Privacy Policy

Last updated: 12 October 2026

This Privacy Policy explains how TopRatedBroker ("we", "us", "our") collects, uses, shares, and protects personal information in connection with your use of TopRatedBroker.com (the "Site"). It applies to all visitors and contributors to the Site, worldwide. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

1.1 Information you submit voluntarily

The Site has no user accounts or submission forms. If you contact us, we collect any information you choose to include in your message.

1.2 Technical information collected automatically

When you visit the Site we (and our service providers, including our content-delivery and hosting provider) may automatically collect: your internet protocol (IP) address, internet service provider, approximate geographic location (derived from IP), the type of device and browser you use, the date and time of your visit, the pages you access, the referring page or search query, the language preference set in your browser, and similar diagnostic and usage data. This information is used in the aggregate and for security purposes, and is not used to attempt to identify you personally.

1.3 Cookies, local storage, and similar technologies

The Site itself does not set cookies or use local storage. Our hosting provider may set a strictly necessary security cookie. See our Cookie Notice for details.

2. How we use information

We use the information described above to:

  • Operate, maintain, and improve the Site;
  • Respond to inquiries, support requests, takedown notices, right-of-reply requests, and other correspondence;
  • Diagnose technical issues, monitor security, and prevent fraud or abuse of the Site;
  • Produce aggregate analytics about how the Site is used in order to improve content and user experience;
  • Comply with legal obligations, court orders, lawful regulatory requests, or to protect our rights or those of others.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

3. Legal bases for processing (EU / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with equivalent data-protection law, we rely on the following lawful bases to process your personal information:

  • Consent — when you contact us. You may withdraw consent at any time.
  • Legitimate interest — for purposes including site security, fraud prevention, aggregate analytics, and the editorial publication of broker information and consumer-protection information (which we consider a legitimate journalistic activity in the public interest). We have assessed that our legitimate interests are not overridden by your rights and freedoms in these contexts.
  • Legal obligation — when we are required to retain or disclose information by law, court order, or lawful regulatory request.
  • Performance of a contract — to the limited extent any service we provide constitutes a contract.

4. California residents — your CCPA / CPRA rights

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following additional rights:

  • Right to know — what categories of personal information we collect, the sources, the purposes, and any categories of recipients;
  • Right to access a copy of the personal information we hold about you;
  • Right to delete personal information we have collected from you, subject to legal exceptions;
  • Right to correct inaccurate personal information;
  • Right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioural advertising, and we do not knowingly process the personal information of consumers under 16 without consent.
  • Right to non-discrimination — we will not deny you the Site, charge you a different price, or provide a different level of service for exercising your privacy rights.

To exercise any of these rights, contact us through the Site's contact mechanism. We will verify your identity to a reasonable degree before fulfilling the request.

5. Sharing and disclosure

We do not sell personal information to third parties. We may share information in the following limited circumstances:

  • Service providers (processors) — we use carefully selected service providers who process information on our behalf to operate the Site, including content-delivery and hosting providers, security and DDoS-mitigation providers, email-delivery providers (when contacting users), and analytics providers (where used). These providers process information under appropriate confidentiality and data-processing terms and only for the purposes we instruct.
  • Outbound links — the Site doesn't embed third-party content, but when you follow a link to a broker or regulator website, that website may collect information about you under its own privacy policy. Links to partner brokers pass through a redirect on our domain so the broker can attribute the referral.
  • Legal compliance — we may disclose information if we are required to do so by law, court order, subpoena, or lawful regulatory request, or where disclosure is necessary to investigate or prevent fraud or to protect our rights or those of others.
  • Successors — in the event of a merger, acquisition, restructuring, sale of assets, insolvency, or similar event, information may be transferred to a successor entity, subject to equivalent privacy protections.

6. Data retention

  • Contact correspondence: retained for up to two (2) years from the date of last activity, unless longer retention is required by law.
  • Server logs and security data: retained for up to thirteen (13) months for security and fraud-prevention purposes.
  • Aggregate analytics: retained per the analytics provider's policy in non-identifying form.

7. Your rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

  • The right to access the personal information we hold about you;
  • The right to request correction of inaccurate or incomplete information;
  • The right to request erasure of personal information ("right to be forgotten");
  • The right to restrict or object to our processing of your information;
  • The right to data portability — to receive your information in a structured, machine-readable format;
  • The right to withdraw consent at any time, where consent is the basis for processing;
  • The right to lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact us. We will respond within thirty (30) days of receiving a valid request, or, where the request is complex, within a longer period of up to ninety (90) days with notice to you.

8. International transfers

The Site is operated from infrastructure that may be located in multiple jurisdictions. If we transfer your personal information outside the European Economic Area, the United Kingdom, or your home jurisdiction, we use appropriate safeguards as required by applicable law, including Standard Contractual Clauses, UK International Data Transfer Agreements, adequacy decisions, or other lawfully recognised transfer mechanisms.

9. Children's privacy

The Site is not directed at, and we do not knowingly collect personal information from, individuals under the age of eighteen (18). If you are under 18, do not use the Site or submit any information through it. If we become aware that we have inadvertently collected personal information from a person under 18, we will delete it as soon as reasonably practicable. If you believe we may hold information about a person under 18, please contact us.

10. Security

We use reasonable technical, organisational, and administrative measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These include HTTPS encryption in transit, access controls, security monitoring, and engagement of reputable service providers. No internet transmission or electronic storage is perfectly secure, however; we cannot and do not guarantee absolute security.

11. Data breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, as required by applicable law, and we will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

12. Do Not Track and global privacy signals

Some web browsers transmit "Do Not Track" or Global Privacy Control signals. Because there is no widely accepted standard governing such signals, we currently do not respond differently when such a signal is received. We do not engage in cross-site behavioural advertising regardless of whether a signal is transmitted.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated by a notice on the Site for a reasonable period. Your continued use of the Site after a revised Privacy Policy is posted constitutes your acceptance of the revised version.

14. Contact

To exercise any of your privacy rights, ask a question about this Privacy Policy, submit a data-deletion request, or report a suspected privacy incident, please use the contact mechanism provided on the Site. We aim to respond within thirty (30) days.