Privacy and Cookie Policy

Privacy and Cookie Policy

Last updated: 18 July 2026

1. Introduction

This Privacy and Cookie Policy explains how Crynet collects, uses, stores, shares and protects personal data when you visit `crynet.io`, contact us, submit a form, subscribe to communications, request information about our services or otherwise interact with us.

“Crynet,” “we,” “us” and “our” refer to Crynet, a distributed, remote-first Web3 marketing organisation operating through contributors and partners located in multiple jurisdictions.

Crynet does not maintain a public-facing physical office. Privacy enquiries, data protection requests and formal electronic correspondence concerning this website may be directed to:

Crynet Privacy Team
Email: projects@crynet.io
Website: https://crynet.io

For the processing activities described in this Policy, Crynet determines the purposes and means of processing personal data and acts as the data controller, unless a specific agreement or notice identifies another controller.

This Policy applies to the Crynet website and website-based communications. It does not automatically apply to third-party websites, platforms or services linked from our website.

2. Scope and applicable law

We process personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation where it applies.

Nothing in this Policy limits any rights that cannot lawfully be limited or excluded.

If a specific notice presented at the point of data collection conflicts with this general Policy, the more specific notice will apply to that particular processing activity.

3. Personal data we may collect

Depending on how you interact with Crynet, we may collect the following categories of personal data:

3.1 Information you provide directly

- name and surname;
- company name, job title and professional role;
- email address, telephone number and messaging-app contact details;
- website, project or product information;
- country, region, preferred language and time zone;
- service interests, campaign objectives and estimated budget;
- information included in messages, briefs, files and enquiries;
- communication and marketing preferences;
- information provided when arranging a call, requesting a proposal or entering into a business relationship.

Please do not submit confidential information, private keys, wallet seed phrases, passwords, sensitive personal data or information that you are not authorised to provide.

3.2 Information collected automatically

When you use our website, we and our authorised service providers may collect:

- IP address;
- browser and device type;
- operating system;
- approximate location derived from IP address;
- referring page or campaign;
- pages viewed and links selected;
- date, time and duration of visits;
- cookie identifiers and consent preferences;
- technical logs, error data and security information;
- campaign and conversion attribution information where permitted.

3.3 Information from other sources

We may receive business contact information from:

- publicly available professional sources;
- a person’s employer or representative;
- business partners and service providers;
- event organisers;
- social and professional platforms;
- referrals and introductions;
- prospective clients or clients who identify members of their teams.

Where required, we will provide appropriate information about indirect collection.

4. How we use personal data

We may use personal data to:

- respond to enquiries and requests;
- assess whether and how Crynet can provide requested services;
- prepare proposals, estimates, contracts and campaign plans;
- communicate with prospective clients, clients, suppliers and partners;
- provide, administer and improve our services;
- manage projects, reporting, billing and business records;
- schedule calls and meetings;
- operate, maintain, secure and troubleshoot the website;
- measure website performance and understand how visitors use the website;
- attribute enquiries and conversions to marketing activities;
- personalise website content where consent has been provided;
- send requested newsletters and marketing communications;
- comply with legal, regulatory, tax and accounting obligations;
- establish, exercise or defend legal claims;
- detect and prevent fraud, misuse, security incidents and unlawful activity;
- protect Crynet, our clients, users and third parties;
- carry out corporate transactions, audits, restructuring or due diligence.

We will not use personal data for materially incompatible purposes without an appropriate legal basis and, where required, further notice.

5. Legal bases for processing

Depending on the activity and applicable law, we rely on one or more of the following legal bases:

5.1 Contract and pre-contractual steps

We process information when necessary to respond to a request, prepare a proposal, enter into an agreement or perform our contractual obligations.

5.2 Legitimate interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual.

These interests may include:

- operating and securing our website and business;
- responding to business enquiries;
- maintaining client and business relationships;
- improving our services;
- measuring business and website performance;
- preventing fraud and misuse;
- maintaining records and defending legal claims;
- conducting proportionate business-to-business marketing.

