Privacy policy

This policy describes what personal data BrokerSwiss actually collects, from the actual forms and logs this site runs. It is written against this site's data flows rather than adapted from a template, so anything a generic policy would mention and this site does not do is listed as not happening rather than left ambiguous.

You can read every page on this site without submitting anything. There is no account, no login, no paywall and no registration wall.

Who controls your data

The controller is Tadawul Capital Media LLC, a New Mexico limited liability company (registration 0008075163), the entity that publishes this site.

Contact for anything in this policy — access, correction, erasure, objection, or a complaint: [email protected]. That address reaches the publisher directly, not a ticketing queue.

What is collected, and when

1. Reading the site

Simply reading a page produces a web server log entry. Each entry holds the connecting IP address, the date and time, the URL requested, the HTTP status, the referring URL if your browser sent one, and your browser's user-agent string. The country associated with the connection is recorded from the network layer and from the country header supplied by the site's content delivery network.

These attributes are derived from the connection on the server. The site does not ask your browser for your location, does not call any third-party geolocation service, and does not accept a client-supplied country value as authoritative.

Purpose: keeping the site available, diagnosing errors, and detecting abuse. Legal basis: legitimate interests in operating and securing the site.

2. Posting a comment or a reader rating

If you submit a comment on a review, the following is collected at the moment you press submit: the name you type, your email address, the text of your comment, the star rating if you set one, the review it relates to, and the connecting IP address recorded server-side with the submission.

Your name, your comment and your rating are published if the comment is approved. Your email address is never published and is not used to send you marketing; it exists so a comment can be tied to a real correspondent and so a moderation outcome can be communicated. Comments are held for moderation before they appear.

Legal basis: your consent, given by submitting the form.

3. Submitting an enquiry form

If you complete the enquiry form, the following is collected when you press submit at the final step: your stated goal, your stated experience level, your full name, your phone number including the country code you select, your email address, and the page you submitted from. The country associated with your connection is added server-side, as described above.

Nothing is transmitted before you press submit. If you open the form, type into it and then close the tab, no partial entry is sent anywhere. A draft of what you typed may be held in your own browser's local storage so the form survives a reload, but that draft stays on your device and is cleared once you submit.

Legal basis: your consent, given by submitting the form.

What this site does not collect

• No abandoned-form capture. Partially entered names, emails or phone numbers are never beaconed to the server for visitors who did not submit.
• No third-party geolocation lookup. Your IP address is not sent to an external service to be resolved to a location.
• No analytics tag. The site ships with its analytics measurement identifier empty, which disables the tag entirely — no analytics script loads and no analytics cookie is set.
• No advertising, retargeting, social or heat-mapping scripts, and no embedded third-party trackers. Fonts are served from this site's own domain, not from a font provider.
• No special-category data. The forms ask for none, and none should be volunteered in a comment.
• No profiling and no automated decision-making that produces legal or similarly significant effects.
• No sale of personal data, and no sharing with data brokers or list buyers.

How long it is kept

• Enquiry form submissions: 12 months from the date of submission, then deleted automatically. This is enforced in code by a scheduled purge, not by anyone remembering to run one — the retention window is a constant in the software that receives the form.
• Comments: for as long as the comment remains published. A comment that is rejected in moderation, or withdrawn by its author, is deleted within 30 days. An approved comment is deleted on request.
• Web server logs: 30 days, then rotated out and destroyed.
• Correspondence you send to the contact address: 24 months, so a correction or a complaint can be traced back to what was asked and what was done about it.

Nothing is kept "indefinitely for business purposes". When a retention period ends, the record is deleted rather than archived.

Having your data erased

Email [email protected] from the address you used, and say what you want removed — a comment, an enquiry submission, or everything. Sending from the same address is how the request is tied to the record; if you cannot, describe the submission well enough to identify it, and no additional identity document is requested.

Requests are acted on within 30 days. Erasure means the record is deleted from the site's database, not hidden from public view while retained; a published comment is removed from the page at the same time. You will get a reply confirming what was deleted.

The same address and the same 30-day window apply to your other rights: access to a copy of what is held, correction of anything inaccurate, restriction of processing, objection to processing based on legitimate interests, portability of what you submitted, and withdrawal of consent at any time. Withdrawing consent does not undo processing that already, lawfully, happened.

If you are unhappy with the response, you may complain to the data protection supervisory authority in your country of residence.

Where your data is held, and who else can see it

Submitted data is stored in this site's own content management system, on a server rented and operated by the publisher in Germany. It is not stored in a third-party marketing platform or customer relationship system.

Two providers necessarily process data in the course of delivering the site:

• The hosting provider in Germany, which operates the physical server and its network.
• Cloudflare, which serves as content delivery network and reverse proxy. Requests to the site pass through its network, so it processes connection data, and it supplies the country header referred to above.

Because the site is readable from anywhere, a request may be served from a Cloudflare location outside your own country, which can involve an international transfer of connection data. Beyond these two, no processor receives your data, and no personal data is passed to any broker reviewed on this site. Following a paid link takes you to that broker's own site, where that broker's privacy policy applies — this site does not hand your details over in advance.

Data may be disclosed where the law requires it, and where necessary to establish or defend a legal claim.

Security

The site is served over HTTPS. Submitted content is sanitised before it is stored or displayed, comments are moderated before publication, and administrative access to the content management system is restricted to the publisher. No system is perfectly secure, and no assurance is offered that it is; what is offered is that a breach affecting your data will be notified to you and to the relevant authority where the law requires it.

Children

This site is not directed at children and its forms are not intended for anyone under 18. If a submission from a child is identified, it is deleted.

Cookies

Cookies and browser storage are covered separately and in full, key by key, in the cookie policy.

Changes to this policy

The date at the top of this page is the date the text last changed. A change that materially alters what is collected or how long it is kept will be reflected here before the change takes effect, not after.