Effective date: 2026-07-20
This Privacy Policy explains how InvestingOverview collects, uses, discloses and retains personal data when a person visits investingoverview.com, uses category or rating filters, sends a message, submits a review or rating, marks a review as helpful, sends a company response or correction request, or otherwise interacts with the website (the “Site”). It also explains the choices and rights available to users.
1. Who is responsible for the data
The Site is operated under the InvestingOverview name. InvestingOverview determines why and how personal data is processed through investingoverview.com (“InvestingOverview”, “we”, “us” or “our”). Questions and privacy requests may be sent to investingoverview.info@gmail.com.
2. Scope of this Policy
This Policy applies to personal data processed through the Site and through email correspondence connected with the Site. It does not govern the practices of brokers, investment platforms, regulators, review platforms or other third-party websites to which our articles may link.
3. Data we process
Information generated when the Site is used
We may process an IP address, date and time of a request, requested URL, referring page, browser and device information, operating system, language, approximate location derived from an IP address, cookie or consent identifiers, diagnostic events and server or security logs.
Reviews, replies and ratings
The review form collects an email address, nickname, review title, opinion text and ratings for the categories displayed on the form. Email is required for verification and moderation and is never displayed publicly. The form includes Terms of Cooperation, Platform Stability and Fulfillment of Financial Obligations and allows “Can’t evaluate” for a category. All reviews are moderated before publication. WordPress and the Site’s hosting and security infrastructure may also generate standard request data such as submission time, page, IP address and browser information. When a visitor marks a review as helpful, the Site records the review identifier and vote and may process limited technical data generated by the request to operate the feature and prevent abuse.
Contact and editorial correspondence
When a person contacts us, including about a correction, company response, collaboration or advertising, we process the name, email address, message, page reference and any other information voluntarily included in the correspondence. The site-wide question form may also include the URL of the page from which it was opened. Please do not send identity documents, bank details, passwords, private keys, account credentials, medical information or other sensitive material unless we have specifically requested it through a secure channel.
Consent choices
The Site stores a user’s cookie choice, including whether Google Analytics was accepted or refused and when that choice was made.
We do not offer user accounts and do not need a company name, postal address or telephone number merely to browse the Site or submit a standard review.
4. Why we use data and our legal bases
We process personal data only where a valid legal basis applies. Depending on the interaction, the purposes and bases are:
- Operating the Site, delivering pages, preventing abuse, securing forms, maintaining logs and diagnosing errors: our legitimate interests in providing a reliable and secure publication service.
- Receiving, checking, publishing and managing reviews, company responses, ratings and helpfulness votes: the contributor’s request to publish the submission and our legitimate interests in maintaining useful, authentic and accountable user content and preventing manipulation.
- Using a contributor’s email to verify a submission, contact the author about moderation, resolve a dispute or detect coordinated manipulation: our legitimate interests in protecting readers, contributors and the integrity of the rating system.
- Answering enquiries and considering corrections or complaints: our legitimate interests and, where relevant, steps requested before entering into an arrangement.
- Activating Google Analytics through the Statistics choice in the consent banner: the user’s consent.
- Keeping records or disclosing information when required by law: compliance with a legal obligation and the establishment, exercise or defence of legal claims.
Where processing is based on consent, consent may be withdrawn at any time without affecting processing that took place before withdrawal.
5. What becomes public
If a review or company response is approved, the nickname, title, opinion, selected ratings and publication date may be visible publicly. Aggregate helpfulness counts may also be displayed. A contributor’s email address, IP address, consent record and internal moderation notes are not published.
Contributors must not place personal data of other people, account numbers, document numbers, private correspondence, addresses, telephone numbers, credentials or other non-public information in a review. We may redact such material, reject the submission or remove it after publication.
6. Cookies and consent management
The Site uses necessary cookies and similar technologies to deliver pages, remember privacy choices, operate forms and maintain security. Google Analytics is classified as Statistics and is activated only after the user gives consent through the banner.
The cookie banner allows users to accept or refuse Statistics and later reopen “Manage consent” to change or withdraw the choice. Refusing Google Analytics does not prevent access to editorial content.
Browser settings can also delete or block cookies. Browser controls do not replace the Site’s consent controls and may affect strictly functional features.
