Privacy notice

Who we are

Dividend Live (dividendlive.uk) is run by Alban Data, the data controller for the personal data described here. Contact us at hello@dividendlive.uk about anything on this page.

Using the site without an account

Reading the site needs no account, and we don't set any cookies when you do. We count visits with Cloudflare Web Analytics, which doesn't use cookies, doesn't fingerprint your device and doesn't follow you across sites: it gives us page views and rough location by country. If a page hits an error in your browser, it sends us the error message and the page address (nothing that identifies you) so we can fix it.

What we store if you sign in

• Your email address, and your name and Google account ID if you sign in with Google: to sign you in and send the emails you ask for.
• Your holdings and their history (which shares, how many, in which account type, from when), yourtest portfolios, and a daily snapshot of your portfolio's value and expected income: to show you your dividend income. This is the information you enter; we don't connect to your broker.
• Your alert settings, and which ex-dividend alerts we've already emailed you, so none is sent twice.
• Your plan (free or paid) and, once paid plans are available, a reference to your subscription with our payment provider. We never see or store card details.

Our lawful basis is contract: storing these is how we provide the account you asked for. We don't use your data for advertising, we don't sell it, and we don't share it with anyone except the services below.

Cookies and similar

Signing in sets one cookie, __Host-session, which keeps you signed in for up to 30 days. Signing in with Google sets a short-lived cookie for the sign-in itself. Both are strictly necessary for the service you asked for, so they don't need consent, and neither is used for tracking. We store only a one-way hash of each sign-in token, never the token itself.

Keeping the service safe

To limit abuse (for example, someone requesting thousands of sign-in links) we count requests per account and per IP address. IP addresses are stored only as a one-way hash, for at most a day.

Who helps us run it

• Cloudflare hosts the site and the database your account lives in, and provides the visit counts.
• Resend sends our emails (sign-in links and the alerts you turn on).
• Google, only if you choose "Continue with Google", to confirm who you are.
• A payment provider, only if you take a paid plan, once those are available.

These providers may process data outside the UK; where they do, they use the safeguards UK law requires (such as the UK International Data Transfer Addendum or the UK-US data bridge).

How long we keep it

• Your account data: until you delete your account. Deleting it removes everything above straight away.
• Sign-in links: 15 minutes, and they work once. Sessions: 30 days, or until you sign out.
• Encrypted backups of the account database, kept for up to 12 weeks so we can recover from a fault: a deleted account disappears from them as they age out.
• Error reports: 30 days.

Your rights

You can download everything we hold about you, or delete your account and all of it, at any time from the bottom of your portfolio page. You also have the right to have data corrected, to object to or restrict how we use it, and to complain to us at hello@dividendlive.uk. If you're not happy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change what we collect or why, we'll update this page and its date, and email account holders about anything significant before it takes effect.