TRADERMADE LIMITED ("we", "the Company") takes the protection of your personal data seriously. This policy explains what data we collect, why, how long we keep it, and what your rights are.

We operate from Hong Kong and comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). For users residing in the European Union, we additionally apply the principles of the General Data Protection Regulation (GDPR).

01Data controller

  • Identity: TRADERMADE LIMITED
  • Address: Hong Kong, Special Administrative Region of the People's Republic of China
  • Privacy contact: privacy@tradermade.io

02Data collected

We collect the following categories of data:

  • Identification data: username, email address, encrypted password.
  • Profile data: trading experience level, instruments followed, preferred language, display preferences.
  • Activity data: live sessions watched, training modules followed, trading journal, messages posted in community channels.
  • Technical data: IP address, browser type, operating system, pages visited, dates and times of access.
  • Cookies: see dedicated section below.

We do not collect any banking data as long as you have not subscribed to a paid service (basic registration is free).

We do not collect sensitive data within the meaning of PDPO or GDPR (racial origin, health, political opinions, etc.).

03Purposes

Your data is used to:

  • Create and manage your account
  • Provide access to Platform features (live, coaching, community, education)
  • Personalise your experience (training paths, recommendations)
  • Send you service emails (account confirmation, session notifications, security updates)
  • Send you our newsletter, if you've subscribed
  • Improve the Platform via aggregated statistical analyses
  • Ensure security (fraud detection, abuse prevention)
  • Comply with our legal obligations

04Legal basis

Depending on the purpose, processing relies on:

  • Performance of the contract binding us (Terms) — for service delivery
  • Our legitimate interest — for security, fraud prevention, service improvement
  • Your consent — for newsletter, certain cookies
  • A legal obligation — for retention of certain data (accounting, anti-fraud)

05Retention period

  • Active account: for as long as your account exists.
  • Deleted account: data is erased within 30 days, except for legal retention obligations.
  • Billing data (if applicable in the future): 7 years, in compliance with Hong Kong accounting and tax obligations.
  • Technical logs: 12 months maximum, for security purposes.
  • Newsletter: until you unsubscribe.

06Recipients

Your data is accessible to:

  • Tradermade internal teams (support, development, moderation), strictly within their duties.
  • Our technical subcontractors (hosting, emailing providers, analytics services), bound by confidentiality agreements.
  • Competent authorities, upon formal legal request.

We never sell your data to third parties for marketing purposes.

07International transfers

Our servers and some of our subcontractors may be located outside Hong Kong and the European Union. When this is the case, we ensure that appropriate safeguards are in place (standard contractual clauses, recognised certifications).

08Your rights

In accordance with the PDPO and the GDPR where it applies, you have the following rights over your data:

  • Right of access — know what data we have about you and obtain a copy.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request deletion of your data (except for legal obligations).
  • Right to restriction — request that your data no longer be processed in certain cases.
  • Right to portability — retrieve your data in a readable format (GDPR).
  • Right to object — object to processing, particularly marketing.
  • Right to withdraw consent at any time, without prejudice to processing already carried out.

To exercise these rights, write to privacy@tradermade.io. We will respond within a maximum of one month.

If you believe your request has not been properly handled, you may refer the matter to the competent data protection authority: the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk) for the PDPO, or your national EU authority for the GDPR.

09Cookies

We use cookies for:

  • Essential cookies — necessary for Platform operation (authentication, security, preferences). They cannot be disabled.
  • Analytics cookies — to analyse traffic in aggregate and improve the Platform. Subject to your consent.
  • Preference cookies — to remember your language or display settings.

You can manage your cookie preferences from your browser or from the consent banner on your first visit.

10Security

We implement reasonable technical and organisational measures to protect your data: encryption in transit (TLS), password hashing, restricted database access, regular security audits.

No system is foolproof. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without delay in accordance with applicable legal obligations.

11Modifications

This policy may be updated to reflect legal or technical developments. The last update date is shown at the top of the page. In case of substantial changes, we will notify you by email or in-app notification.

12Contact

For any question about your data protection, please contact privacy@tradermade.io.