Privacy Policy

Last updated: October 25, 2026

1. Who we are

This Privacy Policy explains how Bullish Stock Alerts (“we”, “the Service”) collects and uses your personal data when you use bullishstockalerts.com, in accordance with the EU General Data Protection Regulation (GDPR).

Data controller: Nemesis — Fatih Ak, sole trader, operating Bullish Stock Alerts — company number / VAT BE1038.043.223 — registered office: Rue des Dauphins 17 boîte 1, 1080 Molenbeek-Saint-Jean, Belgium — business address: Avenue Adolphe Buyl 42, 1050 Ixelles, Belgium — contact@bullishstockalerts.com

2. Data we collect

• Account and subscription: name, e-mail address, username and password (stored in encrypted form), membership level, subscription and order history.
• Payment: payments are processed by Stripe. We receive confirmation of the transaction and limited information (amount, date, card type and last four digits); we never store full card numbers.
• Contact form: first name, last name, e-mail address and the content of your message.
• Newsletter: if you subscribe, your e-mail address is collected by Substack, which operates our newsletter under its own privacy policy.
• Spam protection (Google reCAPTCHA): on the pages that contain one of our forms, Google reCAPTCHA v3 analyses technical data (IP address, browser and device information, interactions with the page) to check that a submission comes from a human and not from a bot.
• Usage and technical data: IP address, browser and device information, and server logs needed to secure the site.
• Cookies: audience measurement (Google Analytics) and advertising (Google AdSense) only if you accept them — see section 8.

3. Why we use your data and on what legal basis

• Create and manage your account, provide subscribed content and alerts, and handle payments — performance of a contract (Art. 6(1)(b) GDPR).
• Answer your messages and support requests — pre-contractual steps / legitimate interest (Art. 6(1)(b) and (f)).
• Send service e-mails (account, renewals, important changes) — performance of a contract.
• Measure audience and show advertising — your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Secure the site, protect our forms against spam and abuse (Google reCAPTCHA) and prevent fraud — legitimate interest (Art. 6(1)(f)).
• Keep accounting and tax records — legal obligation (Art. 6(1)(c)).

4. Who receives your data

We do not sell your personal data. It is shared only with service providers acting on our behalf or as independent controllers where indicated: our hosting provider (Hostinger), our payment provider (Stripe), our e-mail delivery service, Substack (newsletter), and Google (reCAPTCHA on the pages that contain a form; Analytics and AdSense only with your consent). Data may also be disclosed to public authorities where required by law.

5. International transfers

Some providers (notably Google and Stripe) may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

• Account data: for as long as your account is active, then deleted within 12 months of closure, unless you ask for earlier deletion.
• Invoices and payment records: 7 years (Belgian accounting obligations).
• Contact messages: up to 24 months after the last exchange.
• Analytics data: up to 14 months. Consent choice: 12 months.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise these rights, write to contact@bullishstockalerts.com; we reply within one month.

You may also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.

8. Cookies

Strictly necessary cookies (login session, security, your cookie choice) are always active. Google Analytics (audience measurement) and Google AdSense (advertising) are loaded only after you accept them in the cookie banner. You can change your choice at any time via the “Cookie settings” link at the bottom of every page.

Google reCAPTCHA, which protects our forms against spam, is a security service: it is loaded only on the pages that contain a form and may read or set technical cookies (such as _GRECAPTCHA). Its use is subject to the Google Privacy Policy and Terms of Service.

9. Security

The site is served over HTTPS, passwords are stored encrypted and access to administration is restricted. No method of transmission over the Internet is completely secure, but we take reasonable measures to protect your data.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact

For any question about this Privacy Policy: contact@bullishstockalerts.com.