Privacy Policy
This Privacy Policy explains how Chaseflex s.r.o. (“we”, “us”), operating the Currency Buyback website, processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Czech data protection law.
Who we are
We are Chaseflex s.r.o., IČO 08616086, DIČ CZ08616086, with registered address at Smilova 373, 530 02 Pardubice I-Zelené Předměstí, Czech Republic.
You can contact us about privacy matters at support@currencybuyback.com.
What types of data we collect
We collect the following categories of data:
- Data about your visit to our website
- Data about your interactions with us via email
- Data about the order(s) you create
- Data about the processing and fulfilment of your order(s)
1. Data about your visit to our website
What we collect: Our hosting and application infrastructure may store technical logs such as IP address, requested pages and timestamps, which help us secure the service and prevent abuse. We use an essential cookie to remember your preferred payout currency so rates display correctly on your next visit. We do not currently run third-party analytics or marketing cookies on this site.
Legal basis: Legitimate interest in operating a secure website and providing the payout-currency preference you select; performance of a contract / steps prior to a contract where you use the exchange service.
Sharing: Infrastructure providers that host our website and database process technical data on our behalf as processors. We do not sell your visit data.
Retention: Server logs are retained only as long as needed for security and operations (typically up to several months). The payout-currency cookie lasts up to one year or until you clear cookies.
Your rights: You may clear cookies in your browser at any time. Blocking essential cookies may affect site functionality (for example, remembering payout currency).
2. Data about interactions via email
What we collect: When you email us, we receive your email address, name if provided, message content, attachments and technical email headers.
Legal basis: Legitimate interest in responding to enquiries; contract performance where the message relates to an order.
Sharing: Email is processed via our email service providers. We may share information with authorities where required by law.
Use: To answer queries and help with exchanging leftover currency.
Retention: We keep correspondence only as long as needed. Where an exchange is involved, we retain records for the period required by AML and accounting rules (typically up to five years or longer if law requires).
Your rights: You may request access, rectification or erasure as described below, subject to legal retention duties.
3. Data about the order(s) you create
What we collect: When you place an order we collect identity and contact details (name, email, address where provided), payout method and bank or PayPal details, order contents (currencies, denominations, quantities), payout currency and calculated amounts, and tracking identifiers for your order.
Legal basis: Performance of a contract; legal obligations under AML and accounting rules; legitimate interest in preventing fraud.
Sharing: We may share necessary details with payment providers (banks, PayPal) to send your payout, and with authorities when legally required. PDF receipts and order emails are sent to the email address you provide.
Use: To fulfil the order, verify currency, pay you, and communicate status updates.
Retention: Order and AML-related records are retained for the periods required by applicable law.
Your rights: You may request a copy of your order data and ask for corrections of inaccurate details. Deletion may be limited where we must retain records by law.
4. Data about processing and fulfilment
What we collect: Notes from sorting and counting, status changes, due-diligence documents you provide (for example ID copies when requested), shipping receipt information when available, and communication about discrepancies.
Legal basis: Contract performance; AML legal obligations; legitimate interest in resolving disputes and preventing fraud.
Sharing: As needed with payment providers and competent authorities.
Retention: Aligned with order and AML retention periods above.
Cookies
We use essential cookies required for the website to function correctly. In particular, we store your preferred payout currency in a cookie so that exchange rates match your preference on subsequent visits. We do not store personally identifiable information in that cookie.
If we introduce analytics or marketing cookies in the future, we will update this policy and, where required, seek consent before placing non-essential cookies.
Your rights under GDPR
Subject to applicable law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (where no overriding legal retention duty applies)
- Restrict or object to certain processing
- Data portability for data you provided to us
- Lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
To exercise these rights, contact support@currencybuyback.com.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. No method of transmission over the internet is completely secure; please use strong unique passwords for any third-party accounts (such as PayPal) you use with us.
Children
Our service is intended for adults (18+) or users with parental consent as described in our Terms. We do not knowingly collect personal data from children for marketing purposes.
Changes to this policy
We may update this Privacy Policy from time to time by posting the revised version on this page. The “last updated” date below will change accordingly.
Last updated: September 2026.