01Who we are
GhostYield Estate (“we”, “us”) provides read-only cryptoasset inventory and date-of-death valuation reports to probate solicitors, executors’ advisers and crypto accountants in the UK and US. For the purposes of UK GDPR we act as controller for enquiry and contact data, and generally as processor for estate data you send us on behalf of your client.
02What we collect
Enquiry data: your name, work email, firm, and the approximate number of wallets, submitted through our forms.
Matter data: public blockchain addresses, the date of death, and any reference you give us. Public addresses are pseudonymous but can relate to an identifiable deceased person or beneficiaries, so we treat them as confidential.
Technical data: standard server logs from our hosting provider (such as IP address and browser type) kept for security. We do not use advertising cookies or cross-site tracking.
03What we never collect
We never request or accept private keys, seed or recovery phrases, exchange passwords, hardware wallets or device access. Our analysis reads public blockchain data only. If you send any of these by mistake, we will delete them and tell you.
04How we use it
To reply to your enquiry, prepare and deliver the report you request, send the checklist you ask for and occasional practice notes (you can unsubscribe at any time), keep business records, and protect the service from abuse.
Lawful bases: performance of a contract or steps before one, our legitimate interests in running and securing the service, consent for optional marketing emails, and compliance with legal obligations.
06How long we keep it
Enquiries that do not become matters: up to 12 months. Matter data and reports: for the period agreed with your firm, by default 6 years to support later queries from HMRC or the IRS, then deleted. You may ask us to delete matter data earlier, subject to our legal obligations.
07Your rights
Depending on where you are, you may have rights to access, correct, delete, restrict or object to the use of your personal data, to data portability, and to withdraw consent. UK residents may complain to the Information Commissioner’s Office (ico.org.uk). Contact us using the pilot form on our homepage and we will respond within one month.
08Security
Access to matter data is limited to the people preparing the report, data is encrypted in transit, and reports are delivered to the requesting professional only.
09Changes
We will update this notice when our practices change and revise the date at the top of the page.