fidelity digital assets fidelity digital assets
Get in Touch
youtube icon youtube icon linkedin icon linkedin icon

Privacy Policy

 

Last updated: January 1, 2025

 

Our Commitment to Privacy

Fidelity Digital Asset Services, LLC and Fidelity Digital Assets, Ltd. ("Fidelity Digital Assets"), subsidiaries of FMR LLC, recognize the importance of maintaining the privacy of your personal information.

This Privacy Policy explains how we collect, use, and disclose personal information and other information about you in connection with the current, prospective, or past business relationship you or the firm you represent or are associated with has or had with Fidelity Digital Assets. When you provide personal information about another individual other than yourself, you represent that you have valid authority to do so and have obtained all consents from such individual necessary to permit the collection, processing, use, and disclosure by us of their personal information, and you must make that individual aware of all matters listed in this Policy.

As used in this Privacy Policy, “personal information” means information about an individual that is collected or maintained for business purposes and by which the individual can be identified. Please note that information by which an individual cannot be identified (for example, anonymous, de-identified, or aggregate information) is not considered personal information and therefore is not subject to this Privacy Policy.

How and why we obtain and use personal information

We obtain and use personal information about you to service, maintain, and protect your account; process transactions in your account; respond to inquiries from you or your representative; develop, offer, and deliver products and services; operate and manage our business; and fulfill legal and regulatory requirements including in reliance on legitimate interest and other similar exemptions. Fidelity Digital Assets collects public and non-public personal information about you from various sources. Some examples include:

  • You or your representative on applications or forms (for example, when you interact with our customer service staff, and when you visit our websites or use our applications)
  • Transactional activity in your account (for example, trading history and balances)
  • Other interactions with Fidelity Digital Assets (for example, discussions with our customer service staff, including telephone or chat, information you enter into our websites, or when you enroll in our authentication services)
  • Information from other third-party services (for example, to verify your identity and to better understand your product and service needs)
  • Other sources with your consent or with the consent of your representative (for example, from other institutions if you transfer assets into Fidelity Digital Assets)
  • The personal information we obtain and use could include details such as:
    • Your name, email address, telephone number, address, identification numbers such as national insurance number, banking account details, date of birth, voice biometrics, voice recordings, location information, employment information, gender, IP address, language, marital status, dependents, beneficiaries, and shareholders.

How we protect information about you

We implement and maintain physical, administrative, technical, and organizational measures designed to protect personal information, and we regularly adapt these controls to respond to changing requirements and advances in technology.

At Fidelity Digital Assets, we restrict access to personal information to those who require it to develop, support, offer, and deliver products and services to you and to operate our business.

How we share information about you with third parties

Fidelity Digital Assets does not share or sell personal information about our customers with unaffiliated third parties for use in marketing their products and services. We may share personal information with the following entities:

  • Unaffiliated service providers (for example, marketing service providers and other entities) that may provide services at our direction,
  • Government agencies, other regulatory bodies, and law enforcement officials (for example, for tax purposes or for reporting suspicious transactions),
  • Other third-parties, with your consent or as directed by your representative (for example, if you request to transfer assets from another financial institution),
  • Other organizations as permitted or required by law (for example for fraud prevention or to respond to a subpoena),
  • In connection with corporate business transactions (such as a merger or sale of a business).

Our service providers are obligated to keep the personal information that we share with them confidential and use it only to provide those services specified by Fidelity Digital Assets.

If you conduct business with Fidelity Digital Assets through your investment professional, we may exchange information we collect with your investment professional or with others they may authorize.

How we share information about you with our affiliates

We may share information about you, including personal information, with various affiliates that are providing services to us or to you for use in their businesses.

How long we hold your information

The retention periods for data elements vary depending on the nature of the data element and the purposes for which it is collected and used. Our retention period is set based on the following criteria: (1) the length of time that the data is needed for the purposes for which it was created or collected, (2) the length of time the data is needed for other operational or record retention purposes, (3) the length of time the data is needed in connection with our legal, compliance and regulatory requirements, legal defense and legal holds, (4) how the data is stored, (5) whether the data is needed for security purposes and fraud prevention, and (6) whether the data is needed to ensure the continuity of our products and services.

