Yes. You can email [email protected] to request access to, correction of, or deletion of data controlled by AllSwap. Where applicable law and the relevant conditions provide these rights, you may also object to or restrict processing or request data portability. Whether a request can be carried out in full depends on the requester's identity, the type of data, whether continued processing or retention is necessary, and applicable law. AllSwap cannot correct or delete blockchain records such as addresses, amounts, transaction hashes, or timestamps.
What data-rights requests can I submit?
According to the AllSwap Privacy Policy, users may submit data subject requests under Hong Kong's Personal Data (Privacy) Ordinance (PDPO), the EU General Data Protection Regulation (GDPR), where applicable, and other applicable legal frameworks. Common requests include:
- Access: ask whether AllSwap holds data relating to you and obtain a copy that can lawfully be provided after any necessary verification;
- Correction: correct inaccurate or incomplete information in records controlled by AllSwap;
- Deletion: ask for data to be deleted when it is no longer needed and there is no other lawful reason to retain it;
- Objection or restriction: where applicable law and the relevant conditions permit, explain the processing activity you want AllSwap to stop or restrict, and the reason and scope of your request; and
- Data portability: where the right applies and it is technically feasible, ask to receive relevant data in a usable format.
These rights are not unconditional promises that apply to every jurisdiction or data category. AllSwap may need to retain necessary records for customer-support checks, dispute handling, the protection of legal rights, or compliance with legal obligations until the applicable period expires. Records relating to an order under investigation may not be eligible for immediate deletion. An access or portability response may also exclude another person's data, internal security information, or material that the law does not require AllSwap to provide. The outcome depends on applicable law and AllSwap's formal response to the individual request.
How do I submit an access, correction, or deletion request to AllSwap?
Send the request yourself to [email protected]. Do not submit personal information through a search advertisement, an unsolicited direct message, or an upload link supplied by an unverified party. Use the following process:
- State the request type. Write “access,” “correction,” “deletion,” “objection or restriction,” or “data portability” in the subject line and message. Identify the data categories and date range concerned.
- Provide only the minimum information needed to locate the data. Depending on the request, this may include the
orderId, one-time deposit address, destination or refund address, relevant networks and assets, source-chain transaction hash (TxID), and approximate transaction time. If the request does not relate to an order, identify the date of access, page, or Cookie category concerned. - Describe the result you want. For a correction, identify the inaccurate information and provide the correct information. For deletion, specify the records held by AllSwap that you want reviewed; do not ask AllSwap to “delete every blockchain record,” because it cannot change a public ledger.
- Include a contact email address. AllSwap may use it to clarify the scope, perform necessary checks, or communicate the outcome. Retain your sent message, list of attachments, and the complete correspondence.
You may copy this template and remove fields that do not apply:
Subject: Data subject request—access/correction/deletion—order ID (if available)
Request type:
Data categories concerned:
Related orderId:
Deposit/destination/refund address:
Source-chain TxID:
Relevant date or time range:
Requested outcome:
Contact email:Do not send identity documents, your complete wallet history, or an unredacted exchange-account screenshot in the first email. To avoid disclosing order information to an impersonator, AllSwap may ask for the minimum evidence necessary to establish your relationship to the order—for example, the order ID, TxID, address, amount, time, or redacted proof of payment matching the transaction. This is a security check to verify the requester's relationship to the order, not the introduction of standard KYC for an ordinary swap. Official support does not need your private key, seed phrase, wallet password, one-time password (OTP), or remote access to your device. Refuse any such request.
Which records can a deletion request affect?
It is important to distinguish between data controlled by AllSwap, data stored locally in your browser, and public on-chain data:
| Data location | What you can do | Main limitation |
|---|---|---|
| Swap requests and status records controlled by AllSwap | Submit a deletion request for review under applicable law and retention requirements | The published maximum retention period is 12 months. Records may need to be retained for support, dispute handling, or legal compliance until the relevant period expires, after which they may be destroyed or anonymized. |
| Access logs and support correspondence | Identify these categories expressly in your request and ask AllSwap to review them | All specific retention periods have not been published. The 12-month period for order records must not be automatically applied to every log or support record. |
| Cookies stored in your browser | Clear them through your browser's privacy or site settings | Clearing language, theme, time-zone, security, or other Cookies may reset preferences or affect some security checks. |
| Public blockchain records | AllSwap cannot delete or rewrite them | Network nodes continue to retain deposit and destination addresses, amounts, TxIDs, and on-chain timestamps. Removing a web or internal copy does not erase the ledger history. |
If an address or amount in an on-chain transaction is wrong, a data correction request cannot reverse the transfer, replace the destination address, or change the record shown by a block explorer. AllSwap can review only data within its own control. It cannot promise to delete copies independently held by a public blockchain, block explorer, wallet provider, exchange, or other third-party service.
What response might I receive?
AllSwap may confirm that it has completed the entire request or only the parts it can lawfully and technically carry out. It may ask for clarification or minimum necessary verification if the scope is unclear, it cannot locate the record, or the requester's relationship to an order must be confirmed. If information remains necessary for a dispute, support, security, or legal compliance, AllSwap may explain that immediate deletion is unavailable or that the data can only be destroyed or anonymized after the retention period expires.
The AllSwap Privacy Policy says that AllSwap will respond within 30 days to a data rights request. This is a response deadline. It does not guarantee approval, immediate deletion, or completion of every approved action within 30 days. The actual handling time and outcome may depend on clarification, verification of the requester's connection to an order, or an exception under applicable law. An eligible early-deletion request will be handled within a reasonable period and subject to the applicable boundaries.
When you receive a reply, check the sender's domain and keep using the original email thread. Supply additional information only through the verified official channel. Stop if a reply requests irrelevant sensitive information, a “deletion fee,” or a transfer to a new address; find the official contact details again through the AllSwap Help Center. A data request concerns information rights. It does not cancel your responsibilities under the AllSwap Terms of Service, and it cannot change an on-chain transaction that is complete or already being processed.