Privacy Notice

Privacy contact and scope

This notice explains personal information handled in operating TradAdvise at tradadvise.com, from Cyprus. Contact info@tradadvise.com with “Privacy” in the subject line, or use the website contact form if available. “TradAdvise” is the website's publishing brand. This notice applies to visitors, contributors, people mentioned in relevant source material and authorised workspace users.

We apply the EU GDPR and relevant Cyprus data protection law to processing within their scope. Where the UK GDPR and UK data protection law apply, we also respect the corresponding UK requirements. Your rights depend on the processing and the law that applies; visiting from a country does not by itself determine every legal obligation.

Information you provide

Website checks use the website address and any optional country or related search information you enter. A submitted URL may contain personal information; use a public broker address and remove private account paths or access tokens.

Reviews use a chosen display name, email address, category, review text and submission and consent records. If a review is published, its display name, text, category, broker reference and publication information become public. Your contact email is not published as part of the review.

Broker suggestions, correction requests, complaints and enquiries use your contact details where supplied, the relevant website or record, your message and the correspondence needed to handle it. Workspace accounts use authorised users' account details, password hashes, sessions, role information and activity records.

Do not provide financial account credentials, payment-card details, identity documents or sensitive information that is unnecessary for the enquiry. We may ask you to remove or redact such material. If private supporting evidence is genuinely needed, we will explain the minimum information and appropriate method first.

Technical and public source information

Delivering and protecting a website involves technical information such as IP addresses, request times, browser details, requested pages and security events. Application abuse controls may use a derived identifier from an IP address. Hashing or pseudonymisation does not necessarily make information anonymous.

Searches and checks may be recorded with the submitted domain, country where supplied, finding, evidence references and time. These records are not intended to identify a visitor, but URLs, messages and technical logs may still contain personal information. They are handled accordingly.

We also use identified official sources and relevant contributions. Public register information can include personal information about a sole trader, representative or other identifiable person. We assess relevance and accuracy and do not treat public availability as unrestricted permission to republish personal data. Where we obtain personal information indirectly, this notice explains its categories, sources and uses; additional individual information is provided where required. Any exception to individual notification must be justified under applicable law.

Purposes and lawful bases

We use legitimate interests under Article 6(1)(f) GDPR for delivering and securing the website, responding to ordinary enquiries, assessing broker suggestions, maintaining proportionate moderation records, preventing manipulation and presenting relevant sourced information in the public interest. We balance those interests against the effects on the people concerned. You may object on grounds relating to your particular situation.

We rely on consent under Article 6(1)(a) for publishing a contributor's personal information in a review where consent is requested. Publication consent is separate from consent to optional tracking and is not required to read the site. You may withdraw it by emailing info@tradadvise.com; withdrawal does not make earlier lawful processing unlawful. Necessary private handling of a complaint, abuse report or legal claim may have a separate lawful basis, which we will explain where relevant.

We rely on legal obligations under Article 6(1)(c) only where a particular applicable obligation requires processing. Necessary handling of legal claims may also rely on legitimate interests. We do not use agreement to a privacy notice as blanket consent to all processing. We do not intentionally collect special-category information or criminal-offence information through public forms; any such information received requires a separate assessment and lawful basis or prompt deletion or redaction.

Recipients and international processing

Access is limited to authorised people and service providers who need information for hosting, database operation, security, email communication, administration or professional advice. Providers acting on our instructions must be subject to the processing terms required by applicable law. A provider may have separate legal responsibilities for its own processing; its role must be assessed rather than assumed.

Publicly displayed contributions and sourced information are accessible to internet users, including outside the EEA and UK, and may be indexed or copied. Removing our copy cannot guarantee removal of independently cached or republished copies. We take further steps where required by law.

Where a provider's processing involves a restricted international transfer, the required transfer conditions must be satisfied. Depending on the applicable regime and recipient, these may involve a valid adequacy decision or executed contractual safeguards and the necessary assessment and additional measures. Contact info@tradadvise.com for information about recipients, processing locations and safeguards relevant to your data, including how to obtain a copy where applicable.

We do not sell personal information. The free service has no advertising or affiliate tracking. Optional audience analytics runs only with your consent, as described in the section on audience analytics. An external source or rating website receives your request if you choose to visit it; its own privacy information then applies.

Audience analytics

With your consent, we use Google Analytics 4 to understand how the site is used, so that we can improve it. It collects pages viewed, the referring site, device, browser and operating system type, approximate location derived from the IP address, and interactions such as searches. Google Analytics 4 does not log or store IP addresses of visitors in the EU. Google signals and ads personalisation are turned off.

The lawful basis is consent under Article 6(1)(a) GDPR, given in Cookie settings. You can withdraw it there at any time; withdrawal does not make earlier lawful processing unlawful. Refusing does not limit access to the site.

Google Ireland Limited provides Google Analytics as our processor under Google's data processing terms. Google LLC and its affiliates outside the EEA may process the data; such transfers rely on the EU–US Data Privacy Framework, under which Google LLC is certified, and on the Standard Contractual Clauses in Google's data processing terms. Analytics data is kept for 14 months, then deleted by Google Analytics.

Retention

We keep personal information only as long as necessary for its stated purpose, subject to justified legal holds. Ordinary messages and broker suggestions are retained for up to 24 months after resolution. Rejected review material is retained for up to 12 months after the final moderation decision. A published review remains available while its publication is justified and permitted; its private contact email is removed within 24 months after publication or earlier when no longer needed or required following a valid request.

Security identifiers, logs and checker records use a purpose-specific period based on detecting abuse, investigating incidents, evidencing the service and the sensitivity of the information. Moderation and audit records retain only information necessary to explain decisions and handle disputes, with a documented review or expiry date. They are not an exception allowing indefinite retention of every personal detail. We will explain the relevant period or criteria for a record on request.

Workspace sessions expire after eight hours unless ended earlier. Device storage durations are described in the Cookie and Browser Storage Notice. Where backup copies exist, they are protected and excluded from ordinary use; deletion is carried through the backup lifecycle and reapplied if a backup is restored. Any longer preservation for a legal obligation or claim is limited to the relevant material, access and period.

Your choices and rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of personal information. You may object to processing based on legitimate interests and withdraw consent where it is the basis. These rights have conditions and lawful exceptions. We will explain a refusal or limitation and your options to challenge it.

Send requests to info@tradadvise.com. Give enough information to locate the record, such as the contribution URL or the email used to contact us. We request identity information only where reasonably necessary and proportionate; please do not send identity documents without being asked. Requests are normally free. We aim to respond without undue delay and within one calendar month, subject only to adjustments or extensions permitted by the applicable law. If an extension is justified, we explain it within the original applicable period. We do not require you to narrow a request merely for our convenience.

You may complain to the Cyprus Commissioner for Personal Data Protection at https://www.gov.cy/dataprotection/ or to another competent supervisory authority, including the authority in the EEA country where you live or work or where an alleged infringement occurred. Where UK data protection law applies, you may also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. You do not need our permission to contact an authority.

Children and automated processing

The site is aimed at adults and we do not invite children to submit personal information or trading experiences. If you believe a child has supplied information, contact us so we can assess and act. This statement is not a claim that every visitor's age has been verified.

Automated rules help organise source evidence and protect the service. They do not make decisions about an individual's access to credit, investment eligibility or other matters intended to produce legal or similarly significant effects. Human moderation applies to publication decisions. We do not use contributors' enquiries to build advertising profiles.

Changes and questions

We update this notice when processing changes and provide additional information or obtain consent where required before a new use begins. Contact info@tradadvise.com for explanations, recipient information or a copy of the information relevant to your request.