1. Data controller and contact
TradeSmart is the public-facing brand. Legal controller identity and business address: to be confirmed by the website owner before launch. Data protection queries may be directed to tradesmart224@gmail.com.
2. What we collect and why
When you submit a contact or private-service inquiry, the form asks for your name, email address, and message, and may request the relevant market, strategy and project details. This information is used to respond to your inquiry and, if requested, discuss an agreed service. We do not use a general website user-account or WordPress comments feature.
The inquiry workflow uses a spam-prevention security check. Basic technical connection and security logs may be processed by our hosting provider for website operation, fraud prevention and troubleshooting. Our form sends messages to the TradeSmart contact mailbox via an email delivery provider.
3. Legal bases
Responding to voluntary business inquiries may rely on steps taken at your request before entering a contract (Article 6(1)(b) GDPR) or legitimate interests in responding to messages (Article 6(1)(f)); security processing may rely on legitimate interests. Where consent is relied upon, it may be withdrawn. Final legal bases must be verified against the deployed implementation.
4. Processors and external platforms
The site's intended deployment uses Cloudflare Pages (hosting and Turnstile security) and Resend (message delivery), if configured. Embedded YouTube videos and links to Patreon, Discord and affiliate services may connect you to independently operated services with their own privacy policies. Video embeds use YouTube's privacy-enhanced domain, although interactions may still involve Google services.
Personal data may be processed outside the European Economic Area by some providers. Before launch, confirm the actual hosting location, contracts, safeguards, and relevant service providers.
5. Retention
Inquiries are retained only while needed to answer and manage the request, and where business, accounting or legal obligations require further retention. Final retention periods and mailbox deletion practices must be defined before launch.
6. Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability or object to certain processing. You may also contact the competent supervisory authority, including Hungary's NAIH at naih.hu, where applicable.
7. Cookies and browser storage
This website uses browser-local storage to remember display preferences such as light or dark mode. Essential security, hosting and third-party embeds may use cookies or equivalent technologies. No claim is made that all third-party content is cookie-free. Non-essential analytics or marketing trackers must not be enabled before any legally required consent controls are operational.
8. Updates
We will update this notice whenever the actual website systems or data practices change. Last draft update: November 12, 2026.