1. Introduction
Trader365® Ltd ("Trader365®", "we", "us") is committed to protecting the privacy and fundamental rights of our users and ensuring the lawful, fair, and transparent processing of all personal data under the UK General Data Protection Regulation (UK GDPR).
2. Data Controller
Trader365® Ltd acts as the Data Controller for all personal information collected and processed through our services and affiliated platforms. Contact us at support@trader365.co.uk for any data-related inquiries.
3. What Data We Collect
- Personal identifiers: full name, email address, phone number, postal address (if required).
- Account information: usernames, encrypted passwords, sign-in history.
- Payment and financial details: payment methods, transaction history (handled by third-party processors).
- Device and technical data: IP addresses, geolocation data, device IDs, browser types, OS versions.
- Usage and behavioural data: interaction logs, feature usage statistics, clickstream data, preferences.
- Marketing preferences and consent records.
- Any additional information voluntarily provided through support or feedback forms.
4. How Data is Collected
- Direct collection: provided directly by the user during registration, subscription, or communication with support.
- Automated collection: gathered via cookies, tracking pixels, and other technologies.
- Third-party collection: through integrations with payment processors (Stripe, Apple Pay) and authentication services (Google, Apple ID).
5. Purpose and Legal Basis for Processing
- Contractual necessity: to fulfil our obligations to deliver the Trader365® service.
- Consent: where required for optional services, such as marketing communications.
- Legitimate interests: to maintain, develop, and improve our services, detect fraud, and ensure security.
- Compliance with legal obligations: retaining records for financial auditing and legal reporting.
- Vital interests: where necessary to protect users from harm or fraud.
6. Categories of Recipients
- Cloud infrastructure providers for secure data hosting.
- Payment processors to handle transactions.
- Analytics and marketing services (e.g., Google Analytics).
- External legal or professional advisors if required by law.
- Law enforcement or regulatory bodies when legally obligated.
7. International Transfers
Where personal data is transferred outside the UK or EEA, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.
8. Data Security
- Encryption of sensitive data in transit and at rest.
- Secure user authentication and access controls.
- Firewalls, intrusion detection, and routine security audits.
- Staff training and confidentiality agreements.
- Regular testing and updates of security protocols.
9. Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
10. Data Retention and Deletion
- Account and payment records: up to 6 years after account closure to comply with tax and legal obligations.
- Marketing data: retained until you withdraw consent.
- Backup copies: held securely for limited periods in accordance with our backup policy.
11. Your Data Rights
- Right to Access
- Right to Rectification
- Right to Erasure
- Right to Restriction
- Right to Data Portability
- Right to Object
- Rights related to automated decision-making and profiling
Requests should be sent to support@trader365.co.uk. We aim to respond within one calendar month.
12. Exercising Your Rights
You may exercise your rights free of charge, subject to applicable exceptions under UK law. We may request proof of identity to verify your request.
13. Supervisory Authority and Complaints
If you believe your rights under UK GDPR have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
14. Children's Data
Trader365® does not knowingly collect data from individuals under 18. Users under 18 are prohibited from registering an account.
15. Data Protection Governance
Trader365® maintains records of processing activities and performs Data Protection Impact Assessments (DPIAs) where required.
16. Changes to This Policy
We may update this Data Protection Policy periodically to reflect legal requirements or operational changes.
For all data protection queries, please contact us at support@trader365.co.uk.
