News

Data Protection

Data Controller and Contact

Your Assets To Go (YasoToGo) is owned and operated by Keir Hollington and acts as the data controller for personal data processed in connection with our website and services.

Controller: Keir Hollington, Your Assets To Go (YasoToGo)

Postal Address: 160 Spear St, San Francisco, CA 94105, United States of America

Email: [email protected]

Scope and Applicability

This Data Protection Notice applies to the processing of personal data collected through yasotogo.com and related services, including our crypto hub content, coin and exchange overviews, curated airdrops, and educational guides on wallets, staking, DeFi, and trading.

This Notice is intended to satisfy transparency requirements under the EU/UK General Data Protection Regulation (GDPR) while aligning with applicable United States privacy laws (including, where relevant, state privacy statutes such as the California Consumer Privacy Act as amended by the CPRA). If there is a conflict between applicable laws, we will apply the framework that provides you with stronger protections for the specific processing at issue.

Categories of Personal Data Collected

Data you provide directly

Contact details (e.g., name, email address).
Account credentials and preferences (if account functionality is offered).
Content of communications and inquiries.
Newsletter subscriptions and marketing preferences.
Airdrop participation data you choose to submit (e.g., wallet address, social handles you disclose).

Data collected automatically

Device and browser information, IP address, identifiers, approximate location (derived from IP), language, and time zone.
Usage data such as pages viewed, clicks, referrals, session duration, and interactions with features.
Cookie and similar technology data (pixels, local storage, SDKs) for functionality, analytics, and, where permitted, advertising measurement.

Data from third parties

Analytics and measurement partners providing aggregated or pseudonymous insights.
Marketing and referral partners, where permitted by law and your choices.
Public blockchain data associated with wallet addresses you make public or submit to us.

Sensitive data

We do not intentionally collect sensitive personal data (such as government IDs or precise geolocation) unless you provide it to us for a clear purpose. We request that you avoid submitting unnecessary sensitive data.

Purposes and Legal Bases for Processing

We process personal data for the following purposes and, where GDPR applies, under these legal bases:

Providing and maintaining services, site functionality, and customer support (GDPR: performance of a contract; legitimate interests).
Account facilitation, newsletters, and communications you request (GDPR: performance of a contract; consent where required).
Airdrop curation and participation support, including eligibility checks where applicable (GDPR: performance of a contract; legitimate interests; consent where required).
Security, fraud prevention, abuse detection, and integrity of our services (GDPR: legitimate interests; legal obligation).
Analytics, service improvement, and research (GDPR: legitimate interests; consent where required).
Personalization and marketing, including audience measurement and, where permitted, targeted advertising (GDPR: consent; or legitimate interests where appropriate and permitted).
Compliance with legal obligations and enforcement of our terms (GDPR: legal obligation; legitimate interests).

For processing within the United States, we process personal information as permitted by applicable U.S. law and your privacy choices.

Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to enable site functionality, remember preferences, conduct analytics, and, where permitted, measure advertising effectiveness.

Necessary cookies enable core functionality and cannot be disabled in our systems.
Analytics and performance cookies help us understand usage to improve content and features.
Advertising or measurement technologies may be used to assess campaign effectiveness; where required, we seek your consent.

You may manage cookies through your browser settings. Your choices may affect certain functionalities. If your browser or extension sends a Global Privacy Control (GPC) signal, we will endeavor to honor it where technically feasible.

Disclosures and Recipients

We disclose personal data to the following categories of recipients for the purposes described above:

Service providers and processors that host, maintain, or support our services (e.g., cloud hosting, analytics, communications).
Measurement and analytics partners that provide aggregated or pseudonymous insights.
Advertising partners for measurement and limited ad delivery where permitted by law and your preferences.
Blockchain networks and participants to the extent you interact with public ledgers; such data is public and may be immutable.
Professional advisors (legal, compliance, accounting) under confidentiality obligations.
Authorities, regulators, and courts where required by law or to protect rights, security, and integrity.
Successors in the event of a merger, acquisition, or asset transfer, subject to this Notice.

