Data Protection

Data Controller and Scope

This notice explains how First Tech Spot processes personal data in compliance with the General Data Protection Regulation (GDPR) and applicable privacy laws of the United States of America, including state privacy statutes such as the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Virginia, Colorado, Connecticut, and Utah laws.

Identity and Contact

Data Controller: Dakota Henry, owner of First Tech Spot.

Postal Address: 7979 Pittsford Victor Rd, Victor, NY 14564, United States of America

Email: [email protected]

Applicability

This notice applies to personal data processed through the website firsttechspot.com and associated services, including coin listings, exchange reviews, airdrop alerts, tutorials, and market updates.

Categories of Personal Data

Data You Provide

Contact details such as name and email address (e.g., newsletter subscriptions, inquiries, account or profile details if offered).
Content you submit (e.g., comments, feedback, support requests).
Participation data for promotions or airdrops (e.g., wallet addresses, usernames/handles you choose to share).

Data Collected Automatically

Identifiers and device information: IP address, device type, operating system, browser type, and settings.
Usage data: pages visited, time spent, referral URLs, interactions, and diagnostic logs.
Cookies and similar technologies: unique identifiers, session data, preferences, analytics metrics, and advertising-related signals.

Public Blockchain Data

Wallet addresses and on-chain activity may be publicly accessible via blockchain networks. Such data can be pseudonymous and may not be deletable or modifiable by First Tech Spot if recorded immutably on public ledgers.

Purposes and Legal Bases for Processing

Service delivery and site operation (GDPR Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests): operating and improving the website, providing listings, reviews, alerts, and tutorials, ensuring availability and functionality.
Communications (Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests; Art. 6(1)(a) consent for marketing): responding to inquiries, sending service notices, and—where required—sending marketing communications with your consent.
Analytics and performance (Art. 6(1)(f) legitimate interests): measuring audience engagement, diagnosing issues, and enhancing content quality.
Security, fraud prevention, and abuse prevention (Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interests): protecting the service and users, detecting and preventing malicious activity.
Promotions and airdrops (Art. 6(1)(b) contract; Art. 6(1)(a) consent): administering eligibility, contact, and fulfillment requirements as applicable.
Legal compliance (Art. 6(1)(c) legal obligation): complying with record-keeping, tax, and regulatory duties.

Where processing relies on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Cookies and Similar Technologies

We use cookies, web beacons, local storage, and similar technologies to operate the site, remember preferences, enable features, perform analytics, and support advertising or sponsorships where applicable.

Strictly necessary: required for core functionality and security.
Preferences: store settings such as language and display options.
Analytics: help us understand usage and improve the service.
Advertising: support measurement and delivery of sponsored content or ads, including interest-based advertising where permitted.

You can manage cookies via your browser or device settings. If you disable cookies, some features may not function properly.

Disclosures and Processing by Third Parties

We may disclose personal data to the following categories of recipients for the purposes described above:

Hosting and infrastructure providers.
Analytics and measurement providers.
Email, communications, and customer support tools.
Advertising and sponsorship partners (including those supporting interest-based advertising where applicable).
Fraud prevention and security partners.
Professional advisers and auditors.
Authorities or third parties where required by law or to protect rights and safety.

Service providers process personal data under instructions and are bound by appropriate confidentiality and data protection obligations.

International Data Transfers

We are based in the United States. When personal data of individuals in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred to the United States or other jurisdictions lacking an adequacy decision, we implement appropriate safeguards, such as Standard Contractual Clauses and supplementary measures where necessary, and assess the transfer as required by applicable law.

Retention

We retain personal data only as long as necessary for the purposes described, including to comply with legal, accounting, or reporting obligations, to resolve disputes, and to enforce agreements. Retention periods vary by data category and context. Where feasible, we anonymize or aggregate data for longer-term analytics and research.

Security

We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; we continuously assess and improve our security posture.

Your Rights Under GDPR

If you are in the EEA/UK/Switzerland, you have the following rights, subject to legal limits:

Access to your personal data and information about processing.
Rectification of inaccurate or incomplete data.
Erasure of personal data in certain circumstances.
Restriction of processing in certain circumstances.
Data portability for data you provided, where technically feasible.
Objection to processing based on legitimate interests, including profiling; and objection at any time to direct marketing.
Withdrawal of consent where processing is based on consent.
Right to lodge a complaint with a supervisory authority. You may contact your local authority.

Your Rights Under U.S. State Privacy Laws

Residents of certain U.S. states (including CA, CO, CT, UT, and VA) may have the following rights, subject to verification and exceptions:

Right to know/access the categories and specific pieces of personal information we have collected.
Right to deletion of personal information, subject to legal exceptions.
Right to correct inaccuracies.
Right to data portability.
Right to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information for monetary consideration. Where our use of advertising or analytics partners constitutes “sharing” or “targeted advertising,” you may opt out as described below.
Right to limit the use and disclosure of sensitive personal information where applicable.
Right to non-discrimination for exercising privacy rights.

Exercising Your Rights

You may submit requests to exercise your rights or raise privacy questions using the contact details below. We will verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law, subject to verification and proof of authorization.

To manage cookies and targeted advertising preferences, adjust your browser or device settings and contact us to register your opt-out preferences. Where supported, we will endeavor to honor Global Privacy Control signals for opt-out of sale/sharing or targeted advertising.

Children’s Privacy

Our services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us to request deletion.

Automated Decision-Making and Profiling

We do not engage in solely automated decision-making that produces legal or similarly significant effects about individuals. We may use limited profiling for analytics or interest-based advertising where permitted and subject to your rights.

Do Not Track and Global Privacy Control

Browsers may offer Do Not Track (DNT) signals; there is no common industry standard for DNT, and we may not respond to DNT. Where feasible, we endeavor to recognize Global Privacy Control (GPC) signals as an opt-out of sale/sharing or targeted advertising under applicable U.S. state laws.

Data Breach Notification

We maintain incident response procedures. Where required by law, we will notify you and/or regulators of a data breach without undue delay.

Changes to This Notice

We may update this notice to reflect changes in our practices, technologies, or legal requirements. Material changes will be communicated through the website or by direct notice where appropriate.

Contact

For questions, requests, or complaints regarding this notice or our data practices, please contact:

First Tech Spot (Attn: Dakota Henry)
7979 Pittsford Victor Rd, Victor, NY 14564, United States of America
Email: [email protected]