Privacy notice

The site sets no cookies and runs no analytics. If you send an enquiry we hold what you type: your name, your organisation if you give one, your email address, the sector you chose and your message, together with a one-way hash of your connection address and your browser identifier, which we keep to limit abuse of the form and cannot turn back into an address.

We use an enquiry to reply to it and to keep a record of the conversation. The lawful basis is our legitimate interest in answering people who write to us. Enquiries are kept for twenty-four months from the last message and then deleted.

A portal holds the wallet addresses you have proven, an email address if you have given and verified one, the tokens you have redeemed and the record of each redemption, the choices you made about a piece, the delivery address you gave and any later address you signed for, and the history of the order as the house worked it. The house sees the order; Provatek keeps it.

This is held to make and deliver the piece you redeemed, which is the performance of a contract, and afterwards to answer where a piece was sent and by whose authority, which is a legitimate interest the house and its collectors share. The record of a redemption is kept for as long as the piece exists, because that is what a record is for. A delivery address is kept for seven years after delivery.

Sign-in codes sent by email are stored only as a hash and expire within minutes. Wallet signatures are verified and the signed message is kept as the proof of a claim.

In the United Kingdom, in a database in London, and nowhere else. Email is sent through a provider in the same region under a role assumed at the time of sending; no standing credential exists.

The house whose portal you use sees the orders on it, because it makes the pieces. Provatek’s own staff see it to operate the portal, under access that is resolved on every request and recorded. Nothing is sold, shared for marketing, or given to a marketplace. A public blockchain holds what it always held, which is the token and the wallet that redeemed it; Provatek adds nothing to a chain that identifies you.

You may ask what we hold about you, ask for it to be corrected, ask for it to be deleted where the law allows, and object to processing based on legitimate interest. Some records cannot be deleted while a piece is being made or a legal obligation runs, and we will say which and why. Write to enquiries@provatek.io. You may also complain to the Information Commissioner’s Office.

This notice will change as the service does. The date below is the date of the current text.