Last Updated: 9/09/2022
1. What personal data we collect when you access and use the Sandstorm Media services, including without limitation the website located at https://sandstorm.co/ and nft.sandstorm.co (collectively, the “Services”);
2. How we use the data;
3. With whom we may share the personal data;
4. Legal basis for processing the data;
5. Storage and security of your data;
6. Your Privacy Rights, Choices and Disclosures, including those for Europe and California;
7. Users outside the United States; and
8. Links to other sites;
10. Contact Information.
1. Personal Data We Collect or Process
“Personal Data” means data that allows someone to identify or contact you, including, for example, your name, address, telephone number, e-mail address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data. “Anonymous Data” means data, including aggregated and de-identified data, that is not associated with or linked to your Personal Data; Anonymous Data does not, by itself, permit the identification of individual persons. We collect Personal Data and Anonymous Data, as described below.
· Data Provided Voluntarily
We collect information that you provide to us voluntarily. We collect the information that you provide to us when you sign up to receive newsletters, advisories, announcements and invitations and contact us by email. We use this information to respond to your comments, requests or questions.
We may collect Personal Data from you, such as your first and last name, e-mail and mailing addresses, address, and Sandstorm Media password when you create an account to log in to our network.
In connection with provision of the Services through our applications, we request information about your identity that is necessary for us to comply with our own Know Your Customer and Anti-Money Laundering requirements including without limitation: first and last name, date of birth, residential address, email address, Ethereum address, Polygon (matic address), copies of identification documents such as a passport, national ID or driver license, and a photo/”selfie” of yourself.
If you use our Services on your mobile device, we may collect your phone number and the unique device id number.
Our Services let you store preferences like how your content is displayed, your location, safe search settings, notification settings, and favorite widgets. We may associate these choices with your ID, browser or mobile device, and you can edit these preferences at any time.
When connecting to our Services via a service provider that uniquely identifies your mobile device, we may receive this identification and use it to offer extended services and/or functionality.
Certain Services, such as two-factor authentication, may require our collection of your phone number. We may associate that phone number to your mobile device identification information.
We also collect other types of Personal Data that you provide to us voluntarily, such as your operating system and version, product registration number, address, and other requested information if you contact us via e-mail regarding support for the Services.
We may also collect Personal Data at other points in our Service that state that Personal Data is being collected
Data Collected Automatically
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:
Information Collected by Our Servers. To make our Services more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including your browser type, operating system, Internet Protocol (“IP”) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, address, wallet type, and/or a date/time stamp for your visit.
Log Files. As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (“ISP”), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information to analyze trends, administer the Service, track users’ movements around the Services, gather demographic information about our user base as a whole, and better tailor our Services to our users’ needs. For example, some of the information may be collected so that when you visit the Services, it will recognize you and the information could then be used to serve advertisements and/or other information appropriate to your interests.
Pixel Tag. In addition, we use “Pixel Tags” (also referred to as clear Gifs, Web beacons, or Web bugs). Pixel Tags are tiny graphic images with a unique identifier, similar in function to Cookies, that are used to track online movements of Web users. In contrast to Cookies, which are stored on a user’s computer hard drive, Pixel Tags are embedded invisibly in Web pages. Pixel Tags also allow us to send e-mail messages in a format users can read, and they tell us whether e-mails have been opened to ensure that we are sending only messages that are of interest to our users. We may use this information to reduce or eliminate messages sent to a user.
For more information regarding how Google collects, uses, and shares your information please visit http://www.google.com/policies/privacy/partners/. You can deactivate Google Analytics using a browser add-on if you do not wish the analysis to take place. You can download the add-on here: https://tools.google.com/dlpage/gaoptout?hl=en.
· Information Collected from Third Party Companies
We may receive Personal and/or Anonymous Data about you from companies that provide our Services by way of a co-branded or private-labeled website or companies that offer their products and/or services on our Service. In particular, wallets provide us with your address and certain other information you choose to share with wallets. These third party companies may supply us with Personal Data. We may add this to the information we have already collected from you via our Service or from other sources.
· No Use By Minors.
We do not knowingly collect information from users of our Services under the age of 18 and/or their internet usage, and such persons are not authorized to use the Services. By using the Services, you represent that you are at least 18 years old and that you are of legal age to enter into legal agreements.
2. How We Use the Data
In general, Personal Data you submit to us is used either to respond to requests that you make, or to aid us in serving you better. We use your Personal Data in the following ways:
· facilitate the creation of and secure your account on our network;
· identify you as a user in our system;
· provide improved administration of our Service;
· provide the Services you request, including but not limited to facilitating your cryptocurrency transactions through wallets;
· improve the quality of experience when you interact with our Service;
· send you a welcome e-mail to verify ownership of the e-mail address provided when your account was created;
· protect you and other users from any conduct that violates these Terms and Conditions or to prevent abuse or harassment of any user;
· display your username next to the digital assets you wish to sell on the Website;
· send you administrative e-mail notifications, such as security or support and maintenance advisories;
· send you e-mail notifications related to actions on Service, including notifications of offers on your digital assets;
· respond to your inquiries related to employment opportunities or other requests;
· make telephone calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback;
· send newsletters, surveys, offers, and other promotional materials related to our Services and for other marketing purposes of Sandstorm Media,
· fulfill legal obligations we have to governmental authorities or other third parties;
· in any other way we may describe when you provide the Personal Data; and
· for other legitimate business purposes.
