GDPR & Data Protection

Last updated: April 2026

KavanaStock is committed to protecting your personal data and complying with the UK GDPR and Data Protection Act 2018. This page explains your rights and how your data is handled.

---

1. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to access – You can request a copy of your data.
• Right to rectification – You can correct inaccurate data.
• Right to erasure – You can request deletion of your data.
• Right to restrict processing – You can limit how your data is used.
• Right to data portability – You can request your data in a transferable format.
• Right to object – You can object to certain uses of your data.

2. Legal Basis for Processing

We process your data under the following legal bases:

• Contract – To provide access to your account and platform features.
• Legitimate interests – To improve the platform and ensure security.
• Legal obligation – To comply with applicable laws.
• Consent – For optional features such as emails.

3. Data Retention

We retain your data only as long as necessary to provide the service.

If you delete your account, your personal data will be removed within a reasonable timeframe unless we are required to retain it for legal reasons.

4. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• Secure password hashing
• Protected access to user data
• Use of trusted third-party services (e.g. Stripe)

5. Third-Party Processors

We use trusted third-party services to operate the platform:

• Stripe – for subscription payments and billing
• Hostinger – for hosting and infrastructure

These providers process data in accordance with their own privacy policies.

6. International Data Transfers

Some of our service providers may process data outside the UK or EEA. In such cases, we ensure appropriate safeguards are in place.

7. How to Exercise Your Rights

To request access, correction, or deletion of your data, please contact: kavanastock@gmail.com

8. Complaints

If you believe your data is being misused, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

9. Updates

We may update this GDPR notice from time to time. Continued use of the platform indicates acceptance of any updates.