Privacy Policy
This policy explains what personal data Bermcoin collects, why we collect it, and what rights you have. We have written it in plain English because we believe you should not need a law degree to understand how your data is handled.
1. Who We Are
Data Controller: Bermech Limited, registered in Ireland (CRO 757365), registered office: 6 Fern Road, Sandyford, Dublin 18, D18 FP98.
Service: Bermcoin (bermcoin.com) — an exchange rate watching and notification service.
Contact: hello@bermcoin.com
2. What Data We Collect
- Email address — required to create your account and send you notifications.
- Name — optional. You can use Bermcoin without ever telling us your name.
- Plan selection — which plan you are on (Free, Standard, or Pro).
- Rate watch preferences — the currency pairs and target rates you set up.
- Notification channel preferences — whether you want to receive messages via email, Telegram, WhatsApp, or a combination.
- Nudge history — a record of the notifications we have sent you.
- Payment information — processed securely by Stripe. We never see or store your full card number, CVV, or bank details. We receive only a confirmation of payment status and the last four digits of your card for your reference.
3. Why We Collect It (Lawful Basis)
Under GDPR, every piece of data we collect must have a lawful basis. Here are ours:
- Contract — We need your email, preferences, and plan to deliver the service you signed up for (Article 6(1)(b)).
- Legitimate interest — We analyse usage patterns in aggregate to improve the service. We never sell your data (Article 6(1)(f)).
- Consent — If we ever send marketing emails (product announcements, new features), we will ask your permission first. You can withdraw consent at any time (Article 6(1)(a)).
4. Third-Party Processors
We share your data only with the following services, and only to the extent necessary to run Bermcoin:
Supabase (database & authentication) — EU hosted. Stores your account data and preferences.
Stripe (payments) — US based. Protected by EU–US Standard Contractual Clauses (SCCs). Processes payments for paid plans.
Brevo (email delivery) — EU based. Sends transactional and notification emails on our behalf.
Telegram (messaging) — Delivers notifications if you opt into the Telegram channel.
Meta / WhatsApp (messaging) — US based, protected by EU–US SCCs. Delivers notifications if you opt into WhatsApp.
We do not sell, rent, or share your personal data with advertisers or data brokers. Ever.
5. International Transfers
Your core data is stored in the EU via Supabase. When data needs to reach US-based processors (Stripe, Meta/WhatsApp), the transfer is protected by Standard Contractual Clauses approved by the European Commission.
6. Data Retention
- Active accounts — your data is retained for as long as your account is active. Cancelling a paid plan does not delete anything; your account simply reverts to the free plan.
- Account deletion — when you delete your account (Dashboard > Account & Privacy > Delete My Account), it is deactivated immediately and your personal data is permanently deleted within 30 days. Inside those 30 days you can email hello@bermcoin.com to restore it; after that it is unrecoverable.
- Rate history — aggregate, non-personal exchange rate data is retained indefinitely for service improvement.
7. Your Rights
Under GDPR (Articles 12–23), you have the right to:
- Access — request a copy of all personal data we hold about you.
- Rectification — correct any inaccurate data.
- Erasure — ask us to delete your data (“right to be forgotten”).
- Restrict processing — limit how we use your data.
- Data portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
- Withdraw consent — for any processing based on consent, you can withdraw at any time.
How to exercise your rights
You can manage most of these directly from your Dashboard > Account settings. For anything else, email hello@bermcoin.com and we will respond within 30 days.
8. Cookies & Local Storage
Bermcoin does not use tracking cookies. We do not run third-party analytics. We use browser localStorage only to remember your email gate preference (so you do not have to re-enter it every visit). That is it. See our Cookie Policy for full details.
9. Data Protection Commission
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
www.dataprotection.ie
10. Changes to This Policy
If we make material changes to this privacy policy, we will notify all members by email before the changes take effect. The updated policy will also be published here with a new version number and date.