Privacy Notice
Last updated 2026-08-21
Data controller and contact
MacroDrivers™ is a trading name of Sach Capital Limited. Company No. 08869885. Registered Office: 124 City Road, London, EC1V 2NX, England. Sach Capital Limited is the data controller responsible for your personal data within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). Our registered office is 124 City Road, London, EC1V 2NX, England. For all privacy and data-protection enquiries, including requests to exercise your rights, contact us at info@macrodrivers.com. We do not currently have a designated Data Protection Officer, but all data-protection matters are handled by our data-protection team at the above email address.
What this notice covers
This Privacy Notice explains how MacroDrivers collects, uses, discloses, and protects your personal data when you use our website, member application, and email communications. It applies to visitors, registered users, members, subscribers, and affiliate applicants. MacroDrivers provides macroeconomic research, currency-strength analytics, and educational information. It does not provide personalised investment advice. This notice is issued in accordance with Articles 13 and 14 of the UK GDPR.
Personal data we collect
We collect the following categories of personal data: (a) Account data — your name, email address, and authentication identifiers when you register; (b) Membership and billing data — plan tier, subscription status, and payment references held by our payment processor, Stripe; (c) Email and marketing data — your email address, marketing consent status, preferences, and engagement records when you subscribe to our communications; (d) Platform preferences — theme, watchlist items, alerts, and saved views; (e) Contact enquiry data — your name, email, and message when you contact us; (f) Technical and security data — login and logout timestamps, authentication events (such as successful login and explicit logout), device category, browser family and operating system (normalised, not raw user-agent strings), truncated IP address prefixes (retained as security/audit data with restricted administrative access and a default 12-month retention period), and an opaque session reference used to correlate a login with its corresponding logout. We do NOT store passwords, password hashes, authentication tokens, cookies, JWTs, OTP codes, reset tokens, or any authentication secret. This data is processed for security, fraud prevention, service administration, troubleshooting, and genuine usage analysis; (g) Affiliate programme data — if you apply to or participate in the MacroDrivers™ Affiliate Program, we process your application details, affiliate profile, referral link and click data (anonymised — no raw IP addresses), attribution records, conversion records, commission ledger, and manual payout records. We do not share referred customer personal data with affiliates. We do not collect special category data (Article 9 UK GDPR), biometric data, criminal record data, or data about children.
How we collect your data
We collect data directly from you when you register, subscribe, contact us, or use platform features. We also receive data from our processors: Stripe (payment status), Google (if you use Google Sign-In), and Resend (email delivery status). We do not buy personal data from third parties or obtain data from public sources for marketing purposes.
Why we process your data and our lawful bases
We process your personal data on the following lawful bases under Article 6 of the UK GDPR: (a) Contract (Article 6(1)(b)) — to create and manage your account, provide membership, and fulfil our contractual obligations to you; (b) Legal obligation (Article 6(1)(c)) — to maintain financial records, comply with tax and accounting requirements, and meet regulatory obligations; (c) Consent (Article 6(1)(a)) — to send you marketing emails only where you have given specific, opt-in, freely given consent; (d) Legitimate interests (Article 6(1)(f)) — to operate and secure the platform, prevent fraud and abuse, maintain audit trails, and conduct aggregate analytics to improve the service. Where we rely on legitimate interests, we have conducted a legitimate interests assessment and concluded that your fundamental rights and freedoms do not override our interests.
Our legitimate interests
Where we rely on legitimate interests, we process data for: operating and securing the platform infrastructure; preventing fraud, abuse, and unauthorised access; maintaining audit trails of administrative actions; and conducting aggregate, non-individual analytics to improve the service. We have assessed these interests against your rights and freedoms and concluded they do not override your fundamental rights. You have the right to object to processing based on legitimate interests at any time.
Who we share your data with
We use the following processors (Article 28 UK GDPR) to operate MacroDrivers: Base44 — hosting, database, and application infrastructure; Stripe — payment processing; Resend — email delivery; Google — Google Analytics (website analytics) and optional Google Sign-In authentication. Each processor acts under our instructions and is subject to appropriate contractual safeguards. We may also share data where required by law, court order, or regulatory authority. We do not sell your personal data to third parties.
Payment processing
Card payments are processed by Stripe. We do not store, receive, or process raw card numbers, CVCs, or card credentials. We retain only Stripe customer and subscription identifiers necessary to manage your membership. Stripe is responsible for the security of card data under its own PCI-DSS compliance.
International transfers
Some of our processors, including Google (Google Analytics), Stripe, Resend, and Base44, may process personal data outside the United Kingdom. Where this occurs, we rely on appropriate safeguards as required by UK data protection law. The specific safeguards applicable to each processor — which may include UK adequacy regulations, International Data Transfer Agreements (IDTAs), or the UK Addendum to EU Standard Contractual Clauses — are subject to ongoing verification. For more information about the safeguards applicable to your data, please contact us at info@macrodrivers.com.
How long we keep your data
We retain personal data only for as long as necessary for the purposes described: Account data is kept while your account is active and for as long as required for legal, tax, and accounting purposes after closure (typically up to 6 years). Email marketing data is kept while you are subscribed and for as long as necessary to honour your suppression preference after you unsubscribe (indefinitely, to prevent re-subscription without consent). Platform preferences are deleted when you delete your account. Audit and security logs are retained for as long as necessary for security and legal compliance (typically up to 6 years). Contact enquiries are retained for as long as necessary to respond and for reasonable record-keeping (typically 2 years). Affiliate programme data is retained for the duration of participation and for up to 6 years after termination for tax and legal purposes.
