Privacy Policy
How Quant Trading Labs collects, uses, stores and protects your personal data, and the rights you have over your information.
Introduction
Quant Trading Labs ("we", "us", "our") operates a quantitative trading research and education platform accessible at quanttradinglabs.com and related subdomains (the "Service"). We are committed to being transparent about how we collect, use and protect your personal data.
This Privacy Policy explains what information we collect, why we collect it, how long we keep it, and the choices and rights you have regarding your data. It applies to all visitors, registered users and members of the Service.
By using the Service, you agree to the practices described in this policy. If you do not agree with these practices, you should not use the Service.
Data We Collect
We collect only the information necessary to provide and improve the Service. The categories of data we may collect include:
Account information
- Email address, used as your login identifier and for service communications.
- Display name, first name and last name, where you choose to provide them.
- An encrypted password hash — we never store passwords in plain text.
Membership and billing data
- Membership tier, status, subscription period and entitlement flags.
- Payment provider references (e.g. customer and subscription IDs from Stripe or PayPal).
- We do not store full card numbers or bank account details on our servers; card processing is handled entirely by our payment providers.
Usage and technical data
- IP address, browser type, operating system and referring URLs.
- Pages visited, content accessed and approximate geographic region derived from IP.
- Device identifiers and cookies, as described in our Cookie Policy.
Affiliate programme data
- If you apply to our affiliate programme: payout email, referral code and application details.
- Click and referral attribution data, including hashed IP and user-agent strings used for fraud prevention.
- Commission and payout records for approved affiliates.
How We Use Your Data
We process your personal data for the following purposes:
- To create and manage your account and authenticate your sessions.
- To grant, verify and administer membership access and entitlements.
- To process payments and manage subscription lifecycle events.
- To deliver research publications, daily briefs and educational content.
- To operate the affiliate programme, including attribution, commission calculation and payouts.
- To communicate with you about your account, security, service updates and policy changes.
- To monitor and improve the security, performance and reliability of the Service.
- To comply with legal, regulatory and tax obligations.
Legal Basis for Processing
Where the General Data Protection Regulation (GDPR) applies, we rely on the following lawful bases:
- Contract: processing necessary to provide the Service you have requested, including account creation and membership delivery.
- Consent: for optional communications, analytics and non-essential cookies, which you can withdraw at any time.
- Legitimate interests: for security monitoring, fraud prevention and service improvement, balanced against your rights.
- Legal obligation: to meet record-keeping, tax and regulatory requirements.
Data Sharing and Third Parties
We do not sell your personal data. We share it only with service providers who help us operate the Service, and only to the extent necessary:
- Cloud hosting and database infrastructure providers that store and process Service data.
- Payment processors (such as Stripe and PayPal) that handle checkout, subscription management and payout disbursements.
- Email delivery services used to send transactional and account-related messages.
- Analytics providers, where you have consented to analytics cookies.
Each provider is engaged under terms that require appropriate confidentiality and data protection measures. We may also disclose data when required by law, court order or to protect our legal rights.
International Data Transfers
Your data may be processed in countries outside your country of residence, including the United Kingdom, the European Union and the United States. Where data is transferred outside the UK or EEA, we rely on recognised transfer mechanisms such as Standard Contractual Clauses or equivalent safeguards to ensure a comparable level of protection.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data is retained while your account is active and for a reasonable period after closure to allow for audit and dispute resolution.
- Membership and billing records are retained for the duration of your membership plus the period required by tax and accounting law.
- Affiliate click and attribution data is retained for the attribution window (30 days) plus a limited period for fraud analysis.
- Server and security logs are retained for a defined period to support incident investigation.
When data is no longer needed, we delete it or anonymise it so it can no longer be associated with you.
Data Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure or loss. These measures include encryption in transit and at rest, role-based access controls, and row-level database security policies.
No method of transmission or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your data, subject to legal retention obligations.
- Restriction: ask us to limit processing in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Withdrawal of consent: withdraw consent at any time where processing relied on it.
To exercise any of these rights, contact us at the address below. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
Children's Privacy
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations or Service features. When we make material changes, we will notify you through the Service or by email and update the "last updated" date shown above.
We encourage you to review this policy periodically.
Contact Us
If you have questions, requests or concerns about this Privacy Policy or your personal data, please contact us:
- By email: privacy@quanttradinglabs.com
- Through our contact page: /contact
Questions about your data? Get in touch with our team or review our Cookie Policy.
This policy is published and maintained by Quant Trading Labs. It is not a substitute for independent legal advice.