At MVaults, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our website and purchase our products.
Last Updated: December 19, 2025
Welcome to MVaults ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mvaults.com (the "Site") and purchase our products.
We understand that as a cryptocurrency hardware wallet retailer, privacy and security are paramount concerns for our customers. We take these responsibilities seriously and have implemented robust measures to protect your data.
By using our Site, you consent to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site. We encourage you to review this policy periodically as we may update it from time to time.
We collect several types of information from and about users of our Site:
Personal Information You Provide: - Contact information (name, email address, phone number) - Shipping address and billing address - Payment information (processed securely through Stripe - we do not store card details) - Account credentials if you create an account - Communication preferences - Customer service correspondence
Information Collected Automatically: - Device information (browser type, operating system, device type) - IP address and approximate location - Pages visited and time spent on our Site - Referring website or source - Cookies and similar tracking technologies
Information from Third Parties: - Payment processors (Stripe) provide transaction confirmation - Shipping carriers provide delivery status updates - Analytics providers help us understand Site usage patterns
We do NOT collect: - Cryptocurrency wallet addresses - Private keys or recovery phrases - Transaction history or blockchain data - Contents of your hardware wallet
We use the information we collect for the following purposes:
Order Fulfillment: - Process and ship your orders - Send order confirmations and shipping notifications - Handle returns, exchanges, and warranty claims - Provide customer support related to your purchases
Communication: - Respond to your inquiries and requests - Send important updates about your orders - Provide security alerts and product safety information - Send marketing communications (with your consent)
Site Improvement: - Analyze usage patterns to improve our website - Personalize your shopping experience - Test new features and functionality - Optimize our checkout process
Security and Fraud Prevention: - Detect and prevent fraudulent transactions - Protect against unauthorized access - Verify identity when necessary - Comply with legal obligations
Legal Compliance: - Comply with applicable laws and regulations - Respond to legal requests and court orders - Protect our legal rights and interests
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
Service Providers: We work with trusted third-party companies to operate our business: - Stripe (payment processing) - Shipping carriers (FedEx, UPS, DHL, local postal services) - Email service providers (for transactional and marketing emails) - Customer support platforms - Analytics providers (Google Analytics)
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Legal Requirements: We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to: - Comply with legal obligations - Protect our rights, privacy, safety, or property - Prevent fraud or illegal activities - Respond to emergency situations
Business Transfers: If MVaults is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
With Your Consent: We may share information with third parties when you explicitly consent to such sharing.
Protecting your information is our priority. We implement multiple layers of security:
Technical Safeguards: - SSL/TLS encryption for all data transmission - Secure payment processing through PCI-compliant Stripe - Regular security audits and vulnerability assessments - Encrypted database storage - Firewall protection and intrusion detection
Organizational Measures: - Limited employee access to personal information - Staff training on data protection practices - Confidentiality agreements with all team members - Incident response procedures for data breaches
Third-Party Security: - Careful vetting of service providers - Contractual requirements for data protection - Regular review of third-party security practices
Shipping Security: - Discreet packaging with no visible branding - Tamper-evident seals on all products - Tracked shipping with signature confirmation available
While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any breach and notifying affected users as required by law.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
Order and Transaction Data: Retained for 7 years to comply with tax and accounting regulations, support warranty claims, and handle potential disputes.
Account Information: Retained until you delete your account or request removal, whichever comes first.
Marketing Preferences: Retained until you unsubscribe or request removal.
Customer Support Communications: Retained for 3 years to provide consistent support and reference for complex issues.
Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical purposes.
Deletion Requests: When you request deletion of your data, we will remove or anonymize it within 30 days, except where retention is required by law or legitimate business purposes (such as fraud prevention or legal claims).
Depending on your location, you may have certain rights regarding your personal information:
Access: You can request a copy of the personal information we hold about you.
Correction: You can request that we correct inaccurate or incomplete information.
Deletion: You can request that we delete your personal information, subject to certain exceptions.
Data Portability: You can request your data in a structured, machine-readable format.
Opt-Out of Marketing: You can unsubscribe from marketing emails at any time using the link in our emails or by contacting us.
Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
Lodge a Complaint: You have the right to complain to a data protection authority.
For EU/UK Residents (GDPR): You have additional rights under the General Data Protection Regulation, including the right to object to processing and the right to restrict processing.
For California Residents (CCPA): You have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information (we do not sell personal information).
To exercise any of these rights, please contact us at privacy@mvaults.com. We will respond to your request within 30 days.
MVaults is based in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.
For EU/UK Residents: When transferring data outside the European Economic Area or United Kingdom, we ensure appropriate safeguards are in place, such as: - Standard Contractual Clauses approved by the European Commission - Adequacy decisions where applicable - Binding Corporate Rules for intra-group transfers
By using our Site and providing your information, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.
Our Site is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18 years of age. If you are under 18, please do not provide any personal information through our Site.
If we learn that we have collected personal information from a child under 18, we will take immediate steps to delete that information. If you believe we may have inadvertently collected information from a child under 18, please contact us at privacy@mvaults.com.
Our Site may contain links to third-party websites, including Ledger's official site, social media platforms, and cryptocurrency resources. This Privacy Policy applies only to our Site.
We are not responsible for the privacy practices of other websites. We encourage you to read the privacy policies of any third-party sites you visit.
Links to third parties are provided for your convenience and do not signify our endorsement of such websites or their content.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
When we make material changes, we will: - Update the "Last Updated" date at the bottom of this policy - Post a prominent notice on our Site - Send an email notification to registered users (for significant changes)
We encourage you to review this Privacy Policy periodically. Your continued use of our Site after any changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@mvaults.com
Mail: MVaults Privacy Team 548 Market Street, Suite 12345 San Francisco, CA 94104 United States
Data Protection Officer: For EU/UK related inquiries: dpo@mvaults.com
We aim to respond to all inquiries within 30 days. For complex requests, we may need additional time and will keep you informed of our progress.
If you have any questions about this Privacy Policy or how we handle your data, please don't hesitate to reach out.