For residents of the European Economic Area and United Kingdom

Disclosing your personal information may include transferring personal information to countries other than where you reside, and those countries may have different data protection regimes. If you are located in the European Economic Area (the "EEA") or the United Kingdom (“UK”) this may include countries outside of the EEA and UK. Some of these countries are recognized by the European Commission or UK as providing an adequate level of protection (the full list of these countries for the EEA is available here and the UK Information Commissioner’s opinions are available at Information Commissioner's Opinions on Adequacy | ICO). As for transfers to other countries, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission and the UK International Data Transfer Agreement or Addendum as appropriate, to protect your information.

Your digital privacy

When you interact with us by using our websites, online services or applications (including mobile apps) that are owned and controlled by Fidelity Digital Assets ("our digital offerings"), or via electronic communications, we manage personal information in accordance with all of the practices and safeguards described in this policy.

When you use or interact with us via our digital offerings, or interact with us via electronic communications, we (or our service providers on our behalf) may automatically collect technical and navigational and location information, such as device type, browser type, Internet protocol address, pages visited, and average time spent on our digital offerings. We use this information for a variety of purposes, such as maintaining the security of your session, facilitating site navigation, improving the design and functionality of our digital offerings and electronic communications, and personalizing your experience. Additionally, the following policies and practices apply when you are online:

Cookies and similar technologies

Please refer to our Cookie Policies: https://www.fidelitydigitalassets.com/cookie-policy and https://digitalassets.fidelity.com/assets/documents/fdacookiepolicy.pdf.

Advertising on non-Fidelity Digital Assets Digital Offerings

Fidelity Digital Assets also advertises our products and services on digital offerings not affiliated with Fidelity Digital Assets and we contract with third-party advertising companies to display these ads. These third-party advertising companies may use cookies and similar technologies to collect technical and web navigational information, such as device type, browser type, Internet protocol address, and pages visited.

Fidelity Digital Assets and these third-party online advertising companies may use the data collected, along with other information we have about you and your Fidelity Digital Assets relationships, to serve relevant ads to you. The advertisements may be relevant to your interests, as determined by your activity on Fidelity Digital Assets and non-Fidelity Digital Assets websites. These advertisements are known as "interest-based advertisements".   You may opt-out of receiving interest-based advertisements from online advertising companies, including those used by Fidelity Digital Assets, by clicking on the AdChoices icon and following the opt-out instructions.

If you generally want to "opt out" of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in a self-regulatory programs like the Digital Advertising Alliance DAA program or the Network Advertising Initiative (NAI), please follow the instructions at WebChoices: Digital Advertising Alliance's Consumer Choice Tool for Web US (aboutads.info) and NAI Consumer Opt Out (networkadvertising.org) to place an "opt-out" cookie on your device indicating that you do not want to receive interest-based advertisements. If you want to "opt out" of receiving online interest-based advertisements on mobile devices, please follow the instructions at YourAdChoices.com | AppChoices and Mobile Opt Out - NAI: Network Advertising Initiative (thenai.org).

Connecting with Fidelity Digital Assets on social media platforms

Fidelity Digital Assets provides experiences on social media platforms that enable online sharing and collaboration among users who have registered to use them. We may collect information you provide when interacting with us via social media, such as photographs, opinions, or social media account ID. Any content you post, such as pictures, information, opinions, or any personal information that you make available to other participants on these social platforms is also subject to the terms of use and privacy policies of those platforms. Please refer to them to better understand your rights and obligations with regard to such content.

Third Party websites, online service, and content

Our digital offerings may contain links to third party websites and online services (for example, social media platforms) and may include embedded content that is hosted by third parties. This policy does not address the privacy, security, cookie policy and settings, or other practices of the third parties that provide such websites, online services, or content, and we are not responsible for the privacy practices or the content of these other websites, online services, or content providers. If you use a link to another website or online service or view third party content (for example, an embedded video), please consult the privacy policy for that website or online service for additional information on their privacy practices and advertising opt-out instructions.

Children's privacy

Fidelity Digital Assets’ digital offerings are not directed to individuals under the age of thirteen (13). Fidelity Digital Assets does not intentionally collect information on Fidelity Digital Assets websites from those we know are under 13. Individuals who are under 13 should not provide personal information through our digital offerings.

Additional information

If you are a former customer, these policies also apply to you; we treat your information with the same care as we do information about current customers.  Fidelity Digital Assets offers several options for accessing and, if necessary, correcting your account information. You can review your information on your statements we make available to you, or through our digital offerings. You may also call us with your request for information.

