European Union & UK Standards
GDPR Compliance Statement
Regulation (EU) 2016/679 (General Data Protection Regulation)
TradeCostPro is fully committed to upholding the rigorous data protection standards established by the European Union General Data Protection Regulation (EU GDPR) and the UK GDPR.
1. Data Minimization & Privacy-by-Design
Our architecture enforces Article 5(1)(c) data minimization:
- No Persistent Document Storage: Financial statement PDFs are processed purely in ephemeral RAM and deleted immediately upon output generation.
- 1-Click PII Redaction: Our built-in PII redaction engine enables users to mask account numbers, names, and phone numbers before exporting reports or querying AI models.
- Encryption at Rest and in Transit: All data transmissions are encrypted using TLS 1.3 with 256-bit AES encryption.
2. Exercising Your Data Subject Rights
Under GDPR Articles 15 through 22, you may exercise:
Art. 15 Right of Access: Request a complete copy of your registered profile and points ledger data.
Art. 16 Right to Rectification: Modify your display name, email, or credentials anytime.
Art. 17 Right to Erasure ("Forget Me"): Permanently purge your user account and points records.
Art. 20 Right to Data Portability: Export all ledger data in standard JSON or CSV format.
3. International Data Transfers
Where data is processed outside the EEA, we ensure adequate protections are in place through Standard Contractual Clauses (SCCs) approved by the European Commission.