Privacy policy

BTC Direct Shop is a webshop of Aurum Novum I B.V. We sell hardware wallets and other Bitcoin and crypto products. In this privacy policy we explain which personal data we process when you visit shop.btcdirect.eu, place an order, subscribe to our newsletter or contact us. We also explain why we do this, who we share your data with, how long we keep it and which rights you have.

We only process the personal data we need, and we never sell your personal data.

Who is responsible for your personal data?

Aurum Novum I B.V. is the controller for the processing of your personal data as described in this privacy policy, within the meaning of the General Data Protection Regulation (GDPR).

Aurum Novum I B.V.
Kerkenbos 1025
6546 BB Nijmegen
The Netherlands
Chamber of Commerce (KvK): 80066720
VAT: NL861544705B01
Email: [email protected]

If you have questions about this privacy policy or about how we handle your personal data, please email us at [email protected].

When does this privacy policy apply?

This privacy policy applies to all personal data we process through shop.btcdirect.eu, when you order from us, when you contact us by email or WhatsApp and when you receive our newsletter.

Our website contains links to websites of other companies, for example crypto exchanges. When you visit those websites, their own privacy policy applies.

Which personal data do we process?

Depending on how you use our website and services, we process the following personal data:

Contact and delivery details: name, address, email address and phone number.
Company details: if you order on behalf of a company, the company name, Chamber of Commerce number and VAT number.
Order details: the products you order, prices, order number, order and delivery status, returns and warranty requests.
Payment details: the payment method you choose and the status of your payment. Your card or bank details are processed by our payment service provider. We do not store them ourselves.
Communication: the content of messages you send us by email, WhatsApp or a contact form, and our replies.
Newsletter details: your email address, your name if you provide it, the date you subscribed and whether you open our emails and click on links in them.
Review details: your email address, order number and the products you ordered if we invite you to leave a review, and the review you leave.
Website usage data: IP address, browser and device information, the pages you visit, the links you click and cookie identifiers.

We do not ask for sensitive personal data, such as data about your health or religion. We will also never ask for the recovery phrase (seed) or private keys of your wallet. Never share these with anyone.

Why do we process your personal data and on what legal basis?

We only process personal data for a specific purpose and on a legal basis under the GDPR. Below you can see per purpose which personal data we use and on which legal basis.

Processing, delivering and handling your order, including returns and warranty. Personal data: contact and delivery details, company details, order details, payment details, communication. Legal basis: performance of the contract with you.
Invoicing and keeping our accounts. Personal data: contact details, company details, order details, payment details. Legal basis: legal obligation (tax and accounting law).
Answering your questions and providing customer service. Personal data: contact details, order details, communication. Legal basis: performance of the contract, or our legitimate interest in answering your questions.
Sending our newsletter. Personal data: newsletter details. Legal basis: your consent.
Inviting you to leave a review after your order. Personal data: email address, order number and the products you ordered. Legal basis: our legitimate interest in showing independent customer reviews.
Analysing and improving our website. Personal data: website usage data. Legal basis: your consent through our cookie banner.
Measuring and showing advertisements. Personal data: website usage data. Legal basis: your consent through our cookie banner.
Recording that you visited a partner website through a link on our website (affiliate links). Personal data: website usage data. Legal basis: our legitimate interest in receiving a commission from partners, and your consent where cookies are used.
Preventing fraud and securing our website and systems. Personal data: contact details, order details, payment details, website usage data. Legal basis: our legitimate interest in a safe webshop.
Complying with requests from authorities, for example in a tax or criminal investigation. Personal data: the data that is requested. Legal basis: legal obligation.

Where we rely on our legitimate interest, we have weighed this interest against your privacy. You can object to this processing at any time (see “Your rights”).

Cookies

Our website uses cookies and similar technologies. A cookie is a small file that is stored on your device when you visit our website.

Functional cookies are needed for the website to work, for example to keep the products in your shopping cart. We do not need your consent for these cookies.
Analytical cookies help us understand how visitors use our website, so we can improve it. We only place these cookies with your consent.
Marketing cookies are used to measure the results of our advertising and to show you relevant advertisements, also on other websites. These cookies can also be placed by the companies whose links we show (affiliate partners). We only place these cookies with your consent.

When you first visit our website, we ask for your consent through a cookie banner. You can withdraw your consent at any time by deleting the cookies of our website in your browser settings. The next time you visit our website, the cookie banner will appear again and you can make a new choice.