International Data Transfers

We are located in the United States. If you access our services from the EU/EEA, UK, or other regions with data protection laws, your data may be transferred to and processed in the United States and other jurisdictions that may not provide the same level of protection. Where required, we implement appropriate safeguards, such as standard contractual clauses, and apply supplementary measures as appropriate.

Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Notice, including to comply with legal, accounting, or reporting requirements. Criteria used to determine retention periods include the amount and nature of the data, potential risk of harm from unauthorized use or disclosure, the purposes of processing, and applicable legal requirements.

Examples: account data for the life of the account plus a reasonable period (e.g., up to 2 years) for queries and backup; communication records for up to 3 years; legal compliance records for the duration required by law. Public blockchain data may be retained on ledgers indefinitely outside of our control.

Your Rights Under GDPR

Where GDPR applies, you have the following rights, subject to legal limitations:

Access your personal data and obtain a copy.
Rectify inaccurate or incomplete personal data.
Erase personal data (right to be forgotten).
Restrict processing in certain circumstances.
Data portability to another controller.
Object to processing based on legitimate interests, including profiling; and object to direct marketing at any time.
Not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Withdraw consent at any time, without affecting lawfulness of prior processing.

To exercise your rights, contact us at [email protected]. We may request information necessary to verify your identity. We will respond without undue delay and within one month, subject to extensions allowed by law.

California and U.S. State Privacy Disclosures

For residents of California and other U.S. states with comprehensive privacy laws (e.g., CO, CT, VA, UT), the following applies:

Categories collected: identifiers (e.g., email, IP, device IDs), internet/usage activity, approximate geolocation (from IP), inferences for personalization, and professional or similar information you provide. Sensitive personal information is not sought and is only processed if you submit it for a clear purpose.
Use and disclosure: as described in Purposes and Disclosures sections.
“Sale” or “sharing”: We do not sell personal information for money. We may “share” personal information for cross-context behavioral advertising or use targeted advertising technologies, subject to your choices and applicable law.
Your rights: know/access, correct, delete, portability, opt-out of sale/sharing and targeted advertising, limit use of sensitive information (if applicable), and non-discrimination.
Exercising rights: email [email protected] with your request and state of residence. To opt out of sharing/targeted advertising, adjust your cookie settings and/or send a Global Privacy Control signal where available.
Verification and authorized agents: We will verify requests by reasonable means (e.g., email confirmation or additional details). Authorized agents must provide proof of authority and, where required, consumer verification.
Appeals: If we deny your request, you may appeal by replying to our decision email with “Appeal” in the subject line. We will inform you of the outcome and further options as required by your state law.

Automated Decision-Making and Profiling

We do not engage in solely automated decision-making that produces legal or similarly significant effects on individuals. We may use limited profiling to personalize content, measure interest, and improve services, subject to your choices and applicable law.

Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission or storage is completely secure; we continuously assess and improve our safeguards.

Children’s Privacy

Our services are intended for individuals 13 years of age or older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data, please contact us at [email protected] so we can take appropriate action.

How to Exercise Your Rights

Submit requests by emailing [email protected]. Please include your name, the nature of your request, the jurisdiction in which you reside, and sufficient details to allow us to verify and respond. We may request additional information solely for verification and will use it only for that purpose.

Appeals and Complaints

If you are dissatisfied with our response, you may submit an appeal as described above. Where GDPR applies, you also have the right to lodge a complaint with a supervisory authority. We encourage you to contact us first so we may address your concerns promptly.

Additional Information for Airdrops and Blockchain Interactions

Participation in airdrops or blockchain interactions may require disclosure of wallet addresses or social identifiers. Public blockchain transactions, including wallet addresses and transaction metadata, are recorded on distributed ledgers that are publicly accessible and may be immutable. While we limit our own processing, we cannot alter or delete data recorded on public blockchains.

Changes to This Notice

We may update this Notice to reflect changes in our practices or legal requirements. Material changes will be communicated through our website. The effective date of this Notice is 2025-10-03.

Definitions

“Personal Data” or “personal information” means any information that identifies or relates to an identified or identifiable individual. “Processing” means any operation performed on personal data. “Controller” means the natural or legal person which determines the purposes and means of processing personal data.