares Ltd (trading as Lignum Aureum), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. For any query, please write to our Data Protection Officer: [email protected].

We collect only the data strictly necessary:

• identity and contact details (first name, surname, address, email, telephone) when you place an order or contact us;
• payment data, processed exclusively by our provider Stripe — the Atelier never has access to the card number or CVV;
• browsing data (IP address, pages visited, browser type) for the purposes of audience measurement;
• written correspondence, retained for the management of the client relationship.

Data is processed to fulfil orders (performance of contract), to respond to your requests (legitimate interest), to comply with our accounting and tax obligations (legal obligation) and, subject to your consent, to send you occasional news from the Atelier.

Data relating to an order is retained for six years for accounting and warranty purposes. Prospect contact details are deleted after three years of inactivity. Technical browsing logs are retained for a maximum of thirteen months.

Your data is never sold. It may be shared with:

• our technical providers (Fasthosts for hosting, Stripe for payment, Brink's and Ferrari Group for secure delivery);
• our accountants and, on lawful request, the competent authorities.

All our processors are bound by an agreement compliant with Article 28 of the UK GDPR and host data within the United Kingdom or the European Economic Area under adequate safeguards.

The site uses cookies strictly necessary for its operation (basket, session) which do not require consent, as well as anonymised audience-measurement cookies. No third-party advertising or profiling cookies are placed.

You may at any time configure your browser to refuse non-essential cookies.

In accordance with the UK General Data Protection Regulation and the Data Protection Act 2018, you have the rights of access, rectification, erasure, restriction, objection, portability, as well as the right to give instructions concerning the fate of your data after your death.

These rights are exercised by email to [email protected] or by post to the Atelier's address, accompanied by proof of identity. You may also lodge a complaint with the Information Commissioner's Office (Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — www.ico.org.uk).

The Atelier implements the technical and organisational measures appropriate to preserve the confidentiality and integrity of your data: TLS 1.3 encryption, named and logged access, encrypted backups and annual security audits.