Privacy Policy

Data controller: Traders Temple Ltd, company number 10835955 Registered office: 12 Gateway Mews, Bounds Green, London, England, N11 2UT Privacy contact: admin@traderstemple.com

1. Scope

Traders Temple Ltd (“Traders Temple”, “we”, “us”, “our”) is the data controller for personal data processed through the Traders Temple public website, Foundation School, account services, Trader Match, contact and support routes, complaint handling, and voluntary newsletter preferences.

This policy explains what we process, why we process it, how long we keep it, the service providers involved, and the rights available to you. Traders Temple provides education and informational comparison tools; it does not provide personalised investment advice.

2. Current processing

Accounts and Foundation School

We process your email address, hashed password, account identifier, email-verification state, enrolment state, lesson progress, required-practice completion flags, completion timestamps, request/idempotency records and account-security records. Private written practice remains on your device and is not sent to Traders Temple.

Purposes and lawful bases: processing needed to create and administer the requested account, provide Foundation School and maintain the learner’s progress is necessary for performance of the service contract. Account security, abuse prevention, service integrity and operational reliability are processed under Traders Temple’s legitimate interests in protecting users and operating a safe, dependable service. A legal obligation is relied on only where a specific applicable law requires the processing. Traders Temple maintains appropriate legitimate-interests assessment and accountability evidence for processing based on legitimate interests.

Contact, Support and Complaints

When you contact us, we process the information you submit, relevant contact details, routing/classification information, acknowledgements, correspondence and outcome records. Routine enquiries may be classified or drafted with AI assistance under bounded controls. Legal, privacy, material complaint, security and consequential commercial matters are escalated for human judgement.

Purposes and lawful bases: information necessary to take requested pre-contract steps or to administer an existing customer service is processed for those steps or performance of the applicable service contract. General enquiries that are not contractually necessary are processed under Traders Temple’s legitimate interests in responding to enquiries and operating effective customer support. Complaint administration, service integrity and the establishment, exercise or defence of legal rights are processed under legitimate interests; a legal obligation is relied on only where a specific applicable law requires the processing. Traders Temple maintains appropriate legitimate-interests assessment and accountability evidence for processing based on legitimate interests.

Trader Match

Trader Match processes the questionnaire answers needed to compare your jurisdiction, trading approach and stated requirements against verified programme rules. Anonymous matching remains free and creates a short-lived capability-protected profile without requiring an email address. If you choose to save through a TT Account, your saved profile and stated preferences are associated with that account so you can return to them. Saving does not subscribe you to a newsletter or activate alerts. Programme-link visits may be recorded as bounded operational events with the programme and dataset version.

Purposes and lawful bases: processing necessary to provide the comparison, account saving and service you request is used to perform that service. Security, abuse prevention and bounded operational monitoring support our legitimate interests in protecting the service. Optional alert permissions are recorded separately and can be withdrawn.

Trader Match subscriptions: when you request an alert subscription, we process your email address, comparison profile, verification status, separate alert permissions and their wording/version/timestamps, management-token records, suppression status and bounded service-message receipts. Verification, activation, requested management and withdrawal emails support the service you request. Rule-change and new-match customer alerts remain held until separately authorised. Newsletter consent is separate and is not selected by saving a profile or requesting Trader Match alerts.

You can withdraw alert permissions through your private management link or contact us. Withdrawal stops the affected future alerts; it does not erase prior lawful processing or the minimum record needed to honour withdrawal. Account deletion and privacy requests can be made to the privacy contact below.

Voluntary newsletter preferences

If you voluntarily opt in, we process your email address, consent version, consent timestamp, source and subscription status. An unsubscribe creates a suppression record so that the address is not re-added or sent future newsletter messages. The Day‑1 infrastructure records preferences only; no newsletter campaign is active at launch.

Purposes and lawful bases: the subscription and any future authorised newsletter messages are processed on the basis of consent. Consent evidence is retained for as long as reasonably necessary to demonstrate compliance. After withdrawal or objection, only the minimum suppression information reasonably necessary to honour that choice and prevent an unauthorised re-subscription or send is retained for that purpose under Traders Temple’s legitimate interests in respecting preferences and demonstrating compliant operations, and under a legal obligation only where a specific applicable law requires it. You may withdraw consent at any time.

Technical, security and aggregate operational measurement

Hosting and application systems necessarily process request information such as IP address, timestamps, user agent, response/error information and bounded diagnostic records. Traders Temple also keeps daily aggregate counts for critical Day‑1 routes and success/failure events. These aggregate counters contain no profile, email, cookie identifier or cross-site behavioural history and are used only to determine whether essential journeys work.

Purposes and lawful bases: security, abuse prevention, fault diagnosis and reliable soft-launch operation (legitimate interests).

3. Cookies and browser storage

Storage required to provide or secure the requested services includes WordPress authentication/session cookies; short-lived session storage for the in-progress Trader Match questionnaire; and Foundation browser storage for owner-scoped cache, bounded retry/outbox handling, temporary restoration and device-local written practice. The cookieyes-consent preference cookie remembers your cookie choice for up to 180 days.

