Privacy Policy for Investment Case UK

Last Updated: 7th June 2025

Investment Case UK (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website at investmentcases.com (the “Website”) and use our financial market data subscription services (the “Service”).

We adhere to the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Investment Case UK is a financial market data provider offering a data product subscription model.

Contact Details:

• Business Name: Investment Case UK
• Email: data@investmentcases.com
• Website: investmentcases.com

2. What Personal Data We Collect and Why We Collect It

We collect personal data for specific purposes to provide and improve our Service.

2.1 Information You Provide to Us Directly

• Account Registration & Subscription: When you subscribe to our Service, we collect your name, email address, billing address, and payment information. This is necessary to process your subscription, deliver the Data, and manage your account.
• Communications: If you contact us via email, support forms, or other channels, we collect your contact details and the content of your communication to respond to your queries and provide customer support.

2.2 Information Collected Automatically

• Usage Data: When you visit our Website, we automatically collect certain information about your device and how you interact with our site, including your IP address, browser type, operating system, referral source, pages viewed, and access times. This helps us understand how our Website is used and improve its functionality.
• Cookies: Our Website uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and provide analytics.
  • Strictly Necessary Cookies: Essential for the Website’s operation (e.g., remembering login status, managing your shopping cart).
  • Analytical/Performance Cookies: Help us understand how visitors interact with the Website by collecting and reporting information anonymously.
  • Functionality Cookies: Used to remember choices you make (e.g., language preferences) to provide enhanced, more personal features.
  • Targeting/Advertising Cookies: Used to deliver more relevant advertisements to you and your interests.
  You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Website.

2.3 WordPress Specific Data Collection

As our Website is built on WordPress, certain features may collect additional data:

• Comments: When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. After approval of your comment, your profile picture is visible to the public in the context of your comment.
• Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
• Contact Forms: If you use a contact form, the submissions are typically retained for a certain period for customer service purposes, but we do not use the information submitted through them for marketing purposes unless explicitly stated.

3. How We Use Your Data (Legal Basis for Processing)

We process your personal data under the following legal bases:

• Contractual Necessity: To fulfil our obligations under your Subscription agreement, including processing payments, delivering weekly Excel data files, and managing your account.
• Legitimate Interests: To operate and improve our business, enhance the Service, analyse usage patterns, detect and prevent fraud, and conduct direct marketing (where permitted by law and your preferences). We balance our legitimate interests against your rights and freedoms.
• Legal Obligation: To comply with applicable UK laws and regulations, such as tax laws, anti-money laundering regulations, and financial reporting requirements.
• Consent: Where we ask for your explicit consent for specific processing activities (e.g., for certain marketing communications), you have the right to withdraw your consent at any time.

4. Who We Share Your Data With

We may share your personal data with the following categories of third parties:

• Payment Processors: We use reputable third-party payment processors (e.g., Stripe, PayPal) to handle subscription payments. We do not store your full payment card details on our servers. Your payment information is securely processed by the payment provider, who will have their own privacy policy governing their handling of your data.
• Email Service Providers: For the weekly delivery of Excel data files and other essential service-related communications (e.g., Mailchimp, SendGrid), we use third-party email service providers.
• Analytics Providers: We use analytics services (e.g., Google Analytics) to understand Website usage. These services may collect information about your browsing activities.
• Hosting Providers: Our Website data is stored with our hosting provider.
• Professional Advisors: We may share data with our legal, accounting, or other professional advisors where necessary for legal or business purposes.
• Law Enforcement & Regulators: We may disclose your personal data if required by law, court order, or governmental regulation, or if we believe such action is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

We ensure that any third parties we share your data with are obligated to protect your data in accordance with data protection laws and our privacy standards.

5. How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Subscription Data: Retained for the duration of your Subscription and for a period thereafter as required by law (e.g., for financial records, typically 6 years after the tax year end).
• Communications Data: Retained for as long as necessary to manage customer relationships and resolve disputes.
• Usage and Analytics Data: Retained for periods consistent with our analytical needs, typically anonymised after a certain period.
• Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

6. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

• The right to be informed: About how your personal data is being used.
• The right of access: To your personal data (a “Subject Access Request”).
• The right to rectification: To have inaccurate personal data corrected.
• The right to erasure (“right to be forgotten”): To have your personal data deleted in certain circumstances.
• The right to restrict processing: To limit how your personal data is used.
• The right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format.
• The right to object: To certain types of processing (e.g., direct marketing).
• Rights in relation to automated decision-making and profiling: To not be subject to a decision based solely on automated processing.
• The right to withdraw consent: Where we rely on your consent to process your data, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at data@investmentcases.com. We may require proof of identity to process your request.

7. How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Using secure servers and encryption (SSL/TLS) for data transmission.
• Implementing access controls and authentication mechanisms.
• Regularly reviewing our security practices.
• Ensuring third-party service providers also maintain robust security standards.

8. Data Transfers Outside the UK/EEA

Some of our third-party service providers (e.g., email service providers, analytics providers) may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO), or by ensuring the receiving country has adequate data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our Website and, where appropriate, by email. Your continued use of the Service after such changes constitutes your acceptance of the revised Privacy Policy.

10. Complaints

If you are not satisfied with how we have handled your personal data, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner’s Office (ICO)

• Website: ico.org.uk
• Phone: 0303 123 1113