1. Data Controller Identification
The Data Controller responsible for the processing of your personal data is Cresfield Capital LLC, 16192 Coastal Highway, Lewes, Delaware 19958, USA. Contact point for all privacy and data protection inquiries: privacy@wantedmarkets.com.
2. Personal Data Collected
We strictly collect only the personal information essential to deliver our services:
- Account & Contact Information: Email address, customer name, and encrypted authentication tokens.
- Transaction Records: Order identifier, purchased theme references, date, currency, and payment status. Raw payment card credentials are handled directly and securely by Stripe (PCI-DSS Level 1) and never transit through or reside on our servers.
- Technical Telemetry: Anonymized IP addresses, browser user agent, and edge security logs processed strictly for DDoS mitigation and anti-fraud monitoring.
3. Legal Bases for Processing (GDPR Art. 6)
- Contractual Performance (Art. 6.1(b)): Delivering digital theme archives, generating license certificates, and processing customer service inquiries.
- Legal Obligations (Art. 6.1(c)): Accounting, taxation, and billing compliance under Delaware US and European consumer trade directives.
- Legitimate Interests (Art. 6.1(f)): Defending platform integrity, preventing automated scraping, and enforcing DMCA Safe Harbor requirements.
4. Trusted Third-Party Sub-Processors
We partner exclusively with industry-certified technical providers bound by strict Data Processing Agreements (DPAs):
- Stripe, Inc. (USA): Global payment gateway, fraud prevention, PCI-DSS Level 1 certification.
- Cloudflare, Inc. (USA): Global Content Delivery Network (CDN), DDoS shielding, and edge caching.
- Neon Tech (USA): Encrypted PostgreSQL cloud database storage for customer entitlements.
5. Zero Third-Party Advertising Trackers
Wantedmarkets does NOT sell, rent, or monetize your personal data to third-party ad networks. We do not employ intrusive tracking pixels (such as Meta Pixel or Google Ads Remarketing) on our legal or download infrastructure. All cookies used are strictly functional for session persistence and theme auto-switching.
6. Your Rights (GDPR & CCPA/CPRA)
Under GDPR (EU) and CCPA (California), you enjoy statutory rights regarding your personal information:
- Right of access and data portability.
- Right to rectification of incomplete or inaccurate data.
- Right to erasure ("Right to be Forgotten").
- Right to restrict or object to processing.
- Right to non-discrimination for exercising consumer privacy rights.
To exercise any of these rights, email privacy@wantedmarkets.com. Our Data Protection Officer responds within 30 days without charge.