Your rights
Under the UK GDPR and DPA 2018, you have the following rights: (a) Right of access (Article 15) — to obtain a copy of your personal data and information about how we process it; (b) Right to rectification (Article 16) — to have inaccurate personal data corrected; (c) Right to erasure (Article 17) — to have your personal data deleted, subject to legal retention obligations; (d) Right to restrict processing (Article 18) — to limit how we use your data; (e) Right to data portability (Article 20) — to receive your personal data in a structured, machine-readable format and transmit it to another service; (f) Right to object (Article 21) — to object to processing based on legitimate interests or for direct marketing; (g) Right to withdraw consent (Article 7) — to withdraw consent for marketing at any time without affecting the lawfulness of processing before withdrawal; (h) Rights in relation to automated decision-making (Article 22). To exercise any of these rights, visit our Privacy Request page or contact info@macrodrivers.com. We will respond within one month, as required by the UK GDPR.
Exercising your rights
To exercise your rights, you can submit a request through our Privacy Request page or by emailing info@macrodrivers.com. We will verify your identity before processing your request. We may ask for additional information to confirm your identity and locate your data. If we refuse a request, we will explain why and inform you of your right to complain to the ICO. There is no fee for exercising your rights, though we may charge a reasonable fee or refuse a request if it is manifestly unfounded or excessive.
Direct marketing
We only send marketing emails to individuals who have given specific, opt-in, freely given, informed, and unambiguous consent (Article 7 UK GDPR; PECR). Creating an account does not automatically enrol you in marketing. You can withdraw consent at any time via your account settings, the unsubscribe link in any marketing email, or our email preferences page. Withdrawing consent does not affect the lawfulness of processing before withdrawal. Service emails relating to your account, security, and membership are not marketing and will continue while your account is active, as they are necessary for the performance of our contract with you.
Automated decision-making
MacroDrivers uses AI to generate currency and market analysis. This analysis concerns financial markets and currencies, not you as an individual. We do not make solely automated decisions about individuals that have legal or similarly significant effects (Article 22 UK GDPR). We do not profile individuals for automated decision-making. Any AI-generated content is analytical commentary about markets, not decisions about you.
Google Analytics
We use Google Analytics to understand how visitors use MacroDrivers, measure website performance and engagement, understand how visitors arrive at and navigate the website, and improve our website and marketing effectiveness. Google Analytics processes analytics data, including pages viewed, site interactions, referral and traffic source information, session information, device type, operating system, browser information, approximate geographic information, technical and analytics identifiers, timestamps, and website navigation behaviour. This data is pseudonymous — it uses identifiers that can relate to an identifiable device or person under data-protection law and is therefore personal data. We do not use Google Analytics advertising features, Google Signals, remarketing, or advertising personalisation. Google Analytics is categorised as Analytics storage under PECR and requires your consent. We do not load or activate Google Analytics non-essential tracking before you have provided Analytics consent through our cookie consent manager. You can withdraw Analytics consent at any time through Cookie & Privacy Settings. For details of the Google Analytics cookies and storage used, see our Cookie and Storage Technologies Policy.
Storage technologies
We use local browser storage (localStorage and sessionStorage) to remember your theme preference, cookie consent choices, email popup dismissal, and affiliate attribution when you click a referral link (subject to your Marketing/Attribution consent). We also use Google Analytics, which is a third-party analytics service that stores analytics cookies on your device — this is categorised as Analytics storage and requires your consent under PECR. Affiliate attribution storage is categorised as Attribution/Marketing under PECR and also requires your consent. We do not use advertising cookies or cross-site tracking cookies. See our Cookie and Storage Technologies Policy for details.
Children
MacroDrivers is not intended for children. We do not knowingly collect personal data from children under 18. If you believe we have collected a child's data, please contact us at info@macrodrivers.com and we will delete it promptly.
Data security
We use appropriate technical and organisational measures to protect your personal data, including access controls, role-based permissions, encrypted transport (TLS), server-side authorisation checks, row-level security, and regular security reviews. Sensitive operations require administrative authentication. Payment credentials are handled exclusively by Stripe. We maintain audit logs of administrative actions. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours where required and, where the risk is high, notify affected individuals without undue delay.
Data breach procedures
We maintain internal procedures for identifying, assessing, and responding to personal data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of it, as required by Article 33 of the UK GDPR. Where a breach is likely to result in a high risk to individuals, we will also notify affected individuals without undue delay, as required by Article 34 of the UK GDPR.
Right to complain to the ICO
If you have a concern about how we handle your personal data and you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We encourage you to contact us first so we can address your concern, but you are entitled to contact the ICO at any time.
Changes to this notice
We may update this notice from time to time. The Last Updated date below shows when it was last updated. If we make material changes to how we process your data, we will notify you by email or via the platform. We will not use your personal data for any new purpose that is incompatible with the original purpose without obtaining your consent where required.
MacroDriversTM is a trading name of Sach Capital Limited. Company No. 08869885. Registered Office: 124 City Road, London, EC1V 2NX, England. Registered in England and Wales.