Privacy Policy

This Privacy Policy explains how The Trading Cube collects, uses, stores, and protects information when you use The Trading Cube Academy course application (the "Service").

The Trading Cube is committed to handling personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we store

The Service requires limited information to create and manage your account and provide access to the course.

• Account details: your name and email address.
• Authentication data: your password is stored as a securely generated hash. We do not store your password in plain text.
• Session data: information required to keep you securely signed in to the Service.
• Course data: information relating to your course access and progress, including lessons opened and quiz results.
• Support communications: information you provide if you contact us through the Service or otherwise communicate with The Trading Cube for support.

How we use your information

We use this information only where necessary to provide and administer the Service. This includes creating and managing your account, authenticating your identity, providing access to course materials, recording course progress, administering the course, and responding to support requests.

We do not sell your personal data and do not use your account information for advertising.

Analytics and consent

The Service uses Google Tag Manager (GTM) and Microsoft Clarity for analytics and website usage analysis. These services are not activated for analytics or tracking purposes unless you have provided the required consent.

Where consent is required, analytics and related tracking remain disabled unless and until you give consent. You can withdraw or change your consent at any time using the available consent controls.

Where your information is stored

The Service is hosted using Cloudflare infrastructure. Account and course information is stored using Cloudflare D1, a managed SQL database based on SQLite.

Cloudflare provides the hosting, database, and infrastructure used to operate the Service. As part of providing that infrastructure, Cloudflare may process information transmitted to or stored by the Service. Cloudflare's privacy practices and applicable data processing terms apply to its processing of such information.

For more information, see Cloudflare's Privacy Policy.

Passwords and authentication

Authentication is provided by Better Auth, which is used as part of the Service's application code. Passwords are not stored in plain text. Better Auth uses password hashing so that the original password cannot be retrieved from the stored value.

Authentication records are stored in the Service's Cloudflare D1 database rather than in a separate Better Auth-hosted database.

Legal basis for processing

We process account, authentication, and course information where this is necessary to provide the Service and perform our agreement with you. We may also process information where necessary for our legitimate interests in securely administering, maintaining, and supporting the Service, provided those interests are not overridden by your rights and interests.

Where we rely on consent, particularly for analytics and non-essential tracking, processing will only take place after you have provided consent. You may withdraw consent at any time.

Data retention

We retain account and course information for as long as necessary to provide and administer the Service, unless a longer retention period is required by law.

Accounts can be deleted. If you have a created account and want your account and associated information deleted, you should contact the person who assigned or provided you with access to The Trading Cube Academy. That person is responsible for your course access and can request the deletion of your account.

When an account is deleted, we will delete the account information and associated course data that we are able to delete, subject to any legal obligations or legitimate reasons requiring information to be retained.

Your rights

Under UK data protection law, you may have rights including the right to request access to your personal data, correction of inaccurate data, deletion of your data, restriction of processing, objection to certain processing, and data portability.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise a data protection right, contact the person who assigned or provided you with access to the Service, or contact us using the details below.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully.

International processing

Because the Service uses third-party infrastructure, your information may be processed in countries outside the United Kingdom. Where required by applicable data protection law, appropriate safeguards are used for international transfers of personal data.

Information about international transfers and the safeguards required under UK data protection law is available from the ICO's guidance on international transfers.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our processing activities, or applicable legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

Contact

For privacy or data protection enquiries, contact The Trading Cube at info@thetradingcube.com.