Privacy & Cookie Policy

Introduction

This Privacy Policy (the “Policy”) explains how David Carli, operating the Trading with David website (“we” or “our”), collects, uses, stores and shares personal data when you visit https://tradingwithdavid.com (the “Website”), contact us, comment on articles or subscribe to our newsletter. It also explains how we use cookies and similar technologies and describes your rights under Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”).

Data controller: David Carli, Italy. Privacy contact: info@tradingwithdavid.com.

Purposes of Processing

What is personal data?

Personal data means any information relating to an identified or identifiable natural person. It may include your name, email address, IP address, information contained in your messages and online identifiers.

Why do we need your personal data?

We process personal data only when there is an appropriate legal basis. Depending on the activity, this may be our legitimate interests in operating and securing the Website and responding to enquiries (Article 6(1)(f) GDPR), your consent for newsletter subscriptions and optional cookies (Article 6(1)(a)), steps taken at your request before entering into a contract (Article 6(1)(b)), or compliance with legal obligations (Article 6(1)(c)). Where we rely on legitimate interests, these are balanced against your rights and freedoms.

You can browse most of the Website without creating an account or submitting your name. Some information, such as technical connection data, is processed to provide the requested pages securely. Giving us contact details is optional, but we may need them to reply to your message. Newsletter subscriptions require your email address and your consent.

Collecting Your Personal Data

We collect information about you in the following ways:

Information You Give Us

information you submit through our contact form, which may include your name, email address and the contents of your message;
information contained in comments you choose to post on our articles, including your chosen display name, email address, comment and technical anti-spam information;
your name and email address when subscribing to our newsletter;
information you provide when contacting us by email or requesting assistance.

Information from Social Networking Websites

The Website may link to external social media profiles. Following a link to an external platform does not, by itself, give us access to your social media account. If social media content or features are embedded on a page, the relevant provider may process data as described in its own privacy policy and according to your cookie preferences.

Information Automatically Collected

When you access the Website, our hosting and security systems may process technical data such as your IP address, browser and device information, requested URLs, access times and diagnostic or security events. We use this information to deliver the Website, troubleshoot errors, prevent abuse and protect our systems. Google Analytics 4 may also process information about how visitors use the Website, subject to the applicable consent requirements.

Anti-Spam Protection

We use Antispam Bee and other security measures to identify and prevent unwanted or automated submissions. These measures may process information associated with comments and other submissions, including technical identifiers, timestamps and content, where necessary to detect spam and protect the Website. Any processing or disclosure of personal data to external services depends on the anti-spam settings in use and must comply with applicable data protection requirements.

Automated Decision Making and Profiling

We do not make decisions about visitors that are based solely on automated processing and produce legal or similarly significant effects within the meaning of Article 22 GDPR. Automated security and anti-spam checks may be used to identify abusive traffic or submissions.

Cookies

What are cookies?

Cookies are small text files saved on your device by a website or a third-party service. Some expire at the end of a browsing session; others remain for a defined period. Similar technologies may also be used to store preferences or recognise a browser.

Cookies can be set by this Website (first-party cookies) or by third-party services. We distinguish between strictly necessary technologies and optional technologies that require consent under applicable law.

Cookies we use

The cookies used and their duration depend on the services enabled and the choices you make. We use Complianz to provide information about cookie categories and allow visitors to manage their preferences.

Essential Cookies

These technologies are necessary for the Website to operate, maintain security, remember consent choices and provide functions you explicitly request. They may include cookies used by WordPress, security tools and Complianz. They do not require consent when used solely for strictly necessary purposes.

Functionality Cookies

These technologies support optional features, including embedded media or remembering non-essential preferences. Where these technologies are not strictly necessary, their use is subject to the applicable consent requirements.

Analytics and Performance Cookies

We use Google Analytics 4 (GA4), connected to WordPress through Site Kit by Google, to understand Website traffic and usage. Google Analytics may process online identifiers and information about pages viewed, interactions, approximate location and device or browser characteristics.

Google Analytics uses cookies and similar technologies, including cookies commonly named _ga and _ga_*. These cookies may remain on a device for up to two years, depending on the applicable Google Analytics configuration and subsequent activity. The retention of information collected through Google Analytics is governed by the retention settings of the relevant GA4 property.

Analytics cookies that require consent must not be placed before the visitor has given the necessary consent. Complianz is used to manage these preferences. Visitors can reject or withdraw consent for optional analytics technologies through the cookie management interface.

For information about Google’s processing, see Google’s Privacy Policy. You may also use the Google Analytics opt-out browser add-on, where supported.

Social Media and Embedded Content

The Website may include embedded YouTube videos and links to external social networks, including LinkedIn. Merely linking to an external website is different from embedding third-party content.

Embedded content may allow external providers, such as YouTube, to receive technical information about visitors and use cookies or similar technologies. Where such technologies require consent, they must be managed accordingly through the Website’s consent management system.

For information about Google’s processing in connection with YouTube, see Google’s Privacy Policy.

Managing or Disabling Cookies

Complianz provides a consent interface through which visitors can accept, reject or customise optional cookies. Consent can be withdrawn or preferences changed through the cookie management controls available on the Website.

You can also manage or delete cookies through your browser settings. Rejecting optional cookies should not prevent access to the Website’s essential content, although some optional features may not be available.

Advertising

The Website is a personal blog. It does not sell products or services directly and does not receive payments from visitors. It may display banners and links to third-party services.

In exchange for displaying SpreadCharts banners, the Website owner receives a free subscription to the SpreadCharts service. Links to Mexem are affiliate links, and any commission generated through them is donated to charity.

Simple banners and ordinary links do not necessarily place advertising cookies on this Website. Clicking a banner or a link may take you to an external website that uses its own cookies and processes personal data according to its own privacy policy. Any tracking or profiling technology used by an advertising provider is subject to the applicable consent requirements.

