Privacy Policy

Last Updated: August 23, 2026

1. Introduction

Trends of the World ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights in relation to it. It applies whenever you use our website or platform (the "Service").

2. Data Controller

Trends of the World, with registered address at Copernico Isola, via Sassetti 32, 20124 Milan, Italy, acts as the data controller for personal data collected through the Service. For any privacy-related enquiries, you can reach us at info@trendsoftheworld.com or by post at the address above.

3. Information We Collect

We collect the following categories of personal data: • Account data: your email address and encrypted password when you register. • Profile data: your subscription tier and, where applicable, your Stripe customer ID. • Usage data: interactions with the dashboard, pages visited, and features accessed, collected via standard server logs. • Payment data: billing and transaction records processed by Stripe. We do not store card numbers or full payment details on our servers. • Communications: messages you send us via the contact form or by email.

4. How We Use Your Information

We use your personal data to: • Create and manage your account. • Provide access to subscription features appropriate to your plan. • Process payments and manage billing through Stripe. • Send transactional emails (e.g., trend alert digests) when requested. • Respond to support and contact enquiries. • Improve the Service through aggregated, anonymised analytics. • Comply with legal obligations.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR: • Contractual necessity: to fulfil your subscription and provide the Service. • Legitimate interests: to maintain security, prevent fraud, and improve the platform. • Legal obligation: where we are required to retain or disclose data by law. • Consent: where you have explicitly opted in (e.g., marketing communications, where applicable).

6. Cookies and Local Storage

The Service uses browser localStorage to cache trend data for up to 12 hours, reducing unnecessary network requests. Essential session cookies may be set by Supabase for authentication purposes. Google Analytics cookies are set only if you choose “Accept All” in the cookie banner — if you choose “Essential Only”, no analytics identifier is stored and no analytics data is collected. We never use advertising cookies. See our Cookie Policy for full details. You can clear local storage at any time via your browser settings.

7. Data Sharing and Third Parties

We do not sell or rent your personal data. We share data only with the following processors: • Supabase – authentication and database hosting. Data is stored in secure EU-region infrastructure. • Stripe – payment processing. Subject to Stripe's own Privacy Policy. • Resend – email delivery for the alerts and digests you subscribe to. Processes your email address on our behalf. • Google Analytics – aggregate usage measurement, only with your cookie consent. Market charts shown on trend pages are illustrative visuals generated in your browser. No personal data is transmitted to any market data provider. We may disclose personal data if required by law or in response to valid legal process.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will erase your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., billing records, which are kept for 7 years in line with standard accounting requirements).

9. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage, and strict access controls. All authentication is handled by Supabase, which follows SOC 2 Type II security practices. Despite these measures, no system is entirely immune to risk, and we cannot guarantee absolute security.

10. Your Rights

Under the GDPR and applicable data protection law, you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request erasure ("right to be forgotten"). • Restrict or object to certain processing. • Data portability — receive your data in a machine-readable format. • Withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at info@trendsoftheworld.com. We will respond within 30 days.

11. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child has provided us with personal data without parental consent, we will delete it promptly.

12. International Transfers

Our primary data infrastructure is hosted within the EU. Where data is transferred outside the EU/EEA (for example, via Stripe's global infrastructure), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

13. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this page regularly. Material changes will be communicated via email to registered users.

14. Contact and Complaints

For any privacy questions or to lodge a complaint, contact us at info@trendsoftheworld.com. You also have the right to lodge a complaint with your local data protection authority (e.g., the relevant EU supervisory authority in your country of residence).