Legal
Privacy Policy
Last updated: September 2, 2026
Draft for legal review — not yet in force. This text has not been finalised by counsel and should not be relied on.
1. Who we are
Smoke Point Capital, based in Madrid, Spain, is the data controller for personal data collected through this site and our services.
2. What data we collect
Account data (name, email, phone), identity-verification documents, usage data (pages visited, device and browser information), and communications you send us through the contact form.
3. How we use your data
To provide and secure our services, verify your identity, communicate with you, comply with legal obligations, and — only with consent — for analytics and marketing.
4. Legal basis for processing
Contract performance (account services), legal obligation (KYC/AML), legitimate interest (security, fraud prevention), and consent (analytics, marketing).
5. Data sharing and third parties
We share data with service providers who help us operate (identity verification, hosting, email delivery) under written agreements, and with authorities where legally required. We do not sell personal data.
6. International transfers
Where data is transferred outside the European Economic Area, we rely on adequacy decisions or standard contractual clauses.
7. Data retention
We retain account and KYC data for as long as required by applicable financial and anti-money-laundering regulations, then delete or anonymise it.
8. Your rights under GDPR
You may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. Contact us to exercise these rights.
9. Cookies
This site uses cookies as described in our Cookie Policy, with granular consent for anything beyond strictly necessary cookies.
10. Contact and complaints
For privacy questions, use our contact form. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).