CryptoUmmah (“CryptoUmmah”, “we”, “us”) operates as a trading name; a formal registered entity and address will be added to this page once incorporated. We are based in the United Kingdom and this policy is written with UK GDPR and the Data Protection Act 2018 in mind. This policy explains what personal data we collect when you use CryptoUmmah, why we collect it, and what rights you have over it.
What we collect
- Account data — when you sign in via Google or an email magic link, we (through our authentication provider, Supabase) store your email address and a unique account identifier.
- Support correspondence — if you email us, we keep that correspondence to respond to and track your request.
- Essential session cookies — used only to keep you signed in. We do not currently run analytics, advertising, or third-party tracking cookies on this site.
We do not collect payment details, government ID numbers, or other sensitive personal data, and we do not sell or rent your personal data to third parties.
How we use it
- To create and maintain your account and give you access to full, member-only screenings
- To send transactional emails, such as sign-in magic links
- To respond to support or legal requests you send us
- To maintain the security and integrity of the site
Legal basis for processing
We process account data under contractual necessity(to provide the account and gated content you've signed up for) and legitimate interest (to keep the service secure and respond to you). Where we rely on your consent — for example, a specific optional communication — you can withdraw it at any time.
Who we share data with
We use a small number of processors to run the site, and share only what each needs to do its job:
- Supabase — hosts our database and handles authentication
- Google — provides the optional “Continue with Google” sign-in
We do not share your data with advertisers or data brokers. We may disclose data if required to by law, or to protect the rights, safety, or property of CryptoUmmah or its users.
International transfers
Our processors may store or process data outside the UK/EEA. Where they do, they rely on appropriate safeguards such as Standard Contractual Clauses, consistent with UK GDPR requirements.
Data retention
We keep account data for as long as your account is active. If you ask us to delete your account (see our Data Deletionpage), we will delete or anonymize your personal data within 30 days, except where we're required to keep records for legal or security reasons.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data
- Restrict or object to certain processing
- Receive your data in a portable format
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at contact@cryptoummah.com.
Children's privacy
CryptoUmmah is not directed at children, and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact us
Questions about this policy? Email contact@cryptoummah.com.