Privacy Policy

About this policy

This policy sets out how Next Blockchain Applications Limited (“NBA”, “we”) handles the personal information it collects through this website and through the enquiries sent to us from it. We comply with the data-protection laws that apply to us, including those of the places where the people we deal with are located.

Our DApp, our members’ site and the third-party protocols they connect to are separate services, each with its own terms and policies.

Members’ personal information, such as registration details and purchase history, is handled as set out in the membership terms.

Information we collect

We collect personal information only to the extent we need it.

Enquiry details
Your name, email address, company or organization (optional), the topic and content of your enquiry, the language of the page you were viewing, and the date and time it was sent.
Verification data
To confirm that an enquiry comes from a person, the verification check (hCaptcha) processes information such as your IP address, the characteristics of your browser and device, and how you interact with the check.
Technical data
To provide the website and keep it secure, our hosting provider records standard server logs, such as IP address, browser type, the pages viewed and the time.
What we do not collect
This website does not track visitors for advertising or analytics. Please do not enter sensitive information in the form, such as health information, government identification numbers or wallet seed phrases. NBA will never ask for your seed phrase or private key.

How we use it

We do not use personal information for any purpose other than those below without your consent. We do not use it for marketing unless you ask us to, and we make no decisions about you by automated means alone.

Responding to you
To review and answer your enquiry, and to keep a record of our correspondence.
Security
To confirm that enquiries come from people, to prevent spam, fraud and abuse, and to keep the website secure.
Legal obligations
To comply with the law, and to respond to lawful requests from public authorities.

Legal basis

Where the applicable law requires a legal basis, we handle personal information on the basis of the consent you give when you send the form, what is necessary to respond to your request, our legitimate interest in running a secure website, and our legal obligations. You may withdraw your consent at any time. Withdrawal does not affect handling that took place before it.

Sharing and service providers

We do not sell, rent or trade personal information. We share it only in the following cases.

Service providers
Providers that work on our behalf, namely Web3Forms (delivery of form submissions), hCaptcha by Intuition Machines, Inc. (verification), Vercel Inc. (website hosting), the email service provider we use, and our customer support contractor in Taiwan (operation of our customer support desk). These providers may use the information only to provide their services to us, and we supervise them as necessary and appropriate.
Where required by law
Where the law requires it, or where it is necessary to protect the life, health, property or other rights and interests of a person.
Business transfers
Where our business is transferred through a merger or otherwise. The information will remain protected to a standard equivalent to this policy.

International transfers

Our service providers operate in, and may store information in, the United States and other countries. Data-protection rules there may differ from those in the country where you live. The United States, for example, has no single comprehensive federal data-protection law; protection comes from federal laws for particular sectors and from the laws of each state.

We choose providers that maintain appropriate security measures, and we rely on their contractual and technical safeguards. By sending the form, you agree to your personal information being provided to third parties in other countries on this basis.

Our customer support desk is in Taiwan, which has its own Personal Data Protection Act.

Retention

We keep enquiry details only for as long as we need them to respond and follow up, and in principle delete them three years after our last correspondence, unless the law requires us to keep them longer. Verification data and server logs are kept by the providers for limited periods under their own policies.

Security

We take the following measures to prevent personal information from being leaked, lost or damaged.

Organizational measures
Only the staff who handle enquiries can access the information, under a duty of confidentiality, and we check regularly how it is handled.
Staff measures
We train the staff concerned in the proper handling of personal information.
Technical measures
Communications are encrypted (HTTPS), and access to our accounts is protected by strong authentication.
Physical measures
We take steps to prevent the loss or theft of devices used to handle personal information.
Third parties and overseas storage
We supervise our service providers appropriately, and take into account the data-protection systems of the countries where information is stored.

Your rights

You may ask us to tell you the purposes for which we use your personal information, and to disclose it to you, including records of disclosures to third parties. You may also ask us to correct, add to or delete it, to stop using it, and to stop providing it to third parties. Depending on the law where you live, you may also have the right to restrict or object to its use and to data portability, and you may complain to the supervisory authority where you live.

To make a request, please use the enquiry form and choose “Other”. Once we have confirmed your identity, we will respond without undue delay and, in principle, free of charge. If we cannot meet a request, we will tell you why.

Cookies

This website itself does not use cookies for tracking or advertising. The verification check (hCaptcha) may use cookies or similar technologies to tell people from automated programs. You can disable or delete cookies in your browser settings, but the form may then not work.

Children

This website is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has sent us information, please contact us and we will delete it promptly.

Changes to this policy

We may revise this policy as our services or the law change. The current version is always on this page, and important changes will be made clear here.

Contact and data controller

Data controller: Next Blockchain Applications Limited

CEO: Eric Ma

Address: Sea Meadow House, PO Box 116, Road Town, Tortola, British Virgin Islands

Questions, requests and complaints about the handling of personal information can be sent through the enquiry form.

If this policy and its Japanese version differ, the Japanese version prevails.

Effective date: 24 October 2026