Privacy Policy
Last updated: March 2026
Effective date: March 2026
Crypto Fund Research (“we,” “us,” or “our”) is operated by The Blue Heron Group LLC, a company based in San Francisco, California. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at cryptofundresearch.com (“the Site”), purchase our products, or interact with our email communications.
By using the Site or purchasing our products, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Site.
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
Information We Collect
Information You Provide Directly
We collect personal information that you voluntarily provide to us, including:
Account and purchase information. When you purchase a product (Crypto Fund List, Performance Database, or Corporate Plan), we collect your name, email address, billing address, and payment information. Payment card details are processed directly by our payment processor (Stripe) and are not stored on our servers.
Email opt-in information. When you sign up for a free demo, download a free sample, or subscribe to our email communications, we collect your email address and, optionally, your name.
Contact form submissions. When you contact us via our website, we collect your name, email address, and the contents of your message.
Fund submission information. If you are a fund manager submitting your fund’s information to our database, we collect the details you provide (fund name, contact information, fund type, AUM, and related data).
Information We Collect Automatically
When you visit the Site, we automatically collect certain technical information, including:
Usage data. Pages visited, time spent on pages, links clicked, referring URLs, and other browsing behavior on our Site.
Device and browser data. IP address, browser type and version, operating system, screen resolution, and device type.
Cookie data. We use cookies and similar technologies as described in the Cookies section below.
Information We Receive from Third Parties
We may receive information about you from third-party services we use, including analytics providers and payment processors, as described in the Third-Party Services section below.
How We Use Your Information
We use the information we collect for the following purposes:
To provide and deliver our products. Processing purchases, granting access to the Performance Database, delivering the Crypto Fund List download, and managing your account and subscription.
To communicate with you. Sending transactional emails (order confirmations, subscription renewals, password resets), responding to your inquiries, and providing customer support.
To send marketing communications. If you opt in by downloading a free sample, signing up for a demo, or making a purchase, we may send you email sequences with product information, tips, industry insights, and promotional offers. You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any email.
To improve our products and website. Analyzing usage patterns, diagnosing technical issues, testing new features, and understanding how visitors use the Site.
To protect our business. Detecting and preventing fraud, enforcing our Terms and Conditions, and complying with legal obligations.
To advertise. Serving targeted advertisements through third-party advertising platforms based on your interactions with our Site. You can opt out of targeted advertising through your browser settings or the advertising platform’s opt-out mechanisms.
Email Marketing
When you provide your email address through one of our opt-in forms (free sample download, performance database demo, or at checkout), you will be added to our email marketing platform (Kit, formerly ConvertKit) and may receive automated email sequences related to the product or offer you signed up for.
What to expect. Depending on how you opted in, you may receive a series of emails over several weeks that include product tips, industry insights, and information about our paid products. If you make a purchase, you will receive onboarding emails specific to your product.
Unsubscribe. Every marketing email contains an unsubscribe link. Clicking it will immediately remove you from future marketing emails. Transactional emails related to your account or purchases (such as order confirmations and subscription renewal notices) will continue as necessary.
Purchase-triggered emails. When you make a purchase, your email address and purchase information are shared with Kit to trigger product-specific onboarding emails and to ensure you stop receiving promotional emails for a product you have already purchased.
Third-Party Services
We may use the following third-party services that may collect or process your data. These include, but are not limited to:
Stripe (stripe.com) — Payment processing. When you make a purchase, your payment card information is transmitted directly to Stripe. We do not store your full credit card number on our servers. Stripe’s privacy policy: https://stripe.com/privacy
Kit (formerly ConvertKit) (kit.com) — Email marketing platform. Stores your email address, name (if provided), tags indicating how you signed up, and purchase history for the purpose of sending email communications. Kit’s privacy policy: https://kit.com/privacy
Google Analytics 4 — Website analytics. Collects anonymized usage data including pages visited, session duration, traffic sources, and demographic information. We use Google Tag Manager to manage this and other tracking scripts. Google’s privacy policy: https://policies.google.com/privacy
Google Tag Manager — Tag management system that deploys analytics and advertising scripts on our Site. Does not collect personal data itself but facilitates data collection by other services.
