What we collect, why, who else sees it, and how to get rid of it.
The controller for the processing described here is:
For any question about your data, or to exercise any of the rights below, write to info@tradetoolsofficial.com.
We collect what we need to sell you a licence and keep it working, and nothing else. This site shows no advertising and sets no advertising or tracking pixels. It uses Google Analytics to count visits — but only if you agree on the banner; decline and no Google script is loaded at all, which you can verify in your browser's network tab. We do not profile you and we do not sell or share your data for marketing.
Account data — your name, email address and a hashed password. Needed to create your account and to issue licences to you. Basis: performance of the contract (Art. 6(1)(b) GDPR).
Purchase data — which product, the amount, the currency, the date, and the identifiers our payment provider gives us. Needed to deliver the purchase, to honour the guarantee and to keep the records tax law requires. Basis: contract, and legal obligation (Art. 6(1)(b) and (c)).
Licence data — the licence key, the product, and an identifier of the computer the key is activated on. Needed to enforce one-computer licensing and to let you move the key yourself. Basis: contract.
Support messages — what you write to us and the address you write from. Basis: contract, or our legitimate interest in answering you (Art. 6(1)(f)).
Marketing email — only if you tick the box when you sign up: your email address and the time you agreed, so we can send you tips and offers (at most once a week) through our email provider Brevo. Every such email carries an unsubscribe link, and one click withdraws your consent; we keep the time you withdrew it as proof. Emails you need for your purchases are not affected. Basis: consent (Art. 6(1)(a) GDPR).
Technical logs — the page requested, the time, the IP address and the browser identification. Used to keep the site up, to defend against abuse, and to count visits in aggregate. Basis: legitimate interest (Art. 6(1)(f)) in a secure and functioning service.
Affiliate program data — if you join our affiliate program: your legal name, postal address, email address and phone number (both verified with a code we send), your referral code, the commissions credited to you and the payouts we make. Needed to run the program, to pay you, and to document those payments as tax law requires us to. Basis: performance of the contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c) GDPR). If a visitor arrives through an affiliate link, a cookie remembers that referral for a limited time so the purchase can be credited; it identifies the affiliate, not you.
This site sets a small number of first-party cookies, none of them for advertising:
Analytics — we use Google Analytics 4 (Google Ireland Ltd.) to see how many people visit and which pages they read. It runs only with your consent (Art. 6(1)(a) GDPR, § 25(1) DDG): before you press Accept nothing is loaded and no identifier is stored, and if you decline, no Google script is requested at all.
What it processes: a random identifier stored on your device, your shortened IP address, the pages you view, approximate location at country/city level, device and browser type, and the referring site. Data may be processed by Google LLC in the USA under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework, and is deleted after 14 months.
You can change your mind at any time — reopen the banner from the cookie settings link and choose again. Withdrawal applies immediately and does not affect what was already collected.
Where the consent banner appears: visitors in the EU/EEA are always asked first, because that is what the law there requires. Visitors from outside that area are not shown the banner and analytics runs on the same terms described above; you can still switch it off from the cookie settings link on this page.
We set no advertising or preference cookies.
We use a small number of service providers, each only for the purpose named:
Each of them acts on our instructions under a data processing agreement. Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
Account and licence data: while your account exists, and afterwards only as long as we need it to defend a legal claim.
Purchase records: for the period commercial and tax law requires, which is generally up to ten years.
Support messages: normally up to two years.
Technical logs: a short period, normally no more than a few weeks, except where an entry is needed to investigate an incident.
You may ask us for a copy of the data we hold about you, to correct it, to erase it, to restrict how we use it, or to receive it in a portable form. You may object to processing we base on a legitimate interest. Where processing rests on consent, you may withdraw that consent at any time with effect for the future.
You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work.
Deleting your account keeps the financial records we are legally obliged to keep; everything else goes.
If we change how we process data we will update this page. The date below always shows when it was last changed.
