Legal
Privacy notice
We collect the minimum needed to run Fundology, we do not sell personal data, and we process it under UK GDPR and the Data Protection Act 2018.
What we collect and why
- Your email address, if you open an account: to sign you in (we email a one-time code) and to send account messages. Lawful basis: providing the service you signed up for.
- What you keep in your account: watchlist, notes, alerts, saved searches, ISA allowance records and API keys (stored as a one-way hash). Lawful basis: providing the service.
- Security details: your IP address and browser type when you sign in, to protect accounts and limit abuse. Lawful basis: our legitimate interest in keeping the service secure.
- A cookieless page count: each page view is counted from the page address, IP address and browser type, which are turned into daily-salted, non-reversible totals; the first page of a visit also records the referring site, campaign tag and country. No cookie is set and nothing that identifies you is stored on your device. Lawful basis: legitimate interest in knowing which pages are used.
- Google Analytics, only if you accept it in the cookie choice. It is off by default and you can switch it off at any time with “Cookie settings” at the foot of every page. Lawful basis: consent.
Who else handles it
Our hosting provider, Cloudflare (which sits in front of the site), the service that delivers our emails, and Google if you accept analytics. Each handles data only to provide its service to us. We do not sell or rent personal data, and we do not share it with fund managers or brokers.
How long we keep it
Account data is kept until you delete your account. Deleting it (under Account in the app, or Settings on the web) removes your account, watchlist, alerts, notes, saved searches and API keys straight away. A sign-in session lasts up to 90 days unless you sign out.
Your rights
You can ask for a copy of your data, and ask us to correct it, delete it, restrict it or object to how we use it. Email [email protected] from the address on your account and we will reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office (ICO).
The cookies and similar storage we use are listed on the cookies page.
This notice is kept under review and may be revised after legal review; the date above changes when it does.