Where applicable local law provides you the right to do so, you may access or modify personal information about you, withdraw any consent previously provided to us, object to the use of personal information, or request that your personal information be transferred to you or another organization in a structured, commonly used and machine-readable format. In your request, please make clear what personal information you would like to access or have changed, whether you would like to have personal information that you provided us suppressed from our database, or otherwise let us know what limitations you would like to put on our use of your personal information. For your protection, we may only implement requests with respect to the information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable. Please note that certain personal information may be exempt from such access, correction, or objection rights pursuant to local data protection laws. Please see the “Contact Us” section below for whom to address your request.

Where applicable local law provides you the right to do so, you may lodge a complaint about the way we process your personal information with a supervisory authority for your country or region.

Contact Us

If you have questions about this Privacy Policy, please contact Client Service by phone at +1-844-370-0410 (US) or +44-800-011-9268 (UK). If we serve you through an investment professional, please contact them directly. Other specific Internet addresses, mailing addresses, and telephone numbers are listed on your statements and other correspondence.

Updates

We may change this Privacy Policy at any time. When we make changes to this Privacy Policy, we will change the “Last Updated” date specified at the beginning of this Privacy Policy. All changes shall be effective from the date the updated Privacy Policy is published, unless otherwise specifically stated in the updated Privacy Policy. We encourage You to review this Privacy Policy on a regular basis so that you will be aware of any changes to it.

© 2025 FMR LLC. All rights reserved.

Additional Information for California Residents

This section is provided for purposes related to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA") and applies solely to the personal information and Fidelity companies that are subject to the CCPA. As used in this section, "personal information" means information that meets the definition of "personal information" as set forth in the CCPA and is not otherwise excluded from the scope of the CCPA. 

Fidelity companies and the CCPA

Depending on the Fidelity company with which you have a relationship or otherwise interact, the nature of your relationship and interactions with that Fidelity company, and the products and services provided to you through that relationship, some or all of the personal information that the Fidelity company collects or maintains is covered by one or more of the exemptions described below (see the section below entitled "CCPA Exemptions"). As a result, in some cases, the applicable Fidelity company may have no obligation under the CCPA to accept any CCPA requests, and in other cases, it may have no obligation to honor a particular CCPA request, because of the nature of the personal information that the Fidelity company collects or maintains. Here are some examples of CCPA exemptions:

  • If your relationship and interactions with a Fidelity company consist solely of personal financial services (e.g., maintaining one or more personal brokerage accounts), the personal information collected and processed about you is subject to the federal Gramm-Leach-Bliley Act ("GLBA") and therefore your CCPA request will not be honored by the Fidelity company.
  • If you participate in a workplace retirement plan, or other employee benefit plan sponsored by or provided through your employer, that is serviced or administered by a Fidelity company, CCPA requests should be directed to your employer. 

Your Rights Under the CCPA

The CCPA gives certain rights to California residents and imposes certain obligations on those businesses that are subject to the CCPA. As required by the CCPA, set forth below is a description of certain rights that California residents generally have under the CCPA. As used below, a "consumer" means a resident of the State of California and a "covered business" means a business that is subject to the CCPA.

  • Right to Know/Right to Access. A consumer has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the categories and specific pieces of information the business has collected. A consumer also has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the following: 
    • The categories of personal information it has collected about that consumer
    • The categories of sources from which the personal information is collected 
    • The business or commercial purpose for collecting, selling or sharing (if applicable) personal information
    • The categories of third parties to whom the covered business discloses personal information
    • The specific pieces of personal information that the covered business has collected about that consumer
  • These disclosures are not required to include any information about activity that occurred prior to January 1, 2022. Please also note that a covered business is not required to honor more than 2 of these requests from the same consumer during any 12-month period.
  • Right to Delete. A consumer has the right to request that a covered business delete any personal information that the business has collected from the consumer, subject to certain exceptions. 
  • Right to Correct. A consumer has the right to request that a covered business correct inaccurate personal information that a business maintains about a consumer. 
  • Right to Opt-Out of Sale/Sharing. If a covered business sells or shares personal information, a consumer has the right to opt-out of the sale or sharing of their personal information by the business. 
  • Right to Limit Use and Disclosure of Sensitive Personal Information. If a covered business uses or discloses sensitive personal information for reasons other than those set forth in the CCPA, a consumer has the right to limit the use or disclosure of sensitive personal information by the business. 
  • Non-Discrimination. A consumer has the right not to receive discriminatory treatment by the covered business for the exercise of privacy rights conferred by the CCPA. 

