Last updated: March 2026
The Bourse Report (“we”, “us”, “our”) operates theboursereport.com. This privacy policy explains how we collect, use, and protect your personal data when you visit theboursereport.com, in accordance with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.
Data controller
The Bourse Report Email: contact@theboursereport.com Location: France
What data we collect
Data you provide directly. If you subscribe to our newsletter, we collect your email address. If you contact us via our contact form, we collect your name, email address, and the content of your message.
Data collected automatically. With your consent, we use Google Analytics 4 (GA4) to collect anonymised usage data such as pages visited, time on site, referring source, device type, and approximate location (country level). No data is collected before you provide consent via our cookie banner.
Cookies. We use strictly necessary cookies (required for site functionality) and, with your consent, analytics cookies. You can manage your cookie preferences at any time via the cookie settings link in our footer. See our Cookie Policy for a full list of cookies, their purposes, and durations.
How we use your data
We use your data to: operate and improve the site; send you our newsletter if you subscribed; respond to your enquiries; and understand how visitors use our content so we can improve it. We do not sell your data to third parties. We do not use your data for automated decision-making or profiling.
Legal basis for processing
We process your data based on: your consent (analytics cookies, newsletter subscription); our legitimate interest (site security, fraud prevention, site improvement); and contractual necessity (responding to your enquiries). You can withdraw your consent at any time — for cookies via the “Cookie Settings” link in our footer, and for the newsletter via the unsubscribe link in each email.
International data transfers
Some of our third-party services (Google Analytics, Kit/ConvertKit) may process data on servers located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs), in accordance with GDPR Chapter V.
Your rights under GDPR
You have the right to: access your personal data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict processing; data portability; and object to processing. You also have the right to lodge a complaint with your local data protection authority (in France: CNIL, www.cnil.fr).
To exercise any of these rights, contact us at contact@theboursereport.com. We will respond within 30 days.
Data retention
Newsletter subscriber data is retained until you unsubscribe. Analytics data is retained for 14 months (GA4 default). Contact form messages are retained for 12 months, then deleted.
Data breach notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, in accordance with GDPR Articles 33 and 34.
Third-party services
We use the following third-party services that may process your data:
| Service | Purpose | Data processed | Privacy policy |
| Google Analytics 4 | Website analytics | Anonymised usage data | Google Privacy |
| Kit (ConvertKit) | Email marketing | Email address | Kit Privacy |
| Kinsta | Web hosting | Server logs, IP addresses | Kinsta Privacy |
| Cloudflare | CDN & security | IP addresses, request data | Cloudflare Privacy |
Changes to this policy
We may update this policy from time to time. Material changes will be announced on the site. The “Last updated” date at the top reflects the most recent revision.