Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
EEA and UK residents are granted access, correction, deletion, portability, restriction, and objection rights, and can withdraw consent for advertising-based processing at any time. The policy reserves the right to retain information in archives necessary for legal obligations, dispute resolution, and agreement enforcement, notwithstanding a deletion or restriction request.
This analysis describes what Webull's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes GDPR-aligned rights for EEA and UK users but includes a retention carve-out that reserves Webull's right to retain archived information for legal obligations, dispute resolution, and agreement enforcement, which may limit the operational scope of deletion and restriction rights in practice. The interaction between this retention carve-out and GDPR erasure obligations under Article 17 may require legal evaluation.
Interpretive note: The operational scope of the retention carve-out relative to GDPR Article 17(3) erasure exceptions depends on how Webull applies the carve-out in practice, which is not specified in the document.
Under this clause, EEA and UK residents can exercise data subject rights including access, deletion, portability, restriction, and objection by contacting Webull, but the policy reserves the right to retain data in archives for legal, dispute, and enforcement purposes even following a deletion request. Consent for advertising-based processing can be withdrawn at any time without affecting prior processing.
Cross-platform context
See how other platforms handle EEA and UK Resident Rights and similar clauses.
Compare across platforms →Monitoring
Webull has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"If you are a resident of the European Economic Area or the United Kingdom, you have the following rights regarding your personal data: If you wish to access, correct, update or request deletion, restrict processing, object to processing, or request porting of your personal information, you can do so at any time by contacting us. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" link in the marketing emails we send you. Similarly, if we have collected and processed your personal information with your consent (such as for advertising), then you can withdraw your consent at any time by contacting us. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. Notwithstanding the foregoing, we reserve the right to keep any information in our archives that we deem necessary to comply with our legal obligations, resolve disputes and enforce our agreements.Excerpt from Webull's Privacy Policy
1. REGULATORY LANDSCAPE: This provision directly engages GDPR Articles 15 through 22, covering data subject access, rectification, erasure, restriction, portability, and objection rights, as well as UK GDPR equivalents. The retention carve-out may engage GDPR Article 17(3), which permits retention exceptions for legal obligations, legal claims, and public interest. Relevant supervisory authorities include national data protection authorities in each EEA member state and the UK Information Commissioner's Office. 2. GOVERNANCE EXPOSURE: Medium. The retention carve-out reserves broad discretion to retain archived data for dispute resolution and agreement enforcement, which are partially recognized GDPR exceptions but may not satisfy the specificity requirements of Article 17(3) as a blanket reservation. The scope of data that may be retained under this carve-out is not defined in the document. 3. JURISDICTION FLAGS: EEA and UK jurisdictions create direct exposure. The UK ICO and individual EEA supervisory authorities each have enforcement jurisdiction over compliance with data subject rights requests, including the adequacy of responses to erasure requests where a retention carve-out is invoked. 4. CONTRACT AND VENDOR IMPLICATIONS: Data subject rights request workflows must be operationally implemented across all affiliates and processors that hold EEA or UK personal data. Legal teams should verify that data processing agreements with affiliates and processors include provisions for responding to data subject requests and that the retention carve-out is operationally documented. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should ensure that data subject rights request procedures are documented, tested, and capable of responding within GDPR-mandated timeframes (generally one month, extendable by two months for complex requests). The scope of the retention carve-out should be formally defined and mapped against specific legal obligations to avoid overly broad retention claims.
This provision establishes GDPR-aligned rights for EEA and UK users but includes a retention carve-out that reserves Webull's right to retain archived information for legal obligations, dispute resolution, and agreement enforcement, which may limit the operational scope of deletion and restriction rights in practice. The interaction between this retention carve-out and GDPR erasure obligations under Article 17 may require legal …
Under this clause, EEA and UK residents can exercise data subject rights including access, deletion, portability, restriction, and objection by contacting Webull, but the policy reserves the right to retain data in archives for legal, dispute, and enforcement purposes even following a deletion request. Consent for advertising-based processing can be withdrawn at any time without affecting prior processing.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Webull.