Legal
Privacy Policy
What we collect, why, who else sees it and how to get rid of it. We do not sell your data.
Last updated: 12 August 2026
Who is responsible
Regards of Wallstreet is operated by Regards of Wallstreet, who is the data controller for the personal data described here.
- Contact: hello@regardsofwallstreet.com
- Established in the United Kingdom.
This policy is written to the UK GDPR and the Data Protection Act 2018. Readers in the EU have the same rights under the EU GDPR, and readers in California have the additional rights set out at the end.
What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email address (newsletter) | To send you the newsletter you asked for. | Consent | Until you unsubscribe, then deleted within 30 days. |
| Name, email, message (contact form) | To read and answer what you sent us. | Legitimate interests: answering people who write to us. | 24 months from the last exchange. |
| Account details (email, password hash, or your Google account identifier if you sign in with Google) | To create and secure your account so you can comment and post. | Performance of a contract (our terms of service). | Until you delete your account. |
| Comments, community posts and votes | To publish what you chose to publish, and to keep the community usable. | Performance of a contract; legitimate interests in moderation and abuse prevention. | Until you delete the content or your account. |
| Analytics: pages viewed, referrer, approximate location from IP, device and browser, and events such as newsletter signups and shares | To count visitors and see which articles get read. | Legitimate interests for Google Analytics and PostHog, which run on every visit. You can object at any time using the contact details below. | Up to 14 months in Google Analytics; up to 12 months in PostHog. |
We do not ask for and do not want financial account details, portfolio holdings, or anything about your investments. Please do not send them.
Who else handles it
We do not sell personal data and we do not share it for anyone else's marketing. These providers process it on our behalf:
- Supabase — database and sign-in, holding accounts, comments, community posts, newsletter addresses and contact messages.
- Vercel — hosting, plus cookieless traffic and performance measurement on every visit.
- PostHog — product analytics (EU region), on every visit.
- Google — Google Analytics on every visit, and Google Sign-In if you choose to use it.
Some of these are based in, or transfer data to, the United States. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on the UK extension to the EU to US Data Privacy Framework where the provider is certified.
We may also disclose data where the law requires it, or to establish or defend legal claims.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time, and withdrawing is as easy as giving it: unsubscribe from any newsletter, or email us to object to the analytics described above.
Email hello@regardsofwallstreet.com and we will respond within one month. There is no charge.
If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EU. We would rather you told us first so we can fix it.
If you are in California
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you.
You have the right to know what we collect and why, to delete it, to correct it, and not to be treated differently for exercising those rights. The categories we collect, the purposes and the recipients are the ones set out above. Use the same email address to make a request.
Children
This site is written for adults and is not directed at children. We do not knowingly collect data from anyone under 13, and accounts are intended for readers aged 18 or over. If you believe a child has given us data, email us and it will be deleted.
Security and changes
Data is held in access-controlled managed services, passwords are stored hashed by our sign-in provider rather than by us, and traffic is encrypted in transit. No system is perfectly secure, and we do not claim otherwise.
If this policy changes materially, the date at the top changes. See also our terms of service and disclosure and risk warning.