Privacy notice
Your details.
A narrow purpose.
Last updated 2 September 2026.
What we collect
When you submit an order request, we collect your name, email, phone number, shipping address, selected device, quantity, whether you are new to crypto, an optional broad USD investment or trading range, and your consent record. Choosing “Prefer not to say” is available for the financial-range question.
Why we use it
We use these details to review the request, assess intended shipping availability, contact you about confirmation and next steps, and understand whether future setup information should be aimed at new or experienced users. The financial range is not used to provide financial advice, assess credit or change order priority.
How it is protected
The submitted payload is encrypted with AES-256-GCM before it is written to server storage. The encryption key is stored separately from the order database. Decrypted records are available only through a server-side administrative command requiring authorised AWS access. The site never asks for a seed phrase, private key, wallet address, recovery file or exact balance.
Cookies and technical records
A short-lived, secure, HttpOnly cookie protects the form from cross-site submission. It is not used for advertising. The host may also create security and access logs containing request time, path, browser information and IP address. A keyed, non-reversible IP hash is temporarily used for submission-rate control.
Retention
Unconfirmed and cancelled requests are automatically removed after 90 days. If a request becomes a completed transaction, necessary contract, warranty, fraud-prevention and accounting records may be retained for the period required by applicable law.
Hosting and service providers
The service is hosted on Amazon Web Services infrastructure. We do not run advertising trackers or sell submitted information. Additional payment or delivery providers will be identified before their services are used.
Your choices
You may choose “Prefer not to say” for the financial range. To request access, correction or deletion of an unconfirmed request, use the official support route on Palfu.com and provide the order reference. Identity verification may be required before a record is disclosed or changed.