Cryptorefills privacy policy

Last update: October 21st, 2026

About our privacy and cookies policy

Your privacy is important to us. In this privacy and cookies policy we explain how we collect, use, share and otherwise process your personal information. This policy applies to all personal information we process about you when you visit our website, www.cryptorefills.com ("Website"), purchase or use our services or otherwise interact with us. Our Website may contain links to other websites, we are not responsible for the privacy practices or the content of those other websites.

We are Big Dream Ventures B.V. ("Company", "we", "us"), registered with the Dutch Chamber of Commerce (KvK) under number 63338149, VAT number NL855193062B01. Our registered address is Keizersgracht 482, 1017 EG Amsterdam, The Netherlands. Company is the controller responsible for the collection and use of your personal data described in this privacy and cookies policy, unless we inform you otherwise.

The types of personal data we process

When you visit our Website, we may register your IP address, browser type and version, operating system, referring website and web-browsing behavior and other portable device information. We may collect this information via cookies and similar technologies when you visit our Website. For more details and how to opt out of these, please see the 'Cookies' section of this policy. This information is used to measure number of visits, average time spent on our Website, pages viewed and website usage information.

IP addresses are personal data and are covered by this policy. We use IP addresses for security, to prevent fraud and to work out your approximate location (country).

When you pay with crypto, we receive the details of the blockchain transaction for your order: the sending wallet address, the transaction identifier, the asset and the amount. We use them to match your payment to your order, to send a refund to the wallet address you give us, and for fraud prevention and our legal obligations. We never ask for, receive or store your private keys or seed phrase. Blockchain transactions are public by design, and we cannot remove a transaction from a blockchain.

The personal data we may collect from you directly can include your name, email address, mobile telephone number, address, your purchasing activity, your payment information and information you give us when you contact our customer services team. In such cases, Company processes your personal details to provide the service, for example to recharge your mobile phone, to inform you about the status of a purchase and/or a payment, deal with a complaint, for fraud prevention or improvement of our services.

From time to time, we may supplement the information you give us via our Website with information from address validation services. This is to help us maintain the accuracy of the information we collect and to help us provide a better service.

The voluntary sending of emails to the email addresses indicated in the Company's website entails the acquisition of the sender's email address, necessary to answer, and of any other data contained in the message. The same occurs in filling and sending the web forms present in the site.

For which purposes we use your data

When you request or order something

to provide our services to you, processing your order and providing you with your service/product. To help us do this, we may share information with others, for instance, our group companies, our service providers and financial institutions involved in the fulfillment of your request;

to keep you updated on the status of your purchase and to process your payment. We may contact you if we are not able to process the payment with the information you provided us; to respond to any questions or concerns you may have about our services/products.

Where necessary to fulfil a travel reservation, Cryptorefills will transmit passenger or guest data (e.g., names, date of birth, passport details) to the relevant airline, hotel or consolidator, which may be located outside the EEA. Such processing is carried out under Article 6(1)(b) GDPR.

For marketing

If you sign up to our newsletter, you give us permission to use your email address to send you the newsletter and other information, such as offers and questionnaires. You can always unsubscribe from this via the link at the bottom of every newsletter or by sending us your request by email at support@cryptorefills.com.

For fraud prevention, security and legal reasons

We may process your personal and traffic data in order to investigate fraud or prevent other illegal activity, protect our rights and fulfil our legal obligations, including tax, accounting and anti-money-laundering and sanctions rules.

To improve our service

We use information about how you use our Website, in aggregated form where possible, to improve the service we offer to everyone. The purpose is to perform analysis and understand how you use our Website, products and services in order to review and improve these.

Why we process your data (legal bases)

Under the GDPR we need a legal basis for each purpose. This is how the purposes above map to Article 6(1) GDPR:

• Order fulfilment and your account: Article 6(1)(b), performance of a contract with you.
• Fraud prevention and security: Article 6(1)(f), our legitimate interests in protecting our services and customers, and Article 6(1)(c) where the law requires us to do so.
• Legal, tax and anti-money-laundering and sanctions obligations: Article 6(1)(c), compliance with a legal obligation.
• Customer support: Article 6(1)(b) where the request relates to your order or account, and Article 6(1)(f) for our legitimate interest in answering questions and handling complaints.
• Analytics: Article 6(1)(a), your consent, where cookies or similar technologies require it.
• Marketing emails: Article 6(1)(a), your consent, or, where the law allows, our existing customer relationship (soft opt-in) with an easy way to opt out.
• Advertising cookies: Article 6(1)(a), your consent.

