Security notice: official Secwall emails only come from the @secwall.co.uk domain.
SecwallOn-chain forensics

Data protection

Privacy policy

People who write to us have often already been victims of a breach of trust. We therefore limit data collection to what is strictly necessary and explain here, without jargon, what we keep and why.

1. Data controller

  • SWF GROUP LTD (trading as Secwall), a company registered in England & Wales under number 16819219, with its registered office at 167-169 Great Portland Street, 5th Floor, London W1W 5PF, is responsible for the processing described below.
  • Data protection contact: contact@secwall.co.uk.

2. Data collected

  • Case form: name or alias, email address, country, estimated amount, description of the facts and any attachments you choose to send.
  • Site messaging: content of messages exchanged with our investigators and technical conversation identifier.
  • Technical data: connection logs, truncated IP address and security information required to protect the service.
  • We never ask for a private key, recovery phrase, wallet password or authentication code.

3. Purposes and legal bases

  • Analysing your request and responding to it — performance of pre-contractual measures at your request.
  • Carrying out the investigation, producing the report and following up the case — performance of a contract.
  • Securing the site and preventing misuse — legitimate interest.
  • Complying with our accounting and legal obligations — legal obligation.

4. Confidentiality of cases

  • Cases are accessible only to assigned investigators, via named, authenticated accounts.
  • Exchanges are encrypted in transit and stored on European infrastructure.
  • No identifying information is published, resold or used for marketing purposes.
  • Your identity is disclosed to a third party (platform, bank, authority) only with your consent or under a legal request.

5. Recipients

  • Authorised Secwall staff bound by a confidentiality clause.
  • Technical subcontractors (hosting, email sending) acting on instruction within the European Economic Area or the United Kingdom.
  • Judicial or administrative authorities when a lawful request is made to us.

6. Retention periods

  • Request with no follow-up: 12 months from the last exchange.
  • Accepted case: 5 years after closure, so a report can be reissued if a procedure requires it.
  • Technical security logs: 12 months maximum.
  • Early deletion is possible on request, unless a legal retention obligation applies.

7. Your rights

  • Under the UK GDPR and, where applicable, the EU GDPR, you have a right of access, rectification, erasure, restriction, objection and portability.
  • These rights can be exercised at contact@secwall.co.uk; you will receive a response within 30 days.
  • You may lodge a complaint with the ICO (Information Commissioner's Office, United Kingdom) or, if you reside in the EU, with your local authority such as the CNIL (France), the APD (Belgium), the FDPIC (Switzerland) or the CNPD (Luxembourg).

8. Cookies and audience measurement

  • The site only uses cookies strictly necessary for its operation and session security.
  • No advertising cookie or third-party profiling tracker is deposited.

9. International transfers

  • Case data is hosted in the United Kingdom and/or the European Union.
  • Should an international transfer be necessary, it would be governed by standard contractual clauses (UK or EU) and you would be informed.
For any request regarding your data, write to contact@secwall.co.uk or use the contact page. See also our legal notice.