Trading Standard Privacy Policy

Last updated: [Month Day, Year]

Trading Standard Ltd. ("Trading Standard", "we," "our," or "us") provides a white-label, AI-powered educational platform (the "Services") that our business clients (e.g., brokers, fintech firms, financial institutions) rebrand for their own customers.
This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. By accessing or using any site, sub-domain, or application operated by Trading Standard (collectively, the "Platform"), you agree to the practices described below.

1. Who is covered by this Privacy Policy?

Stakeholder	Examples	How This Policy Applies
Client Administrators	Staff at a broker or fintech who configure their white-label Academy via our Admin Panel	We process their business contact details and account activity
End Users / Learners	Individuals who study courses and take quizzes on a client-branded Academy site (e.g., academy.client.com)	We process profile info, learning progress, and interactions
Website Visitors	Anyone who visits tradingstandard.ai or other public pages we operate	We process usage analytics and cookies

2. What personal data do we collect?

Category	Typical Data Points	Source
Account & Profile	Name, email, password hash, organization, preferred language	Provided by you or our client
Learning Activity	Courses enrolled, pages viewed, quiz scores, rewards earned	Generated while you use the Platform
Usage & Device	IP address, browser type, referring URLs, cookie IDs	Collected automatically via cookies and similar tech
AI Interactions	Questions asked of the AI Teacher, feedback ratings	Generated by you during a session
Support & Feedback	Emails, chat transcripts, survey responses	Provided directly by you

No payment data:

We do not collect or store credit-card numbers or banking details—our B2B clients handle any commercial transactions on their own sites.

3. How and why do we use your data?

Purpose	Examples of Use	Legal Basis*
Provide the Services	Authenticate users, save progress, issue rewards	Contract
Improve & Secure the Platform	Debug errors, prevent fraud, analyze usage trends	Legitimate Interest
AI Customization	Tailor learning paths, refine AI Teacher responses	Legitimate Interest / Consent
Client Reporting	Give business clients aggregate engagement stats (no quiz answers are shown to other learners)	Contract
Communications	Send service emails (e.g., password reset, feature updates)	Contract / Legitimate Interest
Marketing (Trading Standard site only)	With your opt-in, send newsletters about new features	Consent

*“Contract” refers to the agreement between Trading Standard and the relevant client or user; “Legitimate Interest” means we have a reasonable business reason that does not override your rights.

4. Do we share personal data?

We never sell your personal information. We share data only:

With the business client that invited you – e.g., your broker sees aggregate course metrics and, where relevant, your account email so they can support you.
With trusted service providers – cloud hosting (AWS), email delivery, analytics, AI-inference providers; each bound by confidentiality and data-protection obligations.
For legal reasons – if required by law, court order, or to protect rights, safety, or property.
In a business transfer – e.g., merger or acquisition; we will notify affected users beforehand.

5. International transfers

We operate from the United Kingdom and use servers located in the EU and the United States. When we transfer personal data internationally, we rely on Standard Contractual Clauses or similar safeguards.

6. Cookies & similar technologies

We use first-party and third-party cookies to:

Maintain login sessions
Measure page performance
Remember language preferences

You can control cookies via your browser settings; however, disabling them may hinder site functionality.

7. Data retention

Account data – kept while your account is active and for up to 90 days after deletion (for backup integrity), then securely erased.
Learning records – retained for our client as long as they maintain a contract with us, unless they request deletion sooner.
AI logs & analytics – anonymized or aggregated after 12 months.

8. How we protect your data

Encryption – TLS in transit; AES-256 at rest for databases and backups
Role-based access controls & audit logs
Regular security testing and ISO-aligned policies

9. Your rights

Depending on your jurisdiction, you may have the right to:

Access or export the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data (“right to be forgotten”)
Object to or restrict certain processing
Withdraw consent at any time (e.g., marketing emails)

To exercise these rights, contact us at [email protected]. We may need to verify your identity before fulfilling the request.

10. Children’s privacy

The Platform is not directed to children under 16. If we learn we have collected data from a child without parental consent, we will delete it promptly.

11. Changes to this Privacy Policy

We may update this Policy occasionally. Changes take effect when posted on this page and indicated by the “Last updated” date. Material changes will be announced via email or in-app notice.

12. Contact us

Trading Standard Ltd.

✉ [email protected]