Privacy Policy

WalmartValueWithdraw is operated by [legal company name], registered in [country] under company number [registration number], with its registered address at [registered address]. We decide how your personal information is used, which makes us the "controller" of that information.

[If you appoint a data protection officer or an EU/UK representative, give their contact details here.]

Information you give us:

• Account details: your name, email address and password. We never store your password itself, only a scrambled version of it that cannot be turned back into your password.
• Card details: the information and photos you submit for a prepaid Walmart Business Card so we can verify it.
• Payout details: your crypto wallet address and network, or your bank account details.
• Identity documents, where we need to confirm who you are or meet our legal obligations.
• Messages you send us through the contact form, email or live chat.

Information we collect automatically:

• A session cookie that keeps you signed in. It is essential to the service and is not used for advertising.
• Technical information such as your IP address, browser and device, and the pages you visit, which helps us keep the service secure and working.
• [List any analytics or error-tracking tools you add later, and what they collect.]

We use your information to:

• create and run your account
• verify the cards you submit and pay you for them
• detect, investigate and prevent fraud, money laundering and abuse of the service
• answer your questions and provide support
• send you service messages about your trades and account
• meet our legal and regulatory obligations, and keep records we are required to keep
• improve the security and reliability of the service

[If you plan to send marketing emails, say so here and explain how people can opt in and out.]

Where data protection law such as the UK GDPR or EU GDPR applies to you, we rely on these grounds:

• Performing our contract with you: running your account, verifying cards and sending payouts.
• Legal obligation: anti-money-laundering checks, tax and accounting records.
• Legitimate interests: keeping the service secure, preventing fraud, and improving what we offer, balanced against your rights.
• Consent: anything you opt into, such as marketing. You can withdraw consent at any time.

We do not sell your personal information. We share it only with:

• Service providers who run parts of our service for us, such as our hosting provider [hosting provider], our database provider MongoDB Atlas, our live chat provider Smartsupp and our image host Cloudinary.
• Payment and cryptocurrency providers who deliver your payout: [payment providers].
• Identity and card verification providers: [verification providers].
• Professional advisers such as lawyers and accountants, where needed.
• Law enforcement, regulators or a card issuer, where the law requires it or where we must report suspected fraud.
• A buyer or successor, if our business is sold or reorganised.

Our database is hosted by MongoDB Atlas in [Atlas region, for example: AWS eu-west-1]. Some of our providers may process information in other countries.

Where information leaves your country, we rely on safeguards such as standard contractual clauses or an adequacy decision. [Confirm which safeguards apply to your setup.]

We keep your account information while your account is open, and for [retention period] afterwards.

We keep records of trades, verification and payouts for [retention period, often 5 to 7 years] to meet anti-money-laundering, tax and accounting rules.

Support messages are kept for [retention period]. After these periods we delete the information or make it anonymous.

We protect your information with measures including:

• encrypted connections between your browser and our servers
• passwords stored only as salted, scrambled values, never as plain text
• sign-in sessions held in a cookie your browser scripts cannot read, with only a scrambled copy stored in our database
• limits on which staff can reach personal information, and access records

No service can be completely secure. If a breach affects your rights, we will tell you and the relevant regulator as the law requires.

We will never ask for your password, your private key or your seed phrase. Anyone who does is not us.

Depending on where you live, you may have the right to:

• ask for a copy of the information we hold about you
• have inaccurate information corrected
• ask us to delete information, where we are not required to keep it
• object to or restrict certain uses of your information
• receive your information in a portable format
• withdraw consent you previously gave

To exercise any of these, email support@walmartvaluewithdraw.com. We reply within [response time, for example: one month].

If you are unhappy with our response you can complain to your data protection regulator, which for the UK is the Information Commissioner's Office. [Name the regulator for your country.]

We use one essential cookie to keep you signed in after you log in. Without it the service cannot know it is you.

Our live chat is provided by Smartsupp, which sets its own cookies so a conversation can continue if you reload the page or come back later. Chat messages are stored by Smartsupp on our behalf.

We do not use advertising cookies. [Check whether the law where you operate requires a consent banner before the chat loads, and list any analytics you add later.]

The service is not for anyone under 18, and we do not knowingly collect information about children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy. If a change matters to you, we will tell you by email or with a notice on the site. The date at the top shows when it last changed.

For any question about privacy or your information, email support@walmartvaluewithdraw.com, write to us at [registered address], or use the contact form on our homepage.