Last updated: September 17, 2026.
This Privacy Policy explains how the operator of rtibk.com (“RTIBK”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit rtibk.com (the “Site”) or contact us. RTIBK is an independent, educational financial publication. We are not a bank, broker, investment adviser or any other kind of financial institution, and we do not open accounts, hold money or collect financial account information from readers.
We have written this policy with the EU General Data Protection Regulation (“GDPR”), the UK GDPR and the California Consumer Privacy Act as amended (“CCPA”) in mind. Where those laws apply to you, you have the rights described below. For the purposes of the GDPR and UK GDPR, the operator of rtibk.com is the controller of the personal data described in this policy.
Personal data we collect
Information you provide to us
When you use the contact form on our Contact page or email us directly, we collect the information you choose to provide. The contact form asks for:
- Name — so we know how to address you;
- Email address — so we can reply;
- Subject — so we can route your message to the right editor; and
- Message — the content of your enquiry, feedback or request.
Please do not include sensitive information in your message, such as passwords, bank or card details, government identification numbers, health information or details about your personal finances. We do not need it and will delete it where practical.
Information collected automatically
Our hosting infrastructure automatically processes certain technical data when you load a page. This can include your IP address, browser type and version, operating system, the page requested, the referring page, and the date and time of the request. This data is used to deliver and secure the Site and is held in short-lived server logs.
Cookies, local storage and analytics
We store your cookie choice in your browser so we do not have to ask you on every visit. If you consent to analytics, we may also use analytics tools that collect information about how visitors use the Site, such as pages viewed, time on page, approximate location derived from IP address (country or city level), device type and the site that referred you. Analytics do not run unless you opt in. See the Cookies section.
Third-party market widgets
Our Market Insights page embeds market data widgets provided by TradingView. When those widgets load, your browser connects directly to the provider’s servers, and the provider may receive technical data such as your IP address and may set its own cookies under its own privacy policy. We encourage you to review the provider’s privacy notice.
How we use personal data and our legal bases
The table below summarizes our purposes and the legal bases we rely on under the GDPR and UK GDPR.
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your enquiry, correction request or feedback | Name, email, subject, message | Legitimate interests in operating a responsive publication; or steps taken at your request |
| Handling privacy and data rights requests | Name, email, request details | Legal obligation |
| Delivering and securing the Site, preventing abuse and spam | Technical and log data | Legitimate interests in keeping the Site available and secure |
| Remembering your cookie choice | Consent preference stored in your browser | Legal obligation and legitimate interests; strictly necessary storage |
| Measuring readership through analytics | Analytics and device data | Consent, which you may withdraw at any time |
| Establishing, exercising or defending legal claims | Relevant records | Legitimate interests |
You may object to processing based on legitimate interests as described below. We do not use personal data for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles of readers.
How long we keep data
We keep personal data only as long as it is needed for the purposes described above:
- Contact form submissions and emails: generally up to 24 months after our last exchange, so that we can follow up on corrections or ongoing conversations, unless a longer period is needed for a legal claim or you ask us to delete them sooner.
- Privacy requests: records of the request and our response are kept for up to 36 months to demonstrate compliance.
- Server logs: typically retained for no more than 30 days, unless needed to investigate a security incident.
- Analytics data: retained in aggregated or pseudonymized form for up to 26 months, where you have consented.
- Consent preference: stored in your browser until you clear it or change your choice.
When data is no longer needed, we delete it or anonymize it so that it can no longer be linked to you.
Who we share data with
We do not sell personal data and we do not share it for cross-context behavioral advertising. We share personal data only with service providers (processors) who help us run the Site and who are bound by contracts requiring them to protect the data and use it only on our instructions. These fall into the following categories:
Hosting and delivery
Web hosting and content delivery providers that serve pages, process technical request data and protect the Site from attacks.
Email and forms
Providers that transmit contact form submissions and host the mailboxes we use to reply to you.
