NFT Blue, Space Blue,   (referred to in this privacy policy as “NFT BLUE”,( “we”, “us”, or “our”) provides   a web site location  that provides users with the opportunity to purchase, collect, and showcase physical artwork, and  digital blockchain NFT (non fungible token) artwork and NFT collectibles.

NFT BLUE is committed to protecting and respecting your privacy. This privacy policy (this “Policy”) sets out how we collect and process personal information about you when you visit our website at https://www.marketplace.nftblue.com and also at https://www.nftblue.com and also at www.spaceblue.club when you sign up to an account on our website, or when you otherwise do business, or make contact with us.  

1. What information do we collect?

A. SUMMARY

NFT BLUE collects data to enable us to operate the website  effectively, and to provide you with the best experience on the website. You provide some of this data to us directly, such as when you register to use the website, subscribe to a newsletter, respond to a survey, make an inquiry through our website, contact us for support, or contact us as a prospective user, vendor, supplier, or consultant. We get some of your data by recording how you interact with the website by, for example, using technologies like cookies. We also obtain and process data in the context of making the website available to you.

B. LEARN MORE

You have choices about the data we collect. If you are asked to provide personal data, you may decline. If you choose not to provide the data that is necessary to enable us to make the website available to you, you may not be able to sign up for or use the website. The data we collect depends on the context of your interactions with NFT BLUE, and the choices you make (including your privacy settings). The data we collect can include the following:

Email and Electronic Wallet Address. We may collect your email address and your electronic wallet address.

Device and Usage information. We may collect data about your device and how you and your device interact with NFT BLUE and our website. For example, we may collect your interactions on our website, your feature usage patterns, location data, and your interactions with us. We may also collect data about your device and the network you use to connect to our website; this may include data such as your IP address, browser type, operating system, and referral URLs.

2. What do we use your information for?

A. SUMMARY

We use the data we collect to operate our business and to make the website available to you. This includes using the data to improve our website and to personalize your experiences. We may also use this data to communicate with you to, among other things, inform you about your account, provide security updates, and give you information about the website. We may also use this data to manage your email subscriptions, improve the relevance and security of our website, respond to user inquiries, and send you periodic marketing communications about our website.

B. LEARN MORE

We use data to provide the website to you, to improve the website, and to perform essential business operations. This includes operating the website, maintaining and improving the performance of the website, developing new features, conducting research, providing customer support, and enforcing our Terms of Use. Examples of such uses include the following:

Provided the website. We use data to carry out your transactions with us and to make the website available to you. In certain cases, the website may include personalized features and recommendations to enhance your enjoyment, and automatically tailor your experience based on the data we have about you.

Technical support. 

We use data to diagnose problems, and to provide customer care and other support services.

Improve the website. We use data to continually improve the website, including system administration, system security, and adding new features or capabilities.

Business Operations. We use data to develop aggregate analyses and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business.

Promotions. We may use your data to administer contests, promotions, surveys, or other site features.

Improving Advertising Campaigns. We may use your data to improve our advertising campaigns, primarily in an effort to prevent targeting you with advertisements that are not relevant to you.

Sending Periodic Emails. We may use your data to send you periodic emails. Depending on the marketing preferences you select on your privacy dashboard, we may send you occasional marketing emails about our website, which you can unsubscribe from at any time using the link provided in the message.

Communications. We use the data we collect to communicate with you and to personalize our communications with you. For example, we may contact you to discuss your account, to remind you about features of the website that are available for your use, to update you about a support request, or to invite you to participate in a survey. Additionally, you can sign up for email subscriptions and choose whether you want to receive marketing communications from us.

3. How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. We offer the use of a secure server. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our gateway provider database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential

4. How do we ensure that our processing systems remain confidential, resilient, and available?

A. SUMMARY

We have implemented a variety of measures to ensure that our processing systems remain confidential, resilient, and available. Specifically, we have implemented processes to help ensure high availability, business continuity, and prompt disaster recovery. We are committed to maintaining strong physical and logical access controls and conduct regular penetration testing to identify and address potential vulnerabilities.