5.3 Consent

We rely on consent where required, including for certain non-essential cookies, tracking technologies and electronic marketing activities.

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

5.4 Legal obligations

We process information where necessary to comply with applicable legal, regulatory, accounting, tax or law-enforcement obligations.

5.5 Legal claims and vital interests

Where applicable, we may process information to establish, exercise or defend legal claims or protect the vital interests of an individual.

6. Forms, enquiries and project communications

When you submit a contact form or otherwise contact Crynet, we use the supplied information to evaluate and respond to the enquiry.

Submitting a form does not guarantee that Crynet will accept an engagement, provide a particular service, secure media coverage, deliver a specific commercial outcome or enter into a contract.

We may retain enquiry records to maintain business history, prevent abuse, improve responses and manage potential or actual legal claims.

If you provide personal data relating to another person, you represent that you are authorised to provide it and that the person has received any notice required by law.

7. Marketing communications

We may send service updates, newsletters or marketing communications where:

- you have requested them;
- you have provided consent where consent is required; or
- another lawful basis permits the communication.

You can unsubscribe using the link included in an email or by contacting `projects@crynet.io`.

We may retain limited suppression information, such as an email address and opt-out status, to ensure that an unsubscribe request continues to be respected.

Transactional or service-related communications may still be sent where necessary.

8. Cookies and similar technologies

Cookies are small files or identifiers stored on or accessed from a user’s device. Similar technologies may include pixels, local storage, tags and software development tools.

Crynet may use the following categories:

8.1 Strictly necessary cookies

These are required for core website functions, security, network management, form operation and the storage of privacy preferences. Where permitted by law, they may operate without consent.

8.2 Analytics cookies

These help us understand website usage, traffic sources, page performance and technical issues. They should be activated only where the required consent has been obtained.

8.3 Marketing and attribution cookies

These may measure campaign performance, attribute enquiries or support advertising and remarketing. They should be activated only where the required consent has been obtained.

8.4 Functional cookies

These may remember optional preferences or provide enhanced website functionality. Consent will be obtained where required.

The precise cookies and technologies in use may change when the website or its integrations change. The active cookie consent interface should identify current providers, purposes and available controls.

Non-essential cookies must not be activated before the required consent is received. Rejecting non-essential cookies must not prevent access to ordinary website content, although some optional functionality may be unavailable.

You can review or change your choices through the cookie settings control available on the website. You may also delete or block cookies through your browser. Browser-level blocking may affect website functionality.

Withdrawal of consent does not automatically delete cookies already stored on a device; these may need to be removed through browser settings.

9. Service providers and recipients

We may share personal data only where reasonably necessary with categories of recipients including:

- website hosting and content-management providers;
- form, email and communication providers;
- analytics and consent-management providers;
- customer relationship and project-management systems;
- cloud storage and document providers;
- scheduling and video-conferencing providers;
- payment, accounting, banking and professional advisers;
- security, fraud-prevention and technical support providers;
- contractors and suppliers supporting requested services;
- regulators, courts, law-enforcement bodies or public authorities where required;
- parties involved in a merger, acquisition, restructuring, financing, sale of assets or due-diligence process.

These recipients may act as processors, independent controllers or joint controllers depending on the circumstances.

Crynet does not sell personal data in exchange for money. We do not permit service providers acting as processors to use personal data for their own unrelated purposes.

10. International data transfers

Crynet and its service providers may process personal data in countries other than the country where the individual is located.

Where applicable law restricts international transfers, we use an available legal transfer mechanism, which may include:

- an adequacy decision;
- approved standard contractual clauses;
- another legally recognised safeguard; or
- a permitted derogation in a specific situation.

Additional technical or contractual safeguards may be applied where appropriate.

You may contact us for further information about the safeguards relevant to your personal data, subject to lawful confidentiality limitations.

