PRIVACY NOTICE
DATA COLLECTED DURING CHECKOUT
At Ledger, we believe in transparency and protecting your data. This notice explains what data we collect and how we use it when you order something on our website or agree to receive our marketing communications.
Why do we collect your data? | Which data do we collect? | Which legal grounds do we rely on? | How long do we keep your data? |
|---|---|---|---|
To manage your order (including shipping, invoicing and notifications) | We collect: - Your name - Your email address - The shipping and billing addresses - Your phone number - Your company name - The intra-community VAT number - The order ID - The type of product you ordered - The order amount - The shipping and payment methods - Your truncated card number | We rely on the Terms & Conditions you accepted when you bought our products or subscribed to our services. | We keep your data for ten years to comply with our legal obligations. Your data is archived three months after completion of the order. |
To send marketing communications by email | We collect: - Your email address - Your language - Logs (email sent/opened timestamp) | We rely on your consent. | We keep your data for twenty-five months from the last contact. |
Who can access your data? We share your data with authorized Ledger teams and trusted Third-Party Service Providers who help us manage your orders and communicate with you. These include our data hosting, shipping, emailing, order tracking, product review and e-commerce platform providers.
Where is it stored? Your data is primarily stored within the European Economic Area (EEA). However, when we use Third-Party Service Providers located outside the EEA, your data must be transferred to those countries.
When this happens, we make sure your data stays protected. We only transfer it:
To countries that offer a similar level of protection as the EEA,
Or we require our partners to sign the European Commission’s Standard Contractual Clauses to make sure that they offer a strong level of protection.
To Note:
When you place an order on www.ledger.com, you agree to buy your item from Global-e, under Global-e’s Terms & Conditions. Global-e collects and processes the data listed above as an independent data controller in accordance with their own Privacy Policy. You can click here to learn more about Global-e. At Ledger, we also collect and process your data as an independent data controller, as described above, including to ship your product.
If you subscribe to Ledger Replace and you are a U.S. customer, we share your data (including your name, email address, shipping address, phone number, order ID and the type of product ordered) with our Third-Party Service Provider, Bolttech Device Protection Services, LLC (hereinafter referred to as Bolttech). Bolttech processes your data as a data controller to provide the service to you. To learn more about how Bolttech handles your data, please refer to Bolttech’s Privacy Policy. When you submit a case to request a product replacement, Bolttech provides us certain details so we can address your inquiries about it (including the case ID, date and type, status, reason, the types of products replaced and shipped as the replacement, the carrier and shipping date). If you are located in the European Union, the United Kingdom or Switzerland, we use your data to provide the service directly to you as a data controller.
What are your rights over your data? To exercise your data rights or ask a question about how we handle your data, you can contact our Data Protection Officer here. We will never discriminate against you for exercising your rights.
You can:
Ask for a copy of your data.
Ask that we correct your data when inaccurate.
Ask that we delete your data. We will delete all your data, unless we have to retain it to respect our legal obligations.
Ask that we restrict the processing of your data. This includes asking us to stop any automatic deletion of your data for instance.
Unsubscribe from our communications, by clicking the “Unsubscribe” link in the footer of any email you receive.
We respond to all legitimate requests within one month. If you’re not satisfied with our response, you can complain to your national data protection authority. For instance, in France, it’s the CNIL.
DATA COLLECTED WHEN INQUIRING ABOUT OUR LEDGER ENTERPRISE SOLUTIONS
At Ledger, we believe in transparency and protecting your data. This notice outlines the data Ledger collects and how we utilize it when you request to be contacted regarding our Enterprise offerings and when we send you our Ledger Enterprise marketing communications.
Why do we collect your data? | Which data do we collect? | Which legal ground do we rely on? | How long do we keep your data? |
To process your request for information on our website | We collect: - Your name - Your company name and website URL - Your job title - Your email address - Your phone number - Your country and region - Details regarding your inquiry (such as the specific product you are interested in and the asset range) | We rely on our legitimate interest. | We keep your data for three years from the last contact. |
To send marketing communications by email | We collect: - Your email address - Your language - Logs (email sent/opened timestamp) | We rely on our legitimate interest. | We keep your data for three years from the last contact. |
Please note that we may also collect information about you from other sources, such as publicly available sources (including professional social networks) or business contact databases of our business partners.
Who can access your data and where is it stored? Your data is shared with authorized Ledger teams and our Customer Relationship Management (CRM) Service Provider. This provider ensures secure storage of your data within the European Union.
What are your rights over your data? To exercise your data rights or ask a question about how we handle your data, you can contact our Data Protection Officer at enterprise@ledger.com. We will never discriminate against you for exercising your rights.
You can:
Ask for a copy of your data.
