Privacy Policy
Petrock Research ("we", "our", or "us") is committed to protecting your personal information and being transparent about what we collect and why. This Privacy Policy explains how we collect, use, and safeguard data when you visit our website petrockresearch.com/coming-soon and sign up for our waitlist.
By using this website, you agree to the practices described in this policy.
Article I — Who We Are
Petrock Research is a student-led, not-for-profit research organisation publishing equity and financial market analysis for educational purposes. We are not a regulated financial entity. For questions about this policy, contact us at: info@petrockresearch.com.
Article II — Information We Collect
2.1 Mailing List and Waitlist
If you choose to join our mailing list, we collect:
- Your email address
- The date and time you subscribed
We use this solely to send you our research, notifications when new reports are published, and updates about Petrock Research — including, in future, information about any paid subscription we may introduce. We do not send third-party advertising and we do not share your address with anyone for their own marketing.
Subscribing is entirely optional and always requires your explicit consent, given by submitting the sign-up form, which states clearly what you are agreeing to receive. You can withdraw that consent at any time using the unsubscribe link in any email we send, or by writing to info@petrockresearch.com. Withdrawing consent does not affect the lawfulness of anything we sent beforehand.
When you sign up, we send an immediate confirmation email acknowledging your subscription. Our emails contain standard open and click tracking, which tells us whether a message was opened and which links were followed. We use this only to understand whether our emails are useful. You can prevent open tracking by disabling remote image loading in your email client.
2.2 Information Collected Automatically (Analytics)
We use Simple Analytics, a privacy-first web analytics service provided by Simple Analytics B.V. (Netherlands). Simple Analytics does not use cookies, does not store IP addresses, and does not build profiles of individual visitors. It collects only aggregated, non-identifying information:
- Pages viewed and the number of views
- The referring website or source (e.g. how visitors arrived at our site)
- Country-level location
- Device type, operating system, and browser
This data cannot be linked back to you as an individual and is not shared with advertisers or any other third party. All analytics data is processed and stored on servers within the European Union.
2.3 Cookies
We do not use cookies. Our analytics provider is cookieless by design, and we do not run advertising, tracking or social media pixels on this website. Nothing is stored on your device when you browse, and no consent banner is required. Separately, our emails contain open and click tracking as described in section 2.1.
Article III — Legal Basis for Processing
Where applicable under the EU General Data Protection Regulation (GDPR), our legal basis for processing your data is:
- Legitimate interests — for aggregated, cookieless analytics, to understand how our website is used and improve our content. This processing does not involve personal data or identify individual visitors.
- Consent — for our mailing list. We send research and updates only to people who have explicitly opted in, and you may withdraw consent at any time.
Article IV — How We Use Your Information
We use the data we collect exclusively for the following purposes:
- To send waitlist subscribers the research and updates they signed up for
- To understand website traffic patterns and improve the quality and structure of our content
- To measure whether our emails are opened and which links are followed, so we can judge whether they are useful
We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising purposes.
Article V — Data Sharing and Third Parties
5.1 Simple Analytics (Website Analytics)
Aggregated website statistics are processed by Simple Analytics B.V., a company established in the Netherlands, on servers located within the European Union. No personal data is transferred outside the EEA for analytics purposes. For details, see the Simple Analytics Privacy Policy.
5.2 Netlify (Website Hosting & Forms)
Our website is hosted on Netlify, which processes waitlist form submissions on our behalf. Netlify stores submitted form data securely and transmits it to us. For details on Netlify's data practices, see the Netlify Privacy Policy.
5.3 Brevo (Email Delivery)
Waitlist email addresses are stored and our emails delivered by Brevo (Sendinblue SAS), a company established in France, on servers located within the European Union. Brevo processes this data solely on our behalf and under our instructions. For details, see the Brevo Privacy Policy.
5.4 Make (Automation)
We use Make (Celonis SE, Germany) to transfer waitlist sign-ups from our form to our email provider. Make processes your email address in transit only and does not retain it for its own purposes. For details, see the Make Privacy Notice.
Article VI — Data Retention
- Website analytics: aggregated statistics are retained by our analytics provider in line with our current plan. As this data is anonymous and aggregated, it cannot be traced back to any individual visitor.
- Mailing list subscriptions: retained until you unsubscribe or ask us to delete your details, after which your address is removed within 30 days. Form submissions are also retained in Netlify and deleted on the same basis.
Article VII — Your Rights
Depending on your location (particularly if you are in the EU or UK), you may have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data ("right to be forgotten").
- Restriction: request that we restrict processing of your data in certain circumstances.
- Objection: object to processing based on legitimate interests.
- Portability: request your data in a machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
To exercise any of these rights, please contact us at info@petrockresearch.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (e.g. the Garante Privacy in Italy, or the ICO in the UK).
Article VIII — Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served exclusively over HTTPS (TLS encryption). Access to waitlist submission data is restricted to authorised members of Petrock Research only.
Article IX — Children's Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us and we will promptly delete it.
Article X — Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.
Article XI — Contact
For any questions, concerns, or data requests relating to this Privacy Policy, please reach out to us at: info@petrockresearch.com