Privacy Policy - Elliott Wave Insight

Effective date: 19 April 2026
Last updated: 17 October 2026

1. Who this policy applies to

This Privacy Policy explains how Anthony Lyle trading as Elliott Wave Insight (“Elliott Wave Insight”, “the business”, “we”, “us” or “our”) collects, uses, stores and shares personal data when people use the Elliott Wave Insight website, services, memberships, software, the Trade Journal, updates and community access channels.

Elliott Wave Insight is a UK-based trading education business. This policy is intended primarily for UK data protection compliance, but some services may also be accessed by visitors outside the UK.

Data controller contact details
Anthony Lyle trading as Elliott Wave Insight
Email: [email protected]

For general privacy or data protection questions, requests or complaints, use the email address above.

2. Personal data collected

Personal data may be collected directly from users when they contact the business, subscribe to updates, purchase memberships or products, request access to Telegram or Discord communities, or otherwise interact with the website and services.

Depending on how the service is used, the personal data collected may include:

Identity and contact data, such as name, email address, username, Telegram handle or Discord username.
Account and membership data, such as subscription status, access permissions, plan type and support history.
Transaction and payment data, such as purchase records, billing details and payment status; full card details are processed by payment providers and are not stored directly by Elliott Wave Insight.
Technical and usage data, such as IP address, browser type, device information, pages viewed, cookie identifiers and analytics data, where permitted.
Communications data, such as messages, support requests, emails, and records of preferences for receiving updates by email, Telegram or Discord.
Trading account data, if you use the Trade Journal: your MetaTrader account number, account name, broker and server, account type, currency, leverage, balance, equity and margin, and your closed trades, open positions and pending orders, including symbols, volumes, prices, stop loss and take profit levels, swaps, commissions and trade comments.
Journal content you add, such as notes, tags, strategies and chart images.
MetaTrader investor passwords, if you choose investor password sync. See section 18.
Software licence data, such as licence keys, the MetaTrader account numbers and brokers a key is used with, and the EA and terminal version.
Community data, such as messages, images and reactions you post in EW Talk and other community spaces.
Push notification data, such as the browser subscription that lets us send you notifications, if you turn them on.

Personal data may also be received from third-party providers where necessary to operate the service, such as payment confirmation from Stripe, or mailing and hosting-related records from service providers used by the business.

3. How personal data is collected

Personal data is collected in several ways:

Directly from users when forms are submitted, purchases are made, or emails and support requests are sent.
Automatically through essential website technologies and, where consent has been given, through analytics and similar tools.
From third-party providers involved in payment processing, subscriptions, messaging or service delivery.

4. Why personal data is used

Personal data is used to operate, deliver and improve the business’s services. This includes:

Creating and managing accounts, memberships and access permissions.
Processing orders, subscriptions and payments.
Sending product, service or membership-related communications.
Sending updates, market analysis, educational content or community notices where the recipient has subscribed or where another lawful basis applies.
Providing Telegram and Discord access where these are offered as part of a service or community feature.
Responding to enquiries, technical support requests and customer service issues.
Running the Trade Journal, including syncing your trading data and calculating your statistics.
Issuing and checking software licences.
Protecting sign-up and login forms from automated abuse.
Maintaining security, detecting abuse, preventing fraud and protecting the website and services.
Measuring site performance and usage where appropriate consent has been obtained for non-essential analytics tools.
Meeting legal, accounting, tax and regulatory obligations.

Personal data is not sold to third parties.

5. Lawful bases for processing

Under UK GDPR, personal data is processed only where a lawful basis applies. Depending on the context, Elliott Wave Insight may rely on one or more of the following lawful bases:

Contract: where processing is necessary to provide a purchased product, subscription, membership, community access or requested service, including the Trade Journal, investor password sync and software licences you sign up for.
Consent: where a user has actively agreed, for example to receive marketing updates or to accept non-essential cookies.
Legitimate interests: where processing is necessary for running, securing and improving the business, including spam and bot protection on our forms, provided those interests are not overridden by the individual’s rights and interests.
Legal obligation: where records must be kept or disclosures made to comply with tax, accounting, fraud-prevention or other legal requirements.

Where consent is relied upon, it can be withdrawn at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.

6. Cookies and similar technologies

The website uses cookies and similar technologies to support core site functions and, subject to consent, to understand usage and improve services.

Cookies may include:

Strictly necessary cookies, which are required for core website functionality and security. These do not require consent.
Analytics cookies, which help measure website performance and visitor behaviour. These are only set after you consent through our cookie banner.
Marketing or tracking cookies, if used, which are only set after you consent.

Our cookie banner blocks analytics and marketing cookies until you consent. You can use the site without accepting them.

Users can also control cookies through browser settings, although disabling certain cookies may affect site functionality.

7. Email, Telegram and Discord communications

Elliott Wave Insight may send service messages, membership notices, community access information and subscribed updates by email, Telegram or Discord, depending on the services a user has joined or requested.

Where messages are marketing in nature, we rely on your consent or another basis permitted by law. Users can unsubscribe from marketing emails at any time and can leave Telegram or Discord channels or communities they no longer wish to follow.