Ask that we correct your data when inaccurate.
Ask that we delete your data. We will delete all your data, unless we have to retain it to respect our legal obligations.
Ask that we restrict the processing of your data. This includes asking us to stop any automatic deletion of your data for instance.
Unsubscribe from our communications, by clicking the “Unsubscribe” link in the footer of any email you receive.
We respond to all legitimate requests within one month. If you’re not satisfied with our response, you can complain to your national data protection authority. For instance, in France, it’s the CNIL.
LEDGER Co-branding - Privacy consent
Your personal data is collected and processed by LEDGER. When you contact us to have your own customization, the provision of this information is mandatory to respond to your contact request and its processing is based on LEDGER’s legitimate interest to get back to you and respond to your contact request.Your data is only accessible by LEDGER and its technical service providers and it is retained for no longer than three years from the last contact you had with us.It may be transferred to countries outside the European Economic Area ensuring an adequate level of protection according to the European Commission or within the framework of safeguards that assure the protection of your personal information, such as the standard contractual clauses adopted by the European Commission (available here). You may access your data, rectify it, request its deletion, object to its processing and exercise your right to data portability or to the restriction of its processing. To exercise these rights or for any questions on the processing of your data, you can contact our data protection officer at sales@ledger.com. If you believe, after contacting us, that your rights over your data have not been respected, you can send a complaint to the personal data protection authority of your country.
LEDGER Resellers - Privacy consent
Your personal data is collected and processed by LEDGER. When you apply to become a LEDGER reseller (for instance, through our online form), the information you provide is mandatory to evaluate your application and its processing is necessary to take steps prior to entering into a contract with LEDGER to join the LEDGER Partner Program. If you qualify for our LEDGER Partner Program, the processing of your data is necessary for the performance of the contract you enter into with LEDGER by joining our Partner Program. LEDGER will also use your data to pursue its legitimate interest to further communicate with you on the latest developments, promotions, and information about our services and solutions. If you do not want to receive similar communications from us in the future, you can (ii) click on the unsubscribe link we provide in the communication sent to your attention or (iii) contact our data protection officer using the contact details provided in the section below.Your data is only accessible by LEDGER and its technical service providers. It is retained for no longer than three years from the last contact you had with us or from the end date of your membership in our Partner Program.Your information may be transferred to countries outside the European Economic Area ensuring an adequate level of protection according to the European Commission or within the framework of safeguards that assure the protection of your personal information, such as the standard contractual clauses adopted by the European Commission (available here). You may access your data, rectify it, request its deletion, object to its processing and exercise your right to data portability or to the restriction of its processing. To exercise these rights or for any questions on the processing of your data, you can contact our data protection officer at sales@ledger.com. If you believe, after contacting us, that your rights over your data have not been respected, you can send a complaint to the personal data protection authority of your country.
Play-to-Win with Sui - Privacy Policy
At Ledger, we believe in transparency and protecting your data. Here is a clear breakdown of how we handle your information for this Play-to-Win Swap with SUI Promotion.
Why do we collect your data? | Which data do we collect? | Which legal ground do we rely on? | For how long do we keep your data? |
|---|---|---|---|
To enter your wallet into the random draw (providing this info is required to participate) | We collect your wallet address | We rely on the Terms & Conditions you accepted when you registered for the Play-to-Win Swap with SUI Promotion. | For 3 months following the end of the contest |
To allow you to receive the prize if you are one of the selected winners | We collect your email address | We rely on the Terms & Conditions you accepted when you registered for the Play-to-Win Swap with SUI Promotion. | For 3 months following the end of the contest |
To allow you to receive the prize if you are one of the selected winners | We collect a copy of your ID document and a copy of a proof of residence | We rely on our legal obligations. | For 3 months following the end of the contest |
Who can access your data? Your data will be available to authorized Ledger teams and the trusted technical service providers who help us run the Play-to-Win Swap with SUI Promotion.
Where is it stored? Your data may be transferred outside of the European Economic Area (EEA). We ensure it is always protected using safeguards approved by the European Commission, like the Standard Contractual Clauses, or an EU-recognized Adequacy Decision.
What are your rights over your data? To exercise your data rights or ask a question about how we handle your data, you can contact our Data Protection Officer here. We will never discriminate against you for exercising your rights.
You can:
Ask for a copy of your data.
Ask that we correct your data when inaccurate.
Ask that we delete your data. We will delete all your data, unless we have to retain it to respect our legal obligations.
Ask that we restrict the processing of your data. This includes asking us to stop any automatic deletion of your data for instance.
We respond to all legitimate requests within one month. If you’re not satisfied with our response, you can complain to your national data protection authority. For instance, in France, it’s the CNIL.