How Risk Guard handles your data.

1. Who we are

Risk Guard is operated by M Ahmed. M Ahmed is the data controller for personal data processed through the Risk Guard website, customer and licence services, and support services.

Data controller: M Ahmed
Email: sales@riskguardtrading.com
Website: riskguardtrading.com
Support: riskguardtrading.com/contact/

2. The most important point about broker and trading data

Risk Guard is designed so that the trading-session information it reads from supported broker pages is processed locally in your browser for the purpose of providing Risk Guard’s risk-management functions.

Risk Guard does not transmit personal details or broker trading data from supported broker pages to Risk Guard servers. We do not receive your broker username or password, broker account credentials, individual trade details or aggregated trading history. This includes, where present on the broker platform, instrument or market name, position size, entry price, exit price, limit price, stop price, individual trade profit or loss, aggregate trading profit or loss, trade history or other broker-session trading details.

The extension may read such information locally where it is required to calculate or display Risk Guard features, such as daily risk status, open-position risk, remaining risk allowance, trade count, warnings and stopping conditions. This broker-session information is not sent to riskguardtrading.com for analytics, profiling, advertising or storage.

3. Licence validation

When you enter a Risk Guard licence key, the extension sends that licence key to the Risk Guard licence-validation service at riskguardtrading.com so that we can determine whether the licence is valid and active. The licence key is the credential used for this purpose.

Licence validation does not require the extension to send us your broker username, broker password, personal profile from the broker, individual trades or aggregate trading history.

Like most web services, a request to our licence-validation endpoint may generate ordinary technical server records, such as the requesting IP address, date and time, basic request information, security events and user-agent or similar technical information. We use these records only where reasonably necessary to operate, secure, troubleshoot and prevent misuse of the licence service.

4. Personal data we collect

Depending on how you use Risk Guard, we may collect the following categories of personal data:

• Website and account data: information you provide when creating or managing a Risk Guard account, where account functionality is available.
• Licence data: licence key, licence status, activation or validation status and related technical records needed to operate the licence service.
• Support data: your name, email address, broker name, whether you use a live or demo account, browser, Risk Guard version, issue category, description of the problem, expected behaviour and any screenshots or recordings you choose to provide.
• Subscription and transaction records: subscription plan, payment status, transaction reference and records needed for billing, accounting, fraud prevention and customer service. Payment-card details are intended to be handled by the payment provider rather than stored by Risk Guard.
• Technical and security data: IP address, server logs, timestamps, error or security events and limited device/browser information where required to operate and protect the website, support service and licence-validation service.
• Communications: messages you send to us by email, support form or other customer-service channel.

5. Data stored locally by the extension

Risk Guard uses browser extension storage to keep the settings and local state needed to operate the product. Depending on the version and features you use, this may include risk limits, trading rules, permitted setups, preferences, licence/session status and Risk Guard session records.

Local extension storage is used so settings and daily risk-control state can persist across page reloads and browser sessions. Local Risk Guard data is not sent to Risk Guard servers for advertising, behavioural profiling or unrelated analytics.

Deleting the extension, clearing extension storage or using browser controls may remove locally stored Risk Guard data. Where export or backup features are provided, you are responsible for keeping any copies you choose to create.

6. Why we use personal data and our lawful bases

We use personal data only where we have a lawful basis under applicable data-protection law. The main purposes and lawful bases are:

• Providing the Risk Guard service, validating licences, managing subscriptions and responding to support requests: processing necessary to perform our contract with you or to take steps at your request before entering into a contract.
• Operating, securing and troubleshooting the website and licence service: our legitimate interests in maintaining a secure, reliable and abuse-resistant service.
• Preventing fraud, misuse and security incidents: our legitimate interests in protecting Risk Guard, our users and our services.
• Keeping financial, tax and business records: compliance with legal obligations and, where appropriate, our legitimate interests in maintaining appropriate business records.
• Optional analytics or marketing: consent where consent is required. We do not use optional tracking merely because you install the extension.

Where we rely on legitimate interests, those interests are limited to operating, securing, supporting and improving Risk Guard in ways that users would reasonably expect and that do not override your rights and freedoms.

7. What we do not use your data for

We do not sell personal data. We do not sell broker trading data. We do not use broker-session trading information for advertising, credit scoring, lending decisions or unrelated profiling. We do not use Risk Guard to provide investment advice or make automated trading decisions on your behalf.

