Your privacy matters

1. Who is responsible for your data?

The data controller is LICENCHAIN, UAB, a company registered in Lithuania.

Correspondence address: Filaretų g. 12-1, LT-01208 Vilnius, Lithuania.
Contact and privacy enquiries: info@licenchain.io.

This notice applies to the public marketing website at licenchain.io. Our separately operated product platform at platform.licenchain.io has its own processing activities and privacy information.

2. What information do we process?

If you email us: we may process your name, email address, organisation, business contact details, licensing requirements, message and subsequent correspondence, depending on what you choose to share.

If you submit the contact form: when the form is enabled, we collect your name, work email, optional organisation, optional inquiry topic and message, together with your acknowledgement of this privacy notice. This information is used to respond to your enquiry and is sent to our monitored Microsoft 365 mailbox via Microsoft Graph. We do not use the form to sign you up for marketing messages.

Spam protection: the form uses Cloudflare Turnstile to help identify automated submissions. Cloudflare may process the verification token and technical request, browser, device and interaction signals, including IP address, to assess whether a submission is legitimate. Verification is performed by Cloudflare before we send your message; we do not store the token in a separate lead database.

If you visit the website: our hosting and security provider may process technical request information, including IP address, browser and device characteristics, requested pages, timestamps and security-related signals needed to deliver and protect the website.

The marketing website does not require an account, payment details or a blockchain wallet. Please do not include passwords, sensitive personal data or confidential business material in a general enquiry.

3. Purposes and legal basis

• Responding to business enquiries. We reply to licensing and partnership questions and discuss possible commercial arrangements. Depending on the context, we rely on legitimate interests in business correspondence (Article 6(1)(f) GDPR) or steps requested by an individual before entering into a contract (Article 6(1)(b) GDPR).
• Operating and protecting the website. We deliver content, maintain availability and prevent misuse on the basis of our legitimate interests (Article 6(1)(f) GDPR).
• Understanding aggregate website use.We analyse traffic sources and page-performance statistics to improve the website, based on our legitimate interests (Article 6(1)(f) GDPR), where applicable. We do not use analytics for individual profiling or targeted advertising.
• Meeting legal obligations. We process information where required by applicable law (Article 6(1)(c) GDPR).

Providing enquiry information is voluntary, although without sufficient contact information we may not be able to respond. An enquiry is not consent to receive newsletters or advertising, and we do not automatically add enquirers to mailing lists.

4. Who may receive your information?

Authorised LicenChain personnel may access relevant enquiries. We use service providers for website operation and business correspondence:

• Cloudflare — website hosting, content delivery, network security, Turnstile spam verification for the contact form and, when enabled, aggregate Web Analytics statistics.
• Microsoft 365 — email delivery through Microsoft Graph, business email hosting and correspondence management.

These providers process information in their respective roles under applicable data-protection arrangements. We do not sell personal data or disclose enquiry information to other organisations for their own advertising. Disclosure may also be necessary when required by law or to establish, exercise or defend legal claims.

5. International transfers

Cloudflare and Microsoft operate international service infrastructures. Depending on their configuration and support operations, information may be accessed or processed outside the European Economic Area (EEA). Where GDPR transfer rules apply, appropriate safeguards are used, such as applicable adequacy decisions (including the EU–US Data Privacy Framework where relevant) or the European Commission's Standard Contractual Clauses.

You may request further information about applicable transfer safeguards by emailing us.

6. How long do we keep your information?

We retain business enquiries and related correspondence for up to 180 calendar days after the last relevant communication. We review messages for deletion after that period unless further retention is justified by ongoing contractual discussions, a legal obligation or the establishment, exercise or defence of legal claims.

The marketing website does not maintain a separate enquiry database or customer relationship management system. Technical website and security information is retained according to our configured providers' operational and security needs.

7. Cookies and tracking

We do not use advertising cookies, remarketing pixels or behavioural profiling. Google Analytics and similar advertising-oriented analytics tools are not installed.

Cloudflare Web Analytics is active on the public homepage.It uses a cookie-free browser performance beacon to report aggregated page views, referrer sources and page performance. According to Cloudflare, it does not use local storage, fingerprint visitors or track individuals across websites. We use these aggregate reports to understand website performance and the effectiveness of our business communications, not to identify visitors. We do not send enquiry content to analytics. Dashboard reporting is available for a limited period (currently up to six months).

Cloudflare, including Turnstile where the contact form is enabled, may use technical cookies or similar mechanisms necessary for website security, spam protection or reliable operation, depending on the active configuration. We do not use these signals to create advertising profiles.

We evaluate the necessity of consent or other controls under applicable privacy and electronic-communications rules before activating optional website measurement. We will update this notice if we introduce more intrusive tracking.

8. Your rights

Under the GDPR, subject to applicable conditions, you may:

• request access to your personal data and obtain a copy;
• ask us to correct inaccurate or incomplete information;
• request erasure or restriction of processing where applicable;
• object to processing based on legitimate interests; and
• request data portability where the right applies.

To exercise your rights, email info@licenchain.io with details of your request. We may ask for reasonable verification of identity where needed to protect your information. We will respond without undue delay, normally within one month, subject to any permitted GDPR extension.

You may also complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

9. Automated decisions

We do not use marketing enquiry information for solely automated decisions that produce legal or similarly significant effects, or for profiling.

10. Updates

We may revise this policy if our website, service providers or personal data processing activities change. The current version is published at licenchain.io/privacy/.