Scope and Applicability
This Data Protection Notice explains how SOHO19 Crypto District (soho19.org) collects, uses, discloses, and safeguards personal information in accordance with applicable privacy laws in the United States and, where relevant, the General Data Protection Regulation (GDPR) for individuals located in the EEA/UK. This Notice applies to information we process when you visit our website, subscribe to communications, participate in airdrop calendars, submit content or inquiries, create an account, or interact with our services and analysis tools.
By using our website, you acknowledge the practices described herein. If you do not agree, please discontinue use of our services.
Last updated: 2025-10-06
Data Controller and Contact Information
SOHO19 Crypto District is owned and operated by Elara Crowthorne.
Controller/Owner: Elara Crowthorne
Address: 3100 14th St NW, Washington, DC 20010, United States of America
Email: [email protected]
For all privacy inquiries, including exercising your rights, please contact us at the email above or by mail.
Categories of Personal Information We Process
- Identifiers: name, username, email address, IP address, device identifiers, wallet addresses (public blockchain addresses), and transaction hashes.
- Internet/Network Activity: pages viewed, referral URLs, timestamps, clickstream data, cookie IDs, analytics data, and user preferences.
- Account and Communications: account credentials (if you create an account), forum or comment content, support requests, and newsletter/marketing preferences.
- Geolocation Data: coarse location derived from IP address.
- Commercial Information: interactions with affiliate links, referral IDs, and records of services requested.
- Inferences: preference profiles created from on-site behavior to personalize content and measure engagement.
- Sensitive Personal Information (as defined by certain state laws): account login credentials. We do not use sensitive personal information to infer characteristics, and we limit its use to security, authentication, and service provision.
Sources of Personal Information
- Directly from you: forms, account registration, inquiries, and content submissions.
- Automatically: via cookies, pixels, SDKs, and server logs when you use our site.
- From third parties: analytics providers, advertising partners, affiliate networks, and publicly available blockchain networks.
- On-chain data: we may process public blockchain data you make available through your wallet interactions (e.g., wallet addresses and transaction metadata).
Purposes of Processing and Legal Bases
We process personal information for the following purposes:
- Service Delivery: operating the website, providing content, airdrop calendars, exchange reviews, and account features.
- Security and Integrity: preventing fraud, spam, abuse, and unauthorized access; safeguarding our services and users.
- Analytics and Improvement: measuring performance, diagnosing technical issues, and enhancing user experience.
- Personalization: tailoring content and recommendations to your interests.
- Marketing: sending newsletters and promotional communications (where permitted or with consent), and measuring campaign effectiveness.
- Compliance: meeting legal obligations, responding to lawful requests, and enforcing our terms.
- Business Operations: backups, archiving, and business continuity.
GDPR Legal Bases (for EEA/UK users)
- Consent: for non-essential cookies, email marketing, and similar activities where consent is required.
- Contract: to provide requested services or features you register for.
- Legitimate Interests: to secure our services, prevent abuse, analyze and improve the site, and personalize content in a proportionate manner, balanced against your rights.
- Legal Obligation: to comply with applicable laws, regulatory requirements, and lawful requests.
Cookies and Similar Technologies
We use cookies, pixels, and similar technologies to provide core functionality, remember preferences, analyze traffic, and deliver or measure advertising. Categories include:
- Essential: required for site operation and security.
- Functional: remember settings and preferences.
- Analytics: understand usage and performance.
- Advertising: deliver and measure ads; enable cross-context behavioral advertising where permitted.
You may manage cookies via your browser settings and, where available, our on-site consent tools. Disabling certain cookies may affect site functionality.
Disclosures of Personal Information
We disclose personal information to the following categories of recipients for the purposes described above:
- Service Providers/Processors: hosting, security, analytics, email delivery, and customer support vendors under contractual confidentiality obligations.
- Advertising and Measurement Partners: to facilitate ad delivery and performance measurement where permitted by law or your consent.
- Affiliates and Business Partners: to operate referral programs and track conversions; we require appropriate safeguards.
- Legal and Compliance: governmental authorities, regulators, courts, or parties to legal proceedings when required by law or necessary to protect rights and safety.
- Business Transfers: as part of a merger, acquisition, financing, or sale of assets, subject to continued protection of your information.
We do not sell personal information for money. We may “share” identifiers and internet activity with advertising partners for cross-context behavioral advertising as defined by certain U.S. state laws; you can opt out as described in this Notice.
