How we handle your data.

A short, direct privacy notice covering everything VS-Trade Intelligence Limited collects, why, who processes it on our behalf, and how to remove yourself at any time.

1. Who we are

This notice is published by VS-Trade Intelligence Limited (the "firm", "we", "us"), a company registered in England and Wales under company number 17200549 with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

We are the data controller for personal data collected through vstrade.co and the research-delivery emails sent from hello@vstrade.co.

For data subject requests or privacy questions, write to privacy@vstrade.co.

2. What we collect

Only what you provide directly when you request a deliverable (LM3 snapshot, waitlist, inquiry, retainer) or when you correspond with us. We do not buy lists, scrape contacts, or run third-party advertising trackers.

We do not collect special-category data (health, race, religion, biometrics). Please don't send any in inquiry messages.

3. Why we use it (lawful bases)

Under UK GDPR Article 6 and Mexico's LFPDPPP 2025 (Articles 8 & 28), our lawful bases are:

• Contract / pre-contract performance — delivering the report, waitlist confirmation, or inquiry reply you asked for.
• Legitimate interest — anti-abuse, fraud detection, and a single follow-up email seven days after an LM3 download to gather methodology feedback. You can opt out of the follow-up at any time via the unsubscribe link in any email.
• Consent — when you join a product-specific waitlist, you consent to release notifications for that specific report. Consent is revocable at any time.

We do not use your data for behavioural advertising, retargeting, or affiliate programmes.

4. Who else sees it (data processors)

We use a small number of carefully scoped processors. Each operates under a written data-processing agreement and is bound by GDPR-equivalent terms.

We do not share your data with consulting clients, research subjects, journalists, recruiters, or other third parties without your explicit consent.

5. International transfers

Personal data may transit servers outside the UK, EEA, or Mexico (notably US-based delivery infrastructure for Resend). Transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and equivalent LFPDPPP transfer safeguards.

6. How long we keep it

7. Your rights

You have the right to:

• Access a copy of the data we hold about you;
• Have inaccurate data corrected;
• Have your data erased ("right to be forgotten");
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent for waitlist or follow-up emails at any time;
• Lodge a complaint with the UK Information Commissioner's Office (ICO) or the Mexican INAI.

To exercise any of these rights, email privacy@vstrade.co. We aim to respond within five working days and complete most requests within 30 days, as required by UK GDPR Article 12(3).

8. Unsubscribing

Every email from hello@vstrade.co includes:

• An in-body Unsubscribe link that removes you from all future mailings;
• An RFC 8058 one-click unsubscribe header that mail clients (Gmail, Apple Mail, Outlook) render as an Unsubscribe button next to the sender name.

Either path applies immediately. We retain a suppression record (just your email address) so we do not accidentally contact you again — this is required by law and the only way to keep an unsubscribe permanent.

9. Cookies and tracking

This website uses privacy-friendly, cookieless analytics (Cloudflare Web Analytics) for aggregated site-usage measurement. We do not set tracking cookies (no _ga, no _gid, no equivalent third-party identifiers), and we do not run advertising pixels, retargeting tags, or session-replay tools.

The only client-side storage is whatever Cloudflare's edge sets as part of standard CDN operation, which contains no personal data and no behavioural identifiers.

10. Children

VS-Trade products are sold to working professionals. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact privacy@vstrade.co and we will delete it.

11. Security

Subscriber records are stored in Cloudflare KV with encryption at rest and in transit. Email transport between our Worker and Resend uses TLS. Administrative access to subscriber data is gated by a per-environment admin token and constant-time comparison. Unsubscribe links carry an HMAC-SHA256 signature so they cannot be guessed.

12. Changes to this notice

If we materially change how we process personal data, we will update this page and notify active subscribers by email at least 14 days before the change takes effect. The version number and "Last updated" date at the top of this page always reflect the current notice.

13. Contact

VS-Trade Intelligence Limited
71-75 Shelton Street
Covent Garden, London WC2H 9JQ
United Kingdom

Data protection: privacy@vstrade.co
General: hello@vstrade.co