Privacy Policy

DRAFT — pending legal review. This document is a structural placeholder drafted from Crowdside's existing UK-focused Terms/Privacy content and research on the applicable regulatory framework. It has not been reviewed by a qualified lawyer and must not be treated as final before this region goes live.

1. Introduction

Crowdside ("we", "our", "us") is committed to protecting your privacy under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

2. Information We Collect

Waitlist signup details and the optional profile fields (region, language, broker, age bracket, gender with separate consent, experience level, newsletter preference).

3. Legal Basis for Processing

Consent (marketing, demographic data) and legitimate interest (fraud prevention, service improvement) are our primary legal bases under Article 6 GDPR. A full Article 6/9 legal-basis mapping is pending legal review.

4. How We Use Your Information

To verify your email, send product updates (with consent), personalise content, and prevent fraud. Not used to provide investment advice.

5. Data Retention

Retained only as long as necessary for the purposes above. Unverified signups may be deleted after 30 days.

6. Your Rights (GDPR)

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent
• Right to lodge a complaint with your national supervisory authority

7. Third-Party Services

We use Heroku (hosting), Google Workspace (email), and AWS S3 (storage).

8. International Data Transfers

Data may be transferred outside the EEA with appropriate safeguards (e.g. Standard Contractual Clauses).

9. Contact

accounts@crowdside.co.uk