This Privacy Policy explains how Filippo Kansikas (“we”, “us”, “our”) collects, uses, stores and protects personal data when you use quantrading.space (https://quantrading.space) — including the blog, course, account area, newsletter and coaching application forms.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable EU data-protection law.
1. Data controller
| Controller | Filippo Kansikas |
| Website | https://quantrading.space |
| Contact email | [mail@quantrading.space](mailto:mail@quantrading.space) |
| Location | European Union |
If you have questions about this policy or your data rights, contact us at mail@quantrading.space.
2. What data we collect
We collect only the data needed to operate the site and deliver the services you request.
2.1 Account registration and login
When you create an account or sign in, we collect:
- Email address
- Display name (registration only)
- Password (stored as a one-way hash — we never store plain-text passwords)
- Course enrollment status and lesson progress
- Account creation date
Purpose: Provide access to the course, track progress, authenticate you.
2.2 Course purchase (PayPal)
When you buy the course, payment is processed by PayPal. We do not store your card or bank details. PayPal may share with us:
- Transaction ID and payment status
- Email address associated with the purchase
- Amount paid and currency
Purpose: Confirm payment and grant course access.
2.3 Newsletter subscription
When you subscribe to the newsletter, we collect:
- Email address
- Subscription timestamp
- Referring page URL (if available)
Purpose: Send updates about new content. You can unsubscribe at any time.
2.4 Coaching applications
When you apply for 1:1 coaching, we collect:
- Name
- Email address
- Experience level
- Selected coaching tier
- Your message / goals
Purpose: Review your application and respond if there is a fit.
2.5 Technical and usage data
When you visit the site, our server may automatically log:
- IP address
- Browser type and version
- Pages visited and timestamps
- HTTP referrer
Purpose: Security, abuse prevention, and basic operation of the website.
We do not use third-party advertising trackers or analytics platforms (such as Google Analytics) on this site.
3. Legal bases for processing (GDPR Art. 6)
| Processing activity | Legal basis |
|---|---|
| Account creation & course access | Contract — necessary to provide the service you signed up for |
| Course payment verification | Contract — necessary to deliver paid content |
| Session cookies (login) | Legitimate interest — security and authentication |
| Newsletter | Consent — you opt in via the subscription form |
| Coaching application | Consent / Pre-contractual steps — you submit the form voluntarily |
| Server logs & security | Legitimate interest — protect the site and users |
| Marketing popup preferences (local storage) | Consent — only if you accept non-essential cookies |
4. How long we keep data
| Data type | Retention |
|---|---|
| Account data | Until you delete your account or request erasure |
| Course progress | Same as account data |
| Payment records | As long as required for tax/accounting (typically up to 7 years for transaction references) |
| Newsletter emails | Until you unsubscribe or request deletion |
| Coaching applications | Up to 24 months after last contact, unless a coaching relationship begins |
| Server logs | Up to 90 days |
When data is no longer needed, we delete or anonymise it.
5. Who we share data with
We do not sell your personal data. We share data only with:
| Recipient | Purpose |
|---|---|
| PayPal | Payment processing for course purchases |
| Hosting provider | Website infrastructure (server where data is stored) |
Each processor is selected for GDPR compliance. PayPal’s privacy policy applies to payment data: https://www.paypal.com/privacy-center.
We may also disclose data if required by law, court order, or to protect our legal rights.
6. International transfers
If any service provider processes data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).
7. Your rights
Under the GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion (“right to be forgotten”)
- Restriction — limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, where processing is based on consent (e.g. newsletter)
To exercise any of these rights, email mail@quantrading.space. We respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. If you are in the EU, find your authority at: https://edpb.europa.eu/about-edpb/about-edpb/membersen.
8. Security
We use industry-standard measures to protect your data, including:
- Password hashing (bcrypt/argon via PHP
password_hash) - HTTPS in production
- HttpOnly session cookies
- CSRF protection on forms
- Restricted access to data files on the server
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
9. Children
This site is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change. Material changes will be communicated where appropriate (e.g. by email to account holders or a notice on the site).
12. Contact
Filippo Kansikas Email: [mail@quantrading.space](mailto:mail@quantrading.space) Website: https://quantrading.space