Legal
Privacy policy
Last updated: TODO — set on publication
Draft. This policy is a working draft prepared alongside the site build. Have it reviewed by a qualified privacy attorney before publication, and confirm it reflects what your analytics, hosting and form providers actually do.
Who we are
Quantryx Technologies LLC ("Quantryx", "we", "us"), a limited liability company organized in Wyoming, United States, operates this website and is the controller responsible for personal information collected through it. We are contactable atcontact@quantryx.com.
What we collect
We collect only what we need to respond to you and to keep the site working.
- Information you send us. When you complete the contact form or email us, we receive your name, email address, company name, any budget indication you select, and whatever you choose to write.
- Scheduling information. If you book a call, our scheduling provider collects your name, email address and chosen time in order to create the meeting.
- Aggregate usage data. We use privacy-preserving analytics that do not set cookies and do not track individuals across sites. We see page-level totals, not people.
- Server logs. Our hosting provider records standard technical information such as IP address and user agent for security and reliability purposes.
We do not knowingly collect information from anyone under 16, and we do not collect sensitive personal information. Please do not send it to us.
Why we use it
- To reply to your enquiry and discuss whether we can help.
- To deliver services where we go on to work together.
- To keep the site secure and functioning.
- To meet our legal, tax and accounting obligations.
What we do not do
We do not sell or share personal information, and we have not done so in the preceding twelve months. We do not add enquirers to a marketing list without a separate, explicit opt-in. We do not use your data to train models. We do not run advertising or cross-site tracking on this website.
Who else sees it
We share personal information only with the service providers needed to run the business, each under contract and each permitted to use it solely to provide services to us: our hosting provider, our form handling provider, our scheduling provider, our email provider and our accountant. We may also disclose information where required by law.
TODO: list your actual named service providers here once hosting, forms, scheduling and email are chosen. Enterprise buyers ask for this list, so it is worth being precise.
How long we keep it
- Enquiries that do not become engagements: up to 24 months, then deleted.
- Client records: for the duration of the engagement and for as long afterwards as tax and legal obligations require.
- Aggregate analytics: retained without personal identifiers.
Your rights
Wherever you are, you can ask us what personal information we hold about you, ask for a copy, ask us to correct it, ask us to delete it, object to how we are using it, or ask us to send it somewhere else. Where we rely on your consent, you can withdraw it at any time. We will not treat you differently for exercising any of these.
To make a request, email contact@quantryx.com. We will verify it and respond within the period the law applicable to you requires — one month under the GDPR, and comparable periods under US state privacy laws.
Depending on where you live, these rights come from a specific statute: the GDPR in the EEA, the UK GDPR in the United Kingdom, the CCPA as amended by the CPRA in California, and comparable laws in a growing number of other jurisdictions. We apply the same process to all of them rather than making you work out which one covers you. If you are in the EEA or the UK and are not satisfied with our response, you may complain to your local supervisory authority.
Where your information is processed
We work with clients internationally, and our service providers operate in several countries. Your information may therefore be processed outside the country you live in, including in countries whose data protection laws differ from your own. Where we transfer personal information out of the EEA or the UK, we rely on an adequacy decision or on standard contractual clauses.
TODO: once hosting, forms, scheduling and email are chosen, confirm which countries they process in and name them here. This is the question EU and UK buyers ask first.
Client data
This policy covers the website. Where we process personal information on behalf of a client as part of an engagement, we do so under a separate written agreement that governs that work. A data processing agreement is available on request.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be communicated directly to active clients.