← Back to the claim

Privacy notice

Last updated: 11 July 2026

This notice explains how information you submit through dumbflow.com is collected and used in connection with a potential UK group claim relating to BitMEX and the Financial Services and Markets Act 2000 (“FSMA”). It is written to be read alongside, and does not replace, any privacy information provided by the solicitors instructed on the claim.

Who is responsible for your data

This page is operated by the pseudonymous account @dumb_flow, who is the data controller for information submitted through it. You can contact us about privacy, or to exercise any of your data-protection rights, at dumbflow0@protonmail.com. If you require the controller's formal identity for the purpose of a data-protection request or complaint, please ask at that address.

What we collect

When you complete the form, we collect:

  • your name;
  • confirmation that you were resident in the United Kingdom when you traded on BitMEX;
  • an estimate of your losses (as a range, in GBP);
  • your email address and phone number; and
  • limited technical data (IP address, browser user-agent and the page URL) collected automatically to help prevent abuse.

Why we use it, and our lawful basis

We use your information to assess, organise and progress a potential UK group claim, to contact you about it, and to send you a confirmation of your registration. Our lawful basis under UK GDPR is your consent (which you give by submitting the form) and our legitimate interests in investigating and coordinating the claim. You can withdraw consent at any time (see your rights below).

Who we share it with

We do not share your details with BitMEX. We may share them with the solicitors instructed in connection with the claim, and with any litigation funder appointed in connection with it. We also use a small number of service providers who process the data on our behalf, under appropriate data-processing terms:

  • our database provider (Supabase), which stores submissions;
  • our email provider (Resend), which sends your confirmation email; and
  • our hosting provider (Vercel), which serves this website.

Where it is stored

Submissions are stored in a database hosted on Amazon Web Services in the United Kingdom (London / eu-west-2 region). Some of our providers may process limited data (such as your email address) outside the UK; where that happens we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

We keep your information for the duration of the potential claim and for up to six years after it concludes — a period chosen to align with the limitation periods that can apply to claims of this kind — after which it is deleted or anonymised. If it becomes clear that no claim will be pursued, we will delete your details sooner on request. We action verified deletion requests within 30 days.

Your rights

Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent. To exercise any of these, email dumbflow0@protonmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Not legal advice

This page and the claim information on it are provided for education and information only and are not legal advice. Submitting the form does not create a solicitor–client relationship and is not a statement that you have a valid claim or will recover anything.

← Back to the claim