NQ Trades Lab · Data Protection
Last updated: September 7, 2026
This policy explains how personal data connected with the website, NQ Trades Lab accounts, the Dashboard, subscriptions and the Notion integration is processed.
1. Data controller
- Controller: Begoña Ros Navarro
- Tax ID: 24392706X
- Address: Carrer el Carreró 7 Puerta 3, Serra, Valencia, Spain
- Email: support@nqtradeslab.com
Additional identification details are available in the Legal Notice.
2. Data we may process
2.1. Account data
Email, display name or alias, preferred language, internal identifiers, account status, access dates and data required for authentication. Credentials are handled through authentication mechanisms and are not displayed publicly.
2.2. Subscription and billing data
Plan purchased, orders, subscription status, coupons or promotions, billing dates, billing details and transaction references. Full card details are processed by the payment gateway available at checkout and do not need to be stored in the NQ Trades Lab database.
2.3. Notion integration data
Information required to link your account to the authorized workspace, such as workspace identifiers, selected Journal/database, technical identifiers and authorization credentials needed to operate the integration while it remains connected.
2.4. Trading data
CSV files are read and previewed locally in the browser when you use import features designed to work that way. When you request that trades be imported into your Journal or that information from Notion be displayed, the fields required for the action may pass through NQ Trades Lab technical systems and the Notion API.
NQ Trades Lab does not operate a service model based on a proprietary central database intended to permanently store users’ complete trading history. Trades you choose to save are stored in the Journal inside your own Notion workspace. This does not prevent the existence of minimal technical logs, configuration data or transient information required to execute a request.
2.5. Preferences and settings
We may store settings required to personalize the Dashboard and maintain your experience across sessions, for example language, time zone, initial capital, breakeven range, selected Journal and other product preferences.
2.6. Technical and security data
IP address, date and time, session identifiers, error logs, basic browser/device information and events required to prevent abuse, diagnose incidents and maintain security. The exact information depends on the active technical configuration.
2.7. Support and communications
Data you voluntarily include when contacting support, replying to emails or submitting forms.
3. Why we use data and legal basis
| Purpose | Main legal basis |
|---|---|
| Create and manage your account, session and Dashboard access | Performance of a contract or pre-contractual steps |
| Connect Notion and perform the actions you request on your Journal | Performance of a contract and the user’s request |
| Manage plans, payments, billing and subscriptions | Performance of a contract and legal obligations |
| Security, fraud prevention, diagnostics and protection against abuse | Legitimate interest in protecting the service and its users |
| Handle support, complaints and data-rights requests | Performance of a contract and compliance with legal obligations |
| Send optional marketing communications | Consent where required or another lawful basis permitted by applicable law |
| Non-essential cookies or analytics | Consent |
4. Providers, recipients and integrations
To provide the service we may use providers that process data on our behalf or receive data when you request an integration. Relevant categories include:
- Hosting and infrastructure: providers hosting the website, API, technical databases and backups.
- WordPress/WooCommerce: e-commerce infrastructure used for orders, customer accounts and subscriptions.
- Payment gateway: the provider shown at checkout, which processes the information required to authorize and manage payments.
- Notion: receives the requests required to read from or write to the workspace you authorize.
- Email and support: technical providers used to deliver transactional communications and handle incidents.
We do not sell your personal data or trading data to advertisers or brokers.
5. International transfers
Some technology providers may process data outside the European Economic Area. Where an international transfer is subject to the GDPR, the applicable legal mechanisms will be used, such as adequacy decisions, Standard Contractual Clauses or other safeguards provided by law. The specific arrangements depend on the provider used at any given time.
6. Retention
- Account and access: for the duration of the active relationship and afterwards for as long as necessary to address liabilities or claims.
- Billing and transactions: for the periods required by tax, accounting, commercial and consumer law.
- Notion integration: while you keep the connection active or until it is necessary to revoke/delete it, without prejudice to minimal technical or legal records.
- Technical logs: for the period reasonably necessary for security, diagnostics and abuse prevention.
- Support: for as long as needed to resolve the request and any associated liabilities.
Deleting an NQ Trades Lab account does not automatically delete content already present in your own Notion workspace. That content must be managed from Notion or through any features the service provides for acting on your Journal.
7. Your rights
Where applicable, you may request access, rectification, erasure, restriction, objection and portability of your data, and withdraw consent previously given without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, email support@nqtradeslab.com and identify the right you wish to exercise. We may request additional information only where necessary to verify your identity.
Requests will be handled within the periods established by the GDPR, normally within one month, with an extension where justified by complexity or number of requests.
If you believe processing infringes data-protection law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority.
8. Automated decisions
Metrics, rankings, patterns or analysis generated by the Dashboard are not used to make automated decisions producing legal effects on the user or similarly significantly affecting them. They are informational tools based on trading data supplied or authorized by the user.
9. Security
We apply reasonable technical and organizational measures to protect accounts, sessions, integrations and systems against unauthorized access, alteration, loss or disclosure. No system is completely invulnerable, so we also recommend protecting your credentials, keeping your device updated and revoking connections you no longer use.
10. Minors
NQ Trades Lab is intended for people aged 18 or over and is not designed to knowingly collect data from minors.
11. Cookies and local storage
We use technologies required for session management, security, preferences and e-commerce, and will only use non-essential cookies or analytics on the legal basis required. See the Cookie Policy.
12. Changes to this policy
We may update this policy when laws, providers or service features change. If a change is material, it will be communicated by a reasonable method. The latest update date will appear at the beginning of the document.
13. Relationship with the Terms of Service
Use of NQ Trades Lab is also governed by the Terms and Conditions.