Legal
Privacy Policy
1. Introduction
We (We, US, Our) are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (The Site) and use our services (the Services)
We act as the data controller for personal data processed through the Site. For questions or to exercise your data protection rights, contact us at privacy@brokercue.com.
2. What data we collect
We collect only the data required to operate the Site and provide the Services. We do not sell your personal data to third parties.
2.1 Information You Provide Directly
- Newsletter subscriptions. When you subscribe to our newsletter, we collect your email address, preferred language, and market. You may unsubscribe at any time.
- Direct messages. If you contact us by email, we process your email address and the content of your message to respond to your inquiry.
- Quiz responses. When you use our broker finder tool, we process your responses to provide tailored broker recommendations. Quiz responses are processed temporarily and are not retained in a manner that identifies you personally after your session ends, unless you consent to analytics cookies.
2.2 Information Collected Automatically
- Consent preferences. We store your cookie and analytics consent preferences to ensure they are respected during future visits.
- Market and language context. We determine your country and preferred language based on your browser settings, IP-derived geolocation (country-level only), or your explicit selection.
- Affiliate click and conversion attribution. When you click a broker link, we record a pseudonymous click event to attribute conversions for affiliate reporting.
- Analytics events (consent-gated) When you consent to analytics cookies, we collect page views, button clicks, quiz completions, calculator usage, and broker comparison interactions. All analytics data is pseudonymized.
- Ad placement impressions and interactions. When you view or click on a sponsored placement or advertisement, we record pseudonymous or aggregated event data for reporting and billing.
3. Cookies and Similar Technologies
We use essential cookies and consent-based analytics cookies. We do not use Google Analytics or Facebook Pixel.
3.1 Essential Cookies (Always Active)
- Session cookie. Maintains your session state while browsing.
- Cookie consent. Stores your cookie preferences. Stored for 180 days.
- Market and language cookie. Remembers your selected country and language. Stored for 180 days.
- CSRF token. A security cookie that protects against cross-site request forgery. Expires with the session.
3.2 Analytics Cookies (Consent Required)
When you accept analytics cookies, we use a first-party analytics system to collect pseudonymous usage data. You can withdraw your analytics consent at any time by clicking Cookie settings in the page footer.
4. Legal basis for processing
- Consent (Article 6(1)(a)) Analytics cookies, newsletter subscriptions, and non-essential data processing require your explicit consent.
- Legitimate interests (Article 6(1)(f)) Essential cookies, market and language resolution, affiliate click attribution, and security measures are processed based on our legitimate interest in operating and improving the Site.
- Legal obligation (Article 6(1)(c)) We may process data to comply with legal requirements.
5. How we share your data
We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:
- Affiliate networks. When you click through to a broker, the broker or its affiliate network receives an anonymized click ID to track conversions. They do not receive your personal information from us.
- Service providers. We engage third-party infrastructure providers (for hosting, email delivery, and monitoring) under Data Processing Agreements.
- Legal requirements. We may disclose data if required by law, court order, or governmental authority.
6. Data retention
- Newsletter subscriptions. Until you unsubscribe.
- Analytics events. Raw analytics events are rolled up and deleted under the analytics cleanup schedule.
- Affiliate click data. Click records without a conversion may be deleted after 180 days.
- Direct messages. 12 months after the inquiry is resolved.
7. Your rights
Under the GDPR and equivalent laws, you have the following rights regarding your personal data: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.
To exercise any of these rights, email us at privacy@brokercue.com. We will respond within one month.
8. International data transfers
Our servers are located within the European Economic Area (EEA). We do not transfer personal data outside the EEA unless adequate safeguards are in place.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit, hashing of API tokens, security reviews, and access controls.
10. Children's Privacy
Our site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and notify newsletter subscribers of material changes by email.
12. Contact
For questions about this Privacy Policy, contact us at privacy@brokercue.com.