Privacy Policy

1. Who We Are

Stockhelm ("we," "us," or "our") operates the website at stockhelm.io. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Services.

If you have questions about this Policy, contact our Data Protection Officer at privacy@stockhelm.io.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, subscribe to our newsletter, post in the Mess Deck, or contact us, we may collect:

• Identity Data: Name, username, email address.
• Contact Data: Email address, phone number (if provided).
• Profile Data: Bio, avatar, preferences, and settings.
• Content Data: Posts, comments, trade notes, and other content you submit.
• Communication Data: Messages you send to our support team.

2.2 Information We Collect Automatically

When you visit the Site, we automatically collect:

• Technical Data: IP address, browser type and version, operating system, device type.
• Usage Data: Pages visited, time spent, navigation paths, feature interactions.
• Cookies & Similar Technologies: We use cookies to maintain sessions, remember preferences, and analyze traffic. See Section 7 for details.

2.3 Information from Third Parties

We may receive information about you from:

• Analytics providers (e.g., Google Analytics).
• Payment processors (if you purchase a subscription).
• Social media platforms (if you connect your account).

3. How We Use Your Information

Purpose	Legal Basis
To provide and maintain the Services	Contractual necessity
To personalize your experience and dashboard	Legitimate interest
To send newsletters and Captain's Letters	Consent
To respond to your inquiries	Contractual necessity
To improve our tools and content	Legitimate interest
To detect fraud and ensure security	Legal obligation / Legitimate interest
To comply with legal obligations	Legal obligation

4. How We Share Your Information

We do not sell your personal information. We may share data only in the following circumstances:

• Service Providers: We use trusted third parties for hosting, analytics, email delivery, and payment processing. They are contractually bound to protect your data.
• Legal Compliance: We may disclose information if required by law, regulation, or legal process.
• Business Transfers: If Stockhelm is acquired or merges with another entity, your data may be transferred as part of that transaction.
• With Your Consent: We will share information with third parties when you explicitly authorize us to do so.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL).
• Password hashing using industry-standard algorithms.
• Regular security audits and vulnerability assessments.
• Access controls limiting employee access to personal data.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained while your account is active. Deleted within 30 days of account closure, unless legal obligations require longer retention.
• User Content: Retained indefinitely unless you delete it or request removal, subject to our right to retain copies for legal or operational purposes.
• Usage & Log Data: Retained for up to 12 months for analytics and security purposes.

7. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in (session cookies).
• Remember your preferences (persistent cookies).
• Analyze site traffic and usage patterns (analytics cookies).

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit how we use your data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise these rights, contact us at privacy@stockhelm.io. We will respond within 30 days.

9. International Data Transfers

Stockhelm is based in the United States. If you access the Services from outside the U.S., your data may be transferred to, stored, and processed in the U.S. or other countries. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated Policy on the Site and updating the "Last updated" date. Your continued use of the Services after such changes constitutes acceptance of the revised Policy.

12. Contact Us

For privacy-related questions or requests, contact:

Email: privacy@stockhelm.io
Address: Stockhelm Data Protection Officer, 1 Helm Way, Suite 100, Wilmington, DE 19801, USA