Privacy Policy
Effective date: [Effective date]
This policy explains what personal data we collect when you visit our website or take Traderpreneur, why we collect it, who we share it with and what your rights are under UK data protection law.
1. Who we are
The Sigma Trader is a trading name of [Company legal name], company number [Company number], registered office [Registered address].
We are the "controller" of your personal data. This means we decide how and why it is used, and we are responsible for looking after it.
We are registered with the Information Commissioner's Office (ICO). Our registration number is [ICO registration number].
For any privacy question, email [Contact email].
2. What we collect
Information you give us
- Contact details: your name and email address.
- Account details: your login email, an encrypted password (we never see it in plain text) and your account settings.
- Purchase details: what you bought, when, how much you paid and whether you are on an instalment plan.
- Messages: anything you send us by email, and notes from mentorship calls if you have them.
Payment information
Payments are handled by Stripe. You enter your card details directly with Stripe, and we never receive or store your full card number. Stripe shares limited details with us, such as the last four digits of your card, the card type and whether a payment succeeded.
Information we collect as you use the course
- Course progress: which lessons you have started or finished, and data you enter into the tools (SigmaJournal, Stats Suite and SigmaDOM).
- Emails we send you: a record of the account, payment and course emails we have sent.
- Technical data: when you visit our website, our hosting provider automatically records basic information such as your IP address, browser type and the pages requested. This is used to run and secure the site.
We do not use analytics or advertising tracking at the moment.
3. How we use it and why
The law says we must have a valid reason, called a "lawful basis", for using your data. Here is what we do and the basis we rely on.
| What we do | Lawful basis |
|---|---|
| Create and run your account, give you access to the course and tools, and track your progress | Contract: we need it to provide what you bought |
| Take payments, manage instalments and pause or restore access | Contract |
| Book and hold mentorship calls | Contract |
| Send service emails, such as order confirmations, payment reminders and course updates | Contract |
| Reply to your questions and handle refunds and complaints | Contract, and legitimate interests in giving good customer service |
| Keep financial records for tax and accounting | Legal obligation |
| Keep the website and accounts secure, prevent fraud and stop account sharing | Legitimate interests in protecting our business and customers |
| Send marketing emails about our courses [Confirm whether you send marketing emails] | Consent, or for existing customers our legitimate interests (you can unsubscribe at any time) |
Where we rely on legitimate interests, we have checked that our interests are not outweighed by your rights. You can ask us for more detail.
We do not make decisions about you using only automated processing, and we do not sell your data.
5. International transfers
Some of our providers store or access data outside the UK.
- Our Supabase account data is stored in the EU. The UK recognises the EU as giving adequate protection, so no extra safeguards are needed.
- Where data goes to the USA or elsewhere (for example Stripe or Google), we rely on legal safeguards such as the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), the UK International Data Transfer Addendum or Agreement, or other approved safeguards.
You can ask us for more information about these safeguards.
6. How long we keep it
We keep your data only as long as we need it.
- Account and course progress: while your access lasts, then for [retention period, e.g. 12 months] in case you return or have questions. After that we delete or anonymise it.
- Purchase and payment records: 6 years after the end of the financial year they relate to, to meet tax and accounting law.
- Emails and support messages: [retention period, e.g. 2 years] after our last contact.
- Mentorship call notes: [retention period].
- Server logs: [retention period set by Hostinger, e.g. 30 days].
- Marketing preferences: until you unsubscribe, then we keep a record that you opted out so we don't email you again.
If you ask us to delete your account, we will do so unless we have to keep some data by law.
7. Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:
- access your personal data and get a copy;
- correct data that is wrong or incomplete;
- delete your data in some situations;
- restrict how we use your data in some situations;
- object to us using your data based on legitimate interests, and to direct marketing at any time;
- data portability: receive data you gave us in a common format, or have it sent to another organisation;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [Contact email]. It's free, and we will reply within one month. We may need to confirm your identity first.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
9. Keeping your data safe
We use sensible measures to protect your data, including encrypted connections (HTTPS), secure password storage, and limiting access to people who need it. No system is perfectly secure, so please use a strong, unique password for your account.
If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.
10. Children
Our course is for adults aged 18 or over. We do not knowingly collect data from children. If you think a child has given us their data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy, for example when we add a new service provider or start using analytics. We will change the effective date at the top, and tell you by email if the change is important.
12. Contact us
Email: [Contact email]
Post: [Company legal name], [Registered address]