Categories of personal information we may collect about you

In general, if you are a customer of ours or you otherwise interact with us, we collect various types of personal information about you. The amount and types of personal information we collect will vary depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you. The categories of personal information that we may collect about you are:

  • Personal identifiers, such as your name, postal address, email address, online identifier, internet protocol address, account name, or other similar identifiers
  • Information covered by California's records-destruction law (California Civil Code §1798.80), such as your signature, telephone number, and financial account information
  • Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies 
  • Characteristics of protected classifications under California or federal law, for example, gender 
  • Biometric information, such as when you use our voice-recognition service that we use for identity-verification and security purposes 
  • Internet/Electronic network activity information, including, but not limited to, browsing history, search history, and other information regarding your interactions with our digital offerings or our advertisements
  • Geolocation data
  • Audio, electronic, visual, and similar data, such as call recordings
  • Professional or employment-related information, such as job title and business contact information
  • Education information
  • Inferences drawn from any of the information listed above to create a profile about you, such as a profile that reflects your preferences, characteristics, behavior, and attitudes
  • Sensitive personal information such as social security number, account log-in, password or credentials allowing access to your account(s) or to our digital offerings

The retention periods for data elements within each category listed above vary depending on the nature of the data element and the purposes for which it is collected and used. Our retention period for the data elements within each category is set based on the following criteria: (1) the length of time that the data is needed for the purposes for which it was created or collected, (2) the length of time the data is needed for other operational or record retention purposes, (3) the length of time the data is needed in connection with our legal, compliance and regulatory requirements, legal defense and legal holds, (4) how the data is stored, (5) whether the data is needed for security purposes and fraud prevention, and (6) whether the data is needed to ensure the continuity of our products and services.

Categories of sources from which personal information is collected

In addition to the sources described in the section above entitled "How and why we obtain and use personal information", depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you, we may obtain personal information from the following sources:

  • You or your representative, such as when using our products, services or digital offerings, when interacting with us or any of our service providers regarding our products, services or digital offerings or when otherwise communicating with us 
  • Providers of publicly available information
  • Another person or other persons (typically people who know you) who provide referral information about you to us or who use the capabilities we offer on specific websites and applications to forward an article or other information to you
  • Third parties that provide products and services to you through your relationship with us
  • Third parties that perform services for us or on our behalf
  • Other third-party sources, including government sources, data brokers and social networks
  • Automatically, via technologies such as cookies and web beacons, when you interact with our digital offerings or electronic communications

Why we collect personal information

Please see the section above entitled "How and why we obtain and use personal information" for a description of some of the business or commercial purposes for which we collect personal information, including sensitive personal information. In addition to those purposes described above, below are additional business or commercial purposes for which we collect personal information:

  • To provide you with information about products and services that may interest you
  • To maintain the accuracy and integrity of our records
  • For marketing and communication purposes
  • For reporting and analytical purposes
  • For personalizing your interactions and experiences with us
  • For training and quality-control measures
  • To verify your identity
  • To protect against malicious, fraudulent, or illegal activity
  • For business analysis, planning, and reporting
  • For customer education
  • For effectiveness measurement

Categories of personal information disclosed for business purposes

Like most businesses, we disclose personal information, including in some cases certain sensitive personal information, to third parties for our business purposes. Depending on the nature of your relationship and your interactions with us, and on the products and services that we provide to you, we disclose to third parties for business purposes the personal information that is encompassed by one or more of the categories described in the "Categories of personal information we may collect about you" section above, with the categories of third parties listed in the section above entitled "How we share information about you with third parties".

Selling/sharing of personal information

We DO NOT sell your personal information for payment or for any other compensation. However, some of the ways in which we share your personal information with third parties on certain of our Websites may, under the CCPA, be considered to be a “sale” of personal information or “sharing” of personal information for “cross-context behavioral advertising” (as those terms are used in the CCPA).

We engage third party service providers, including marketing and advertising providers, and social media platforms (providers) to personalize your browsing experience on our Websites, to provide certain targeted advertising services for us, and to help us measure the effectiveness of our Websites and our online advertising. When you visit our Websites, we and our providers collect certain information about your activity on our Websites, including cookies and similar data stored on or collected from your browser or device. In some cases, our providers may combine this information collected on our Websites with information about your activity on other, unaffiliated websites or social media platforms to deliver our ads to you when you are visiting other websites or platforms. This sharing of your information with certain third parties via cookies and similar methods, and our providers' use of certain cookies, may be considered to be a "sale" of personal information or "sharing" of personal information for "cross-context behavioral advertising" under the CCPA.