Creation of Anonymous Data. We may create Anonymous Data records from Personal Data by excluding information (such as your name) that makes the data personally identifiable to you. We use this Anonymous Data to analyze request and usage patterns so that we may enhance the content of our Services and improve Service navigation. We reserve the right to use Anonymous Data for any purpose and to disclose Anonymous Data to third parties without restriction.
3. With Whom We Share Personal Data
Third Party Service Providers. We may share your Personal Data with third party service providers to: provide you with the Services; to conduct quality assurance testing; to facilitate creation of accounts; to provide technical support; to confirm your identity for Know Your Customer and Anti-Money Laundering requirements; and/or to provide other services to Sandstorm Media.
Affiliates. We may share some or all of your Personal Data with our affiliates.
4. Grounds for Using Your Personal Data
We rely on the following legal grounds to process your personal information:
Performance of a contract. We may need to collect and use your personal information to enter into a contract with you and to perform Services that you request.
Compliance with Legal Obligations. We may use your personal information as necessary to comply with our legal obligations.
5. Storage and Protection of Your Personal Data
We may retain your personal information as long as you continue to use the Services, have an account with us, or for as long as is necessary to fulfill the purposes outlined in this Policy. You can ask to close your account by contacting us at firstname.lastname@example.org. We may, however, retain Personal Data for an additional period as is permitted or required under applicable laws, for legal, tax, or regulatory reasons, or for legitimate and lawful business purposes.
We implement various security measures to ensure the safety of your Personal Data when you enter, submit, or access your Personal Data. All supplied sensitive information is transmitted via Secure Socket Layer technology. We engage an independent analyst to perform penetration testing.
No Internet or e-mail transmission is ever fully secure or error free, however. We therefore cannot guarantee absolute security of your data, and we are not responsible for processes and networks that we do not control. Users assume the risk of security breaches and the consequences resulting from them. Please be careful in deciding what information you send to us via email or over the Internet.
6. Your Rights, Choices and Disclosures
This section is subject to specific disclosures on privacy rights set forth below. We are committed to facilitate the exercise of your rights granted by the laws of your jurisdiction, which may include the right to request the correction, modification or deletion of your personal information and the right to opt out of the sale of your personal information (as applicable). We will do our best to honor your requests subject to any legal and contractual obligations. If you would like to make a request, cancel your account or request we delete or no longer use your account information to provide you Services, contact us at email@example.com or make changes to any user profile information connected to your account.
You may opt out of receiving electronic marketing communications from us by clicking on the “unsubscribe” link on the communication or contacting us at firstname.lastname@example.org. Some non-marketing communications may not be subject to a general opt-out, such as communications about transactions, disclosures to comply with legal requirements, software updates and other support-related information. If you do not wish to receive any service-related emails from us, you have the option to deactivate your account.
Subject to local law, you may have additional rights under the laws of your jurisdiction regarding your personal data, such as the right to complain to your local data protection authority.
You may be able to disable Cookies through your browser settings, but if you delete or disable Cookies, you may experience interruptions or limited functionality in certain areas of the Services.
· Your European Privacy Rights and Choices. If you reside or otherwise find yourself in the territory of Europe, your privacy rights under the European data protection law include:
· Transparency and the right to information. Through this policy we explain how we use and share your information. However, if you have questions or need additional information you can contact us any time.
· Right of access, restriction of processing, erasure. You may contact us to request information about the personal data we have collected from you and to request the correction, modification or deletion of such personal information, which requests we will do our best to honor subject to any legal and contractual obligations. To make a request or to ask us a question about our data practices, please contact us via email at email@example.com.
· Right to withdraw your consent at any time. When we process your personal data based on your consent, you have the right to withdraw it at any time.
· Right to object at any time. You have the right to object at any time to receiving marketing or promotional materials from us by either following the opt-out instructions in commercial e-mails or by contacting us, as well as the right to object to any processing of your personal data based on your specific situation. In the latter case, we will assess your request and provide a reply in a timely manner, according to our legal and contractual obligations. Some non-marketing communications are not subject to a general opt-out, such as communications about transactions and disclosures to comply with legal requirements.
· Right to data portability. You have the right to data portability of your own personal data by contacting us.
· Right not to be subject to an automated decision, including profiling. We do not make automated decisions using your personal data that may negatively impact you.
· Right to lodge a complaint with a supervisory authority. If you consider that the processing of your personal data infringes your privacy rights according the European Privacy regulation, you have the right to lodge a complaint with a supervisory authority, in the member state of your habitual residence, place of work, or place of the alleged infringement.
· California Disclosures.
California “Shine the Light” Information-Sharing Disclosure: California residents may request a list of all third parties with respect to which we have disclosed any information about you for direct marketing purposes and the categories of information disclosed. If you are a California resident and want such a list, please send us a written request by email to firstname.lastname@example.org with “California Shine The Light Rights” in the subject line.
California Do Not Track Disclosure: We do not respond to Do Not Track browser settings.
California Consumer Privacy Act Disclosures. Sandstorm Media is not a “business” subject to the California Consumer Privacy Act (CCPA).
7. Users Outside the United States
The Services are controlled and operated from the United States. If you are an individual from the European Union, Canada or any other jurisdiction with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that we may store the information we collect in the United States which is not deemed an “adequate jurisdiction” by the European regulatory authorities. Personal data may also be transferred from the country of your residence to other countries, including the United States.
8. Links to Other Sites
10. Questions and Contact Information