B. LEARN MORE

High Availability. Each part of the website utilizes properly-provisioned, redundant servers (e.g., multiple load balancers, web servers, replica databases) in case of failure. We take servers out of operation as part of regular maintenance, without impacting availability.

Business Continuity. We keep encrypted backups of data daily in multiple regions on Google Cloud Platform. While never expected, in the case of production data loss (i.e., primary data store loss), we will restore organizational data from these backups.

Disaster Recovery. In the event of a region-wide outage, we will bring up a duplicate environment in a different Google Cloud Platform region. Our operations team has extensive experience performing full region migrations.

Physical Access Controls.  The website is hosted on Google Cloud Platform, whose data centers feature a layered security model, including extensive safeguards such as custom-designed electronic access cards, alarms, vehicle access barriers, perimeter fencing, metal detectors, and biometrics. NFT BLUE employees do not have physical access to these data centers, servers, network equipment, or storage.

Logical Access Controls. Only designated and authorized operations team members have access to configure the infrastructure on an as-needed basis behind a two-factor authenticated virtual private network. Specific private keys are required for individual servers, and keys are stored in a secure and encrypted location.

5. Do we use cookies?

A. SUMMARY

Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser (if you allow) that enables the sites or service provider's systems to recognize and capture and remember certain information. You can choose to disable cookies, but if you do, your ability to use or access certain parts of the website may be affected.

B. LEARN MORE

We use cookies and other similar identifiers to understand and save your preferences for future visits, to advertise to you on other sites, and to compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

You may refuse to accept cookies by activating the settings on your browser that allows you to refuse the setting of cookies. You can find information on popular browsers and how to adjust your cookie preferences at the following websites:

• Microsoft Internet Explorer

• Mozilla Firefox

• Google Chrome

•  Safari

However, if you choose to disable cookies, you may be unable to access certain parts of our website. A banner asking you to accept our cookie policy will be displayed upon your first visit to our website (or after the first visit to delete your cookies). Unless you have adjusted your browser settings so that it will refuse cookies and/or you have not accepted our cookies policy, our system will issue cookies when you log in to our site.

Our web pages may contain electronic images known as web beacons (also called single-pixel gifs) that we use to help deliver cookies on our websites and to count users who have visited those websites. We may also include web beacons in our promotional email messages and newsletters to determine whether and when you open and act on them.

In addition to placing web beacons on our own websites, we sometimes work with other companies to place our web beacons on their websites or in their advertisements. This helps us to develop statistics on how often clicking on an advertisement on a NFT BLUE website results in a purchase or other action on the advertiser's website.

Finally, our website may contain web beacons or similar technologies from third-party analytics providers that help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across websites or other products.

6. Do we disclose any information to outside parties?

A. SUMMARY

We will share your personal data with your consent or as necessary to make the website available to you. We also share your data with the NBA and the NBA Players’ Association; vendors working on our behalf; when required by law or to respond to legal processes; to protect our customers; to protect lives; to maintain the security and integrity of our website; and to protect our rights and our property.

B. LEARN MORE

We will share your personal data with your consent or as necessary to make the website available to you. We share your data with our rewards partners (reward partners are limited to companies that offer incentives to our customers) since they are some of the major rewards providers for the website. You will be asked to agree to their terms of service and privacy policies as well when you sign up to use the website.  You have the right to refuse, but if you do refuse, you may not be able to complete your registration or use the website. 

We also share personal data with vendors and agents working on our behalf for the purposes described in this Policy. For example, companies we have hired to provide cloud hosting services, off-site backups, and customer support may need access to personal data to provide those functions. In such cases, these companies are required to abide by our data privacy and security requirements and are not allowed to use the personal data they receive from us for any other purpose.  If you have any questions or concerns about any of our vendors, feel free to contact us at support@nftblue.com

We may disclose your personal data as part of a corporate transaction such as a corporate sale, merger, reorganization, dissolution, or similar event. Finally, we will access, transfer, disclose, and/or preserve personal data when we have a good faith belief that doing so is necessary to:

(1) comply with applicable  law or respond to valid legal processes, judicial orders, or subpoenas;

(2) respond to requests from public or governmental authorities, including for national security or law enforcement purposes;

(3) protect the vital interests of our users, customers, and other third parties (including, for example, preventing spam or attempts to defraud users of our products, or to help prevent loss of life or serious injury to anyone);

(4) operate and maintain the security and integrity of our website, including to prevent or stop an attack on our computer systems or networks;

(5) protect the rights, interests or property of NFT BLUE or third parties;

(6) to prevent or investigate possible wrongdoing in connection with the website; or

(7) enforce our Terms of Use.

You may use and share aggregated non-personal information with third parties for marketing, advertising, and analytics purposes. We do not sell or trade your personal information with third parties.

7. How to Access and Control Your Personal Data

A. SUMMARY

You can view, access, edit, delete, or request a copy of your personal data for many aspects of the website via your user dashboard. You can also make choices about NFT BLUE’s collection and use of your data. You can always choose whether you want to receive marketing communications from us. You can also opt out from receiving marketing communications from us by using the opt-out link on the communication, or by visiting your user dashboard.

B. LEARN MORE

Data Access. You can access your personal data on your account’s user dashboard.

Data Portability. You can request a copy of your personal data by submitting an email to us at support@nftblue.com and including “Please send me a copy of my personal data” in the “Subject” line. NFT BLUE will verify your ability to access that email, then send you a digital export of the data we hold that is associated with your email address. We will use reasonable efforts to respond to your request within 30 days of the receipt of verification of your request. NFT BLUE may be limited in its ability to send certain personal data to you (e.g., the identification of your electronic wallet).

Data Erasure. You may request that NFT BLUE delete your personal data by submitting an email to us at support@nftblue.com and including “Please delete my personal data” in the “Subject” line. NFT BLUE will verify your ability to access that email, then delete the personal data associated with your email address. We will use reasonable efforts to respond to your request within 30 days of the receipt of verification of your request.

Data Correction. You can modify your personal data via your account’s user dashboard. Note that since some of the data we collect is specific to you – for example, your electronic wallet address – you may not be able to modify this data without needing to create a new user profile.

Your Communications Preferences. You can choose whether you wish to receive marketing communications from us. If you receive marketing communications from us and would like to opt out, you can do so by following the directions in that communication. You can also make choices about your receipt of marketing communications by signing into your account, and viewing and managing your communication permissions in your account’s user dashboard, where you can update contact information, manage your contact preferences, opt out of email subscriptions, and choose whether to share your contact information with NFT BLUE and our partners. Alternatively, you can request that we withdraw your consent to use your personal data by submitting an email to us at vip@nftblue.com and including “Please withdraw my consent for marketing communications” in the “Subject” line. NFT BLUE will verify your ability to access the system, then update our systems to remove your email address from the system we use to send marketing communications. We will use reasonable efforts to respond to your request within 30 days of our receipt of verification of the request. Please note that these choices do not apply to mandatory communications that are part of the website, or to surveys or other informational communications that have their own unsubscribe method.

8. Third Party Links

Occasionally, at our discretion, we may include or offer third party products or services on our website or through our website. If you access other websites using the links provided, the operators of these websites may collect information from you that will be used by them in accordance with their privacy policies. These third party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

9. Where we Store and Process Personal Data; International Transfers

Personal data collected by NFT BLUE may be stored and processed in the United States, Canada, or in any other country where NFT BLUE or its affiliates, subsidiaries or service providers maintain facilities. The storage location(s) are chosen in order to operate efficiently, to improve performance, and to create redundancies in order to protect the data in the event of an outage or other problem. We take steps to ensure that the data we collect is processed according to the provisions of this Policy and the requirements of applicable law wherever the data is located.

We transfer personal data from the European Economic Area and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we engage in such transfers, we use a variety of legal mechanisms, including contracts, to help ensure your rights and protections travel with your data. To learn more about the European Commission’s decisions on the adequacy of the protection of personal data in the countries where NFT BLUE processes personal data, please visit: ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm

10. Data Retention

A. SUMMARY

We may retain your personal information as long as you continue to use the website, have an account with us, or for as long as is necessary to fulfill the purposes outlined in this Policy. You can ask to close your account by contacting us as described above, and we will delete your personal information on request. We may, however, retain personal information for an additional period as is permitted or required under applicable  laws, for legal, tax, or regulatory reasons, or for legitimate and lawful business purposes.