Who do we share your personal data with?

We only share your personal data with other parties when this is necessary for the purposes described above. We work with the following types of parties:

Webshop and checkout software: running our webshop and processing orders. Personal data: contact and delivery details, company details, order details, payment status.
Payment service providers: processing your payment. Personal data: name, email address, order amount, payment details.
Fulfilment and warehousing: storing, packing and sending your order and handling returns. Personal data: name, address, email address, phone number, order details.
Parcel carriers: delivering your order and sending track and trace updates. Personal data: name, address, email address, phone number.
Newsletter service: sending our newsletter. Personal data: name and email address, only if you subscribe.
Review platform: collecting and publishing customer reviews. Personal data: email address, order number and the products you ordered.
Affiliate partners: recording that you came to their website through our link. Personal data: website usage data collected by the partner's own cookies.
Government authorities: complying with a legal obligation. Personal data: the data that is requested.

Most of these parties process your personal data on our behalf. They are processors, and we have made agreements with them (data processing agreements) to make sure they protect your data and only use it for our purposes. Some parties, such as payment service providers and parcel carriers, also process your data for their own purposes. They are then responsible for this themselves, and their own privacy policy applies.

Would you like to know exactly which parties receive your personal data? Please email us at [email protected].

Is your personal data processed outside the European Economic Area?

Some of the parties we work with are located outside the European Economic Area (EEA), for example in the United States, or use servers there. We only allow this when your personal data is properly protected. This is the case when the European Commission has decided that the country offers an adequate level of protection (for the United States: when the company is certified under the EU-US Data Privacy Framework), or when we have agreed the Standard Contractual Clauses of the European Commission with the party. You can request a copy of these safeguards by emailing us at [email protected].

How long do we keep your personal data?

We do not keep your personal data longer than necessary for the purposes for which we process it.

Order and invoice details: 7 years after the end of the financial year, because Dutch tax law requires this.
Communication with customer service: 2 years after our last contact, unless it is part of the order records.
Newsletter details: until you unsubscribe.
Review details: until the review has been collected. The review platform keeps published reviews in line with its own privacy policy.
Website analytics data: up to 14 months.
Cookies: depending on the type of cookie. You can delete cookies at any time in your browser settings.

After these periods, we delete or anonymise your personal data.

How do we protect your personal data?

We take appropriate technical and organisational measures to protect your personal data against loss, theft and unlawful use. For example, we use secure (HTTPS) connections, encryption where needed, firewalls, strong passwords with two-factor authentication and monitoring of our systems. Only people who need your data for their work have access to it.

Your rights

Under the GDPR you have the following rights:

Right of access: you can ask which personal data we process about you, and which parties receive it.
Right to rectification: you can ask us to correct your personal data if it is incorrect or incomplete.
Right to erasure: you can ask us to delete your personal data, unless we are legally required to keep it.
Right to restriction: you can ask us to temporarily limit the processing of your personal data.
Right to data portability: you can ask us to give you your personal data in a commonly used format, or to send it to another party.
Right to object: you can object to processing based on our legitimate interest. You can always object to the use of your data for direct marketing.
Right to withdraw consent: if we process your data based on your consent, you can withdraw this consent at any time. This does not affect processing before you withdraw your consent.

To use your rights, please email us at [email protected]. To make sure the request comes from you, we may ask you to confirm your identity. We will respond within one month. If your request is complex, we may extend this period by two months. We will let you know if we do.

You can unsubscribe from our newsletter at any time through the link at the bottom of every newsletter.

Automated decision-making

We do not make decisions about you that are based solely on automated processing, such as profiling, and that have legal or similarly significant effects for you.

Do you have to provide your personal data?

To place an order, we need your name, delivery address and email address. Without these details we cannot process and deliver your order. Providing other personal data, for example for our newsletter, is voluntary.

Complaints

Are you not satisfied with how we handle your personal data? Please let us know at [email protected], so we can look for a solution together. You also have the right to file a complaint with a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens. You can also contact the data protection authority in the EU country where you live.

Changes to this privacy policy

We may change this privacy policy, for example when our services change. The most recent version is always available on this page. If a change has significant consequences for how we process your personal data, we will inform you by email where possible.

This privacy policy was last updated on 1 October 2026.