7. Google Analytics and Google Fonts
With the user’s consent, the Site uses Google Analytics 4 to measure page views, traffic sources, browser and device characteristics and interactions with Site features. Google may receive online and cookie identifiers, an IP-derived approximate location, browser and device data, requested pages, referrers, event data and timestamps. We do not intentionally send names, email addresses, review text or contact-form content to Google Analytics.
The Site also loads typography from Google Fonts. A font request may disclose an IP address, browser information, the requested resource, referring page and time of access to Google. We do not intentionally include form fields or review content in font requests.
8. Forms, WordPress and security
Review and contact forms operate within WordPress. A submission includes the fields entered by the user and may also include the page URL, submission time, IP address, browser information and security data generated when the request is delivered.
Cloudflare provides network delivery and security services. It may process IP addresses, traffic-routing and request metadata, requested URLs, system or device information and security signals to deliver pages and detect malicious, automated or abusive traffic.
9. Service providers and disclosures
We do not sell personal data. Beget hosts the Site and its WordPress database; Cloudflare provides network delivery and security; Google provides Google Analytics, Gmail for correspondence and Google Fonts. These providers may process only the data needed to perform those roles under their applicable terms.
Providers receive only the data reasonably necessary for their role and may act as processors or independent controllers under their own terms. We may also disclose data where required by a lawful request, to investigate abuse, to protect users or third parties, or to establish, exercise or defend legal claims.
10. International transfers
Some providers may process data outside the country in which a user lives. Where European data-protection law applies, we rely on an adequacy decision, approved contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism, as applicable to the provider and transfer.
11. Retention
We keep personal data only for as long as reasonably necessary for the relevant purpose, security, dispute handling and legal obligations. The following periods are our normal operational limits:
- Published reviews, company responses and associated ratings: while the relevant page remains available, because preserving the discussion and rating history serves the publication purpose. Content may be anonymised or deleted when a valid request outweighs that purpose.
- Unpublished or rejected submissions and related moderation data: normally up to 24 months, particularly where the information is needed to detect repeated spam or manipulation.
- Contact and editorial correspondence: normally up to 24 months after the last meaningful exchange, unless a longer period is necessary for an unresolved complaint, legal claim or obligation.
- Routine server and security logs: normally up to 90 days; relevant records may be isolated and retained longer when an incident, attack or legal dispute is under investigation.
- Helpfulness votes: normally while the related review remains published. Any limited technical records generated to operate the feature or prevent abuse follow the server-log period above unless a shorter period is technically sufficient.
- Consent choices: up to 365 days, unless the user replaces, withdraws or deletes the choice sooner.
- Google Analytics user- and event-level data: up to 14 months under the property’s retention setting. Aggregated reports may remain available for longer.
12. User choices and rights
Depending on the law that applies, a person may ask us to:
- confirm whether we process their personal data and provide access to it;
- correct inaccurate or incomplete data;
- delete data in circumstances where no overriding lawful reason requires retention;
- restrict or object to processing, including processing based on legitimate interests;
- provide eligible data in a portable format;
- withdraw consent for optional cookies or another consent-based activity;
- review a moderation-linked privacy concern or anonymise a published contribution where appropriate;
- lodge a complaint with the data-protection authority in the country of habitual residence, place of work or alleged infringement.
Requests should be sent to investingoverview.info@gmail.com. Please identify the relevant page and, for a review-related request, use the email address originally supplied if possible. We may request proportionate verification before acting. Rights are not absolute; for example, a request may be limited where retention is necessary for freedom of expression, security, legal compliance or legal claims.
13. Security
We use reasonable technical and organisational measures designed to protect data, including encrypted connections, restricted administrative access, software updates, Cloudflare security controls and monitoring. No online system can be guaranteed completely secure, and users should avoid submitting information that is unnecessary for the stated purpose.
14. Children
The Site is directed to adults and is not intended to collect personal data from children. A person under 18 should not submit a review or contact-form message without the involvement of a parent or legal guardian. If we learn that a child’s data was submitted inappropriately, we will take reasonable steps to delete or anonymise it.
15. External links
Articles may link to regulators, corporate registers, company websites, archives, review platforms and other resources. Those services determine their own data practices. Users should read the privacy information provided by the destination site.
16. Changes to this Policy
We may update this Policy when the Site, providers or legal requirements change. The current version will be posted on this page with a revised effective date. If a change materially affects consent-based processing, we will request a new choice where required.
17. Contact
Privacy questions, rights requests and requests concerning a submitted review may be sent to investingoverview.info@gmail.com.