Privacy

If you just read the site

These hold whatever else changes. We set no cookies. We do not build a profile of you. Nothing we keep identifies you, and we do not sell or share anything about you with anyone.

As things stand today we run no analytics at all: no tracking pixels, no advertising scripts, no counting of any kind. If that ever changes it will be aggregate counts only, without cookies, measuring how often a page or an API endpoint was fetched rather than who fetched it. The date at the top of this page will change on the day it does.

The site is hosted by Vercel, which keeps standard server logs including IP addresses for security and to keep the service running. That happens at the hosting layer and we do not use those logs to identify anyone.

If you use the contact form

The form collects your name, your email address, your organisation if you choose to give it, and your message.

It is delivered by Web3Forms, which processes the submission and passes it to our inbox. Email is then handled by our email provider in the ordinary way.

We use it to reply to you and to keep track of the conversation. We do not sell it, we do not share it with anyone outside those providers, and we do not add you to a mailing list.

Lawful basis: legitimate interests, specifically responding to someone who has asked us to get in touch. You can object at any time and we will delete the correspondence.

How long we keep it: as long as the conversation is live, and up to two years afterwards in case it resumes. Ask us and we will delete it sooner.

Corrections and right of reply

If you write to us about something we have published, we keep that correspondence as part of the record of how a correction was handled. Where we publish a reply, we publish what you asked us to publish and nothing else about you.

What we publish about companies

The XRADE record covers companies, funds and legal structures, not private individuals. Where a person's name appears it is because it is stated in a public regulatory filing, such as a signatory or a director named in a Form D, and we reproduce it as filed and no more.

Your rights

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us using it, and ask for it in a portable form.

Ask through the contact form, choosing Privacy or data request, and we will respond within one month.

If you are not happy with how we have handled it you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first so we can put it right.

Changes

If this policy changes, the date at the top of the page changes with it.