Privacy Policy
This Privacy Policy explains how rollingstraddle.com (“we”, “us”) collects, uses, shares and protects personal data when you use our Service. We follow the principles of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
1. Data we collect
1.1 Provided by you
- Account details: email address, display name, optional avatar.
- For verified-trader profiles: broker statements, trader name, contact details, social handles.
- Support enquiries you send us via email or Telegram.
- Payment information processed by our payment gateway (we do not store card numbers).
1.2 Collected automatically
- Standard log data: IP address, user-agent, referrer, page accessed, timestamp.
- Cookies and similar storage (see §5 below).
2. Why we use it
- To provide, maintain and improve the Service.
- To verify trader profiles before publishing them on the leaderboard.
- To process payments, prevent fraud and meet tax / accounting obligations.
- To send transactional and (optionally) marketing communications.
- To respond to support requests.
3. Legal basis
We process personal data on the basis of your consent, the performance of our contract with you, our legitimate interests (security, fraud prevention, product improvement) and where required by law.
4. Sharing
We share data only as necessary, and only with:
- Infrastructure providers (hosting, email, analytics) bound by data processing agreements.
- Payment processors when you make a payment.
- Law enforcement or government bodies where legally compelled.
We do not sell your personal data.
5. Cookies & analytics
We use cookies and local storage for: keeping you signed in, remembering preferences (e.g. NIFTY vs SENSEX), and measuring product usage. We do not use third-party advertising cookies. You can clear cookies any time from your browser; non-essential cookies require consent on first visit.
6. Data retention
- Account data: while your account is active and up to 12 months after closure.
- Verified-trader broker statements: as long as the profile is on the leaderboard, plus 24 months for audit.
- Payment / invoice records: 8 years (Indian tax retention requirement).
- Server logs: 90 days.
7. Your rights (DPDP Act, §11–14)
You have the right to:
- Access the personal data we hold about you.
- Correct inaccuracies.
- Erase your data, subject to legal retention.
- Withdraw consent at any time.
- Nominate another individual to exercise these rights in case of incapacity.
- Grievance redressal: lodge a complaint with us first; escalate to the Data Protection Board of India if unresolved.
Email support@rollingstraddle.com with the subject “DPDP request” and we will respond within 30 days.
8. Security
We protect data with HTTPS, encrypted backups, role-based access controls, and secrets stored in a managed vault. No system is perfectly secure; in the event of a breach affecting your data we will notify you and the Data Protection Board within 72 hours of becoming aware.
9. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.
10. International transfers
Some of our service providers process data outside India. We require those providers to apply protections at least equivalent to the DPDP Act.
11. Grievance officer
Grievance Officer: rollingstraddle.com Privacy Team
Email: support@rollingstraddle.com
We respond within 15 working days.
12. Changes
We may update this Policy. The “Last updated” date at the top reflects the latest revision. Material changes will be highlighted on the Service or by email.