Privacy Policy

1. 01Who we are

   The data controller is SBX Group Ltd, a company registered in England and Wales (company number 16284496), whose registered office is at 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom. For any privacy question, or to exercise your rights, contact us at umair@superblock.ai.

   This policy covers the superblock.ai website only. Each SUPERBLOCK product site and application (for example sbxprime.com, sbxaura.com, sbxid.com, rizqfi.com, and sbxgrid.com) has its own privacy policy.

2. 02The data we collect

   We collect only the data we need to respond to you and to operate the Site.

   Information you give us

   • Enquiries and demo requests: when you complete a form (for example “Request a Demo”, the contact form, a waitlist, or a services, build, or ventures enquiry), we collect your name, email, and, where you provide them, your company, role, country, and message.
   • Newsletter: if you subscribe, we collect your email address and any name you provide.
   • Whitepaper access: when you request access, we collect the details you submit (such as name, email, and company), the version of the access acknowledgement you accepted, and when you accepted it.
   • Testnet faucet: if you use the faucet, we process the test-network wallet address you enter so we can send test tokens.

   Information we collect automatically

   • Security and abuse prevention: when you submit a form, we record a hashed (non-reversible) representation of your IP address and your browser user-agent. Forms are protected by Cloudflare Turnstile, which processes your IP address and browser and device signals to tell people from bots.
   • Cookieless analytics: we use self-hosted, cookieless analytics that record aggregated usage, such as pages viewed, referrer, and device type, without cookies and without identifying you.
   • Google Analytics: we use Google Analytics 4 to measure how the Site is used. It sets cookies and collects usage data linked to a pseudonymous identifier, such as pages viewed, how long you stay, approximate location derived from your IP address, and device and browser information. Advertising features are switched off. You can turn Google Analytics off at any time using the analytics control in the site footer. If you are in the European Economic Area or Switzerland, analytics cookies are not set at all unless you turn analytics on.

   Please do not send sensitive personal data, identity documents, or financial or payment details through the Site’s forms. We do not need them.

3. 03How we use your data and our lawful bases

   Purpose	Lawful basis
   Responding to enquiries and arranging demos you request	Legitimate interests; steps taken at your request before any engagement
   Providing whitepaper access and keeping a record of the acknowledgement you accepted	Legitimate interests; compliance with legal obligations
   Sending the newsletter or updates you asked for	Consent, which you can withdraw at any time
   Protecting forms and the Site from spam, fraud, and abuse	Legitimate interests
   Cookieless, aggregated analytics to improve the Site	Legitimate interests
   Google Analytics	Legitimate interests in measuring and improving the Site, relying on the UK exemption for analytics used for statistical purposes, which you can object to at any time; consent for visitors in the EEA and Switzerland
   Meeting legal, accounting, and regulatory obligations	Legal obligation

   We do not use your data for automated decision-making that has legal or similarly significant effects on you.

4. 04Who we share it with

   We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed:

   • cloud hosting and database providers that run the Site and store form submissions;
   • our email delivery provider, to send replies, confirmations, and updates you request;
   • Cloudflare, for form bot protection (Turnstile);
   • Google, as our analytics provider (Google Analytics); and
   • professional advisers, and courts, regulators, or law-enforcement authorities where we are legally required to disclose.

5. 05International transfers

   Our hosting infrastructure is located in the European Economic Area, which benefits from UK adequacy regulations. Some providers, such as Google and Cloudflare, may process data in the United States or elsewhere. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. 06How long we keep it

   • Enquiry and lead records: up to 24 months after our last interaction with you.
   • Newsletter data: until you unsubscribe.
   • Whitepaper access records: for the life of the access grant and our record-keeping period afterwards.
   • Security logs: only as long as needed to protect the Site.
   • Google Analytics data: up to 14 months.
   • Data needed for legal, accounting, or regulatory obligations: as long as those obligations require.

7. 07Your rights

   Under the UK GDPR you have the right to:

   • access the personal data we hold about you;
   • have inaccurate data corrected;
   • have your data erased in certain circumstances;
   • object to, or ask us to restrict, our processing, including processing based on legitimate interests;
   • data portability; and
   • withdraw consent at any time where we rely on it, for example by unsubscribing, and turn analytics off at any time using the control in the site footer. This does not affect processing already carried out.

   To exercise any of these rights, contact us at umair@superblock.ai. We will respond within one month, as required by law.

8. 08Security

   We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashing of IP addresses in form records. Our information security management system is aligned to ISO 27001.

9. 09Children

   The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18.

10. 10Complaints

    If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

11. 11Changes to this policy

    We may update this Privacy Policy from time to time. The current version is the one published here, with the “last updated” date shown. For any question, contact umair@superblock.ai.

This document applies to the superblock.ai website only and does not constitute legal advice. The SUPERBLOCK product platforms have their own terms.