(Last Revised January 12, 2024)
1. Your Consent
2. The Information We Collect and How We Collect It
Stock-Trak collects a very limited amount of Personal Information from participants who register on its websites. In order to register, participants must first enter their date of birth. As a condition of registration, participants 18 years and over, provide us with their first name (optional), last name (optional) and email address (optional). With the exception of the PersonalFinanceLab.com website, other fields may be collected or used for demographic and marketing purposes or by third party processors for payment processing purposes, including your credit card information. For persons under the age of 18, the only Personal Information we collect at the time of registration is their first name and the first initial of their last name.
For our PersonalFinanceLab.com website, student participants are limited to entering only their first name, and first initial of their last name. Stock-Trak does not allow student participants to enter date of birth, email address, or full last names. If a school district implements a single sign-on solution (such as LMS integration) or rostering (such as ClassLink or Clever) to provision student accounts, the school has the option, at their sole discretion, to push additional Personal Information (such as full last name), for the purpose of populating teacher administration reports.
As an alternative registration method, certain of our websites, including without limitation HowTheMarketWorks.com and PersonalFinanceLab.com, will provide the option to have third-party administrators (including teachers), register the individuals in the participation group. Third-party administrators who select this registration option can specify the number of user accounts needed and then the system will auto-generate their user accounts (usernames with passwords) for the third-party administrator to distribute directly to the participation group. With this method of account creation the user registration process is bypassed and no Personal Information is collected from users.
3. Purpose of the Information
Stock-Trak collects Personal Information from our participants to facilitate the functionality of its sites and/or educational purposes. First and last name (or first name and first initial of last name in the case of persons under the age of 18) allows third-party administrators (specifically, contest administrators, i.e. teachers of a class contest) to keep track of an individual participant’s performance, activities and participation group ranking. Information such a participant’s email address, enables us to contact participants to announce contest updates, new contests or any other information that may be of interest to a participant such as contacting the winners. In the event that we need to contact a user who wins a contest and we do not have their email address, then we would attempt to contact the participant via the platform’s on-site Unified Messaging Center and / or via the third-party administrator. A participant’s email address is also used for certain transactional email messages on the website such as the registration confirmation email and change password requests.
4. To Whom We Disclose the Information
5. Internet Based Advertising
You may choose to decline or disable cookies if your web browser permits, but doing so will affect your ability to access or use certain features of Stock-Trak’s websites.
7. Data Security and Retention
At Stock-Trak we take numerous steps to ensure that the Personal Information of our users is securely maintained. Firstly, we only collect a minimal amount of Personal Information during the registration process and we may provide an option for third-party administrators to generate user accounts without providing any Personal Information. All the user data and Personal Information that we collect is stored in a fully managed, professional, web-hosting environment, which is SSAE 18 Type 2 SOC 2 compliant. The data hosting service features a managed firewall, daily data backups (offsite), restricted physical access, data encryption in motion and at rest, redundancy and annual security audits. Personal Information and other data of inactive users gets purged from our database after 12 months of inactivity for participants and up to 60 months months for instructors / administrators (for example: teachers and professors).StockTrak is committed to meeting NIST data privacy and security standards as well as FERPA compliancy.
9. Corrections, Modifications and Deletions of Personal Information
Parents of users under 18 years of ages can contact us to review, modify or delete Personal Information of their children by using the on-line form in the Contact Us section of the website or by sending an email to email@example.com.
Additional Notice To Residents of the European Economic Area (“EEA”)
10. Data Controller
For purposes of the General Data Protection Regulation (the “GDPR”), we are the data controller for the purpose of data protection law, in respect of your Personal Information collected and used through your use of the websites, products and services. This is because we dictate the purpose for which your Personal Information is used and how we use your Personal Information.
11. Automated Decision Making
Stock-Trak will not use personal data for any monitoring or profiling activity or process, and will not adopt any automated decision making processes.
12. Your rights
Under the General Data Protection Regulation (GDPR), you have the following eight (8) rights:
13. Transferring Data Internationally
Stock-Trak transfers personal data we have both collected from you and stored, to the Third-Party Processors located in countries outside EEA. These Third-Party Processors also include third-party ad networks. Stock-Trak shall not transfer such personal data to a country or territory outside the EEA unless the transfer is made to a country or territory recognised by the European Union as having an adequate level of data security, or is made with the your consent, or is made to satisfy the legitimate interest of Stock-Trak in regard to its contractual arrangements with its clients. We will comply with Data Protection Act 1998 in respect of any such transfer.
By using this website, you consent to the transfer of your Personal Information to the Third-Party Processors located in countries outside the EEA.
14. Legal Bases for Processing Your Data
15. Data Breach
In the event of an unauthorized release, disclosure or acquisition of your Personal Information that compromises the security, confidentiality or integrity of your Personal Information maintained by Stock-Trak (“Data Breach”), Stock-Trak shall notify you within a reasonable time after the incident. Stock-Trak will adhere to all applicable governmental requirements with respect to such Data related to your Personal Information. The security breach notification shall include, to the extent known by Stock-Trak, a list of the types of Personal Information that were or are reasonably believed to have been the subject of the Data Breach, and if known at the time of the notice, the date or estimated date of the Data Breach and a general description of the Data Breach incident. Stock-Trak will have a written incident response plan that reflects best practices and is consistent with industry standard and governmental authorities for responding to a Data Breach as relates to Personal Information.
16. Resolving Complaints
If you have any concerns about the way Stock-Trak is handling your Personal Information, please let us know immediately. You may email us directly at firstname.lastname@example.org with the subject “Privacy Concerns”. We will do our best to respond as soon as possible. You may also contact us at:
Att: Andrew Zeidel
101 Marcel-Laurin Boulevard, #330
Montréal, QC H4N 2M3