Privacy Policy

Version 1.0 • 17 September 2026

1. Who we are and what this covers

Darren Scott trading as Trade Dispensary, ABN 96 413 735 776, of 131 Mount Warren Park Blvd, Mount Warren Park, QLD 4207, Australia, is the entity responsible for the personal information described here.

This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers https://www.tradedispensary.com, the Trade Dispensary software, our licence server, our affiliate console and our support correspondence.

"Personal information" means information about an identified individual, or an individual who is reasonably identifiable.

2. Dealing with us anonymously

You may browse this website and read the blog without telling us who you are. You may ask a general question anonymously by email.

We cannot issue or support a licence anonymously, because a licence has to be attached to someone in order to be reissued when you change machines, and a payment has to be attached to someone in order to be refunded.

3. What we collect

When you buy. Your name, email address, and the country and payment method your processor reports. PayPal and Stripe handle the payment itself. We never see or store your card number. We keep the transaction identifier, the amount, the date and the licence we issued against it.

When you activate a licence. Your licence key, a hashed machine identifier, your operating system name and version, and your computer's hostname. The machine identifier is a SHA-256 hash, so it identifies the machine to us as a number and does not reveal its hardware to anyone reading the record.

When you contact us. Your name, email address, subject and whatever you put in the message. Support messages about technical faults often include log excerpts, so please remove anything from a log you would rather we did not see before you send it.

When you join the affiliate program. Your name, email address, postal address, PayPal address and the referral and commission records that go with it.

When you visit. Standard web server logs (IP address, date and time, page requested, referring page, browser user agent) and Google Analytics measurement data. See clause 6.

4. What the software sends us, and what it does not

This is the part most people want answered, so it is stated precisely. The Trade Dispensary application makes three kinds of outbound request to us, and no others:

• Licence activation and verification. Sends your licence key, the hashed machine identifier, your operating system and your hostname. Runs at activation and periodically thereafter.
• Update check. Fetches a small version file from our website. It sends no identifier of any kind and we cannot tell one installation from another through it beyond ordinary web server logs.
• cTrader authorisation. Only if you choose to connect cTrader. The OAuth flow passes through our website so the token can be handed back to your machine. We do not use it to trade and we do not retain it for ongoing use.

The software does not send us:

• your trades, orders, fills, positions, profit and loss, or account balances;
• your broker, exchange or prop firm logins, passwords, API keys, secrets or tokens;
• your account numbers, your strategy settings, or the contents of any signal channel you follow;
• your log files, unless you choose to send one to support.

All of that is held in a local database on your own machine and never leaves it. That is a consequence of the product being self-hosted rather than a promise layered on top of a cloud service: there is no server of ours for it to go to.

5. Why we collect it

We collect personal information only where we reasonably need it to run the business, specifically to:

• process your purchase and issue your licence;
• enforce the machine limit on a licence and reissue a slot when you change machines;
• answer your support request and diagnose a fault;
• send you transactional email such as your licence key, a receipt, or notice of a change to these documents;
• calculate and pay affiliate commission;
• keep records we are required by law to keep, including tax records;
• detect and prevent licence abuse, fraud and chargebacks.

If you do not give us the information we ask for, we may not be able to sell you a licence or provide support.

6. Cookies and analytics

This site uses:

• Essential cookies, including a session cookie and, if you arrive through an affiliate link, a referral cookie that records which affiliate sent you. It lasts 90 days and exists so that partner is paid.
• Google Analytics, which measures page views and traffic sources. It sets its own cookies and collects a truncated IP address and device information. We use it in aggregate to understand which pages are useful. We do not use it to build an advertising profile of you.
• Google reCAPTCHA on our forms, to stop automated abuse. Google's terms and privacy policy apply to it.

You can block or delete cookies in your browser. Blocking essential cookies may stop the checkout working, and will stop an affiliate referral being attributed.

We do not respond to Do Not Track signals, because there is no agreed standard for what a response should be.

7. Who we disclose it to

We do not sell personal information. We do not disclose it for another organisation's marketing. We disclose it only to:

PayPal, Stripe	payment processing
Bluehost	website and licence server hosting
Google	analytics, reCAPTCHA, email delivery
Our accountant	tax and financial records

We may also disclose personal information where we are required or permitted to by law, where it is necessary to enforce our terms or to investigate suspected fraud or licence abuse, or with your consent.

If our business is ever sold, customer and licence records would transfer with it, and you would be told.

8. Overseas disclosure

Some of the providers above store data outside Australia, principally in the United States, and in other countries where they operate infrastructure. By using this site and buying a licence you consent to that disclosure. We take reasonable steps to use established providers with published privacy commitments, but we cannot control how an overseas recipient is regulated in its own jurisdiction.

9. Direct marketing

If you buy a licence or ask us a question we may occasionally email you about updates, new platform support or a change to these documents. Every such email carries an unsubscribe link, and you can opt out at any time by replying or by writing to support@tradedispensary.com.

Opting out of marketing does not stop transactional email. You will still receive your licence key, your receipt and any notice we are obliged to send you.

10. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access. The site is served over HTTPS, administrative areas are password protected, affiliate data files are blocked from being served over the web, and access is limited to those who need it.

No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will assess it and notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

The best security control here is structural rather than procedural: because the software is self-hosted, the sensitive material, your credentials and your trading activity, is not in our possession to be breached. Protecting the machine you run it on is your responsibility, and we recommend full disk encryption and a strong account password on it.

11. How long we keep it

Purchase and licence records are kept for as long as the licence is live and then for at least seven years, because Australian tax law requires us to keep the financial record. Support correspondence is kept while it is useful for diagnosing recurring faults. Web server logs are kept for a short period. Affiliate records are kept for as long as the partnership runs and then for the same seven year tax period.

When we no longer need personal information and are not required to keep it, we destroy it or de-identify it.

12. Accessing and correcting your information

You may ask for a copy of the personal information we hold about you, and ask us to correct anything that is wrong, at any time. Write to support@tradedispensary.com.

We will respond within 30 days. There is no charge. We may need to verify your identity first, usually by confirming you control the email address the licence was issued to. If we refuse access or a correction we will tell you why in writing and how to complain about it.

You may also ask us to delete your information. We will do so unless we are required to keep it, for example a financial record inside the retention period. Deleting your licence record ends the licence.

13. Complaints

If you think we have mishandled your personal information, contact us first at support@tradedispensary.com with the detail of what happened. We will acknowledge within 5 business days and respond substantively within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992, or GPO Box 5288, Sydney NSW 2001.

14. If you are in the European Economic Area or the United Kingdom

Where the GDPR or UK GDPR applies to you, our lawful bases are performance of a contract (selling and licensing the software, and supporting it), legitimate interests (preventing licence abuse and fraud, and measuring site traffic), consent (analytics cookies and marketing email) and legal obligation (tax records).

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Exercise them by writing to the address in clause 15, and you may complain to your local supervisory authority.

15. Changes and contact

We may update this policy. The current version and its date are always published at https://www.tradedispensary.com/privacy. If we make a change that materially affects how we handle your information, we will email licence holders rather than rely on the page alone.

This policy is governed by the laws of Queensland, Australia.

Darren Scott trading as Trade Dispensary
ABN 96 413 735 776
131 Mount Warren Park Blvd, Mount Warren Park, QLD 4207, Australia
support@tradedispensary.com