Privacy Policy

PRIVACY POLICY

ISLAND TRADER – Trading Psychology, Articles, Consultations, Ebook

Effective Date: December 20, 2025
Last Updated: December 20, 2025
Owner: Piotr Chuchrak (WYSPA)
Email:  staff@wyspatrader.pl
Website:  https://wyspatrader.pl
Country of Operation: United Kingdom

1. INTRODUCTION AND LEGAL COMPLIANCE

1.1 This Privacy Policy describes how we collect, process, store and protect your personal data.

1.2 The WYSPA TRADER website provides the following services:

  • E-book sales (digital products)

  • Publication of educational articles

  • Live Chat (Advice)

  • Consultations (individual counseling)

  • Newsletter

  • Online Community (Discord)

1.3 We commit to full compliance with:

  • GDPR (EU Regulation 2016/679)

  • Data Protection Act 2018 (UK)

  • Privacy and Electronic Communications Regulations 2003 (PECR)

  • UK GDPR (post-Brexit)

  • ePrivacy Directive 2002/58/EC

1.4 If you have any questions about privacy – staff@wyspatrader.pl

2. DATA CONTROLLER

Responsible for processing personal data:

3. WHAT DATA DO WE COLLECT AND WHY?

3.1 Data collected at the stage of purchasing an e-book

Data Objective Mandatory Legal basis
Name and surname Identification, product delivery ✅ Yes Contract (Art. 6(1)(b) GDPR)
E-mail E-book shipping, communication ✅ Yes Contract (Art. 6(1)(b) GDPR)
Country VAT calculation ✅ Yes Legal obligation (Art. 6(1)(c) GDPR)
Purchase history Customer service, support ✅ Yes Contract (Art. 6(1)(b) GDPR)
Phone number Optional contact ❌ No Consent (Art. 6(1)(a) GDPR)

3.2 Data collected at the chat/consultation registration stage

Data Objective Mandatory Legal basis
Name Communication ✅ Yes Agreement/Legitimate interest
E-mail Confirmation, Follow-up ✅ Yes Agreement
Description of the problem Providing advice ✅ Yes Agreement
Phone number Direct contact ❌ No Agreement

3.3 Data collected automatically on the website

Data type What we collect Objective Storage time
IP address Your internet address Security, analytics 26 months (Google)
Cookies Session ID, preferences Functionality, better experience Up to 1 year
Device Browser type, OS, resolution Analytics, UX optimization 26 months
Behavior Pages visited, time on page Google Analytics 26 months
Tracking pixel Actions on the website Remarketing (Facebook, Google) As long as the pixel works
File log When did you visit, what did you download? Server security 30 days

3.4 Data collected in the newsletter

Data Objective Mandatory Legal basis
E-mail Sending the newsletter ✅ Yes Consent (Art. 6(1)(a) GDPR)
Name (optional) Personalization ❌ No Agreement
Events (open, click) Campaign analytics ✅ Yes Legitimate interest

3.5 Data collected on Discord/community

Data Objective Mandatory Legal basis
Username Identification in chat ✅ Yes Agreement
The news Conversation archive ✅ Yes Legitimate interest
Profile/Avatar Display in chat ❌ No Agreement

4. LEGAL BASIS FOR DATA PROCESSING

We process data based on:

Base What is Example
Agreement (Art. 6(1)(b)) Execution of the sales contract Ebook shipping
Consent (Art. 6(1)(a)) Explicit user consent Newsletter, analytical cookies
Legal obligation (Art. 6(1)(c)) The law requires VAT, tax obligations
Legitimate interest (Art. 6(1)(f)) Our business interest Security, anti-fraud

5. WHO DO WE SHARE DATA WITH?

5.1 We do not sell data

We emphasize: WE DO NOT SELL your data to anyone.