Using Your Personal Data

We may use your personal data to:

operate, maintain, secure and improve the Website, including preventing spam and unauthorised access;
receive and respond to contact form submissions, emails, comments and enquiries;
manage comments and moderate inappropriate or automated submissions;
send newsletters to subscribers who have requested them and given the necessary consent, and manage unsubscriptions;
measure Website use through Google Analytics in accordance with applicable consent requirements;
manage optional embedded features and cookie preferences;
comply with applicable legal obligations and protect our legal rights.

Newsletter subscriptions are managed through Noptin, which collects the subscriber’s name and email address when the newsletter subscription function is used. Subscribers can withdraw their consent and unsubscribe using the instructions provided in newsletter communications.

Emails generated by the Website are sent using WP Mail SMTP through the email service provided by ChemiCloud.

Sharing Your Personal Data

We do not sell personal data. Personal data may be processed by service providers to the extent necessary for the services they supply, subject to applicable legal safeguards. These may include:

Hosting: ChemiCloud, which hosts the Website and may process technical connection and server-log data;
Content delivery network: bunny.net, which may process technical request data when delivering Website resources;
Analytics: Google Analytics 4, administered through Site Kit by Google, subject to applicable consent requirements;
Embedded media: YouTube/Google when visitors load embedded videos;
Contact forms and newsletter: WPForms and Noptin, which are WordPress tools used to collect and manage submissions, with data processing depending on their configuration;
Email delivery: ChemiCloud, through the Website’s WP Mail SMTP configuration;
Consent management: Complianz, used to present cookie choices and manage consent preferences;
Spam prevention: Antispam Bee, used to identify and filter unwanted comments and automated submissions, with any external processing depending on its configuration.

Data may also be disclosed where required by law, in response to valid legal requests, or when necessary to establish, exercise or defend legal claims.

Third-Party Sites

The Website may contain links to third-party websites, including social networks, advertising partners, affiliate websites and external resources. Their processing of personal data is governed by their own privacy policies. We encourage you to review those policies before providing information to them.

User-Generated Content

If comments are enabled, information you voluntarily publish in a comment, such as your display name and comment text, may be visible to other visitors. Your email address submitted through the comment form is not ordinarily displayed publicly. Please avoid including sensitive personal information in public comments.

We may moderate or remove comments that are spam, abusive or otherwise inappropriate, and process the associated information to administer and protect the Website.

International Data Transfer

Some service providers, including Google and potentially other infrastructure or email providers, may process personal data outside the European Economic Area (EEA). Where applicable, such transfers must be supported by a valid GDPR transfer mechanism, such as an adequacy decision under Article 45 GDPR or appropriate safeguards, including the European Commission’s standard contractual clauses under Article 46 GDPR, together with any necessary supplementary measures.

Accepting this Privacy Policy does not, in itself, constitute consent to an international transfer. The legal basis for processing and the applicable international transfer mechanism are separate matters.

Security

We use appropriate technical and organisational measures intended to protect personal data, including access controls, security monitoring and anti-spam measures. Nevertheless, no transmission or storage system can be guaranteed completely secure. If you believe that personal data submitted through the Website has been compromised, please contact us using the privacy contact details above.

Retention

We retain personal data only for as long as necessary for the purposes described in this Policy or to comply with applicable legal obligations. The relevant periods or criteria are as follows:

Contact form submissions and correspondence: generally for up to 12 months after the last communication, unless an ongoing matter, a legal obligation or the establishment, exercise or defence of legal claims requires longer retention;
Newsletter subscriptions: until consent is withdrawn or the subscriber unsubscribes, subject to limited retention of evidence of consent and unsubscription where necessary;
Comments: while the comment remains published or is needed for moderation, together with associated technical information where required for security or anti-spam purposes. You may request erasure where the GDPR permits it;
Security and server logs: for the period necessary to investigate technical problems, abuse or security incidents, according to the hosting provider’s and active security systems’ retention settings;
Analytics: according to the data retention settings configured for the Google Analytics 4 property. These settings govern the retention of applicable event-level and user-level data, while cookie expiration is managed separately;
Cookie consent records: for the period necessary to maintain consent choices and demonstrate compliance with applicable requirements, according to the Complianz configuration.

Where information is no longer needed, it is deleted or anonymised as appropriate, unless a legal obligation or legitimate need justifies further retention.

Our Policy on Children

The Website provides educational information about trading and financial markets and is intended for a general audience rather than specifically for children.

Under Italian law, the age at which a minor may independently consent to the processing of personal data in connection with information society services offered directly to children is 14 years. Where the applicable law requires parental responsibility or authorisation, the relevant requirements must be respected.

If a parent or guardian believes that a child has provided personal data without an appropriate legal basis, please contact us so that we can assess the situation and take any necessary action.

Your Rights

Subject to the conditions and limitations of the GDPR, you may have the right to:

Access your personal data and obtain information about its processing;
Rectification of inaccurate personal data;
Erasure of personal data in applicable circumstances;
Restriction of processing in applicable circumstances;
Data portability where the legal requirements are met;
Object to processing based on legitimate interests, including an unconditional right to object to direct marketing;
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
Lodge a complaint with a competent supervisory authority.

To exercise your rights, contact us at info@tradingwithdavid.com. We may request information reasonably necessary to verify your identity. We will respond without undue delay and normally within one month, subject to the extensions permitted by the GDPR.

Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can review them. You also have the right to lodge a complaint with a competent data protection supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.

Contact Information

For questions about this Policy or requests relating to personal data, please contact:

David Carli
Italy
info@tradingwithdavid.com

Last Updated: 26 October 2026