Privacy Policy

Last updated: August 2026

Petrock Research ("we", "our", or "us") is committed to protecting your personal information and being transparent about what we collect and why. This Privacy Policy explains how we collect, use, and safeguard data when you visit our website (petrockresearch.com) or submit information through our contact form.

By using this website, you agree to the practices described in this policy.

Article I — Who We Are

Petrock Research is a student-led, not-for-profit research organisation publishing equity and financial market analysis for educational purposes. We are not a regulated financial entity. For questions about this policy, contact us at: info@petrockresearch.com.

Article II — Information We Collect

2.1 Information You Provide Directly

When you submit our contact form, we collect:

Your first and last name
Your email address
The subject and content of your message

We collect this information solely to respond to your enquiry. We do not add you to any mailing list without your explicit consent.

2.2 Mailing List and Waitlist

If you choose to join our mailing list, we collect:

Your email address
The date you subscribed
The page or source through which you subscribed

We use this solely to send you our research, notifications when new reports are published, and updates about Petrock Research — including, in future, information about any paid subscription we may introduce. We do not send third-party advertising and we do not share your address with anyone for their own marketing.

Subscribing is entirely optional and always requires your explicit consent, given by ticking the consent box on the sign-up form. You can withdraw that consent at any time using the unsubscribe link in any email we send, or by writing to info@petrockresearch.com. Withdrawing consent does not affect the lawfulness of anything we sent beforehand.

2.3 Cookies

Our website uses cookies placed by Google Analytics. These are first-party cookies (stored under our domain) that track session data and visitor behaviour for analytical purposes. They do not store personally identifiable information and do not track you across third-party websites.

You can disable cookies at any time through your browser settings, or use a browser extension such as the Google Analytics Opt-out Browser Add-on.

Article III — Legal Basis for Processing

Where applicable under the EU General Data Protection Regulation (GDPR) and the UK GDPR, our legal basis for processing your data is:

Legitimate interests — for analytics data, to understand how our website is used and improve our content.
Contract / pre-contractual steps — for contact form submissions, to respond to your message.
Consent — for our mailing list. We send research and updates only to people who have explicitly opted in, and you may withdraw consent at any time.

Article IV — How We Use Your Information

We use the data we collect exclusively for the following purposes:

To respond to messages and enquiries submitted through the contact form
To understand website traffic patterns and improve the quality and structure of our content
To identify and resolve technical issues with the website

We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising purposes.

Article V — Data Sharing and Third Parties

5.1 Google Analytics

Analytics data is processed by Google LLC, which may store and process data on servers located outside the European Economic Area (EEA), including in the United States. Google's use of this data is governed by the Google Privacy Policy. We have entered into a Data Processing Agreement with Google as required under GDPR.

5.2 Netlify (Website Hosting & Forms)

Our website is hosted on Netlify, which processes contact form submissions on our behalf. Netlify stores submitted form data securely and transmits it to us. For details on Netlify's data practices, see the Netlify Privacy Policy.

5.3 Supabase (Database)

Mailing list sign-ups are stored using Supabase, a database and authentication provider, on servers located in the European Union (Ireland). Supabase processes this data on our behalf and under our instructions. For details, see the Supabase Privacy Policy.

Article VI — Data Retention

Contact form submissions: retained for up to 12 months after your enquiry is resolved, then deleted.
Google Analytics data: retained for 14 months as configured in our GA4 property, after which it is automatically deleted.

Article VII — Your Rights

Depending on your location (particularly if you are in the EU or UK), you may have the following rights regarding your personal data:

Access: request a copy of the data we hold about you.
Rectification: request correction of inaccurate or incomplete data.
Erasure: request deletion of your data ("right to be forgotten").
Restriction: request that we restrict processing of your data in certain circumstances.
Objection: object to processing based on legitimate interests.
Portability: request your data in a machine-readable format.
Withdraw consent: where processing is based on consent, withdraw it at any time.
Mailing list subscriptions: retained until you unsubscribe or ask us to delete your details, after which your address is removed within 30 days.

To exercise any of these rights, please contact us at info@petrockresearch.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (e.g. the Garante Privacy in Italy, or the ICO in the UK).

Article VIII — Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served exclusively over HTTPS (TLS encryption). Access to form submission data is restricted to authorised members of Petrock Research only.

Article IX — Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us and we will promptly delete it.

Article X — Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

Article XI — Contact

For any questions, concerns, or data requests relating to this Privacy Policy, please reach out to us at: info@petrockresearch.com