International Data Transfers
We are located in the United States. If you are located outside the U.S., your information may be transferred to and processed in the U.S. and other jurisdictions that may not provide the same level of data protection as your home country. Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses and implement supplementary measures as needed.
Retention of Personal Information
We retain personal information for as long as necessary to fulfill the purposes described in this Notice, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods include:
- Account and profile data: for the lifetime of the account and up to 24 months after inactivity or deletion, unless longer retention is required by law.
- Communications and support inquiries: 24 months.
- Analytics logs: 12–24 months in aggregated or de-identified form where feasible.
- Marketing preferences: until you opt out or the campaign concludes, whichever occurs first, with proof-of-consent records retained as required by law.
On-chain public data (e.g., wallet addresses and transaction hashes) is recorded on decentralized networks and cannot be altered or deleted by us.
Security Measures
We implement administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, hardened infrastructure, and security monitoring. No online system is entirely secure; we cannot guarantee absolute security. Please use strong passwords and safeguard your credentials.
Automated Decision-Making and Profiling
We do not engage in automated decision-making that produces legal or similarly significant effects about you. We may use limited profiling for security (e.g., fraud and spam detection) and to personalize content. You may object to profiling where GDPR applies, subject to legal limitations.
Your Privacy Rights
Rights for Residents of the United States
Depending on your state of residence (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have the following rights under applicable privacy laws:
- Right to Know/Access: request details about the categories and specific pieces of personal information we collected about you.
- Right to Delete: request deletion of personal information, subject to legal exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Data Portability: obtain a copy of your personal information in a portable format.
- Right to Opt Out: opt out of the sale or sharing of personal information and targeted advertising/cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information: where applicable, limit use to permitted purposes.
- Right to Appeal: appeal our decision if we deny your request.
- Non-Discrimination: you have the right not to receive discriminatory treatment for exercising your rights.
California Notice at Collection
We collect the categories listed above for the purposes described in this Notice. We disclose the following categories to service providers, partners, and others as described: identifiers; internet/network activity; geolocation (coarse); commercial information; inferences; and, if applicable, account login credentials (sensitive). We do not sell personal information for money. We may share identifiers and internet activity with advertising partners for cross-context behavioral advertising; you may opt out as described below. We retain information as outlined in the Retention section.
Rights for Individuals in the EEA/UK
Subject to GDPR/UK GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.
Exercising Your Rights and Verification
To exercise your rights, contact us at [email protected] or by mail to the address above. Please include your name, your relationship with us, the right you wish to exercise, and sufficient information to verify your identity (e.g., the email address associated with your interactions and any relevant request identifiers). We will respond within the timeframes required by applicable law. If we cannot verify your request, we may ask for additional information solely for verification.
Authorized Agents
If you use an authorized agent (where permitted by law), we may require proof of authorization and verification of your identity.
Appeals
If we deny your request, you may appeal by replying to our decision email or by contacting [email protected] with “Appeal” in the subject line. We will inform you in writing of any action taken or not taken in response to the appeal and our reasons.
Non-Discrimination
We will not discriminate against you for exercising any privacy rights available to you under applicable law.
Do Not Track and Global Privacy Control
Our services do not respond to browser-initiated Do Not Track signals. Where required by applicable law, we honor browser- or device-level Global Privacy Control (GPC) signals as an opt-out of sale/sharing or targeted advertising for the browser or device that sends the signal.
Third-Party Services and Links
Our content may reference third-party exchanges, wallets, networks, or airdrop programs. Your interactions with third parties are governed by their own policies and terms. We are not responsible for the privacy practices of third parties.
Children's Privacy
Our services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
Blockchain and Immutability Notice
Public blockchain networks are decentralized and immutable. Information written to a blockchain (e.g., wallet addresses, transaction hashes) cannot be altered or deleted by us. While we may process such public data to provide features or analyses, requests to delete on-chain data cannot be fulfilled. We will, however, delete or de-identify any off-chain copies under our control where legally required and technically feasible.
Changes to This Notice
We may update this Data Protection Notice from time to time to reflect changes in our practices or legal requirements. Material changes will be indicated by updating the “Last updated” date above. Your continued use of our services after an update constitutes acknowledgment of the changes.
How to Contact Us
If you have questions about this Notice or our privacy practices, please contact:
SOHO19 Crypto District
Attn: Privacy, Elara Crowthorne
3100 14th St NW, Washington, DC 20010, United States of America
Email: [email protected]
