Privacy Policy
Last updated: February 16, 2026
Data Controller
Capital Tokenization ("the Platform"), operated from Vevey, Canton of Vaud, Switzerland, is the data controller for personal information collected through this website. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable data protection legislation including the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), applicable US state privacy laws including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and the Swiss Federal Act on Data Protection (FADP).
Information We Collect
We collect information through two channels. First, automated technologies: when you visit the Platform, we automatically collect your IP address, browser type and version, operating system, referring URL, pages visited, time spent on each page, scroll depth, click patterns, and device information. This data is collected through Google Analytics tracking code and Google AdSense advertising technology. Second, voluntary submissions: when you use our contact form, we collect your name, email address, subject line, and message content. We do not collect financial information, investment portfolio data, securities positions, or professional licensing credentials through this Platform.
How We Use Your Information
Automated data is used for: website analytics (understanding traffic patterns, content performance, and user engagement to improve our editorial coverage), ad personalization through Google AdSense (displaying relevant advertisements based on your interests and browsing behavior), and security monitoring (detecting and preventing unauthorized access, abuse, or fraudulent activity). Contact form data is used solely to respond to your inquiry and is not shared with third parties, used for marketing purposes, or retained beyond 12 months after resolution of your inquiry.
Google and Third-Party Technologies
This Platform uses Google Analytics for traffic analysis and Google AdSense for programmatic advertising. Google and its advertising partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites. You may opt out of personalized advertising by visiting Google Ads Settings. For comprehensive information about how Google uses information from sites that use its services, visit Google Privacy & Terms. Additional third-party services include Google Fonts for typography delivery. Each third-party service operates under its own privacy policy and data processing terms. We do not sell, rent, or share personal information with third parties for their own marketing purposes.
Cookie Management
The Platform deploys a cookie consent mechanism on your first visit. You may accept or decline non-essential cookies. Essential cookies required for basic website functionality (session management, security, cookie preference storage) deploy regardless of consent choice. If you decline cookies, advertising displayed on the Platform will not be personalized to your interests. You may also manage cookies through your browser settings — most browsers allow you to view, delete, and block cookies from specific or all websites. Note that blocking all cookies may affect the functionality of some website features.
- Essential cookies: Session management, security tokens, cookie consent preference. These cannot be disabled.
- Analytics cookies: Google Analytics tracking for traffic analysis, content performance measurement, and user engagement metrics.
- Advertising cookies: Google AdSense and advertising partner cookies for personalized ad delivery and frequency capping.
Your Rights Under CCPA
California residents have the right to: know what personal information is collected and how it is used, request deletion of personal information, opt out of the sale of personal information (we do not sell personal information), non-discrimination for exercising privacy rights, and correct inaccurate personal information. To exercise these rights, contact [email protected]. We will verify your identity before processing requests and respond within 45 days as required by the CCPA. We do not use or disclose sensitive personal information for purposes beyond those authorized by CCPA regulations.
Your Rights Under GDPR
European Economic Area residents have the right to: access personal data we hold about you, rectify inaccurate personal data, request erasure of personal data ("right to be forgotten"), restrict processing of personal data, data portability (receive your data in a structured, machine-readable format), object to processing based on legitimate interests, and withdraw consent at any time. Our lawful bases for processing include: consent (for analytics and advertising cookies), legitimate interests (for website security and fraud prevention), and contract performance (for responding to contact form inquiries). We process data in accordance with the EU-US Data Privacy Framework and Standard Contractual Clauses for international data transfers.
Additional US State Privacy Rights
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy legislation have rights including: access, correction, deletion, data portability, and the right to opt out of targeted advertising. We honor Global Privacy Control (GPC) signals as valid opt-out requests where required by applicable law. Submit privacy rights requests to [email protected].
Data Security, Retention, and Contact
We implement HTTPS encryption for all Platform communications, access controls limiting data access to authorized personnel, regular security reviews of third-party integrations, and monitoring for unauthorized access attempts. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Analytics data is retained for 26 months through Google Analytics standard retention settings. Contact form submissions are retained for 12 months after resolution. Cookie consent preferences are stored in your browser's localStorage indefinitely until cleared. The Platform is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16. We may update this Privacy Policy periodically. Material changes will be communicated through prominent notice on the Platform. For all data protection inquiries, rights requests, or complaints, contact [email protected]. We acknowledge inquiries within 48 hours and respond substantively within 30 days.