Who we are
The Winners Circle site at groundedingold.com is run by Built By Billy, a UK sole trader. Built By Billy is the data controller for the personal data described here. Contact: billy@builtbybilly.uk.
We keep as little as we can, and only what helps the group learn.
What we keep
- Username and display name: to sign you in, and how you appear to the group.
- Email address (optional): only if you add one, so we can send password resets and email-change confirmations. Nothing else is sent to it.
- Optional trading profile: only what you choose to add, such as the markets you trade, the type of market and how long you have been trading.
- Journal entries: the balances, trades and notes you log. Only you can see them.
- Quiz attempts: your answers and scores, and whether each go was before or after the videos. Private to you and the person who runs the group.
- Videos you tick as watched: only the ticks you add yourself. We cannot see what you watch on YouTube.
- When you last visited: the date and time, to see who is keeping up.
- Trade reviews (optional): only if you choose to share a trade for feedback. Members then see a copy of what you picked: the instrument, long or short, the day, your setup, your plan, your lesson, what you want feedback on, the pictures you tick to include (they are left out unless you tick them, so check they show no balance, P&L or account number) and, only if you tick it, your result in R. Amounts, balances and risk are never shared, and your journal stays private. Members also see your display name on the post and on any feedback you write. You can edit or delete a post or comment at any time; deleting the trade deletes its post. If you report a post or comment, only the admins see the report.
What the admins can see
Admins can see who ticked each video, who took the week's quiz (before or after the videos, or not yet) and when you last visited. That page shows no scores. Scores are only on the admin quiz screens, and are never shared with other members.
To run the site safely we also keep a record of your agreement to the disclaimer and terms (which version, when, and the IP address and browser it came from) and recent sign-in attempts (IP address and time) to stop password guessing.
We do not collect payment details, and we do not use analytics, advertising or tracking of any kind.
Why we use it (lawful basis under UK GDPR)
- Contract (Article 6(1)(b)): your account, display name, profile, journal, quizzes and any trade reviews you choose to share, to provide the members' area you have joined.
- Legitimate interests (Article 6(1)(f)): looking at the group's quiz answers as a whole, so the Saturday post covers what the group found hardest; keeping agreement records and sign-in attempts, for evidence and security. Only group results are ever shared, never names or individual scores. Any group number from fewer than three people is hidden. You can leave your answers out yourself with the switch under Account ("Leave my answers out of group results").
Who processes it for us
We use a small number of service providers, each under a data-processing agreement:
- Supabase: database and sign-in. Your data is stored in London, UK.
- Vercel: hosting the site and running its pages.
- Resend: sending account emails (password resets and email-change confirmations), only if you added an email address.
We may use AI tools to help look at the group's quiz answers as a whole. We do not sell your data, use it for marketing, or share it with brokers, signal providers or affiliates. We only share data with authorities where the law requires it.
International transfers
Some providers may process data outside the UK, usually in the EU or the US. Where they do, the transfer is covered by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Account, profile, journal, video ticks and quiz data: for as long as you have an account. Deleted when you delete your account or ask us to.
- Trade reviews, feedback and pictures you shared: until you delete them, or your account is deleted.
- Reports on trade reviews: until the post or comment they are about is deleted, or the account of the person who reported it is deleted. If an admin hides a post or comment, the person who wrote it can still see it, with a note, until they delete it.
- Individual quiz scores: deleted when a learning series ends. Only the group's totals for each week and topic are kept, with nothing that links them to you.
- Agreement records: kept as evidence of what was agreed, with the link to you removed once your account is deleted.
- Sign-in attempts: deleted automatically after a short period.
Your rights
Under UK GDPR you can ask to access, correct, delete or export your data, to restrict how it is used, or object to it being used. You can change most details and close your account yourself under Account; the admin then deletes it for good. For anything else, email billy@builtbybilly.uk and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.
Cookies
We only use strictly necessary cookies to keep you signed in. See the cookie policy.
Security
Each member can only read and change their own data, and this is enforced in the database. Passwords are hashed by our sign-in provider and every connection uses HTTPS.
Age
The Winners Circle is for adults aged 18 and over.
Changes
If this policy changes in a way that matters, we will tell members in the app before the change applies.