Privacy Policy

How we collect, use, and protect your personal information in compliance with GDPR and privacy laws

Last updated: January 20, 2025

Your Privacy Matters

We are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal data. This policy complies with GDPR and other applicable privacy laws.

Who We Are

Your First Short ("we", "our", "us") is an educational platform focused on short selling education. We are the data controller for the personal information we collect from you.

Contact Information: For privacy-related questions, please contact us through our contact form.

What Personal Data We Collect

We collect different types of information depending on how you interact with our platform:

Account Information

  • Registration data: First name, last name, email address
  • Authentication data: Password hash (we never store plain-text passwords)
  • Profile data: Experience level, focus areas, phone number (optional)
  • Preferences: Communication preferences, dashboard settings

Billing and Payment Information

  • Billing details: Country, VAT number (if applicable)
  • Payment information: Processed by Stripe - we do not store full payment card details
  • Transaction data: Purchase history, subscription status, transaction IDs

Usage and Technical Data

  • Platform usage: Pages visited, features used, time spent, course progress
  • Device information: Browser type, operating system, IP address
  • Session data: Login times, session duration, authentication tokens

Your Privacy Rights

Under GDPR and other applicable privacy laws, you have the following rights:

Access & Rectification

  • Request a copy of your personal data
  • Correct inaccurate or incomplete data

Erasure & Portability

  • Request deletion of your data
  • Export your data in a portable format

Control & Objection

  • Restrict how we use your data
  • Object to certain processing activities

Consent & Complaints

  • Withdraw consent at any time
  • Lodge complaints with authorities

To exercise these rights: Contact us through our contact form. We respond to privacy-related inquiries within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Technical Measures

  • Data encryption in transit and at rest
  • Secure cloud infrastructure
  • Regular security assessments

Organizational Measures

  • Limited access on need-to-know basis
  • Staff training on data protection
  • Regular policy reviews and updates

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our contact form.

We will respond to privacy-related inquiries within 30 days (or sooner as required by applicable law).

Key Commitments

We are committed to protecting your privacy, being transparent about our data practices, and giving you control over your personal information. We do not sell your data and only use it to provide and improve our educational services.