Legal
Privacy Policy
The short version. We collect what we need to run your account, take your payment and send you the emails you asked for — and not much else. We do not sell your data or share it for anyone else's marketing. Analytics and advertising cookies only run if you accept them in the cookie banner. You can ask us at any time for a copy of your data, or to delete it.
1. Who is responsible for your data
The data controller is Avia Artis, a company registered in Denmark under CVR number 45994708, registered address c/o Legaldesk.dk ApS, Njalsgade 21F, 2., 2300 København S, Denmark. We operate Stock Investing Academy at stockinvesting.academy.
For anything to do with your personal data, write to contact.stockinvestingacademy@gmail.com. We are not required to appoint a Data Protection Officer, so your message comes straight to us.
This policy covers the website, member accounts, the premium tools, courses, and the weekly briefing. Our use of cookies is described in more detail in our Cookie Policy.
2. What we collect
What you give us:
- Your name and email address, when you create an account or subscribe to the newsletter.
- Your password, stored in hashed form — we never see it.
- Billing details needed for your subscription. We never see or store your full card number: that goes directly to our payment processor. We hold the record of the transaction, the plan, and the last four digits.
- Course enrolment and progress, if you buy a course.
- Anything you write to us — support emails, feedback, replies to the newsletter.
What is collected automatically when you visit:
- Your IP address, browser and device type, and approximate location derived from the IP address.
- Which pages you looked at, when, and where you arrived from.
- Cookies and similar technologies — see section 4.
We do not ask for and do not want any special category data: nothing about your health, beliefs, politics or anything similar. Please do not send us any. We also do not collect a postal address, because everything we sell is digital.
3. Why we use it, and on what legal basis
Under the GDPR we must have a lawful basis for every use of your data. Here is the full picture.
| What we do | Data used | Legal basis | How long we keep it |
|---|---|---|---|
| Run your account and give you access to the tools | Name, email, password hash, plan status | Performance of our contract with you — Art. 6(1)(b) | While your account exists, then 12 months |
| Take payment, manage renewals, handle refunds | Billing details, transaction records | Contract — Art. 6(1)(b), and legal obligation — Art. 6(1)(c) | Accounting records for 5 years from the end of the financial year, as Danish bookkeeping law requires |
| Send the weekly briefing and other marketing email | Email address, engagement with the emails | Your consent — Art. 6(1)(a) | Until you unsubscribe, then a suppression record so we do not email you again |
| Send service email about your account — receipts, renewal notices, changes to these terms | Email address, account status | Contract — Art. 6(1)(b) | With the account |
| Answer your questions and provide support | Your messages and account details | Contract, and our legitimate interest in helping you — Art. 6(1)(f) | 24 months from the last message |
| Understand how the site is used and improve it | Usage and device data via analytics cookies | Your consent, given in the cookie banner — Art. 6(1)(a) | Per the retention set in the analytics tool, no more than 14 months |
| Measure our advertising and see which ads lead to signups | Advertising and conversion cookies | Your consent, given in the cookie banner — Art. 6(1)(a) | Per the retention set by the advertising platform |
| Keep the service secure, prevent fraud and account sharing | IP address, login and access records | Our legitimate interest in protecting the service — Art. 6(1)(f) | 12 months |
| Establish, exercise or defend legal claims | Whatever is relevant to the claim | Our legitimate interest, and legal obligation — Art. 6(1)(f) and (c) | As long as the claim is live, plus the limitation period |
Where we rely on consent, you can withdraw it at any time — unsubscribe from any email, or change your choices in the cookie banner. Withdrawing consent does not affect what we did lawfully before you withdrew it.
Where we rely on legitimate interests, we have weighed our interest against your rights and privacy. You can object to that processing at any time; see section 7.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
4. Cookies
Cookies that are strictly necessary — keeping you logged in, remembering your cookie choices, security — are set without asking, because the site cannot work without them.
Analytics and advertising cookies are only set if you accept them in the cookie banner when you first arrive. You can change your mind at any time through the banner, or by clearing cookies in your browser. Declining them does not limit what you can use on the site.
Full details are in our Cookie Policy.
5. Who else handles your data
We use a small number of service providers to run the business. They process data on our instructions, under contracts that require them to protect it, and they may not use it for their own purposes.
| Provider | What they do for us | Where |
|---|---|---|
| Squarespace | Website hosting, member accounts, subscription management | United States and EU |
| Stripe | Card payments and subscription billing. They receive your card details directly; we do not. | United States and Ireland |
| Analytics, and measurement of our advertising | United States and EU | |
| Substack | Delivery of the weekly briefing | United States |
| Beehiiv | Our previous newsletter provider. We no longer send the newsletter through Beehiiv, but subscriber records for people who signed up before we moved still sit there. | United States |
Our company and portfolio database — the financial data behind the dashboards, the screener and the elite investor portfolios — is held separately and contains no personal data about you at all. It is information about listed companies and about public regulatory filings.
We may also disclose data where the law requires it — to a court, a regulator or a public authority — and, if the business is ever sold or reorganised, to the acquiring party, with your rights under this policy carried over.
6. Data leaving Europe
Several of the providers above are based in the United States, so your data is transferred outside the EU/EEA.
Those transfers are made under the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework where the provider is certified under it, and otherwise under the European Commission's Standard Contractual Clauses together with any additional safeguards required. You can ask us for details of the mechanism used for any specific provider.
7. Your rights
You have the following rights over your personal data. They are free to exercise, and we will answer within one month.
- Access — a copy of the data we hold about you, and an explanation of what we do with it.
- Rectification — correction of anything inaccurate or incomplete.
- Erasure — deletion of your data, where we no longer have a reason to keep it. Note that accounting records must be kept for the period set by law even if you close your account.
- Restriction — to have us pause processing while a dispute about accuracy or lawfulness is resolved.
- Portability — the data you gave us, in a common machine-readable format, or sent to another provider.
- Objection — to processing based on our legitimate interests, and at any time to direct marketing, which we will always stop on request.
- Withdrawing consent — at any time, for anything based on consent.
To use any of these, email contact.stockinvestingacademy@gmail.com. We may need to confirm who you are before we act, so that we do not hand your data to someone else.
If you think we have handled your data badly, please tell us first — most things are quicker to fix directly. You also have the right to complain to a supervisory authority: in Denmark that is Datatilsynet, the Danish Data Protection Agency (datatilsynet.dk), and if you live elsewhere in the EU or EEA you may complain to the authority in your own country.
8. Automated decisions
We do not make decisions about you by automated means that produce legal effects or similarly significant effects, and we do not profile you for that purpose. The scores and valuations shown on the site are calculations about companies, not about you.
9. Security
We take reasonable technical and organisational measures to protect your data: encrypted connections, hashed passwords, access limited to those who need it, and providers chosen for their own security standards. No system is perfectly secure, and we cannot guarantee absolute security, but if a breach ever puts your rights at risk we will notify you and the supervisory authority as the law requires.
10. Children
Stock Investing Academy is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, write to us and we will delete it.
11. Changes to this policy
We update this policy when what we do changes, or when the law does. If a change materially affects your rights we will tell you by email or through the site before it takes effect. The date at the top always shows the current version.
12. Contact
Avia Artis · CVR 45994708
c/o Legaldesk.dk ApS, Njalsgade 21F, 2., 2300 København S, Denmark
contact.stockinvestingacademy@gmail.com