This Privacy Policy explains how WhichBroker ("we", "us", "our") collects, uses, and protects your personal data when you visit www.whichbrokr.com. We comply with the EU General Data Protection Regulation (GDPR) and applicable national privacy laws.
1. Data we collect
We collect the following data when you use our site:
- Usage data: Pages visited, time on site, referral source, browser and device type — collected via analytics tools (e.g. Google Analytics) in anonymised form.
- Newsletter sign-ups: If you subscribe to our newsletter, we collect your email address.
- Contact form: If you contact us, we collect your name, email address, and the content of your message.
- Cookies: We use cookies for analytics and, where applicable, affiliate tracking. See our Cookie Policy below.
We do not collect financial data, payment information, or government identification.
2. How we use your data
- To deliver and improve our website content
- To send newsletters (only if you subscribed — you can unsubscribe at any time)
- To respond to contact form enquiries
- To track affiliate referrals (for our commercial purposes — does not affect your experience)
- To comply with legal obligations
3. Legal basis for processing (GDPR)
- Legitimate interests: Analytics to improve our site
- Consent: Newsletter subscription and non-essential cookies
- Contract: Responding to your contact form messages
4. Cookies
We use the following types of cookies:
- Essential cookies: Required for the site to function. No consent required.
- Analytics cookies: Google Analytics (anonymised IP). Requires consent in the EU.
- Affiliate tracking cookies: Set when you click affiliate links. Requires consent.
You can manage cookie preferences via our consent banner or your browser settings.
5. Third-party services
We use the following third-party services that may process your data:
- Google Analytics — website usage analytics (Google LLC, US)
- Google Translate — automatic page translation
- Google Fonts — typography
- Affiliate networks — for tracking referral commissions
These providers have their own privacy policies. Where data is transferred outside the EU, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.
6. Your rights (GDPR)
If you are based in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your national data protection authority
To exercise your rights, contact us. We will respond within 30 days.
7. Data retention
Contact form data is retained for up to 12 months. Newsletter subscriber data is retained until you unsubscribe. Analytics data is retained per Google's default retention settings (14 months).
8. Changes to this policy
We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of the site after changes constitutes acceptance.
9. Contact
For privacy-related enquiries, use our contact page with the subject "Privacy".