5.2 We share data with the following partners (if necessary):

Partner Data Reason Agreement
Stripe/PayPal Email, country, amount Payment processing Yes (DPA)
Email provider (Mailchimp/Brevo) E-mail Newsletter (if you sign up) Yes (DPA)
Google Analytics IP, behavior (anonymized) Website analytics Yes (DPA)
Facebook Pixel IP, behavior Remarketing (if pixel is active) Yes (DPA)
Discord Name, messages Online community Yes (DPA)
Hosting/Cloud (e.g. AWS) All technical data Safe storage Yes (DPA)
Psychologist (if counseling) Email, Consultation History Professional advice Yes (NDA + GDPR)
UK Tax Office Transaction details (name, email, amount) Tax liability Yes (right)

5.3 All partners:

  • Obliged to process data in accordance with the GDPR

  • They have signed Data Processing Agreements (DPA)

  • They cannot share the data further

6. DATA SECURITY

6.1 Technical security measures:

🔒 SSL/TLS Encryption – All communication encrypted
🛡️ Firewall & WAF – Attack protection
🔐 Passwords – Hashing (bcrypt, minimum 10 rounds)
📋 Backup – Daily backups
🚨 24/7 Monitoring – Anomaly alerts
✅ Regular patches – Security updates
🔑 Access control – Authorized users only

6.2 If a data breach occurs:

  • We will inform you without undue delay (maximum 72 hours)

  • We will notify the regulator (ICO in the UK)

  • We will describe the nature of the breach, the data at risk, and the possible consequences

7. HOW LONG DO WE STORE DATA?

Data type Storage time Reason What happens next
Order details 7 years UK/EU tax liability Automatic deletion
Email (newsletter) Until you unsubscribe Subscription Immediate deletion
Chat/consultation 3 years Possible complaints Removal
Cookies Up to 1 year User preferences Auto-expire
Google Analytics 26 months Analytics Google auto-deletes
File log (IP) 30 days Server security Automatic cleaning
Backups 30 days Data recovery Removal
Discord messages While you are on the server Conversation history Deleted after leaving

8. YOUR RIGHTS (GDPR + UK GDPR)

You have the right to:

✅ Right of access (Art. 15)

  • You can request a copy of ALL data we hold about you

  • Cost: Free (1x per year), then £10-15 per request

  • Time: We will respond within 30 days

  • How: Email to staff@wyspatrader.pl with the subject "DATA ACCESS REQUEST"

✏️ Right to rectification (Art. 16)

🗑️ Right to erasure (Article 17) – “The right to be forgotten”

  • You can request the deletion of your data

  • Exceptions: Tax data (7 years), data required by law

  • Cost: Free

  • How: Email with the subject "DATA DELETION REQUEST"

📵 Right to restriction of processing (Article 18)

↪️ Right to data portability (Article 20)

  • You will receive your data in electronic format (JSON, CSV, XML)

  • You can transfer them to another supplier

  • Cost: Free

  • Format: JSON, CSV, XML

🚫 Right to object (Art. 21)

  • You can object:

    • Marketing (newsletter, remarketing)

    • Profiling

    • Automated decision-making

  • Cost: Free

  • How: Click "Unsubscribe" in email or staff@wyspatrader.pl

🤖 Right not to be subject to automated decision-making (Article 22)

  • We will not automatically deny you services/access

  • All decisions will be made by man

📧 Right to withdraw consent (Art. 7(3))

  • You can withdraw your consent to marketing/cookies at any time

  • Cost: Free

  • How: "Unsubscribe" link in every email

9. COOKIES

9.1 What cookies do we use?

Type Purposefulness Does it require consent? Example
Essential Website functionality ❌ No Session, CSRF security
Preferences Your settings ✅ Yes Language, dark/light theme
Analytical Google Analytics ✅ Yes Which websites do you visit?
Marketing Remarketing/Facebook Pixel ✅ Yes Facebook, Google Ads

9.2 Cookie banner

  • On your first visit, you will see a cookie banner

  • You can accept or decline (except essential)

