Privacy Policy
Last updated: March 15, 2026
Brenda's Beach Resort & Spa - HBR Token Sale Platform
1. Introduction
Brenda's Beach Resort & Spa ("we," "our," "us," or "Company") operates a cryptocurrency token sale platform for the Hubren (HBR) token. We are committed to protecting your privacy and handling your personal information with care and transparency.
This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you:
- Access or use our token sale platform
- Purchase HBR tokens
- Connect your cryptocurrency wallet
- Participate in our referral program
- Use any of our services or features
⚠️ Important Notice
By using our platform, purchasing HBR tokens, or providing us with your information, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Cryptocurrency Wallet Information
When you connect your wallet or make a purchase, we collect:
- Wallet Addresses: Ethereum (ETH), Binance Smart Chain (BNB), and other supported blockchain addresses
- Transaction Hashes: Public blockchain transaction identifiers
- Transaction Amounts: Cryptocurrency amounts sent and received
- Blockchain Network: The network on which transactions occur
- Token Balances: HBR token holdings associated with your wallet
2.2 Personal Identification Information
- Email address (required for account creation and communications)
- Full name (if provided during registration or KYC)
- Phone number (optional, for account recovery)
- KYC/AML verification documents (if required by law or for higher purchase limits)
- Government-issued identification (for KYC compliance)
- Proof of address documents (for KYC compliance)
2.3 Transaction and Financial Data
- Purchase history and transaction records
- Payment method information (cryptocurrency type and amounts)
- Referral code usage and referral earnings
- Staking activity and rewards
- Token transfer history
2.4 Technical and Usage Information
- IP address and approximate geographic location
- Browser type, version, and language settings
- Device information (type, operating system, screen resolution)
- Cookies and similar tracking technologies
- Platform usage patterns and interactions
- Error logs and diagnostic information
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Platform Operations
- Processing and confirming token purchases
- Managing your account and dashboard
- Facilitating cryptocurrency transactions
- Calculating and distributing referral rewards
- Processing staking rewards and distributions
- Maintaining transaction records and history
3.2 Legal and Regulatory Compliance
- Complying with anti-money laundering (AML) regulations
- Conducting know-your-customer (KYC) verification
- Reporting to tax authorities when required by law
- Responding to legal requests and court orders
- Preventing fraud, money laundering, and illegal activities
3.3 Communication and Support
- Sending transaction confirmations and receipts
- Providing customer support and responding to inquiries
- Sending important platform updates and security alerts
- Notifying you about token sale milestones and events
- Marketing communications (with your consent, opt-out available)
3.4 Security and Fraud Prevention
- Detecting and preventing fraudulent transactions
- Protecting against unauthorized access to accounts
- Monitoring for suspicious activity
- Conducting security audits and assessments
4. Data Protection and Security
We implement industry-standard security measures to protect your information:
- Encryption: All sensitive data is encrypted in transit (TLS/SSL) and at rest
- Secure Storage: Personal information is stored in secure databases with access controls
- Access Controls: Limited access to personal information on a need-to-know basis
- Regular Audits: Security assessments and penetration testing
- Smart Contract Security: Audited smart contracts for token operations
- Two-Factor Authentication: Available for enhanced account security
🔒 Security Reminder
While we implement robust security measures, no system is 100% secure. You are responsible for maintaining the security of your wallet private keys and account credentials. Never share your private keys or seed phrases with anyone, including our team.
5. Blockchain and Public Information
⚠️ Important: Public Blockchain Data
Cryptocurrency transactions occur on public blockchains. This means:
- Your wallet address and transaction details are permanently recorded on the blockchain
- Blockchain data is publicly visible and cannot be deleted or modified
- Third parties may analyze blockchain data to link addresses to identities
- We cannot control or remove information once it's recorded on the blockchain
We store your wallet address in our database to provide platform services, but the blockchain itself is a public ledger. Exercise caution when sharing wallet addresses or transaction information publicly.
6. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following limited circumstances:
6.1 Service Providers
We may share information with trusted third-party service providers who assist in:
- Payment processing and cryptocurrency transaction handling
- KYC/AML verification services
- Cloud hosting and data storage
- Email delivery and communication services
- Analytics and platform improvement
These service providers are contractually obligated to protect your information and use it only for specified purposes.
6.2 Legal and Regulatory Requirements
We may disclose information when required by:
- Law, court order, or government regulation
- Tax authorities for reporting purposes
- Financial regulators for compliance
- Law enforcement agencies with valid legal process
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
7.1 Access and Portability
- Request access to your personal information
- Receive a copy of your data in a portable format
- View your transaction history and account information
7.2 Correction and Deletion
- Correct inaccurate or incomplete information
- Request deletion of your account (subject to legal retention requirements)
- Note: Blockchain transaction data cannot be deleted
7.3 Opt-Out and Consent Withdrawal
- Opt-out of marketing communications (unsubscribe links in emails)
- Withdraw consent for data processing (where applicable)
- Disable cookies through browser settings
7.4 GDPR Rights (EU Residents)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to object to processing of your personal data
- Right to restrict processing
- Right to data portability
- Right to lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at privacy@brendasresortandspa.com. We will respond within 30 days.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Authenticate your session
- Analyze platform usage and improve services
- Provide personalized content and recommendations
You can control cookies through your browser settings. However, disabling certain cookies may limit platform functionality.
9. Data Retention
We retain your information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal and regulatory obligations (typically 5-7 years for financial records)
- Resolve disputes and enforce agreements
- Prevent fraud and ensure security
When information is no longer needed, we securely delete or anonymize it, except where retention is required by law.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by data protection authorities
- Adequacy decisions where applicable
- Other legally recognized transfer mechanisms
By using our services, you consent to such transfers.
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@brendasresortandspa.com, and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending an email notification to registered users (for significant changes)
- Displaying a notice on our platform
Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Brenda's Beach Resort & Spa
Privacy Inquiries:
privacy@brendasresortandspa.com
General Inquiries:
info@brendasresortandspa.com
Address:
Brenda's Beach Resort & Spa
Caribbean