Privacy Policy

1. Who We Are & Scope

WizInvestments ("we", "us", "our") operates the website wizinvestments.com ("the Platform"). This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you access or use the Platform, and describes the rights available to you in respect of your personal data.

By registering for or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

2. Information We Collect

Information you provide directly:

• Email address — collected at registration; used as your account identifier.
• Password — stored only as a cryptographic hash (bcrypt). We cannot recover or read your plaintext password.
• Portfolio data — any holdings, watchlist items, or portfolio entries you voluntarily add to the Platform.
• Contact enquiries — name, email, and message content submitted through our contact form.
• Legal acceptance records — timestamp, IP address, and version reference recorded when you accept our Disclaimer & Risk Warning, as required for legal record-keeping.

Information collected automatically:

• Session cookies — essential cookies that maintain your authenticated login session. We do not use advertising, behavioural tracking, or analytics cookies.
• Server logs — standard web server logs may record your IP address, browser type, and pages accessed, retained for security and operational purposes only.

We do not collect payment information, government-issued IDs, financial account details, biometric data, or any special category data as defined under applicable privacy law.

3. How We Use Your Information

We use the information we collect solely for the following purposes:

• To create, maintain, and authenticate your account;
• To send account verification and password reset emails;
• To communicate important Platform updates, security notices, or changes to our legal terms;
• To respond to your enquiries submitted through our contact form;
• To maintain legal records of your acceptance of our Disclaimer & Risk Warning;
• To detect, prevent, and investigate security incidents, fraud, or abuse;
• To comply with applicable legal obligations.

We will never use your information for automated profiling, targeted advertising, or any purpose not described in this policy without your prior explicit consent.

4. Legal Basis for Processing

Where applicable privacy regulations (including GDPR) require us to identify a legal basis for processing your personal data, we rely on the following:

• Contractual necessity — processing your email and account data to provide the Platform services you have requested;
• Legitimate interests — security monitoring, fraud prevention, and Platform improvement;
• Legal obligation — retaining legal acceptance records as required by applicable law;
• Consent — where you have explicitly opted in to receive communications beyond those necessary for account operation.

5. Data Sharing & Disclosure

We do not sell, rent, trade, or share your personal information with third parties for commercial or marketing purposes. We may disclose your information only in the following limited circumstances:

• Service providers — third-party infrastructure providers (e.g. hosting) who process data solely on our behalf and under strict confidentiality obligations;
• Legal requirements — where disclosure is required by law, court order, or government authority;
• Protection of rights — where necessary to protect the rights, property, or safety of WizInvestments, its users, or the public;
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may transfer as part of that transaction, subject to the same privacy protections.

6. Third-Party Services & Embeds

The Platform embeds TradingView widgets for live market data display. These widgets may collect data subject to TradingView's own privacy policy. We encourage you to review it at tradingview.com/privacy-policy.

Market data is also sourced from Yahoo Finance APIs. Data obtained via these services is used solely to display market information within the Platform and is not combined with your personal data for profiling purposes.

7. Cookies & Tracking

We use only strictly necessary cookies — specifically, WordPress session cookies required to maintain your authenticated login state. These cookies are session-based and expire when you close your browser or log out.

We do not use advertising cookies, behavioural tracking cookies, third-party analytics platforms (such as Google Analytics), social media pixels, or any other non-essential tracking technologies.

8. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Legal acceptance records (disclaimer and terms acceptance timestamps) are retained for the duration required by applicable law.

When your data is no longer required, it is securely deleted or anonymised in accordance with our data retention procedures.

9. Data Security

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• HTTPS/TLS encryption for all data in transit;
• bcrypt hashing for all stored passwords;
• WordPress nonce-protected forms to prevent CSRF attacks;
• Server-side input validation and sanitisation;
• Restricted database access with principle of least privilege;
• Automatic session invalidation after 48 hours of inactivity.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you;
• Right to rectification — request correction of inaccurate or incomplete personal data;
• Right to erasure — request deletion of your account and associated personal data;
• Right to restriction — request that we restrict processing of your data in certain circumstances;
• Right to data portability — request your data in a structured, machine-readable format;
• Right to object — object to processing based on our legitimate interests;
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at wizinvesta@gmail.com. We will respond within 30 days. Note that certain legal obligations (such as retention of acceptance records) may limit our ability to delete all data immediately upon request.

11. Children's Privacy

The Platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take prompt steps to delete that information. If you believe a minor has provided us with personal data, please contact us immediately at wizinvesta@gmail.com.

12. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence. Where personal data is transferred internationally, we take appropriate steps to ensure that such transfers are conducted in accordance with applicable privacy laws and that adequate protections are in place.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify registered users of material changes via email or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page indicates when this policy was most recently revised.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact & Data Controller

For privacy-related questions, requests to exercise your data rights, complaints, or any other enquiries regarding this Privacy Policy, please contact us at: