Editing Stockhub:Privacy policy (section)

==LEGAL BASIS FOR DATA COLLECTION==

=== Types of Data / Privacy Policy Scope ===

“Personal Data” means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped together below. Not all of the following types of data will necessarily be collected from you but this is the full scope of data that we collect and when we collect it from you:

* Profile/Identity Data: This is data relating to your first name, last name, gender, date of birth.
* Contact Data: This is data relating to your phone number, addresses, email addresses, phone numbers.
* Marketing and Communications Data: This is your preferences in receiving marketing information and other information from us.
* Billing Data: This is information relating to your debit and credit card information such as the name attached to your payment details and your billing address.
* Financial Data: These are your banking details e.g. your account number and sort code.
* Transactional Data: This is information of details and records of all payments you have made for our services or products.
* Technical Data: This is your IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to engage with us.
* Customer Support Data: This includes feedback and survey responses.
* Usage Data: information about how you use our website, products and services. We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

The Legal Basis for Collecting That Data There are a number of justifiable reasons under the GDPR that allow collection and processing of Personal Data. The main avenues we rely on are:

* “Consent”: Certain situations allow us to collect your Personal Data, such as when you tick a box that confirms you are happy to receive email newsletters from us, or ‘opt in’ to a service.
* “Contractual Obligations”: We may require certain information from you in order to fulfil our contractual obligations and provide you with the promised service. “Legal Compliance”: We’re required by law to collect and process certain types of data, such as fraudulent activity or other illegal actions.
* “Legitimate Interest”: We might need to collect certain information from you to be able to meet our legitimate interests - this covers aspects that can be reasonably expected as part of running our business, that will not have a material impact on your rights, freedom or interests. Examples could be your address, so that we know where to deliver something to, or your name, so that we have a record of who to contact moving forwards.