California residents covered by the CCPA have the right to opt out of this "sale" or "sharing" of personal information. For those Websites where we engage in these activities and are covered by the CCPA, if we determine that you are visiting the Website from a location in California, you will see a "Do Not Sell or Share my Personal Information" link on the footer of the Website's homepage. To opt out of this sale or sharing of your personal information, please click on the link and follow the prompts.

Note that Fidelity permits all visitors to certain portions of our fidelity.com website (for example, the homepage at www.fidelity.com) to automatically exercise their right to opt-out of this sale or sharing of this personal information through the use of the Global Privacy Control (GPC) signal without having to make individualized opt-out requests. If you've enabled the GPC signal in your browser, we will honor your request to opt-out of this sale or sharing of personal information as communicated via the GPC signal. These opt-outs (whether via the toggle above or via the GPC signal) are a setting that is specific to the device or browser you're using. You'll need to opt out again if you visit our applicable Websites from a different device or browser, change your browser settings, or clear your cookies.

In the 12 months preceding the date of this Notice, we "sold" and/or "shared" personal information for "cross-context behavioral advertising", with respect to California residents covered by the CCPA. We do not knowingly "sell" or "share" for "cross-context behavioral advertising" personal information of minors under 16 years of age.

CCPA Exemptions

Please note that certain types of personal information collected or maintained by a covered business are exempt from the CCPA. For example, a covered business has limited obligations, or in some cases, no obligations, under the CCPA with regard to the following types of personal information:

  • Personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (Public Law 106-102) and implementing regulations, or pursuant to the California Financial Information Privacy Act (Division 1.4 [commencing with Section 4050] of the California Financial Code) 
  • Medical information governed by the Confidentiality of Medical Information Act or protected health information that is collected by a covered entity or business associate pursuant to the Health Insurance Portability and Accountability Act of 1996. 

In addition, some businesses are not subject to the CCPA, such as:

  • A business that does not do business in the State of California
  • A business that is not organized or operated for the profit of financial benefit of its shareholders or other owners
  • A business that does not determine the purposes and means of the processing of consumers' personal information
  • A business that has annual gross revenue of $25,000,000 or less


CCPA may refuse to honor a CCPA request to delete a consumer's personal information and is allowed to continue to maintain the personal information. Some examples include situations where retention of the personal information is reasonably necessary to:

  • Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer or reasonably anticipated within the context of the covered business’s ongoing business relationship with the consumer, or otherwise perform a contract between the Fidelity company and the consumer
  • Help to ensure security and integrity to the extent the use of the personal information is reasonably necessary and proportionate for those purposes 
  • Debugging to identify and repair errors that impair existing intended functionality 
  • Exercise free speech, ensure the right of another consumer to exercise that consumer's right of free speech, or exercise another right provided by law 
  • To enable solely internal uses that are reasonably aligned with consumer expectations based on the consumer's relationship with the business and compatible with the context in which the consumer provided the information
  • Comply with a legal obligation

Please note that the description of the CCPA set forth in this privacy policy is a summary of only certain aspects of the CCPA and is not and should not be considered a complete description of the CCPA. In addition to what is described above, the CCPA includes other exemptions that apply to particular types of personal information and particular businesses, as well as additional situations where a covered business is not required to honor a consumer’s request to delete the consumer's personal information.

Submitting a CCPA Request

If you wish to submit a CCPA request to FDAS, you may initiate your request here. Before submitting your request, please ensure you have reviewed all the CCPA exemptions, including those described above under the section above entitled "CCPA Exemptions".

You should generally expect to receive a response within 45 days of the date we receive your request. However, in some instances, we may require an additional 45 days to process your request in which case we will notify you and explain why the extension is necessary.

We will need to verify your identity before we can process your request. Through the request process, we will make you aware of any information that you will need to provide to us to process your request. You may have to confirm that you are a California resident and verify your identity or the identities of those authorized to submit requests on your behalf. Additionally, the information you provide will be used to help verify your identity.

To understand how you can designate an authorized agent with the ability to make a request under the CCPA on your behalf, please refer to our California Privacy Rights Request page.