  • The "Cookie Settings" link is always available in the footer

9.3 How to disable cookies

  • Chrome: Settings → Privacy → Cookies

  • Safari: Preferences → Privacy → Cookies

  • Firefox: Preferences → Privacy → Cookies

  • Disabling may affect the functionality of the site

10. MARKETING AND COMMUNICATIONS

10.1 Newsletter

  • We guarantee referrals - you can unsubscribe at any time

  • Frequency: Max 2-3 times a week

  • "Unsubscribe" link in every email

  • You can unsubscribe by text message or email

10.2 Remarketing

  • We show you ads on Facebook/Google (if you agree)

  • You can disable cookies in your settings or:

    • Facebook: Settings → Ads → Ad Preferences

    • Google: Ad Settings

10.3 Automated emails

  • ✅ Order confirmation

  • ✅ Link to download the ebook

  • ✅ Access Reminder

  • ✅ Feedback Questions (optional)

10.4 SMS (if you agree)

  • Order notifications

  • Optional special offers

  • You can unsubscribe: SMS STOP or email

11. LINKS TO THIRD PARTIES

The page contains links to:

  • YouTube – may collect data (YouTube policy)

  • Discord – may use data (Discord policy)

  • Social media (Facebook, Instagram, LinkedIn) – may use pixels

  • Trading platforms – may have their own policies

We are not responsible for the privacy policies of third parties. Please read their policies before clicking.

12. CHILDREN

The website is not intended for persons under 18 years of age.

If you are under 18:

  • ❌ Don't buy, don't register, don't subscribe

  • If you want parental permission, the parent should make the purchase

13. INTERNATIONAL DATA TRANSFERS

13.1 Shipping outside the UK/EU

  • Your data may be processed on servers outside the UK/EU

  • We provide the appropriate level of protection:

    • Standard Contractual Clauses (SCCs)

    • Adequacy Decisions (for safe countries)

13.2 Destination countries

  • USA (Stripe, PayPal, Google)

  • EU (partners in Europe)

13.3 Security

  • As strong as UK/EU

  • We are monitoring the need for SCCs

14. DISCLAIMER

14.1 Advice: Advice provided by WYSPA TRADER/psychologist does not constitute official financial or medical advice. Trading involves the risk of capital loss.

14.2 We are not financial advisors. Please consult a licensed financial advisor before making any investment decisions.

14.3 We are not responsible for:

  • Financial losses resulting from trading

  • Loss of mental health (if you refuse professional help)

  • User Errors in Trading

15. POLICY UPDATES

15.1 We may change this policy at any time.

15.2 We communicate important changes by email or banner on the website.

15.3 Any change will take effect upon publication.

15.4 By continuing to use the website, you accept the changes.

16. CONTACT AND COMPLAINTS

Questions about privacy?

📧 Email:  staff@wyspatrader.pl
🌐 Website:  https://wyspatrader.pl
💬 Chat: [link to chat on the website]

Want to file a complaint?

If you are dissatisfied with our data processing, you can contact the regulator:

Information Commissioner's Office (ICO) – United Kingdom

For EU customers – contact your own regulator (e.g. UODO in Poland)

17. APPLICABLE LAW

17.1 This policy is subject to UK .

17.2 In the event of a dispute, the jurisdiction of the English courts shall apply.

17.3 For EU customers – additional protection under the GDPR.

SUMMARY – SIMPLIFIED IN WORDS

✅ We collect: Email, name, country (to provide services)
✅ We protect: Encryption, firewall, safe servers
✅ We share: Only with payment processors, hosting (secure)
✅ We store: 7 years (taxes), then we delete
✅ We give you control: Unsubscribe, correct data, request deletion
✅ No spam: Newsletter only if you agree
✅ Security: SSL, firewall, 24/7 monitoring

© 2025 Piotr Chuchrak (TRADER ISLAND). All rights reserved