1. Who we are
Folk Ledger Studio Ltd is the data controller for personal data processed through this website. We publish educational material about evaluating traders and trading services. Our work includes checklists, articles, and explanations that help visitors compare offers and ask better questions. We do not manage client funds and we do not provide personalised investment advice.
Controller details: Folk Ledger Studio Ltd, 12 Baker Street, London, W1U 3BH, United Kingdom. For privacy matters, you can email [email protected] or write to the same postal address marked for the attention of “Privacy”.
2. Personal data we collect
We collect data that is reasonably necessary to operate the site, respond to messages, and understand how our content is used. We aim to minimise collection and avoid sensitive categories. Depending on how you interact with the site, we may collect:
- Identity and contact data: full name and email address when you subscribe to updates; name and email when you contact us. If you choose to include a phone number in a message, we may process it to reply.
- Message content: any information you place in a form field or email to us, including the subject, body text, and attachments you send.
- Technical and usage data: IP address, approximate location derived from IP (country or region level), browser type, device type, operating system, referral URL, pages viewed, timestamps, and interactions such as clicks and scroll depth when analytics is enabled.
- Cookie and identifiers: small identifiers stored in your browser such as a cookie-consent choice, session identifiers, and analytics identifiers if you accept analytics cookies.
We do not intentionally collect special category data (such as health information, political opinions, or biometric data). Please do not submit sensitive data through our forms. If you send it anyway, we will handle it with care and delete it where feasible and lawful.
3. How we collect data
We collect data through direct inputs you provide and through technical signals generated when your device connects to the site. In practice, the main collection methods are:
Web forms
When you submit a form (for example, the optional email subscription), the data is processed to complete your request. We collect only the fields shown. Each form includes a link back to this Privacy Policy so you understand how your details will be used.
Cookies and similar technologies
We store a cookie consent choice in local storage so your selection is remembered. If you accept analytics, additional cookies or identifiers may be used to measure visits and improve content structure.
Analytics tools
We may use Google Analytics 4 to understand page usage, and we may use Meta Pixel for measuring campaign performance when we run ads. These tools are enabled only when cookies are accepted for analytics and marketing where required.
Server logs
Like most websites, our hosting infrastructure automatically records log data for security and reliability: IP address, request time, requested page, and response code. These logs help prevent abuse and diagnose technical issues.
4. Legal bases for processing (GDPR Art. 6)
If you are in the UK or EEA, we process personal data under the legal bases set out in GDPR Article 6. Different data uses rely on different bases:
Consent (Art. 6(1)(a))
We rely on consent for non-essential cookies and for marketing emails. If you subscribe to updates, your consent is recorded through the form’s consent tick box. You can withdraw consent at any time by unsubscribing or emailing us. Withdrawal does not affect processing that took place before the withdrawal.
Contract or steps prior to a contract (Art. 6(1)(b))
If you contact us with a request related to our educational services or materials, we may process your name and contact details to take steps at your request and to respond. This can include answering questions about our content or providing requested information.
Legitimate interests (Art. 6(1)(f))
We process limited technical data, server logs, and basic security signals to run the website safely, prevent fraud, and protect our systems. Where we rely on legitimate interests, we balance our operational needs against your rights and freedoms, and we use minimisation and short retention as safeguards.
Legal obligation (Art. 6(1)(c))
In some cases, we may need to keep records to comply with applicable law, respond to lawful requests, or handle disputes. We limit such processing to what is required.
5. Purposes of processing
We use personal data for specific, limited purposes connected to operating an educational website. We do not use personal data in a way that is incompatible with these purposes. Main purposes include:
- Service delivery: delivering website pages, remembering cookie consent choices, and providing requested information.
- Customer support: responding to messages you send, troubleshooting issues, and keeping a record of communication where appropriate.
- Marketing (consent-based only): sending you optional educational updates if you subscribed and consented, and measuring performance of campaigns where you accepted marketing cookies.
- Site improvement and analytics: understanding which pages are useful, how visitors navigate, and what content is unclear. This helps us improve the structure and clarity of guides such as the checklist pages.
- Security and fraud prevention: protecting the site, limiting automated abuse, and monitoring for suspicious traffic patterns.
- Legal compliance: maintaining records required by law and handling complaints or disputes.
6. Retention periods
We keep personal data only as long as needed for the purposes described in this policy. Retention depends on the data category and why we collected it. Standard periods are:
If we must keep data longer due to legal obligations or active disputes, we will restrict access and keep it only for as long as necessary.
8. International transfers
Our company is based in the United Kingdom. Some of our service providers may process data outside the UK or European Economic Area. When personal data is transferred internationally, we use safeguards such as:
- Transfers to countries with an adequacy decision where applicable.
- Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreement (IDTA) style provisions with relevant suppliers.
- Additional technical and organisational measures appropriate for the risk, such as access controls and minimisation.
If you want more information about specific safeguards used for a particular transfer, contact us at [email protected].
9. Your rights (GDPR)
Subject to conditions and exceptions under GDPR and UK GDPR, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you and information about how we use it.
Rectification
Ask us to correct inaccurate or incomplete personal data.
Erasure
Ask us to delete your data where we no longer need it or where consent has been withdrawn.
Restriction
Ask us to limit processing in certain cases, such as a dispute about accuracy.
Portability
Receive your data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
Object
Object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.
Withdraw consent
If we rely on your consent (for example, for email updates or non-essential cookies), you can withdraw it at any time. For emails, use the unsubscribe link in the message or email [email protected]. For cookies, use the banner choice and your browser controls. Withdrawing consent does not affect prior processing.
How to exercise your rights
Email your request to [email protected] and include the email address you used with us. We may request additional information to verify identity, but we will keep verification proportionate. We aim to respond within one month, and we will tell you if an extension is needed for complex requests.
Right to complain
If you are in the UK, you have the right to complain to the Information Commissioner’s Office (ICO). Website: https://ico.org.uk/. We encourage you to contact us first so we can try to resolve your concern promptly.
11. Children’s privacy
Our website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us at [email protected] and we will take steps to delete the data where appropriate and lawful.
12. Policy updates
We may update this Privacy Policy to reflect changes in the site, legal requirements, or how we use service providers. If the changes are material, we will provide a clear notice on the site and, where appropriate, notify subscribers by email. The “Last Updated” date at the top of this page shows when the policy was most recently revised.
If you continue to use the website after an update, you acknowledge that you have had an opportunity to review the updated policy. You can always contact us with questions.
13. Contact and DPO
Folk Ledger Studio Ltd does not currently appoint a formal Data Protection Officer (DPO) because our processing activities do not require one under GDPR. We do, however, maintain a dedicated privacy contact for requests and questions.
Privacy contact
Email: [email protected]
Postal: Privacy Team, Folk Ledger Studio Ltd, 12 Baker Street, London, W1U 3BH, United Kingdom
Phone: +44 20 7946 0958
For general site questions that are not privacy-related, you can use [email protected].