B. LEARN MORE

We will retain your personal data for as long as necessary to make the website available to you, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different types of data, actual retention periods can vary significantly. The criteria we use to determine the retention periods include:

• How long is the personal data needed to make the website available to you and/or operate our business? This includes such things as maintaining and improving the performance of the website, keeping our systems secure, and maintaining the website's business and financial records. This is the general rule that establishes the baseline for most data retention periods.

• Is there an automated control, such as in your user dashboard, that enables you to access and delete the personal data at any time? If there is not, a shortened data retention time will generally be adopted.

• Is the personal data of a sensitive type? If so, a shortened retention time would generally be appropriate.

• Has the user provided consent for a longer retention period? If so, we will retain the data in accordance with your consent.

• Is NFT BLUE subject to a legal, contractual, or similar obligation to retain the data? Examples can include mandatory data retention laws in the website’s jurisdiction, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation.

11. Changes to our Privacy Policy

We will update this Policy when necessary to reflect customer feedback and changes to our website. When we post changes to this statement, we will revise the "last updated" date at the top of the statement. If there are material changes to the Policy or in how NFT BLUE will use your personal data, we will notify you either by prominently posting a notice of such changes before they take effect or by sending you a notification directly. We encourage you to periodically review this privacy statement to learn how NFT BLUE is protecting your information.

12.  California Resident Rights

If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of your personally-identifiable data will control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply  to you, please contact us at support@nftlblue.com.

Exercising Your Rights

Please follow the instructions and requirements described below when submitting your requests. Requests that fail to comply with any of these instructions and requirements may result in delayed or no response.

To exercise the rights described below as a California resident, you must send us a request (1) that provides sufficient information to allow us to verify that (i) you are the person about whom we have collected personal data, (ii) you, as the requester, are the same person as the data subject for whose information you’re requesting (or such person’s parent/guardian), (2) that describes your request in sufficient detail to allow us to understand, evaluate and respond to it, (3) that declares, under the penalty of perjury, that you’re exercising your rights under the CCPA as a California resident solely for lawful purposes, and (4) in a way that does not and would not unduly burden or otherwise abuse our data request system and/or our website. Each request that meets all of these criteria, and which is confirmed via email verification, will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will use commercially reasonable efforts to determine whether a request may be for harmful, fraudulent, deceptive, threatening, harassing, defamatory, obscene, or otherwise objectionable purposes, and we reserve the right not to respond to such request. We will only use your personal data provided in a Valid Request to verify your identity and complete your request. You do not need an account on the website to submit a Valid Request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request using the following methods:

• Email us at: support@nftblue.com

You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.

Access

You have the right to request certain information about our collection and use of your personal data over the past 12 months. In response to a Valid Request, we will provide you with the following information:

• The categories of personal data that you requested and that we have collected about you.

• The categories of sources from which that personal data was collected.

• The business or commercial purpose for collecting your personal data.

• The categories of third parties with whom we have shared your personal data.

• The specific pieces of Personal Data that you explicitly requested and that we have collected about you.

If we have disclosed your personal data to any third parties for a business purpose over the past 12 months, we will identify the categories of personal data shared with each category of third party recipient. 

Deletion

You have the right to request that we delete the personal data that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your personal data to provide you with access to the website or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request. 

We Do Not Sell Your Personal Data

In this section, we use the term ‘sell’ as it is defined in the CCPA. We do not sell your personal data. 

We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA.

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our products or services as allowed by applicable  data privacy laws (including the CCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of personal data that we receive from you. 

13. How to Contact Us

If you have a technical or support question, please contact support@nftblue.com 

If you have a privacy concern, complaint, or a question for the Data Protection Officer of NFT BLUE, please contact us by sending us an email at dpo@nbatopshot.com.  We will respond to questions or concerns within 30 days.

Unless otherwise stated, NFT BLUE is a data controller for personal data we collect through the website subject to this statement. Our address is 8383 Wilshire Blvd, Beverly Hills, CA 90210