Privacy
Privacy notice
This notice explains how Twenty One Capital handles personal information in connection with this website and communications sent to us.
On this page
In plain words
- No accounts, no forms, no sign-up. You can read every page without telling us who you are. Email alerts are a subscription on our investor relations site, run for us by Q4; the address you give there is held by that service.
- The providers that host and protect the Site handle each request, and their servers log request data such as your IP address.
- Your browser keeps two preferences set by our pages: the theme you pick and that you have closed the notice bar.
- If you email us, we keep the correspondence to respond and as a business record.
- Questions or requests about your data: [email protected].
Who is responsible
Twenty One Capital, Inc., 111 Congress Avenue, Suite 500, Austin, Texas 78701 (Twenty One, we, us) publishes twentyonecapital.com (the Site) and is responsible for the personal information described in this notice. You can reach us at [email protected].
This notice covers the Site and the communications you send us about it. It does not cover our investor relations pages at investors.xxi.money, which are hosted for us by a third-party investor relations platform under its own privacy notice, or the other websites we link to. If you hold our shares, your broker or our transfer agent holds your account details under their own notices.
What we collect and why
The Site is a set of informational pages. It has no visitor accounts, sign-in, search box or comment facility, and our pages do not include analytics or advertising services. We do not ask for your name, email address or any other detail to read it. The personal information we handle in connection with the Site is described below.
Request data handled by our providers
When your browser requests a page, image, script or font, the request is handled by the hosting and security providers that serve the Site on our behalf. Like any web server, their systems receive, and may record in their logs, your IP address, the date and time, the address of the page or file requested, the page you came from if your browser sends it, the browser and operating system your browser reports, and the response code. These records are used to deliver the Site, to protect it against attack and abuse and to diagnose faults.
- Why
- To deliver the Site, keep it secure and diagnose faults.
- Legal basis
- Where the GDPR applies, our legitimate interests in operating and securing the Site (Article 6(1)(f)).
- Kept for
- The period set by the provider's retention schedule for log data. See How long we keep it.
- Seen by
- The providers. Us, when investigating a fault or abuse.
Email you send us
If you write to us, for example to [email protected], we receive your email address, whatever you put in the message and any attachments. We use them to respond, to handle your request and, where the correspondence concerns the company, as part of our business records. If you send us a job application, we use it to consider you for the role and handle it under the notice that accompanies the posting.
- Why
- To respond to you and keep a record of correspondence with investors, the public and candidates.
- Legal basis
- Where the GDPR applies, our legitimate interests in communicating with the people who write to us (Article 6(1)(f)), and compliance with our legal obligations where a message concerns one (Article 6(1)(c)).
- Kept for
- As long as the matter is open, then under our records retention obligations. See How long we keep it.
- Seen by
- The people who handle the mailbox, our email provider and, where a matter requires it, our advisers.
Email alerts
The Investor email alerts page sends you to the sign-up form on our investor relations site, investors.xxi.money, which Q4 Inc. hosts and operates for us. The email address and topics you enter there are collected by that service on our behalf, under the privacy notice shown on that site, to send the alerts you chose until you unsubscribe there. This Site takes no address itself and stores nothing from the referral.
Content from other providers and links
Our pages are built to be served from our own domain, with fonts, scripts, stylesheets and images hosted with the Site, rather than loading content from font services, analytics services, social networks or video platforms. The hosting and security providers that deliver the Site process your requests as described above.
One exception, and only when JavaScript is on. The Home page's figure notes show the latest Bitcoin price and refresh it about once a minute by asking mempool.space, the block explorer named below, for its current price. That request carries your IP address and your browser's usual request headers to the explorer's operator under its privacy policy. Nothing else is sent, nothing is stored on your device, and without JavaScript no request is made. The XXI share price shown beside it is fetched from our own domain, which obtains it from a market-data source; your browser does not contact that source.
The Site links to other websites: the SEC’s EDGAR system (sec.gov), the New York Stock Exchange (nyse.com), our investor relations pages (investors.xxi.money) and a third-party Bitcoin block explorer (mempool.space). We do not control those sites, and their privacy notices apply once you follow a link. The Site is configured to ask your browser not to send a referrer when you leave, so the site you arrive at is not told which page you came from.
Who receives your data
- Our hosting and security providers, which serve and protect the Site on our behalf and hold the request logs.
- Q4 Inc., which hosts our investor relations site and runs the email alerts you subscribe to there.
- Our email provider, which stores correspondence sent to our mailboxes.
- Our professional advisers, such as lawyers, auditors and the providers of our investor relations services, where a request or correspondence concerns their work.
- Authorities, where we are legally required to disclose information, or to protect the Site and its users against fraud or attack.
We do not sell personal information collected through the Site, and we do not share it for advertising.
Where your data is processed
We are a United States company, and our providers process data in the United States and in the locations from which they serve the Site to visitors. The law there may protect personal information differently from the law where you live. Where the law requires safeguards for a transfer of your personal information, we rely on the safeguards available under applicable law, such as standard contractual clauses in our providers' terms. You can ask us about the safeguards that apply to a particular transfer.
How long we keep it
- Request logs: retained by the provider for the period set by its retention schedule for log data.
- Items in your browser: until you clear them. The bar reappears when the notice changes. The stored
xxi-noticeacknowledgment remains until it is replaced or you clear browser storage. - Email: for as long as needed to deal with the matter, then in line with our records retention obligations as a public company. Correspondence that is a corporate record is kept for as long as the law requires.
- Email alert subscriptions: held by Q4 on our investor relations site until you unsubscribe there; this Site keeps none.
Your rights
Depending on where you live, you may have the right to ask us for access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable form and to withdraw consent where processing relied on it. Where the EU GDPR or UK GDPR applies to our processing of your personal information, you may exercise the rights provided by that law and complain to the relevant data-protection authority. Where the UK GDPR applies, you may also make a complaint directly to us using the contact details below. Where Swiss data protection law applies, you may have corresponding rights. Where a US state consumer privacy law applies to our processing of your personal information, you may have rights under that law, including, where applicable, rights to access, correct or delete your personal information, to opt out of certain uses of it and not to be discriminated against for exercising those rights. You can exercise any applicable rights using the contact details below.
To exercise a right that applies to you, write to [email protected]. We respond within the period the applicable law requires and may ask you to confirm your identity so that we do not release information to the wrong person.In practice, the personal information we are likely to hold about a visitor is email you have sent us.
We do not sell personal information collected through the Site or share it for cross-context behavioural advertising, and the Site itself makes no automated decisions about visitors.
Children
The Site is not directed at children under 16 and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, write to us and we will delete it.
Security
The Site is served over HTTPS with security headers that limit how its pages can be framed and where they can load content from. Correspondence is held in our business email systems, with access limited to the people who need it. No system is completely secure, and we review these measures as the Site and the services behind it change.
Changes to this notice
When we change this notice, we post the revised version here with a new date at the top. The notice bar at the foot of each page reappears when that date changes, so that visitors see there is something new. For a material change we will say so at the top of this page.
Contact
Questions and requests about this notice or your personal information: [email protected], or by mail to Twenty One Capital, Inc., 111 Congress Avenue, Suite 500, Austin, Texas 78701.