8. Who we share personal data with

We may use service providers where reasonably necessary to operate Risk Guard. These may include:

• Hosting and infrastructure providers, currently including Hostinger, to host the Risk Guard website and server-side services.
• Transactional email providers, currently including Brevo, to deliver service and support emails.
• Payment and subscription providers used at checkout to process payments and manage subscriptions. Payment-card information should be processed by the payment provider rather than stored directly by Risk Guard.
• WordPress and WooCommerce-related service providers where required to provide website, account, subscription or customer-service functionality.
• Professional advisers or public authorities where disclosure is reasonably necessary to obtain advice, establish or defend legal rights, comply with law, or respond to a lawful request.

Service providers may process personal data only for the relevant service and subject to their contractual and legal obligations.

9. International transfers

Some service providers may process personal data outside the United Kingdom or European Economic Area. Where a restricted international transfer occurs, we will use an appropriate legal mechanism required by applicable law, such as an adequacy regulation or decision, the UK International Data Transfer Agreement or UK Addendum, EU Standard Contractual Clauses, or another lawful safeguard. You may contact us for further information about safeguards relevant to your data.

10. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements. Our general retention approach is:

• Support requests and related attachments: normally up to 24 months after the request is closed, unless the information is required for an ongoing dispute, security investigation or legal obligation.
• Licence and subscription records: for the duration of the customer relationship and afterwards for as long as needed for account administration, fraud prevention, disputes and legal obligations.
• Financial and transaction records: normally retained for up to 6 years where required for tax, accounting or legal purposes.
• Routine technical and security logs: retained for the shortest period reasonably necessary for security, troubleshooting and abuse prevention, subject to the retention settings of our hosting and infrastructure providers.
• Local extension data: remains in your browser until removed by you, by the extension, by browser controls, or as part of normal product lifecycle behaviour.

Where a fixed period is not appropriate, we determine retention by considering the nature of the data, why it is needed, legal requirements, security risks and whether the purpose can be achieved with less or no personal data.

11. Cookies and similar technologies

The Risk Guard website may use cookies or similar technologies that are strictly necessary for functions such as security, account sessions, checkout or site operation. We will not use non-essential analytics or marketing cookies where consent is required unless an appropriate consent mechanism is provided. The browser extension does not use host permissions to collect general browsing history or track unrelated websites.

12. Security

We use proportionate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure or loss. These measures may include access controls, authenticated service connections, limited data collection, local processing of broker-session data, secure hosting and appropriate service-provider controls. No internet service can guarantee absolute security.

You should never send us broker passwords, one-time security codes, API secrets, full payment-card details or other credentials that are not required for support.

13. Your data-protection rights

Depending on the circumstances and applicable law, you may have rights to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, and to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that was lawful before withdrawal.

Your right to object: where we rely on legitimate interests, you have the right to object to processing based on your particular situation. Where personal data is used for direct marketing, you have the right to object at any time.

To exercise a right, contact sales@riskguardtrading.com. We may need to verify your identity before acting on a request. Rights are subject to the conditions and exemptions in applicable law.

14. Complaints

If you are in the United Kingdom, you have the right to complain to the Information Commissioner’s Office (ICO). Information about making a complaint is available at ico.org.uk.

If the EU GDPR applies to the processing of your personal data, you may also have the right to lodge a complaint with the data-protection supervisory authority in the EEA country where you live, work or where you believe an infringement occurred.

15. Automated decision-making and profiling

Risk Guard does not use personal data to make solely automated decisions that produce legal effects or similarly significant effects about you. Risk Guard’s trading-risk calculations and warnings are product functions based on rules and session information; they are not used by us to determine your creditworthiness, eligibility for financial services or employment, or to profile you for advertising.

16. Children

Risk Guard is intended for adults who are legally permitted to use the trading services with which Risk Guard operates. The service is not directed at children and we do not knowingly seek to collect personal data from children.

17. European Economic Area users

If Risk Guard is offered to individuals in the European Economic Area in circumstances where the EU GDPR requires the appointment of an EU representative under Article 27, Risk Guard will appoint a representative and publish the representative’s contact details in this policy. This does not affect your right to contact us directly using the details above.

18. Changes to this policy

We may update this policy when the product, service providers, legal requirements or our data practices change. The effective date at the top of the policy will be updated when a material change is made. Where appropriate, we will provide additional notice of significant changes.

19. Contact us

For privacy questions, data-protection requests or concerns about how Risk Guard handles personal data, contact:

M Ahmed
sales@riskguardtrading.com
Risk Guard Support