How we share your personal information

We may share your personal data with our group companies and with our third party service providers. Some of them may be located outside the European Economic Area (EEA). We do this in order to provide our services to you and fulfil our contractual obligations to you, or because it is in our legitimate interests to do so.

Where personal data goes outside the EEA, we use safeguards recognised under the GDPR, such as an adequacy decision of the European Commission or the Commission's standard contractual clauses. You can ask us for information about the safeguards that apply by contacting us as described in the 'Contact for privacy requests' section below.

How we protect your personal information

Once we receive your information, we make our best effort to ensure its security on our systems. How long we keep your personal data is set out in the 'How long we keep your data' section below.

Our website may provide links to third-party websites. We cannot be responsible for the privacy practices or the content of those other websites. So make sure you read those third-party's privacy and cookies policies before using or putting your personal information on their site.

How long we keep your data

• Order, invoice and payment records: 7 years, in line with Dutch tax-record requirements.
• Account data: while your account is open. After you close it we delete or anonymise it within a reasonable period, unless the law requires us to keep it longer.
• Support correspondence: 3 years after the last contact.
• Marketing consent records: until you withdraw consent, plus the time we need to prove that you gave it.
• Fraud and compliance records: as long as the law or an investigation requires.
• Analytics and advertising cookie data: for the cookie lifetimes set by the relevant provider.

Cookies

What are cookies?

Cookies are small text files that are stored on your computer or mobile device when you visit a webpage or application. The next time you visit the same website, cookies ensure that your device is recognized.

By using cookies and similar technologies such as pixel tags/beacons and scripts ('cookies'), this Website can save information about visits and visitors. We place some of the cookies on the websites ourselves, while other cookies are placed by third parties. Third-party cookies may collect data outside our websites as well.

Cookies can be stored for varying lengths of time on your browser or device. 'Session' cookies are deleted from your computer or device when you close your browser. 'Persistent' cookies will remain stored on your computer or device until deleted or until they reach their expiry date. We sometimes use 'persistent' cookies as well as 'session' cookies. The lifetime of a third-party cookie is set by the provider that places it. Please see the provider's policy for details.

You can find further information on cookies at www.aboutcookies.org or at www.youronlinechoices.com.

How do we use cookies?

Cookies can be used to analyze your surfing behavior and to ensure that you have the best experience on the Website, by, for instance, remembering your preferences and improving the overall user experience.

Functional cookies: these cookies are used to improve your experience since we can remember you when you return to our site. We use functional cookies.

Analytic cookies: these cookies give us information on the pages most visited, on the number of visitors on our Website and how visitors move around our Website. This helps us to improve the way our Website works, for example, by ensuring that users find what they are looking for easily.

Marketing and other cookies: these cookies are typically placed on our Website by advertising networks. We use these cookies to measure the effectiveness of an advertising campaign.

Analytics and marketing cookies are only set after you consent. You can change your choice at any time via 'Cookie settings' in the footer of the Website.

How do you change cookie preferences or block cookies?

You can change your consent choices at any time via 'Cookie settings' in the footer of the Website. If you do not want us to place cookies on your device, you can also refuse the use of cookies through your browser's settings or options. Each browser's website should contain instructions on how you can do this. The links below will take you directly to your browser's user guide.

Chrome: https://support.google.com/chrome/answer/95647

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Safari: https://support.apple.com/kb/PH21411

If you block cookies on our website, you may be unable to correctly use some parts of our Website.

Your rights

When we process your personal information, you are entitled to:

• be informed about how your personal data is being used;
• access the personal data we hold about you;
• require us to rectify inaccurate personal data concerning you;
• require us to erase personal data concerning you where there is no good reason for us to continue to process it (e.g. if we are obliged to keep it to comply with laws and regulations);
• request us to restrict the processing of your personal data in certain situations;
• request us to transfer your personal data to you (portability);
• object at any time to processing of your personal data for direct marketing purposes;
• object in certain other situations to our continued processing of your personal data;
• withdraw your consent at any time, where we process your data based on consent. Withdrawing consent does not affect processing that took place before.

We answer requests within one month, as required by Article 12 GDPR. Where the law allows, we may extend this period, and we will tell you if we do.

Contact for privacy requests

To exercise any of your rights or if you have any questions about our data security, contact us at support@cryptorefills.com or by post at Big Dream Ventures B.V., Keizersgracht 482, 1017 EG Amsterdam, The Netherlands.

Complaints

You have the right to raise questions or complaints at any time. Our lead supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). You can also complain to the data protection authority in your own country.