Discord may be offered as an alternative to Telegram for community access or updates. Telegram and Discord are third-party platforms with their own privacy practices, so users should review those providers’ terms and privacy notices before using them.

8. Payments and billing

Payments are processed through Stripe. Stripe processes payment information on the business’s behalf or as a separate controller depending on the service configuration, and may collect billing, transaction and fraud-prevention data required to complete purchases.

Elliott Wave Insight does not store full payment card details on its own systems. Payment records and order records may still be retained for accounting, tax, chargeback, fraud prevention and legal purposes.

Personal data may be shared with trusted third parties only where necessary for legitimate business operations, service delivery or legal compliance. These may include:

Payment providers, including Stripe.
Email or hosting-related providers, including the business’s CyberPanel email infrastructure or connected service providers, where needed to send or receive communications.
Website analytics, consent management or security service providers, where these are enabled and lawfully used.
Hosting providers that run our website and servers, including Hetzner Online, in the European Economic Area.
The provider of the Windows server that runs our MetaTrader sync service.
Your broker’s MetaTrader servers, which our sync service connects to with the details you give us, if you use investor password sync.
Cloudflare, which provides Turnstile bot protection on our login and registration forms.
Browser push services, such as those run by Google, Mozilla and Apple, which deliver notifications if you turn them on.
Community and messaging platforms, including Telegram and Discord, where a user chooses to use those services.
Professional advisers, regulators, legal authorities or law enforcement, where disclosure is necessary to comply with legal obligations or protect legal rights.

Personal data is shared only to the extent reasonably necessary for the relevant purpose.

10. International transfers

Some service providers or platforms used by Elliott Wave Insight may process personal data outside the UK. When this happens, we take appropriate steps to keep personal data protected in line with UK GDPR. Our own servers are hosted in the European Economic Area, which the UK recognises as giving adequate protection for personal data.

Whether a transfer is restricted under UK GDPR depends on the facts of the transfer and the role of the receiving organisation. Where required, we use appropriate safeguards.

11. Data retention

Personal data is kept only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, tax, security and dispute-resolution requirements.

Typical retention periods may include:

Membership and customer records: for the duration of the relationship and for a reasonable period afterwards where needed for support, disputes, record-keeping or legal compliance.
Payment and transaction records: generally up to 7 years where required for accounting or tax purposes.
Marketing records: until consent is withdrawn, the user unsubscribes, or the records are no longer needed.
Analytics and cookie-related records: in line with the settings of the tools used and the business’s consent and retention configuration.
Trade Journal data: until you clear your trade history, ask us to delete it, or close your account.
MetaTrader investor passwords: until you disconnect investor password sync or close your account. They are deleted as soon as you disconnect.
Software licence records: for as long as the licence is active and for up to 12 months afterwards, for support and fraud prevention.

Retention periods may be adjusted where necessary to comply with law or to establish, exercise or defend legal claims.

12. Data security

We use technical and organisational measures to protect personal data from unauthorised access, loss, misuse, disclosure or alteration. These include encrypted connections, encryption of stored investor passwords, access controls, restricted administration access, password protection, platform-level security measures and routine maintenance practices.

No internet-based system can be guaranteed to be completely secure. Users should also take reasonable steps to protect their own devices, passwords and accounts.

13. Individual rights

Under UK data protection law, individuals may have the right to:

request access to their personal data;
request correction of inaccurate or incomplete data;
request erasure in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing, including some direct marketing;
request portability of data, where applicable; and
withdraw consent where processing relies on consent.

Requests can be sent to [email protected]. Proof of identity may be requested before a response is provided. The business will respond in accordance with applicable legal time limits.

14. Children

The website, services and memberships are not intended for children. Elliott Wave Insight does not knowingly target or provide services to children. If you believe we have collected personal data from a child in error, contact us using the details in this policy and we will review it and, where appropriate, delete the data.

If social sharing buttons, embedded tools or third-party platform links are used on the site, those features may allow third-party providers to receive technical data such as IP address, browser or device information, and information about the content viewed or shared.

Those third-party providers operate under their own terms and privacy policies. Elliott Wave Insight does not control how those third parties use personal data once a user interacts with their services.

16. Complaints

If you have a concern about how your personal data is handled, please contact us first at [email protected] so the matter can be reviewed.

Individuals in the UK also have the right to complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113

17. Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, legal requirements or operational practices. The latest version will be posted on the website with the updated revision date.

18. Trade Journal and MetaTrader investor passwords

If you choose investor password sync, you give us your MetaTrader account number, broker server and investor password. An investor password gives read-only access: it cannot be used to place, change or close trades, or to move money.

We store investor passwords encrypted on our licence server. A password is only decrypted so our sync service can log in to your account to read your trading data. It is never displayed on the website or in our admin tools, never written to logs and never shared. You can stop our access at any time by clicking Disconnect on your Trade Journal page, which deletes the password, or by changing your investor password in MetaTrader.

Your trading data is used only to provide your Trade Journal. It is private to you and is never sold or shared with other members. Administrators may view it only to give you support, fix a problem or meet a legal obligation. Full terms are in the Trade Journal Member Agreement.