WooCommerce — Ecommerce platform running on our WordPress site. Stores order data, account information, and subscription details in our database. WooCommerce is self-hosted on our servers.
Wordfence — Security plugin that may log IP addresses and login attempts for the purpose of preventing unauthorized access and brute force attacks.
Cloudinary — Image hosting service used to serve certain images on the Site (such as fund personnel photos). May collect standard web server log data.
Hummingbird Pro / Smush Pro (WPMU Dev) — Performance optimization tools. Hummingbird may monitor site uptime and performance. Smush processes images through WPMU Dev’s servers for compression. WPMU Dev’s privacy policy: https://wpmudev.com/privacy/
We do not sell your personal information to any third party.
Cookies and Tracking Technologies
What Are Cookies
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to site owners.
Cookies We Use
Essential cookies. Required for the Site to function properly. These include cookies that enable you to log in, maintain your shopping cart, and complete purchases. These cannot be disabled.
Analytics cookies. We use Google Analytics 4 (via Google Tag Manager) to understand how visitors use our Site. These cookies collect information such as pages visited, time on site, and traffic source. This data is aggregated and anonymized. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Marketing cookies. We may use cookies to track the effectiveness of our advertising campaigns and to serve relevant advertisements on other platforms. These cookies may be set by third-party advertising services.
Preference cookies. These cookies remember choices you make (such as dismissing a notification or setting a filter preference) to provide a more personalized experience.
Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies may prevent parts of the Site from functioning properly.
When you first visit our Site, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies at that time.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.
Account and purchase data. Retained for as long as your account is active, plus 7 years after your last purchase for tax and accounting purposes.
Email subscriber data. Retained until you unsubscribe. Upon unsubscribing, your email address is removed from active marketing lists. Some data may remain in our email platform’s records for compliance purposes.
Analytics data. Google Analytics data is retained according to Google’s data retention settings, which we have configured to 14 months.
Server logs and security data. IP addresses and security-related logs are retained for up to 90 days.
Data Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure Socket Layer (SSL/TLS) encryption on all pages of our Site
- Firewall and intrusion detection via Wordfence security plugin
- Secure payment processing through Stripe (PCI DSS compliant)
- Regular security scans and monitoring
- Restricted access to personal data on a need-to-know basis
- Automated backups of our database
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Rights
All Users
Regardless of where you are located, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete personal information
- Delete your personal information (subject to legal retention requirements)
- Unsubscribe from marketing emails at any time
- Request information about what data we have collected about you
To exercise any of these rights, contact us at info@cryptofundresearch.com. We will respond within 30 days.
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
Right to delete. You may request that we delete your personal information, subject to certain exceptions (such as completing a transaction or complying with a legal obligation).
Right to opt out of sale or sharing. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To make a request, email us at info@cryptofundresearch.com with the subject line “CCPA Request.” We may need to verify your identity before processing your request.
European Economic Area, UK, and Swiss Residents (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
Legal basis for processing. We process your personal data on the following legal bases:
- Contract: To provide products and services you have purchased
- Consent: For email marketing (you may withdraw consent at any time)
- Legitimate interest: For analytics, security, and improving our products
- Legal obligation: For tax and accounting record-keeping
Additional rights. In addition to the rights listed above, you have the right to:
- Data portability — Receive your personal data in a structured, machine-readable format
- Restriction of processing — Request that we limit how we use your data
- Object to processing — Object to our use of your data for direct marketing or based on legitimate interest
- Lodge a complaint — File a complaint with your local data protection authority
International transfers. Your data may be transferred to and processed in the United States, where our servers are located. By using our Site, you consent to this transfer. We rely on standard contractual clauses and other lawful transfer mechanisms where applicable.
Data controller. The Blue Heron Group LLC is the data controller for the purposes of GDPR. Contact us at info@cryptofundresearch.com.
Children’s Privacy
Our Site and products are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@cryptofundresearch.com.
Links to Other Websites
Our Site may contain links to third-party websites, including fund websites, social media profiles, and partner services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: info@cryptofundresearch.com
Mail:
The Blue Heron Group LLC
Crypto Fund Research
San Francisco, CA
United States