Privacy Policy

Who is responsible

TradeAcademy, operated from Greece, is the controller of your personal data. Contact us about privacy through the contact page.

What we collect

• Account data: name, email address, password (stored hashed by our authentication provider), preferred language.
• Learning data: courses you are enrolled in, lesson progress, reviews you write.
• Purchase data: what you bought and when, amounts and VAT, and your Stripe customer reference. We never see or store your card details; Stripe handles them.
• Telegram data (Premium): your Telegram user id and username, once you link your account, so we can let you into the private group.
• Email list (newsletter): your email address, first name if you give it, language, when and how you subscribed or unsubscribed, and the exact consent wording you agreed to.
• Messages you send us through the contact form.
• Technical data: IP address and browser information in server logs, kept for security and troubleshooting.

Why we use it (legal basis)

• To provide your account, courses and membership: performance of a contract.
• To process payments, issue invoices and meet tax obligations: legal obligation.
• To keep the service secure and prevent abuse: legitimate interests.
• To reply to your messages: legitimate interests, or contract when it concerns a purchase.
• To send our newsletter, the free guide, trading tips and offers: your consent. You give it by ticking the box when you request the free guide, sign up, or in your account. We confirm new addresses by email first (double opt-in). You can withdraw it at any time with the unsubscribe link in every email or in your account; this doesn't affect emails sent before.
• To keep a record of the consents you gave or withdrew: legal obligation (to be able to prove consent).

We do not sell your data and we do not use it for third-party advertising.

Who processes it for us

• Supabase (database and login, servers in Frankfurt, EU)
• Cloudflare (website hosting and video streaming)
• Stripe (payments, invoices and tax)
• Resend (sending email, and managing the email list)
• Telegram (the private Premium group)

Some of these providers are based outside the EU. Where data leaves the EEA, it is protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and learning data for as long as you have an account. Purchase records for as long as Greek tax law requires (normally 5 years or more). Contact messages for up to 2 years. Email list data until you unsubscribe; unconfirmed sign-ups are deleted after 30 days. Consent records are kept for as long as we may need to prove consent (up to 5 years after you unsubscribe).

Cookies

We only use cookies that are needed for the site to work: to keep you logged in and to remember your language. We do not use advertising or tracking cookies.

Your rights

You have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent where we rely on it. Contact us to use these rights. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).