Optional analytics is enabled only after you consent through the cookie banner. Google Analytics 4, delivered through Google Tag Manager, and first-party usage counts measure journeys such as starting Trader Match, viewing results, opening programme links, successful contact submissions and joining Foundation. Google receives event names, random event identifiers, consent state, whether a visitor is signed in, a restricted page address and approved campaign labels. We do not send names, email addresses, form contents, trading questionnaire answers, account identifiers or programme identifiers to Google Analytics. Google also receives the connection information needed to deliver its service. Advertising features, Google Signals and enhanced measurement are disabled.

You can reject optional analytics and continue using the website, or withdraw consent at any time through Consent Preferences. Withdrawal stops further collection and removes analytics cookies from this browser. It does not erase earlier collected data. Google Analytics cookies _ga and _ga_YVSZ3JQZNY last up to 180 days; the property is configured to retain user and event data for two months without resetting retention on new activity. Aggregated reports may persist separately. Limited consent-choice receipts on our website are bounded to 500 records and trimmed to 30 days when a new choice is recorded, without names, email addresses or IP addresses in those receipts. No advertising cookies are enabled.

Google is an analytics service provider for visitors who opt in. Read Google's Privacy Policy for its processing and international operations. CookieYes is hosted locally for the consent interface; this release does not connect its cloud consent service. Optional analytics processing is based on your consent.

4. Recipients, processors and storage

Current services use:

• Hostinger: website, WordPress, database, account/progress storage, forms, server infrastructure, backups and the active Day‑1 transactional email service delivered through Hostinger SMTP.
• Supabase (EU region): Trader Match capability-protected profiles, questionnaire state, matching results and bounded operational events.
• Railway and its production Postgres service: bounded worker health, invocation and zero-dispatch receipt state. Customer alert sending remains disabled; no separate Railway mail-delivery authority is created.

Brevo (Sendinblue) is not commissioned for Day 1 and receives no Day‑1 personal data. Any future Brevo or newsletter-delivery commissioning will require processor, privacy and transfer reconciliation before personal data is transferred. Recording a newsletter preference does not activate a marketing campaign or transfer subscriber data to Brevo.

Traders Temple does not sell personal data or share it for cross-context behavioural advertising. Opening an official third-party programme link sends you to that firm’s website; the destination then processes your visit under its own privacy terms.

Where processing involves an international transfer, Traders Temple will use an applicable adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful safeguard, together with relevant contractual and security controls.

5. Retention

• Active account and Foundation records: retained while the account is active and required to provide the service.
• Inactive accounts: scheduled for deletion or irreversible anonymisation after 24 consecutive months without account activity, subject to legal holds and a verified operational deletion process.
• Trader Match anonymous profiles/capabilities: 24 hours.
• Saved Trader Match profiles and subscriptions: retained while needed for your requested saved-profile or subscription service. After withdrawal or a verified deletion request, we remove or minimise records no longer required, retaining only necessary consent, suppression, security and delivery-evidence records for as long as their documented purpose requires. Token expiry prevents use of an expired link; it does not by itself establish deletion of every associated record.
• Application diagnostic and server logs: normally 30 days, unless a shorter provider period applies or a bounded security/legal incident requires limited extended retention.
• Daily aggregate operational counters: 35 days.
• Contact and support: retained only as long as needed to resolve and evidence the enquiry, normally no more than 24 months after closure unless a shorter period applies.
• Complaints, legal, privacy and security matters: retained for the period needed to meet applicable limitation, regulatory, evidential and security obligations.
• Newsletter consent records: retained while subscribed and, after withdrawal, for as long as reasonably necessary to demonstrate compliance. No arbitrary fixed post-withdrawal period is applied without supporting evidence.
• Suppression records: only the minimum information reasonably necessary to honour an unsubscribe or objection and prevent an unauthorised re-subscription or send is retained for as long as reasonably necessary for that purpose, unless a lawful deletion request can be fulfilled without undermining it.
• Backups: expire under the provider-managed daily/weekly restoration cycle. A restoration is subject to reconciliation controls so previously completed erasure and suppression actions are re-applied.

6. Security and automated assistance

We use access controls, capability tokens, encryption in transit, data minimisation, bounded logging, fail-closed matching controls and environment separation. No internet service can be guaranteed completely secure.

AI may assist with routine classification, monitoring and drafting. It is not authorised to make personalised trading decisions or final consequential legal, privacy, complaint, security or commercial judgements. Those matters are escalated for human decision.

7. Your rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. Withdrawing consent does not affect processing already lawfully performed. You may also complain to the UK Information Commissioner’s Office or another competent supervisory authority.

Contact admin@traderstemple.com to exercise a privacy right. We may request proportionate identity verification before disclosing or changing account data.

8. Children

Day‑1 account services are intended for adults aged 18 or over. Traders Temple does not knowingly offer the account service to children.

9. Changes

The effective version and date appear above. Material changes will receive an appropriate notice. A new use that requires consent will not begin until the required consent mechanism is in place.