Privacy Policy

01Who we are

This policy explains how OrderFlow Trader Lab ("we", "us", "our") handles personal data when you visit this website, buy our NinjaTrader 8 indicator suite, enrol in the course, or contact us for support.

We are the data controller for the information described below. For any privacy question, or to exercise the rights set out in section 10, contact us at [YOUR CONTACT EMAIL] or through our Telegram channel.

Registered business details: [LEGAL ENTITY NAME, REGISTRATION NUMBER, REGISTERED ADDRESS].

02What we collect

We collect only what a purchase, a licence and ordinary support require.

Category	Examples	Source
Identity & contact	Name, email address, Telegram username, country	You, at checkout or when you message us
Order & billing	Products purchased, order reference, amount, currency, billing country, VAT status, last four digits and card brand	Our payment processor
Licence	Licence key, NinjaTrader machine ID, activation and last-seen dates, version installed	The software, when it validates your licence
Support	Messages you send, screenshots or log files you attach	You
Technical	IP address, browser and device type, pages viewed, referring site	Automatically, when you browse this site

We do not ask for and do not want your brokerage credentials, account numbers, positions or balances. Please do not send them to us. If you include them in a screenshot, we will delete it once your issue is resolved.

03How we use it

To take payment, issue your licence key and give you access to downloads and course material.
To verify that a licence is valid and being used within the seat limits you bought.
To provide support and answer your questions.
To send service messages: receipts, licence details, version updates, security or compatibility notices.
To send marketing email about our own products, where you have opted in or where the law allows it for existing customers. Every such email carries an unsubscribe link.
To keep accounting and tax records, and to handle chargebacks, refunds and disputes.
To detect and prevent fraud, licence sharing, piracy and abuse of the site.
To understand, in aggregate, how the site is used so we can improve it.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects.

04Legal bases

If you are in the UK, EEA or another jurisdiction with equivalent law, we rely on the following bases:

Contract — to deliver the software, licence and course you bought and to support them.
Legal obligation — to keep invoices and tax records for the period the law requires.
Legitimate interests — to secure our software against piracy, to prevent fraud, to keep the site working, and to market our own similar products to existing customers. We balance these against your rights and you may object at any time.
Consent — for optional analytics cookies and for marketing email to people who are not yet customers. You may withdraw consent at any time without affecting what we did before you withdrew it.

05Payments

Payments are handled by a third-party payment processor. Your full card number, expiry date and security code are entered on their systems and are never transmitted to or stored by us. We receive only what we need to recognise the order: your name, email, billing country, the amount, and the card brand with its last four digits.

Our processor acts as an independent controller for its own fraud-prevention and regulatory purposes, and its own privacy notice applies to that activity: [PAYMENT PROCESSOR NAME AND LINK TO THEIR PRIVACY POLICY].

06Licence & software data

Our indicators run inside NinjaTrader 8 on your own computer. They read the market data your data feed already supplies to NinjaTrader in order to draw footprint, volume and delta information on your charts.

That chart and order-flow data stays on your machine. We do not receive, transmit or store your charts, your trades, your order history, your positions or your account balances.

The software does contact our licence server so it can confirm your key is valid and count how many machines are using it. That request sends the licence key, a machine identifier derived from your installation, the product version and the date and time. We use it for licence enforcement, support and nothing else.

07Who we share it with

We do not sell, rent or trade your personal data. We share it only with service providers who process it on our instructions under a written contract, and only as far as their job requires:

Payment processing — to take payment and handle refunds and chargebacks.
Email delivery — to send receipts, licence keys and, where applicable, newsletters.
Hosting and content delivery — to serve this website and the download files.
Course platform — to host video lessons and track your progress, where a third-party platform is used.
Licensing infrastructure — to issue and validate licence keys.
Analytics — to measure site traffic, where you have consented.

We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims. If our business is ever sold or restructured, customer records may transfer to the buyer under the same protections.

08Cookies & analytics

Cookies are small files a site stores in your browser. We use:

Strictly necessary cookies — for the basic operation of the site, such as remembering a checkout session. These cannot be switched off.
Analytics cookies — to count visits and see which pages are read, only where you have consented. This data is aggregated and is not used to identify you.

You can delete or block cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site working.

We honour Global Privacy Control and similar browser signals where the law requires it.

09How long we keep it

Order and invoice records — for the period required by tax law in our jurisdiction, typically six to ten years.
Licence records — for as long as the licence is active, then up to two years afterwards so we can reissue keys and handle disputes.
Support correspondence — up to two years after your issue is closed.
Marketing contacts — until you unsubscribe, then we keep a suppression record so we do not email you again by mistake.
Analytics — in aggregated form, up to 26 months.

10Your rights

Depending on where you live, you may have the right to:

Ask what personal data we hold about you and receive a copy.
Have inaccurate data corrected.
Have your data deleted, where we have no overriding obligation to keep it.
Restrict or object to certain processing, including direct marketing.
Receive your data in a portable, machine-readable format.
Withdraw consent at any time.
Complain to your data protection authority.

To exercise any of these, email [YOUR CONTACT EMAIL]. We will respond within one month. We may ask you to confirm your identity first, and we will not charge you or treat you differently for making a request.

11International transfers

Our service providers may process data outside your country, including in the United States. Where we transfer personal data out of the UK or EEA, we rely on an adequacy decision or on the UK Addendum and the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of the mechanism we use.

12Security

We use encryption in transit, access controls and reputable providers to protect your data. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant regulator as the law requires.

13Children

Our products are sold to adults. This site is not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

14Changes

We may update this policy as our products or the law change. The date at the top always shows the current version. If a change materially affects your rights, we will tell you by email or by a notice on this site before it takes effect.