Privacy Policy

1. Who We Are

This website is operated by Santiago1000, a personal investor portfolio published on the eToro social trading platform. The site is located at https://santiago1000.it and is managed by Antônio Walter Santiago.

For privacy-related enquiries, please contact us via the contact form on this website.

2. Data We Collect

When you submit the Strategy Access form on this website, we collect the following personal data:

• Full name — to personalise your access and communications
• Email address — to deliver your access confirmation and educational updates
• Investment objective — to understand your investment goals
• Investment horizon — to understand your time perspective
• Reaction to market volatility — to understand your risk tolerance
• Investment experience level — to understand your background
• eToro usage status — to contextualise your familiarity with the platform
• Consent records — timestamps and checkbox responses for GDPR compliance

We also collect standard technical data via server logs and cookies (IP address, browser type, pages visited) for security and analytics purposes.

3. Purpose and Legal Basis

We collect and process your data for the following purposes:

• Providing access to strategy content — based on your explicit consent (the form submission)
• Sending educational content and strategy updates — based on your explicit consent (consent checkbox)
• Understanding our audience — aggregate, anonymised analysis of form responses to improve our educational content
• Security and fraud prevention — based on our legitimate interest in protecting the website

4. Data Retention

We retain your personal data for the following periods:

• Contact form data and email address: retained for up to 3 years from your last interaction, or until you request deletion
• Email marketing consent: retained until you withdraw consent or unsubscribe
• Server logs: retained for up to 90 days for security purposes

After the retention period expires, your data is securely deleted or anonymised.

5. Data Sharing and Third Parties

We do not sell your personal data to any third party. Your data may be shared with:

• Hosting provider — for website operation and email delivery infrastructure
• Email service providers — if used for newsletter distribution (e.g. Mailchimp or equivalent), subject to their own privacy policies
• WordPress plugins — Contact Form 7 processes form submissions; data may pass through their servers

All third-party services used are GDPR-compliant and process data under appropriate data processing agreements.

6. Cookies

This website uses the following types of cookies:

• Functional cookies: WordPress session and security cookies required for website operation
• Strategy access cookie (s1k_strategy_access): set after successful form submission to grant access to the full strategy page. Expires after 30 days. Contains no personal data — only an access token.
• Analytics cookies: if analytics are enabled, anonymised traffic data may be collected

You can manage cookies through your browser settings. Disabling the strategy access cookie will require you to resubmit the form to regain access.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data (“right to be forgotten”)
• Right to data portability: receive your data in a machine-readable format
• Right to withdraw consent: withdraw consent to email communications at any time via the unsubscribe link in any email
• Right to object: object to processing based on legitimate interest
• Right to lodge a complaint: with your national data protection authority

To exercise any of these rights, please contact us via the contact form on this website. We will respond within 30 days.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This website uses HTTPS encryption for all data transmission. Form submissions are handled via Contact Form 7 with nonce verification and spam filtering.

9. Investment Disclaimer

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via the website or by email to registered users. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact

For any privacy-related questions or to exercise your rights, please use the contact form on this website. We aim to respond to all privacy enquiries within 30 working days.