Analytics
Analytics providers that process usage data on our behalf, only if you have given consent.
We may also disclose personal data where required by law, court order or a valid request from a public authority; to protect the rights, safety or property of RTIBK, our readers or others; or in connection with a reorganization, sale or transfer of the Site, in which case the recipient would be required to honor this policy.
International data transfers
Our service providers may process personal data in countries other than the one where you live, including countries outside the European Economic Area and the United Kingdom whose laws may not provide the same level of protection. Where we transfer personal data from the EEA or UK, we rely on appropriate safeguards, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or a recognized data privacy framework to which the recipient has certified.
Your privacy rights
If you are in the EEA or the UK
Subject to certain conditions and exceptions, you have the right to:
- access the personal data we hold about you and receive a copy;
- rectify inaccurate or incomplete data;
- erase your data (the “right to be forgotten”);
- restrict our processing in certain circumstances;
- object to processing based on legitimate interests;
- data portability, receiving data you provided in a structured, machine-readable format;
- withdraw consent at any time, without affecting processing carried out before withdrawal; and
- lodge a complaint with a supervisory authority, such as the data protection authority in your country of residence or, in the UK, the Information Commissioner’s Office.
If you are a California resident
The CCPA gives California residents the right to know what categories and specific pieces of personal information we collect, use and disclose; to request deletion; to request correction of inaccurate information; and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not knowingly collect sensitive personal information. We will not discriminate against you for exercising these rights. You may use an authorized agent to submit a request on your behalf, subject to verification.
In the preceding twelve months, the categories of personal information we may have collected are identifiers (such as name, email and IP address), internet or network activity information (such as pages viewed, where you consented to analytics), and the content of communications you send us. These are collected from you and your device and are used for the purposes described in this policy.
How to exercise your rights
Email [email protected] with a description of your request. We may need to verify your identity before acting, usually by confirming control of the email address associated with the data. We aim to respond within one month (or within 45 days for CCPA requests), and will tell you if we need more time as permitted by law. We honor recognized browser privacy signals, such as Global Privacy Control, as an opt-out of optional analytics where required.
Cookies and similar technologies
Cookies are small text files placed on your device. Similar technologies, such as browser local storage, work in a comparable way. We keep our use of them to a minimum. Essential storage is used because the Site needs it; optional analytics are used only after you accept them in our consent banner.
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
rtibk_consent | Browser local storage (first party) | Essential | Records whether you accepted or declined optional cookies so the banner does not reappear on every page. | Until you clear browser storage or change your choice |
| Analytics identifiers | Cookies (first or third party) | Optional — analytics | Distinguish visits and measure aggregate readership, popular pages and referral sources. | Up to 13 months, set only with consent |
| Widget provider cookies | Third-party cookies | Third party | Set by embedded market data widgets on the Market Insights page under the provider’s own policy. | As determined by the provider |
You can change your choice at any time by clearing the rtibk_consent entry in your browser’s site data, which will cause the consent banner to appear again on your next visit. Most browsers also let you block or delete cookies through their settings.
Children’s privacy
The Site is intended for adults and is not directed at children. We do not knowingly collect personal data from children under 16 (or the equivalent minimum age in your jurisdiction). If you believe a child has sent us personal data, please contact us and we will delete it.
Security
We use reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS) across the Site, access controls on the mailboxes and tools we use, and the selection of service providers with appropriate security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities where required by law.
RTIBK will never ask you for passwords, banking details or payments by email, message or phone. If you receive such a request from someone claiming to represent us, it is not from us. Please read our Investor Security Center for guidance on recognizing impersonation scams.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, service providers or applicable law. When we do, we will revise the “Last updated” date above and, for significant changes, provide a more prominent notice.
Contact us
If you have questions about this policy or how we handle personal data, or you wish to exercise your rights, please email [email protected]. You can also reach us through our Contact page. Please see our Terms & Conditions and Disclosures for other information about using the Site.