Privacy Policy

Wallsec is an independent onchain investigation and fund-tracing firm based in the United Kingdom. We are the data controller for personal data submitted through this website.

Registered address: 4th Floor, No. 1 Forbury Place, 43 Forbury Road, Reading, Berkshire RG1 3JH, United Kingdom.

We are not a law firm, financial adviser or FCA-regulated firm. We do not provide legal, financial or investment advice.

For any privacy question, or to exercise the rights described below, contact contact@wallsec.co.uk.

Intake form and live chat: your name, an email address only if you choose to give one, and whatever you write in your message. Nothing in the chat requires you to identify yourself.

Case material you send us: timelines, wallet addresses, transaction hashes, screenshots, correspondence and documents relating to your case.

Technical data: standard server and security logs generated when you load the site.

We keep a basic first-party record of page visits so we can see how the site is used and detect abuse. For each visit we record the page path, the referring page, your browser, operating system and device type, an approximate country and city, and a coarse network prefix derived from your IP address.

We do not store your full IP address. The address is truncated before it is written to our records — for IPv4 the final block is dropped (for example 203.0.113.0/24) and for IPv6 only the routing prefix is kept — so the stored value identifies a network, not a device or a person. We also store a short one-way hash so repeat visits can be counted without holding the address itself.

To estimate country and city we send only that truncated network prefix to the geolocation provider ipapi.co. Your full IP address is never sent to them.

We do not use Google Analytics, advertising pixels, cross-site trackers or any third-party analytics service, and we do not profile visitors or make automated decisions about you.

Visit records are deleted automatically 30 days after they are created.

To respond to your enquiry and assess whether your case is traceable.

To carry out an investigation you have asked us to carry out, and to prepare the resulting report.

To keep records required for our own legal, accounting and anti-fraud obligations.

To understand site usage and protect the site against abuse, on the basis of our legitimate interest in operating a secure service.

Our lawful bases are your consent when you contact us, performance of a contract once you engage us, and our legitimate interest in operating and securing the service.

We do not sell personal data and we do not use it for advertising.

Where you instruct us to, we share case material with your own legal counsel, insurer, exchange compliance teams, or the authority handling your report.

We use service providers for website hosting, database storage, email delivery and approximate geolocation (ipapi.co). They process data on our instructions only.

Website visit records: 30 days, then deleted automatically.

Live chat transcripts: deleted automatically 180 days after the last message, unless the conversation has become a case file.

Enquiries that do not become cases are deleted within 12 months.

Case files are retained for six years after closure, in line with our legal and professional record-keeping obligations, unless you ask us to delete them sooner and we are not required to keep them.

Under UK GDPR you can request a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to or restrict our processing, and withdraw consent at any time.

Email contact@wallsec.co.uk with your request. We respond within one month.

If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Data is transmitted over encrypted connections and stored with access limited to the people working on your case.

We will never ask you for private keys, seed phrases, wallet credentials, remote access to your device, or upfront fees. Anyone who does is not us.

This site uses only the storage necessary to keep your live chat session on your own device. We do not run advertising or third-party tracking cookies, and we do not use cookies for analytics.