11. Data retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, security, accounting and business requirements.

Retention periods depend on the nature of the information and relationship. As a general working framework:

- unsuccessful or inactive general enquiries may be retained for up to 24 months after the last meaningful interaction;
- marketing subscription information may be retained until consent is withdrawn or the person unsubscribes, after which limited suppression records may be retained;
- client, supplier, contractual, accounting and transaction records may be retained for the duration of the relationship and the applicable statutory or limitation period;
- security and technical logs may be retained for a shorter period unless required for investigation;
- cookie duration depends on the specific cookie and should be disclosed through the cookie settings interface;
- information relevant to disputes, investigations or legal claims may be retained until the matter and applicable limitation periods have concluded.

Data may be deleted or anonymised earlier where it is no longer required.

Backup copies may remain for a limited period until overwritten through normal backup cycles.

12. Data security

We use reasonable administrative, organisational and technical measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

However, no website, transmission method or storage system is completely secure. We therefore cannot guarantee absolute security.

Users are responsible for using appropriate care when transmitting information and should not send passwords, private keys, seed phrases or other highly sensitive credentials through website forms or ordinary email.

Where required by law, we will assess personal-data breaches and notify the competent authority or affected individuals.

13. Individual rights

Depending on applicable law and the circumstances, individuals may have the right to:

- receive information about processing;
- request access to personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- receive certain information in a portable format;
- withdraw consent at any time;
- lodge a complaint with a competent data protection authority;
- receive information about applicable international-transfer safeguards;
- not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are not absolute. Legal exemptions may apply, and we may retain information where required or permitted by law.

To exercise a right, contact `projects@crynet.io`. We may request reasonable information to verify identity and authority. We will respond within the period required by applicable law.

Requests are ordinarily handled without charge. A reasonable fee or refusal may be permitted where a request is manifestly unfounded, excessive or repetitive.

14. Automated decision-making

Crynet does not intend to make decisions about website users based solely on automated processing where those decisions produce legal or similarly significant effects.

Website analytics, segmentation or campaign attribution may involve automated processing, but these activities are not intended to produce such decisions.

If this practice changes, we will provide any notice required by law.

15. Children

The website and Crynet’s services are directed to businesses and adults and are not intended for children.

We do not knowingly solicit personal data from children. If you believe that a child has provided personal data without appropriate authorisation, contact us so that we can assess and, where appropriate, delete it.

16. Third-party websites and platforms

Our website may link to third-party websites, media outlets, social networks, messaging applications or other platforms.

Crynet does not control the privacy, security or content practices of independent third parties. Their own terms and privacy notices apply when you interact with them.

A link does not, by itself, imply endorsement or responsibility for the third party’s processing activities.

17. Business clients and campaign data

Where Crynet processes personal data solely on documented instructions from a client, Crynet may act as a processor and the client may act as the controller.

The applicable contract or data-processing terms govern that activity. Individuals should normally direct requests relating to client-controlled data to the relevant client, although Crynet may assist the client as required.

Clients are responsible for ensuring that personal data supplied to Crynet was obtained lawfully and may be used for the instructed purpose.

18. Changes to this Policy

We may update this Policy when our website, services, providers or legal obligations change.

The current version will be published on this page with an updated revision date. Where required, we will provide additional notice or request renewed consent.

Changes do not retroactively create consent or legal authority for processing that previously lacked an appropriate legal basis.

19. Contact

For privacy questions, requests or complaints, contact:

Crynet Privacy Team
Email: projects@crynet.io
Website: https://crynet.io

Crynet is a distributed, remote-first Web3 marketing organisation and does not maintain a public-facing physical office. Communications and data protection requests are handled electronically.

You may also lodge a complaint with the data protection authority responsible for your location or the processing concerned. We encourage you to contact us first so that we have an opportunity to address the issue, but doing so does not limit your right to contact a supervisory authority.